Edit tour

Windows Analysis Report
securedoc_20240509T112530.html

Overview

General Information

Sample name:	securedoc_20240509T112530.html
Analysis ID:	1439310
MD5:	97da59d6454b6e3defce88ff7ad2353b
SHA1:	48aa3b4eee85ac751c81da03ba25dee0c348e889
SHA256:	3df536eda6985c16e4b68ac1f73fc669893ccfb17145a716e9303aaeaac7f75b
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML document with suspicious title

Suspicious Javascript code found in HTML file

Connects to many different domains

Detected hidden input values containing email addresses (often used in phishing pages)

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240509T112530.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,6777075850867909004,4976181827630672047,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/securedoc_20240509T112530.html

Tab title: Secure Registered Envelope: U.S. Bank Trust Fees Invoice(s) / Notice(s) key123

Suspicious Javascript code found in HTML file

Source: securedoc_20240509T112530.html	HTTP Parser: document.write
Source: securedoc_20240509T112530.html	HTTP Parser: location.href
Source: securedoc_20240509T112530.html	HTTP Parser: window.location

Source: securedoc_20240509T112530.html	HTTP Parser: USBGlobalFeeServices400@usbank.com
Source: file:///C:/Users/user/Desktop/securedoc_20240509T112530.html	HTTP Parser: {'name':null,'msgID':'\|1__0968c5240000018f5e2c923daa87651f578ebe3a@mailc22.usbank.com','flags':3073,'rid':'dXNiZ2xvYmFsZmVlc2VydmljZXM0MDBAdXNiYW5rLmNvbQ==','algnames':{'encryption':{'data':'AES'},'keyHash':'SHA-256'},'algparams':{'encryption':{'data':{'IV':'bSJmnRG2P+qoVo9UIGhJMQ=='}}},'keyserverhost':'res.cisco.com:443','securereplyhost':'res.cisco.com:443','openerhost':'res.cisco.com:443','toc':[['Body-1715271930433.html',1,'','',13,[0,8429],'Body-1715271930433.html','ISO-8859-1'],['14228528.pdf',2,'','',5,[8429,85970],'14228528.pdf','ISO-8859-1'],['14232886.pdf',2,'','',5,[94399,79053],'14232886.pdf','ISO-8859-1'],['14234811.pdf',2,'','',5,[173452,83891],'14234811.pdf','ISO-8859-1'],['MessageBar.html',4,'','',1,[257343,34909],'MessageBar.html','ISO-8859-1']],'salt':'Ol1xW/la5vHfC57aqQ8j9KRYg3I=','data':['','','']}

Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://ct.pinterest.com/ct.html
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0
Source: https://www.usbank.com/index.html	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0

Source: https://www.usbank.com/index.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: securedoc_20240509T112530.html

HTTP Parser: Title: Secure Registered Envelope:U.S. Bank Trust Fees Invoice(s) / Notice(s) key123 does not match URL

Source: securedoc_20240509T112530.html	HTTP Parser: <input type="password" .../> found
Source: https://www.usbank.com/index.html	HTTP Parser: <input type="password" .../> found

Source: securedoc_20240509T112530.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20240509T112530.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://www.usbank.com/index.html	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://6219543.fls.doubleclick.net/activityi;dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?	HTTP Parser: No favicon

Source: securedoc_20240509T112530.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="author".. found

Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.usbank.com/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49783 version: TLS 1.2

Source: unknown

Network traffic detected: DNS query count 57

Source: global traffic

HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22%2Eusbank%2Ecom%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27dXNiZ2xvYmFsZmVlc2VydmljZXM0MDBAdXNiYW5rLmNvbQ%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27bSJmnRG2P%2BqoVo9UIGhJMQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1715271930433%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,8429%5D,%27Body-1715271930433%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714228528%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B8429,85970%5D,%2714228528%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714232886%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B94399,79053%5D,%2714232886%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714234811%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B173452,83891%5D,%2714234811%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B257343,34909%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27Ol1xW%2Fla5vHfC57aqQ8j9KRYg3I%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27TDMhRFqUdp5TbttwSDb13PJzrgQwYLSeWC3wBbElPN%2FBfRRLC4m2EB3kkxCg7eMzAok1J3wFnsXyxjg8M8oFOqcBJJhvI0dNgJiHrGDv0aWNic8c%2Be%2FDxKmD5DEoJpmHOQ%2B3YnSxLiPsdbcIARh62jnmtcI7IiE0Jo7%2BAw7qLgsgPDNEULIpJoUTeBEhfjDViIm71zuGzZ39sixKW21Qat3DSZw1xUHeME4b%2B%2Bd58RnnC3JZ57Jz9qYZFayzUhF9wxHHOXDyBwymXDUpLzTUlWnU3qLM%2Ffvzt6%2FdiIgvilrh0BgTrpaJZPs6RGMUJOdAAD2vog70UTS0Ypqgf%2BAqIEPD0uIgNVBQPxQ%2Fb%2FsSdiezQsg%2BrELZesnlw1zjl6ZQkcmcnrHoatStZspktMmThEBQm9IVQB9NKHEnv5igY0d8jhrO2gjYdEc5KNHLJ8vIBSAiiMrgItDktzy6mK%2FifOPrS%2FfkFELzm5IAVQ4%2F8CEOHbQDQGf%2BMCJGFl%2BGVD9rIYRNXeHLRk6rb5WXLSAJpImphC2gswO2UcLtZWwPLnG2yzBtzFEdhPyGNHHKoUXOSvgKRlYixmYJEI3jxvni71W9pflnOb7W2dBV75OCU%2BLdutsB%2F5%2BIMAJZ3v6jDhKLb4a8og8P9avUgTK8qa08hCjJuVyv71ok9IyLFGeKmOIfu9%2FHIJhLUGERuSD7LcRtqs4SH%2BVUIV%2FiqpAf1YbalGXEG7OBE9i0VhmW7YJlPtuBn2D8T6sJ6ZEIBCGeuoa6A8RB3cHpd4qcNX%2FVJPwGq1vTOAH9tprKWnCClhRofnMNnMoJvjvELdoJ%2FZF2LiDMoxoKDrDuwJXf9YhgkSXBkCpEDDp5zKk%2BVO63SFTMzEB8a4lRPWewuCzwY5fJI62nYR%2Fr7BdLkSKg1UaD7yb%2FD1KoUTB%2Fz78F30xGxCX9voTwSGGVMNh7%2BLM4WukVdJQXDsmpZq2%2BCDIf3gw8NsIzypR2Mv2z1MuS17SGVq79n9og7Q1q70Itfim3Jei0ZUolRDj3o2pvf0EeD%2FRqY8QVeNzNmFcT4oHwO%2Bl6IeSvgHvpbaQLX%2F0RM785XYoO4aNQ%2FkG5Cp2FObN6EzKPcvEWfJLPQ%2F63eDNm%2BEZaKDOSQVyJFkwXB5jkcCdz1VxAMXphujQYEv6fBWOra%2BPj6LKKnMUS3V%2FcsjnSjYypZkNx3P9955WjWlTKKTTTLhianF29I%2B0FFazGGWzj1t7evBqFXNBpKAw5sibrV9l13hyFf0aOAxprDf9rEZwzxGjOu5LPu9zF%2FI5o9Qe%2BVj2xyC72XyMLxS8WBuc2dMvCKYQlEdSbe8OII

Source: Joe Sandbox View	IP Address: 151.101.0.84 151.101.0.84
Source: Joe Sandbox View	IP Address: 63.140.39.35 63.140.39.35
Source: Joe Sandbox View	IP Address: 35.71.131.137 35.71.131.137
Source: Joe Sandbox View	IP Address: 3.33.220.150 3.33.220.150

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Light.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=usbglobalfeeservices400%40usbank.com&df=&tf=&lp=en&v=2&m=%7c1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22.usbank.com&s=1&f=0&d=1715316751535&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF
Source: global traffic	HTTP traffic detected: GET /websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=y5T5zlpYlLhUnR7uQnuwTWheZXgC2cGbptd/9boRZzOZzXgs25RpZddEncO9AAF6Qd/zN3jjFDFVQXKsJPfvo5/EVCQUpHCU2LaSBUI0tdoLeIXpPMJMJIngmQX2
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=41DEE207BCB21265142D1EDC8E19F3BA; AWSALB=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; AWSALBCORS=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=41DEE207BCB21265142D1EDC8E19F3BA; AWSALB=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; AWSALBCORS=Qb/lCmRaUnA+wzJZkVyNz0WDe3imeaOqoMJ/L8Px4jqiR1uodeOtlxxcGGUSVB9to9ig05NV0MlcnvladI8ZZ2h8JdlNkDEP59f/b/gcA6wZrvNU3hcErxr8hMtl
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oMCbAYnCHtLXoCA&MD=eyUruT96 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7
Source: global traffic	HTTP traffic detected: GET /utag/usbank/global-sync/prod/utag.sync.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adrum/adrum-latest.js HTTP/1.1Host: cdn.appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/usbank/dotcom-homepage/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=675616D751E567410A490D4C%40AdobeOrg&mid=21375164595563744931909202357212933986&ts=1715316799067 HTTP/1.1Host: smetrics.usbank.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.usbank.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=A39A513F9A6783D53943FD7E26119BED~-1~YAAQkBwhF0EfK1OPAQAAUyrZYAt5skM26421sa07v1OAfBLq/pwpKMMgYf57kfPtZAhJoD7WmLquPmcYD3hZ8iZVKAOBrc6enrKYVE2zlM8ze9sTtSc4LZJaS26Ld6GE9CzL2gUoyg4zmrYE9MPNQzqY3Akmwr+oaR8s1PaJB6IjroY1lX7Ev/qKEbHjcU7rCw+qZpqDNWD8aAtWzDwGbPjWEzXYu5a0p9u7B8Oxg/dI8ReuVAOtPZbh3+ZGuz0i+AKDzQq714rZgXgU00rsiPK1TJwh1gGTe3SgYEsQC3aZhlXcR998y9PkjCRy7zClQOeFotUbFZVjdqRrpIe9bep9/wGsDGE=~-1~-1~-1; bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715323999s%7CNONE%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: usbank.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oMCbAYnCHtLXoCA&MD=eyUruT96 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058
Source: global traffic	HTTP traffic detected: GET /c3metrics-562.js HTTP/1.1Host: 562-ct.c3tag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cobrowse/CobrowseJS.ashx?group=19921&site=production HTTP/1.1Host: www.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /452709.gif?pdata=adobeid_new%3D21375164595563744931909202357212933986 HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/12563/?che=5712298564241596&MCVISID=21375164595563744931909202357212933986 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=pmXIBHnX+jtup+POSRWADomJXMrbyV/sFxrxInHOfyk=
Source: global traffic	HTTP traffic detected: GET /cobrowse/js/GlanceCobrowseLoader_6.17.0M.js HTTP/1.1Host: storage.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=675616D751E567410A490D4C%40AdobeOrg&mid=21375164595563744931909202357212933986&ts=1715316799067 HTTP/1.1Host: smetrics.usbank.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=A39A513F9A6783D53943FD7E26119BED~-1~YAAQkBwhF0EfK1OPAQAAUyrZYAt5skM26421sa07v1OAfBLq/pwpKMMgYf57kfPtZAhJoD7WmLquPmcYD3hZ8iZVKAOBrc6enrKYVE2zlM8ze9sTtSc4LZJaS26Ld6GE9CzL2gUoyg4zmrYE9MPNQzqY3Akmwr+oaR8s1PaJB6IjroY1lX7Ev/qKEbHjcU7rCw+qZpqDNWD8aAtWzDwGbPjWEzXYu5a0p9u7B8Oxg/dI8ReuVAOtPZbh3+ZGuz0i+AKDzQq714rZgXgU00rsiPK1TJwh1gGTe3SgYEsQC3aZhlXcR998y9PkjCRy7zClQOeFotUbFZVjdqRrpIe9bep9/wGsDGE=~-1~-1~-1; bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; utag_main=v_id:018f60d9369b0021de52fa600de20506f002106700918$_sn:1$_se:1$_ss:1$_st:1715318599133$ses_id:1715316799133%3Bexp-session$_pn:1%3Bexp-session; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=21449694286267189811878938773483760058 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/12563/?che=5712298564241596&MCVISID=21375164595563744931909202357212933986 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ARHaJ2qpo7dOrFg1f7DFxFfNKvEEDVI1Y; u=C\|0CAAt0GTBLdBkwQAAAAAAAUXjAAAAAA
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTgQABoNCMLQ9rEGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1Host: usbank.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /qscripts/quantum-usbank.js HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x.gif HTTP/1.1Host: img.c3tag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"c: 6836432664740355sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36c3uid: 1922498971715316800sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1Host: usbank.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/siteanalyze_5093.js HTTP/1.1Host: siteimproveanalytics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564
Source: global traffic	HTTP traffic detected: GET /utag/usbank/dotcom-homepage/prod/utag.100.js?utv=ut4.46.202304182242 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/usbank/dotcom-homepage/prod/utag.105.js?utv=ut4.46.202403072057 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800 HTTP/1.1Host: 562-ct.c3tag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
Source: global traffic	HTTP traffic detected: GET /cobrowse/js/GlancePresenceVisitor_6.17.0M.js HTTP/1.1Host: www.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/usbankcom/10/JS-2.18.0/s56969242534095?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F4%2F2024%206%3A53%3A21%205%20-120&d.&nsid=0&jsonv=1&.d&sdid=250B7C9AC2EAFFD5-551DCDD535CD5A02&mid=21375164595563744931909202357212933986&aamlh=7&ce=UTF-8&pageName=Personal%20Home%20Page&g=https%3A%2F%2Fwww.usbank.com%2Findex.html&c.&vidAPICheck=VisitorAPI%20Present&et_dimensions=1263x907&et_width=1263&et_orientation=landscape&EVENTS=event17%2Cevent15%2C&.c&cc=USD&events=event17%2Cevent15&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=home%20pg&c2=home%20page%20rebranded%20ghp&l2=Experience%20Fragment%3AGlobal%3AAEM%3Alatest%2CNavigation%3A%20Primary%20and%20Utility%3AGlobal%3AAEM%3Alatest%2CBanner%3AGlobal%3AAEM%3Alatest%2CAdvanced%20Layout%20Tool%20%28ALT%29%3AGlobal%3AAEM%3Alatest%2CProduct%20Category%20Cards%3AGlobal%3AAEM%3Alatest%2CFull%20Span%20Content%20Block%3AGlobal%3AAEM%3Alatest%2COmni%3AGlobal%3AAEM%3Alatest%2CStyled%20Content%20Block%3AGlobal%3AAEM%3Alatest%2CStyled%20Content%20Block%3AGlobal%3AAEM%3Alatest%2CDisclosure%3AGlobal%3AAEM%3Alatest%2CExperience%20Fragment%3AGlobal%3AAEM%3Alatest%2CSocial%20Media%3AGlobal%3AAEM%3Alatest%2CFooter%3AGlobal%3AAEM%3Alatest%2CModal%3A%20Speedbump%3AGlobal%3AAEM%3Alatest%2CModal%3AGlobal%3AAEM%3Alatest&c3=D%3Dv3&v3=New&c4=11%3A45PM&c6=Thursday&c7=5%2F10%2F2024&v9=prospect&c14=D%3Dg&c18=First%20Visit&c19=1&c24=index.html&c25=D%3Dc24&v27=fb1f6f0b3224402bb37db5d5f32f93d5.34_0&c29=https%3A%2F%2Fwww.usbank.com%2Findex.html&v35=D%3DpageName&v37=D%3DUser-Agent&c40=dotcom&v40=D%3Dc2&c50=baseCore%7CAM_2.18.0%7C02.20.2020%7CVid_4.4.0%7CTealium%7Cdotcom-homepage&c53=Personal%20Home%20Page&v90=D%3Dg&v96=en-us&v132=selling&v249=34737396-0e59-4172-ac2a-8fa35d008c02&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=675616D751E567410A490D4C%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.usbank.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCI
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1Host: 6219543.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564; dpm=21449694286267189811878938773483760058
Source: global traffic	HTTP traffic detected: GET /x.gif HTTP/1.1Host: img.c3tag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=21449694286267189811878938773483760058&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cobrowse/js/GlancePresenceVisitor_6.17.0M.js HTTP/1.1Host: storage.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=usbank/dotcom-homepage/202405021642&cb=1715316803058 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1Host: 6219543.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnrKk6WuPPW71x88q11UyYf2HKNC0ZOHarv0LeTfC7j137yp4i1ELJWvjfIIKE
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ctv4/ctcall.php?iN=2753&nid=1&cid=562&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&tld=usbank.com&c3uid=1922498971715316800&r=108908072115316802&ct_account_id=&w=1280&h=1024&os=Desktop%3AWin10%3A10.0%3AChrome%3A0 HTTP/1.1Host: 562-ct.c3tag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: C3UID=1922498971715316800; C3UID-562=1922498971715316800
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
Source: global traffic	HTTP traffic detected: GET /c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800 HTTP/1.1Host: 562-ct.c3tag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: C3UID=1922498971715316800; C3UID-562=1922498971715316800
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=aee1dd73-66f3-4faa-8a86-c84271522b96
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_oDYoiA0Ce39h70SHIHPLlQ=="
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.aspx?url=https%3A%2F%2Fwww.usbank.com%2Findex.html&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&res=1280x1024&accountid=5093&rt=8385&prev=b02ecca2-2bad-f1d6-188e-68be725f696a&luid=25751cf8-eef9-41bf-f6b6-3aa7abecca19&rnd=65791 HTTP/1.1Host: 5093.global.siteimproveanalytics.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978114044/?random=1715316804134&cv=11&fst=1715316804134&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.2bdc3040.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://6219543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/com/89cfe344-53d3-4495-9a99-77bfbb3bf779.js?v=3.16.3-2405090301 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usbank.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978114044/?random=1715316804134&cv=11&fst=1715313600000&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqr-3N1DveI6JygubYx7IQGvAgR0XmceOPIbXKlrHl2D26nVNI&random=3200754453&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&cb=1715316805486&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316805500&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1715316805506 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=21449694286267189811878938773483760058&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_4UCtcSrM/gEBaObNm3VdmQ=="
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=c668bd2c-46b7-4bc2-be55-3e386b87e8ad HTTP/1.1Host: smetrics.usbank.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32f93d5.34_0#1778561602; daeAnonId=34737396-0e59-4172-ac2a-8fa35d008c02; s_pers=%20s_lv%3D1715316801636%7C1809924801636%3B%20s_lv_s%3DFirst%2520Visit%7C1715318601636%3B%20s_nr%3D1715316801641-New%7C1888116801641%3B%20s_vnum%3D1888116801644%2526vn%253D1%7C1888116801644%3B%20s_invisit%3Dtrue%7C1715318601644%3B%20sc_visit_start%3D1%7C1715318601646%3B%20s_visitStart%3D1%7C1715318601647%3B%20s_prevPage%3DPersonal%2520Home%2520Page%7C1715318601648%3B; s_sess=%20s_cc%3Dtrue%3B; _abck=A39A513F9A6783D53943FD7E26119BED~0~YAAQD6k4F/CCvE+PAQAAcETZYAud0FltFNGMKK19vnHqP4W1b+aF9GYwWh7LlLgSGd2QA5GL72iLv0OmjyepcbTVtDt9OiSvgng4kqBmTEGKpN2jB1dN1ntUhvvSXju19x9J+/9O/keJO/qYuAmmhdUOes98rE8meADpGl6T2fTOe/PGPxRu75/pbC8nlFeCDW8Ot/EVpiA8oZMNVVmhhC2PZzhDpnM9mjafh3JX6nAz8kuBcM33kgm2iEvZXuFPQmdYuMTISJsqYfS4TL8B11kwQDHhK8OoMJp4b5uqdenErctatsHxm7F9NG+7cChPttxglMlZ/O2OllJL3p54SKDWpjAFgDJe9Be/s/KoFfSGjKxy1Sp7IlIXakW9PhCcuClyFqS3c12dwo1IIH+Zd/5EKTI68lGs~-1~-1~-1; _gcl_au=1.1.706303381.1715316803; utag_main=v_id:018f60d9369b0021de52fa600de20506f002106700918$_sn:1$_se:2$_ss:0$_st:1715318603060$ses_id:1715316799133%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:usbank.com; nmstat=b02ecca2-2bad-f1d6-188e-68be725f696a; _acxmetrics=aHe9kmPahEUqoAKT; aam_uuid=21449694286267189811878938773483760058; C3S-562=on; kndctr_675616D751E567410A490D4C_AdobeOrg_identity=CiYyMTM3NTE2NDU5NTU2Mzc0NDkzMTkwOTIwMjM1NzIxMjkzMzk4NlIQCIyY5Yb2MRgBKgNWQTYwA_ABjJjlhvYx; kndctr_675616D751E567410A490D4C_AdobeOrg_cluster=va6; _mkto_trk=id:451-RQS-232&token:_mch-usbank
Source: global traffic	HTTP traffic detected: GET /ee/t34/v1/identity/acquire?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=e99511ec-b802-4316-9bee-942584c07efd HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /bct?pid=8bc436aa-e0fc-4baa-9c9a-06fbeca87826&puid=21449694286267189811878938773483760058&_ct=img HTTP/1.1Host: mid.rkdms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.aspx?url=https%3A%2F%2Fwww.usbank.com%2Findex.html&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&res=1280x1024&accountid=5093&rt=8385&prev=b02ecca2-2bad-f1d6-188e-68be725f696a&luid=25751cf8-eef9-41bf-f6b6-3aa7abecca19&rnd=65791 HTTP/1.1Host: 5093.global.siteimproveanalytics.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316806779&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22tealium%22%2C%22pin_unauth%22%3A%22dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /adrum-ext.8ad16b8375327e66a32816a8ad7be617.js HTTP/1.1Host: cdn.appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/usbankcom/10/JS-2.18.0/s5991795903118?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F4%2F2024%206%3A53%3A26%205%20-120&d.&nsid=0&jsonv=1&.d&sdid=40DCE03561CEE31B-618DC03130DF2483&mid=21375164595563744931909202357212933986&aamlh=7&ce=UTF-8&pageName=Personal%20Home%20Page&g=https%3A%2F%2Fwww.usbank.com%2Findex.html&cc=USD&c53=personal%20home%20page%3Alogin%20widget%20error&pe=lnk_o&pev2=personal%20home%20page%3Alogin%20widget%20error&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=675616D751E567410A490D4C%40AdobeOrg&lrt=1782&AQE=1 HTTP/1.1Host: smetrics.usbank.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32f93d5.34_0#1778561602; daeAnonId=34737396-0e59-4172-ac2a-8fa35d008c02; _abck=A39A513F9A6783D53943FD7E26119BED~0~YAAQD6k4F/CCvE+PAQAAcETZYAud0FltFNGMKK19vnHqP4W1b+aF9GYwWh7LlLgSGd2QA5GL72iLv0OmjyepcbTVtDt9OiSvgng4kqBmTEGKpN2jB1dN1ntUhvvSXju19x9J+/9O/keJO/qYuAmmhdUOes98rE8meADpGl6T2fTOe/PGPxRu75/pbC8nlFeCDW8Ot/EVpiA8oZMNVVmhhC2PZzhDpnM9mjafh3JX6nAz8kuBcM33kgm2iEvZXuFPQmdYuMTISJsqYfS4TL8B11kwQDHhK8OoMJp4b5uqdenErctatsHxm7F9NG+7cChPttxglMlZ/O2OllJL3p54SKDWpjAFgDJe9Be/s/KoFfSGjKxy1Sp7IlIXakW9PhCcuClyFqS3c12dwo1IIH+Zd/5EKTI68lGs~-1~-1~-1; _gcl_au=1.1.706303381.1715316803; nmstat=b02ecca2-2bad-f1d6-188e-68be725f696a; _acxmetrics=aHe9kmPahEUqoAKT; aam_uuid=21449694286267189811878938773483760058; C3S-562=on; kndctr_675616D751E567410A490D4C_AdobeOrg_identity=CiYyMTM3NTE2NDU5NTU2Mzc0NDkzMTkwOTIwMjM1NzIxMjkzMzk4NlIQCIyY5Yb2MRgBKgNWQTYwA_ABjJjlhvYx; kndctr_675616D751E567410A490D4C_AdobeOrg_clus
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=23FC2B2FA67E6B5B3B573F54A7F86A66 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=129099&dpuuid=32516cec6ec3427bac6d4d42235b7c87 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usbank.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/authorizationservice/GetVisitorSettings3?groupid=19921&site=production&service=presence HTTP/1.1Host: www.glance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&cb=1715316805486&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978114044/?random=1715316804134&cv=11&fst=1715313600000&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqr-3N1DveI6JygubYx7IQGvAgR0XmceOPIbXKlrHl2D26nVNI&random=3200754453&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1715316805506 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316805500&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=129099&dpuuid=32516cec6ec3427bac6d4d42235b7c87 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=23FC2B2FA67E6B5B3B573F54A7F86A66 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
Source: global traffic	HTTP traffic detected: GET /v3/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316806779&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22tealium%22%2C%22pin_unauth%22%3A%22dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
Source: global traffic	HTTP traffic detected: GET /services/authorizationservice/GetVisitorSettings3?groupid=19921&site=production&service=presence HTTP/1.1Host: www.glance.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808005&S=0&N=0&P=0&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808757&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&U=6abb78fa47440a8479ce99402f3241ae&Q=2&S=0&N=0&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316809364&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=1017&N=2&P=1&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316813009&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=7479&N=61&P=2&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808735&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=1&Y=1&X=7efe35b3531344b08d6945d5e56d2f74&z=1 HTTP/1.1Host: usbank-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316814115&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=756&N=1&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?spot=3033967&src=1521091&var=s_6_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_6_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1517995152937 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
Source: global traffic	HTTP traffic detected: GET /star HTTP/1.1Host: mpsnare.iesnare.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.usbank.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=Sec-WebSocket-Key: Ot56A3lnveVJVcGUaFN92Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.6296069907483965 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.usbank.com/index.htmlAccept-Language: en-US,en;q=0.9Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /5.7.0/logo.js HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.8098658682685631 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.usbank.com/index.htmlAccept-Language: en-US,en;q=0.9Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /star HTTP/1.1Host: mpsnare.iesnare.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.usbank.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=Sec-WebSocket-Key: Jyh+AWh/rZBzazE2sOKTrA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316818012&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=8920&N=79&P=3&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316819110&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=1333&N=2&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:b0e1034c-3861-4059-9e13-d3b343847c0c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:5\|t:1715316821180
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828016&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30623&N=136&P=4&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828570&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2275&N=3&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833031&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30803&N=139&P=5&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833575&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2301&N=4&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316843097&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=31426&N=145&P=6&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316844120&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2317&N=5&z=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; AWSALBCORS=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; AWSALBCORS=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22%2Eusbank%2Ecom%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27dXNiZ2xvYmFsZmVlc2VydmljZXM0MDBAdXNiYW5rLmNvbQ%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27bSJmnRG2P%2BqoVo9UIGhJMQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1715271930433%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,8429%5D,%27Body-1715271930433%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714228528%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B8429,85970%5D,%2714228528%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714232886%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B94399,79053%5D,%2714232886%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714234811%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B173452,83891%5D,%2714234811%2Epdf%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B257343,34909%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27Ol1xW%2Fla5vHfC57aqQ8j9KRYg3I%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27TDMhRFqUdp5TbttwSDb13PJzrgQwYLSeWC3wBbElPN%2FBfRRLC4m2EB3kkxCg7eMzAok1J3wFnsXyxjg8M8oFOqcBJJhvI0dNgJiHrGDv0aWNic8c%2Be%2FDxKmD5DEoJpmHOQ%2B3YnSxLiPsdbcIARh62jnmtcI7IiE0Jo7%2BAw7qLgsgPDNEULIpJoUTeBEhfjDViIm71zuGzZ39sixKW21Qat3DSZw1xUHeME4b%2B%2Bd58RnnC3JZ57Jz9qYZFayzUhF9wxHHOXDyBwymXDUpLzTUlWnU3qLM%2Ffvzt6%2FdiIgvilrh0BgTrpaJZPs6RGMUJOdAAD2vog70UTS0Ypqgf%2BAqIEPD0uIgNVBQPxQ%2Fb%2FsSdiezQsg%2BrELZesnlw1zjl6ZQkcmcnrHoatStZspktMmThEBQm9IVQB9NKHEnv5igY0d8jhrO2gjYdEc5KNHLJ8vIBSAiiMrgItDktzy6mK%2FifOPrS%2FfkFELzm5IAVQ4%2F8CEOHbQDQGf%2BMCJGFl%2BGVD9rIYRNXeHLRk6rb5WXLSAJpImphC2gswO2UcLtZWwPLnG2yzBtzFEdhPyGNHHKoUXOSvgKRlYixmYJEI3jxvni71W9pflnOb7W2dBV75OCU%2BLdutsB%2F5%2BIMAJZ3v6jDhKLb4a8og8P9avUgTK8qa08hCjJuVyv71ok9IyLFGeKmOIfu9%2FHIJhLUGERuSD7LcRtqs4SH%2BVUIV%2FiqpAf1YbalGXEG7OBE9i0VhmW7YJlPtuBn2D8T6sJ6ZEIBCGeuoa6A8RB3cHpd4qcNX%2FVJPwGq1vTOAH9tprKWnCClhRofnMNnMoJvjvELdoJ%2FZF2LiDMoxoKDrDuwJXf9YhgkSXBkCpEDDp5zKk%2BVO63SFTMzEB8a4lRPWewuCzwY5fJI62nYR%2Fr7BdLkSKg1UaD7yb%2FD1KoUTB%2Fz78F30xGxCX9voTwSGGVMNh7%2BLM4WukVdJQXDsmpZq2%2BCDIf3gw8NsIzypR2Mv2z1MuS17SGVq79n9og7Q1q70Itfim3Jei0ZUolRDj3o2pvf0EeD%2FRqY8QVeNzNmFcT4oHwO%2Bl6IeSvgHvpbaQLX%2F0RM785XYoO4aNQ%2FkG5Cp2FObN6EzKPcvEWfJLPQ%2F63eDNm%2BEZaKDOSQVyJFkwXB5jkcCdz1VxAMXphujQYEv6fBWOra%2BPj6LKKnMUS3V%2FcsjnSjYypZkNx3P9955WjWlTKKTTTLhianF29I%2B0FFazGGWzj1t7evBqFXNBpKAw5sibrV9l13hyFf0aOAxprDf9rEZwzxGjOu5LPu9zF%2FI5o9Qe%2BVj2xyC72XyMLxS8WBuc2dMvCKYQlEdSbe8OII
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_251.2.dr	String found in binary or memory: <a class="link" href="https://www.facebook.com/usbank/" target="_blank" aria-label="U.S. Bank Facebook opens in new tab."> equals www.facebook.com (Facebook)
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: re ready to help."]},{"@context":"http://schema.org","@type":"WebPage","isPartOf":[{"@id":"https://www.usbank.com/index.html/#Website"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"image":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"]}],"name":["U.S. Bank"],"relatedLink":["https://www.usbank.com/investing/financial-perspectives/market-news/how-presidential-elections-affect-the-stock-market.html","https://www.usbank.com/bank-accounts/checking-accounts/bank-smartly-checking.html","https://www.usbank.com/financialiq/invest-your-money/market-perspectives/economic-forecast.html","https://www.usbank.com/about-us-bank/community/student-scholarship.html","https://www.usbank.com/financialiq/invest-your-money/tax-strategies/tax-resource-center.html","https://www.usbank.com/financialiq/manage-your-household/personal-finance/loud-budgeting-explained-how-to-amplify-your-money-talk.html","https://www.usbank.com/financialiq/manage-your-household/protect-your-assets/how-to-stay-safe-during-tax-season.html"],"speakable":[{"@type":"SpeakableSpecification","xpath":["/html/head/title","/html/head/meta[@name='description']/@content"]}],"url":["https://www.usbank.com/index.html"]},{"@context":"http://schema.org","@type":"WebSite","@id":"https://www.usbank.com/index.html/#Website","sourceOrganization":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"name":["U.S. Bank"],"potentialAction":[{"@type":"SearchAction","query-input":["required name=search_term_string"],"target":["https://www.usbank.com/search/search-results.html?q={search_term_string}"]}],"url":["https://www.usbank.com/"]},{"@context":"http://schema.org","@type":"Organization","sameAs":["https://en.wikipedia.org/wiki/U.S._Bancorp","https://www.facebook.com/usbank","https://twitter.com/usbank","https://www.instagram.com/usbank/","https://www.youtube.com/user/usbank"],"@id":"https://www.usbank.com/index.html/#Organization","contactPoint":[{"@type":"ContactPoint","contactType":["customer service"],"name":["Call U.S. Bank"],"telephone":["+1-877.595.6256"]}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"logo":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/usbank_logo.png"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/usbank_logo.png"]}],"name":["U.S. Bank"],"url":["https://www.usbank.com/index.html"]}] equals www.facebook.com
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: re ready to help."]},{"@context":"http://schema.org","@type":"WebPage","isPartOf":[{"@id":"https://www.usbank.com/index.html/#Website"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"image":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"]}],"name":["U.S. Bank"],"relatedLink":["https://www.usbank.com/investing/financial-perspectives/market-news/how-presidential-elections-affect-the-stock-market.html","https://www.usbank.com/bank-accounts/checking-accounts/bank-smartly-checking.html","https://www.usbank.com/financialiq/invest-your-money/market-perspectives/economic-forecast.html","https://www.usbank.com/about-us-bank/community/student-scholarship.html","https://www.usbank.com/financialiq/invest-your-money/tax-strategies/tax-resource-center.html","https://www.usbank.com/financialiq/manage-your-household/personal-finance/loud-budgeting-explained-how-to-amplify-your-money-talk.html","https://www.usbank.com/financialiq/manage-your-household/protect-your-assets/how-to-stay-safe-during-tax-season.html"],"speakable":[{"@type":"SpeakableSpecification","xpath":["/html/head/title","/html/head/meta[@name='description']/@content"]}],"url":["https://www.usbank.com/index.html"]},{"@context":"http://schema.org","@type":"WebSite","@id":"https://www.usbank.com/index.html/#Website","sourceOrganization":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"name":["U.S. Bank"],"potentialAction":[{"@type":"SearchAction","query-input":["required name=search_term_string"],"target":["https://www.usbank.com/search/search-results.html?q={search_term_string}"]}],"url":["https://www.usbank.com/"]},{"@context":"http://schema.org","@type":"Organization","sameAs":["https://en.wikipedia.org/wiki/U.S._Bancorp","https://www.facebook.com/usbank","https://twitter.com/usbank","https://www.instagram.com/usbank/","https://www.youtube.com/user/usbank"],"@id":"https://www.usbank.com/index.html/#Organization","contactPoint":[{"@type":"ContactPoint","contactType":["customer service"],"name":["Call U.S. Bank"],"telephone":["+1-877.595.6256"]}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"logo":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/usbank_logo.png"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/usbank_logo.png"]}],"name":["U.S. Bank"],"url":["https://www.usbank.com/index.html"]}] equals www.twitter.com (
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: re ready to help."]},{"@context":"http://schema.org","@type":"WebPage","isPartOf":[{"@id":"https://www.usbank.com/index.html/#Website"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"image":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg"]}],"name":["U.S. Bank"],"relatedLink":["https://www.usbank.com/investing/financial-perspectives/market-news/how-presidential-elections-affect-the-stock-market.html","https://www.usbank.com/bank-accounts/checking-accounts/bank-smartly-checking.html","https://www.usbank.com/financialiq/invest-your-money/market-perspectives/economic-forecast.html","https://www.usbank.com/about-us-bank/community/student-scholarship.html","https://www.usbank.com/financialiq/invest-your-money/tax-strategies/tax-resource-center.html","https://www.usbank.com/financialiq/manage-your-household/personal-finance/loud-budgeting-explained-how-to-amplify-your-money-talk.html","https://www.usbank.com/financialiq/manage-your-household/protect-your-assets/how-to-stay-safe-during-tax-season.html"],"speakable":[{"@type":"SpeakableSpecification","xpath":["/html/head/title","/html/head/meta[@name='description']/@content"]}],"url":["https://www.usbank.com/index.html"]},{"@context":"http://schema.org","@type":"WebSite","@id":"https://www.usbank.com/index.html/#Website","sourceOrganization":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"name":["U.S. Bank"],"potentialAction":[{"@type":"SearchAction","query-input":["required name=search_term_string"],"target":["https://www.usbank.com/search/search-results.html?q={search_term_string}"]}],"url":["https://www.usbank.com/"]},{"@context":"http://schema.org","@type":"Organization","sameAs":["https://en.wikipedia.org/wiki/U.S._Bancorp","https://www.facebook.com/usbank","https://twitter.com/usbank","https://www.instagram.com/usbank/","https://www.youtube.com/user/usbank"],"@id":"https://www.usbank.com/index.html/#Organization","contactPoint":[{"@type":"ContactPoint","contactType":["customer service"],"name":["Call U.S. Bank"],"telephone":["+1-877.595.6256"]}],"description":["Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."],"logo":[{"@type":"ImageObject","contentUrl":["https://www.usbank.com/dam/images/usbank_logo.png"],"name":["U.S. Bank"],"url":["https://www.usbank.com/dam/images/usbank_logo.png"]}],"name":["U.S. Bank"],"url":["https://www.usbank.com/index.html"]}] equals www.youtube.com (
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: return b}BC.K="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: static.cres-aws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: res.cisco.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.usbank.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: usbank.demdex.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.usbank.com
Source: global traffic	DNS traffic detected: DNS query: www.glancecdn.net
Source: global traffic	DNS traffic detected: DNS query: schema.milestoneinternet.com
Source: global traffic	DNS traffic detected: DNS query: 562-ct.c3tag.com
Source: global traffic	DNS traffic detected: DNS query: usbank.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: storage.glancecdn.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.net
Source: global traffic	DNS traffic detected: DNS query: img.c3tag.com
Source: global traffic	DNS traffic detected: DNS query: onlinebanking.usbank.com
Source: global traffic	DNS traffic detected: DNS query: cdn.quantummetric.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: siteimproveanalytics.com
Source: global traffic	DNS traffic detected: DNS query: cdn1.adoberesources.net
Source: global traffic	DNS traffic detected: DNS query: acxmetrics.usbank.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: 6219543.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sc-static.net
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: 5093.global.siteimproveanalytics.io
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: 451-rqs-232.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: tr.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: mid.rkdms.com
Source: global traffic	DNS traffic detected: DNS query: content.usbank.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.glance.net
Source: global traffic	DNS traffic detected: DNS query: ingest.quantummetric.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: usbank-sync.quantummetric.com
Source: global traffic	DNS traffic detected: DNS query: api.usbank.com
Source: global traffic	DNS traffic detected: DNS query: mpsnare.iesnare.com
Source: global traffic	DNS traffic detected: DNS query: fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pdx-col.eum-appdynamics.com

Source: unknown

HTTP traffic detected: POST /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1Host: usbank.tt.omtrdc.netConnection: keep-aliveContent-Length: 829sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.usbank.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usbank.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c668bd2c-46b7-4bc2-be55-3e386b87e8advary: Origindate: Fri, 10 May 2024 04:53:27 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: e99511ec-b802-4316-9bee-942584c07efdvary: Origindate: Fri, 10 May 2024 04:53:27 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_198.2.dr	String found in binary or memory: http://angular.io/license
Source: chromecache_198.2.dr, chromecache_251.2.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: chromecache_288.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_198.2.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: chromecache_266.2.dr	String found in binary or memory: http://error.demdex.net/event?d_nsid=0&d_px=14137&d_ld=name%3Derror%26filename%3Ddil.js%26partner%3D
Source: chromecache_251.2.dr	String found in binary or memory: http://pdx-col.eum-appdynamics.com
Source: securedoc_20240509T112530.html	String found in binary or memory: http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyH
Source: chromecache_327.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_222.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterLightWeightSlant
Source: chromecache_330.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterSemiBoldWeightSlant
Source: chromecache_257.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlant
Source: chromecache_321.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlantRegular
Source: chromecache_288.2.dr, chromecache_256.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_206.2.dr, chromecache_269.2.dr, chromecache_273.2.dr	String found in binary or memory: http://www.c3metrics.com
Source: chromecache_206.2.dr, chromecache_269.2.dr, chromecache_273.2.dr	String found in binary or memory: http://www.c3tag.com
Source: chromecache_199.2.dr, chromecache_253.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: securedoc_20240509T112530.html	String found in binary or memory: http://www.usbank.com
Source: chromecache_269.2.dr	String found in binary or memory: https://562-ct.c3tag.com
Source: chromecache_254.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: securedoc_20240509T112530.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_204.2.dr	String found in binary or memory: https://alpha-api.usbank.com/authentication/customer-auth/app-config/v1/config
Source: chromecache_204.2.dr	String found in binary or memory: https://alpha-api.usbank.com/marketing/experiences/v1/ab-experiences
Source: chromecache_204.2.dr	String found in binary or memory: https://api.usbank.com/authentication/customer-auth/app-config/v1/config
Source: chromecache_204.2.dr	String found in binary or memory: https://api.usbank.com/marketing/experiences/v1/ab-experiences
Source: chromecache_296.2.dr	String found in binary or memory: https://applications.usbank.com/oad
Source: chromecache_296.2.dr	String found in binary or memory: https://applications.usbank.com/pdap
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://apps.apple.com/us/app/u-s-bank-simpler-faster/id458734623
Source: chromecache_204.2.dr	String found in binary or memory: https://auth-credentials-dev.us.bank-dns.com/digital-auth/services/credentials/v1/update
Source: chromecache_251.2.dr	String found in binary or memory: https://careers.usbank.com
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_198.2.dr, chromecache_251.2.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: chromecache_198.2.dr	String found in binary or memory: https://cdn.appdynamics.com/adrum/web-vitals/web-vitals.iife.3.3.2.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.quantummetric.com/helpers/blank
Source: chromecache_266.2.dr	String found in binary or memory: https://cdn.quantummetric.com/qscripts/quantum-usbank.js
Source: chromecache_266.2.dr	String found in binary or memory: https://cdn1.adoberesources.net/alloy/##utag_replace_library_version##/alloy.min.js
Source: securedoc_20240509T112530.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Source: securedoc_20240509T112530.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Source: chromecache_198.2.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: chromecache_266.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_237.2.dr	String found in binary or memory: https://content.usbank.com/content/dam/onlinebanking/common/static/fonts/U.S.BankCircularWeb-Medium.
Source: chromecache_237.2.dr	String found in binary or memory: https://content.usbank.com/content/dam/onlinebanking/common/static/fonts/U.S.BankCircularWeb-Regular
Source: chromecache_334.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_266.2.dr	String found in binary or memory: https://d.agkn.com/pixel/12563/?che=
Source: chromecache_265.2.dr, chromecache_249.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_204.2.dr	String found in binary or memory: https://emp-onlinebanking.usbank.com
Source: chromecache_231.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_240.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_222.2.dr, chromecache_330.2.dr	String found in binary or memory: https://github.com/rsms/inter)Inter
Source: chromecache_321.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter
Source: chromecache_257.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter
Source: chromecache_268.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_297.2.dr	String found in binary or memory: https://google.com
Source: chromecache_297.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_266.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_204.2.dr	String found in binary or memory: https://it-api.usbank.com/authentication/customer-auth/app-config/v1/config
Source: chromecache_204.2.dr	String found in binary or memory: https://it-api.usbank.com/marketing/experiences/v1/ab-experiences
Source: chromecache_204.2.dr	String found in binary or memory: https://it3-onlinebanking.usbank.com
Source: chromecache_259.2.dr, chromecache_235.2.dr	String found in binary or memory: https://lineto.com/licensinghttps://lineto.com/licensingAlternate
Source: chromecache_300.2.dr	String found in binary or memory: https://lineto.com/licensinghttps://lineto.com/licensingU.S.
Source: chromecache_296.2.dr	String found in binary or memory: https://mortgageapply.usbank.com/#/signup?referrerId
Source: chromecache_228.2.dr	String found in binary or memory: https://mpsnare.iesnare.com
Source: chromecache_296.2.dr	String found in binary or memory: https://onboarding.usbank.com/business/cards/
Source: chromecache_296.2.dr	String found in binary or memory: https://onboarding.usbank.com/consumer/cards/
Source: chromecache_296.2.dr	String found in binary or memory: https://onboarding.usbank.com/gateway/consumer
Source: chromecache_296.2.dr	String found in binary or memory: https://onboarding.usbank.com/usl/consumer/
Source: chromecache_251.2.dr, chromecache_204.2.dr	String found in binary or memory: https://onlinebanking.usbank.com
Source: chromecache_251.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/Auth/Login
Source: chromecache_296.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/Auth/SSOLogin?client
Source: chromecache_251.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/
Source: chromecache_251.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/?channel=mobileweb
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/132-dae71e255da2c1033c7e.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/209-bdeb3f8784a8d72824a2.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/249-f39f9e967bbfec6dd99b.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/351-2a144078e2d7e0134bee.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/50-adaa4f60dc5972de4b7f.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/524-7a7e6123ad6fcf8e45ff.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/61-27d77f52309eae970dc4.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/63-182fa76e160e328ede5d.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/635-5500c6c47dfa1c4299da.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/646-54dd81dd41f600c5fb5a.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/686-0ecdeed908fd59a80849.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/738-358ed1c3ae9af95b1dbc.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/770-67642a76c3cd2c640fc8.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/8-dff4d0a0d37888a16a9a.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/812-87380e51541a822e4552.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/931-5738f79d51b2f62431e7.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/941-315b725381e32232d736.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/946-85f6ba284c118003f344.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/main-4f9a982f8b35c51616b3.js
Source: chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/auth/login/wmf/latest/remoteEntry.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/1255-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/1285-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/152-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/1642-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/1763-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/2135-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/2704-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/2790-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/2950-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/327-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3454-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3663-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3793-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3809-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3878-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4076-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4103-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4163-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/424-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4268-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/43-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4565-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4575-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4762-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4816-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4820-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/51-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5195-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5214-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5335-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5342-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5353-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/545-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5661-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/571-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5820-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6002-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/653-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6615-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6747-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6837-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6965-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7032-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7491-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7623-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7725-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8141-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8234-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8290-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8427-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8481-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8655-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9245-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/94-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9420-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9504-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9729-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9798-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9866-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/main-bca5e814bbbb4645b709.js
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/usb-shield-bca5e814bbbb4645b709.j
Source: chromecache_313.2.dr, chromecache_335.2.dr	String found in binary or memory: https://onlinebanking.usbank.com/digital/servicing/smart-assistant/usb-ui-tools-bca5e814bbbb4645b709
Source: chromecache_254.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_197.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_251.2.dr	String found in binary or memory: https://pdx-col.eum-appdynamics.com
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.usbank.mobilebanking&hl=en_US&pli=1
Source: chromecache_251.2.dr	String found in binary or memory: https://publicsearch.usbank.com/xrest
Source: chromecache_323.2.dr, chromecache_231.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_294.2.dr	String found in binary or memory: https://requirejs.org/docs/errors.html#
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=authFrame
Source: chromecache_205.2.dr	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=null
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com/websafe/images/loginbg.gif
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com/websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVe
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/keyserver/Logout
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/keyserver/keyserver
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=AddrNotShown
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=PPNotShown
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=RegEnvelope
Source: securedoc_20240509T112530.html	String found in binary or memory: https://res.cisco.com:443/websafe/pswdForgot.action
Source: chromecache_266.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_334.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.2bdc3040.js
Source: chromecache_245.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_266.2.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: chromecache_212.2.dr	String found in binary or memory: https://schema.milestoneinternet.com/schema/
Source: chromecache_251.2.dr	String found in binary or memory: https://schema.org/Organization
Source: chromecache_245.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_245.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_204.2.dr	String found in binary or memory: https://smetrics.usbank.com/b/ss/usbankcom
Source: chromecache_204.2.dr	String found in binary or memory: https://smetrics.usbank.com/b/ss/usbankdev
Source: securedoc_20240509T112530.html	String found in binary or memory: https://static.cres-aws.com/CRES_login_bg.jpg
Source: securedoc_20240509T112530.html	String found in binary or memory: https://static.cres-aws.com/postx.css
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_197.2.dr, chromecache_254.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_204.2.dr	String found in binary or memory: https://transec.usbank.com
Source: chromecache_251.2.dr	String found in binary or memory: https://twitter.com/usbank
Source: chromecache_204.2.dr	String found in binary or memory: https://uat3-onlinebanking.usbank.com
Source: chromecache_290.2.dr	String found in binary or memory: https://usbank.com/corporate-and-commercial-banking/access-accounts.html
Source: chromecache_290.2.dr	String found in binary or memory: https://usbank.com/investment-services/access-accounts.html
Source: chromecache_251.2.dr	String found in binary or memory: https://usbank.findmyspecialoffer.com/fmo/preQual/firstRequest.do?business
Source: chromecache_251.2.dr	String found in binary or memory: https://www.careerarc.com/job-map/u-s-bank?campaign_id
Source: chromecache_266.2.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: chromecache_251.2.dr	String found in binary or memory: https://www.finra.org/
Source: chromecache_266.2.dr	String found in binary or memory: https://www.glancecdn.net/cobrowse/CobrowseJS.ashx?group=
Source: chromecache_254.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_218.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/978114044/?random
Source: chromecache_297.2.dr, chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_254.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_297.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_287.2.dr, chromecache_332.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_266.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_251.2.dr	String found in binary or memory: https://www.instagram.com/usbank/
Source: chromecache_274.2.dr	String found in binary or memory: https://www.istockphoto.com/legal/license-agreement?utm_medium=organic&utm_source=google&utm_campaig
Source: chromecache_300.2.dr, chromecache_259.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.lineto.comhttps://www.lineto.com/The
Source: chromecache_251.2.dr	String found in binary or memory: https://www.mycardbenefits.com"
Source: chromecache_251.2.dr	String found in binary or memory: https://www.myvisacardportal.com/usbank/en_us/altitude"
Source: chromecache_251.2.dr	String found in binary or memory: https://www.myvisacardportal.com/usbank/en_us/flexperks"
Source: chromecache_251.2.dr	String found in binary or memory: https://www.myvisacardportal.com/usbank/en_us/welcome"
Source: chromecache_333.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_219.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/eula
Source: chromecache_219.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/patents/.
Source: chromecache_251.2.dr	String found in binary or memory: https://www.sipc.org/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.usbancorpassetmanagement.com
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/about-us-bank/community/student-scholarship.html
Source: chromecache_251.2.dr	String found in binary or memory: https://www.usbank.com/about-us-bank/privacy/state-personal-information-program.html#learn
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/bank-accounts/checking-accounts/bank-smartly-checking.html
Source: chromecache_296.2.dr	String found in binary or memory: https://www.usbank.com/customer-service/global-transition-solutions/welcome.html
Source: chromecache_204.2.dr	String found in binary or memory: https://www.usbank.com/customer-service/knowledge-base/KB0070130.html
Source: chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/dam/images/homepage/photo-woman-with-phone-on-street-1920x869.jpg
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/financialiq/invest-your-money/market-perspectives/economic-forecast.html
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/financialiq/invest-your-money/tax-strategies/tax-resource-center.html
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/financialiq/manage-your-household/personal-finance/loud-budgeting-explained-h
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/financialiq/manage-your-household/protect-your-assets/how-to-stay-safe-during
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/home-loans/home-equity.html
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/home-loans/mortgage.html
Source: chromecache_251.2.dr, chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/index.html
Source: chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/index.html/#Organization
Source: chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/index.html/#Website
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/investing/financial-perspectives/market-news/how-presidential-elections-affec
Source: chromecache_251.2.dr	String found in binary or memory: https://www.usbank.com/locations/search/
Source: chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/online-mobile-banking/mobile-banking.html#gettheapp
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/search/search-results.html?q=
Source: chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.usbank.com/vehicle-loans/auto-loans.html
Source: chromecache_251.2.dr	String found in binary or memory: https://www.usbank.com/wealth-management/find-an-advisor/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.usbankgomobile.com/wallet/#/home"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49783 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.winHTML@33/262@205/69

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240509T112530.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,6777075850867909004,4976181827630672047,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,6777075850867909004,4976181827630672047,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
securedoc_20240509T112530.html	0%	Virustotal		Browse

Source	Detection	Scanner	Link
col.eum-appdynamics.com	0%	Virustotal	Browse
platform.twitter.map.fastly.net	0%	Virustotal	Browse
adobetarget.data.adobedc.net	0%	Virustotal	Browse
demdex.net.ssl.sc.omtrdc.net	0%	Virustotal	Browse
img.c3tag.com	0%	Virustotal	Browse
562-ct.c3tag.com	0%	Virustotal	Browse
glancecdn.net	0%	Virustotal	Browse
sc-static.net	0%	Virustotal	Browse
prod.pinterest.global.map.fastly.net	0%	Virustotal	Browse
siteimproveanalytics.com	0%	Virustotal	Browse
451-rqs-232.mktoresp.com	0%	Virustotal	Browse
static.ads-twitter.com	0%	Virustotal	Browse
mid.rkdms.com	0%	Virustotal	Browse
gcp.api.sc-gw.com	0%	Virustotal	Browse
usbank.com.ssl.d2.sc.omtrdc.net	0%	Virustotal	Browse
usbank.tt.omtrdc.net	0%	Virustotal	Browse
munchkin.marketo.net	0%	Virustotal	Browse
pdx-col.eum-appdynamics.com	0%	Virustotal	Browse
cdn1.adoberesources.net	0%	Virustotal	Browse
dualstack.pinterest.map.fastly.net	0%	Virustotal	Browse
storage.glancecdn.net	0%	Virustotal	Browse
www.glancecdn.net	0%	Virustotal	Browse
5093.global.siteimproveanalytics.io	0%	Virustotal	Browse
mpsnare.iesnare.com	0%	Virustotal	Browse
static.cres-aws.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe
https://www.myvisacardportal.com/usbank/en_us/altitude"	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	0%	Avira URL Cloud	safe
https://562-ct.c3tag.com	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com	0%	Avira URL Cloud	safe
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	0%	Avira URL Cloud	safe
https://mid.rkdms.com/bct?pid=8bc436aa-e0fc-4baa-9c9a-06fbeca87826&puid=21449694286267189811878938773483760058&_ct=img	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false	0%	Avira URL Cloud	safe
https://562-ct.c3tag.com/c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800	0%	Avira URL Cloud	safe
https://www.myvisacardportal.com/usbank/en_us/altitude"	0%	Virustotal		Browse
https://562-ct.c3tag.com	0%	Virustotal		Browse
https://mpsnare.iesnare.com	0%	Virustotal		Browse
https://mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
res.cisco.com	18.233.198.142	true	false		high
dart.l.doubleclick.net	172.217.4.70	true	false		high
cdn.quantummetric.com	104.22.52.252	true	false		high
col.eum-appdynamics.com	54.218.88.117	true	false	0%, Virustotal, Browse	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.135.121	true	false		high
adservice.google.com	142.250.191.226	true	false		high
d2qj7djftjbj85.cloudfront.net	18.160.225.62	true	false		high
platform.twitter.map.fastly.net	146.75.80.157	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	107.20.120.138	true	false		high
adobetarget.data.adobedc.net	63.140.39.35	true	false	0%, Virustotal, Browse	unknown
insight.adsrvr.org	15.197.193.217	true	false		high
scontent.xx.fbcdn.net	157.240.254.7	true	false		high
idsync.rlcdn.com	35.244.154.8	true	false		high
t.co	104.244.42.197	true	false		high
ingest.quantummetric.com	34.132.213.129	true	false		high
562-ct.c3tag.com	192.65.229.36	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false		high
img.c3tag.com	66.180.64.123	true	false	0%, Virustotal, Browse	unknown
glancecdn.net	18.235.19.155	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.190.98	true	false		high
www.google.com	172.217.4.68	true	false		high
demdex.net.ssl.sc.omtrdc.net	63.140.39.130	true	false	0%, Virustotal, Browse	unknown
gcp.api.sc-gw.com	35.190.43.134	true	false	0%, Virustotal, Browse	unknown
ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com	3.235.201.212	true	false		high
match.adsrvr.org	3.33.220.150	true	false		high
usbank-sync.quantummetric.com	34.135.80.45	true	false		high
siteimproveanalytics.com	104.21.50.150	true	false	0%, Virustotal, Browse	unknown
glance.net	52.5.162.211	true	false		high
s.twitter.com	104.244.42.131	true	false		high
ad.doubleclick.net	172.217.4.38	true	false		high
sc-static.net	3.160.6.245	true	false	0%, Virustotal, Browse	unknown
d2ctznuk6ro1vp.cloudfront.net	3.162.163.99	true	false		high
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	0%, Virustotal, Browse	unknown
cdn.appdynamics.com	52.84.125.87	true	false		high
di.rlcdn.com	34.49.212.111	true	false		high
googleads.g.doubleclick.net	142.250.190.98	true	false		high
dualstack.pinterest.map.fastly.net	146.75.80.84	true	false	0%, Virustotal, Browse	unknown
wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com	44.238.162.224	true	false		high
usbank.com.ssl.d2.sc.omtrdc.net	63.140.39.248	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.190.66	true	false		high
451-rqs-232.mktoresp.com	192.28.147.68	true	false	0%, Virustotal, Browse	unknown
fls.doubleclick.net	142.250.191.166	true	false		high
d10lse0r9n7r80.cloudfront.net	99.84.160.111	true	false		high
dzfq4ouujrxm8.cloudfront.net	52.84.52.50	true	false		high
mid.rkdms.com	3.227.199.28	true	false	0%, Virustotal, Browse	unknown
static.ads-twitter.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
usbank.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
tr.snapchat.com	unknown	unknown	false		high
pdx-col.eum-appdynamics.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
siteintercept.qualtrics.com	unknown	unknown	false		high
onlinebanking.usbank.com	unknown	unknown	false		high
www.glancecdn.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
5093.global.siteimproveanalytics.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
adobedc.demdex.net	unknown	unknown	false		high
js.adsrvr.org	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
munchkin.marketo.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
usbank.demdex.net	unknown	unknown	false		high
storage.glancecdn.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn1.adoberesources.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
tags.tiqcdn.com	unknown	unknown	false		high
www.usbank.com	unknown	unknown	false		high
6219543.fls.doubleclick.net	unknown	unknown	false		high
acxmetrics.usbank.com	unknown	unknown	false		high
smetrics.usbank.com	unknown	unknown	false		high
schema.milestoneinternet.com	unknown	unknown	false		high
ct.pinterest.com	unknown	unknown	false		high
d.agkn.com	unknown	unknown	false		high
static.cres-aws.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
dpm.demdex.net	unknown	unknown	false		high
www.facebook.net	unknown	unknown	false		high
zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com	unknown	unknown	false		high
analytics.twitter.com	unknown	unknown	false		high
s.pinimg.com	unknown	unknown	false		high
www.glance.net	unknown	unknown	false		high
mpsnare.iesnare.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
content.usbank.com	unknown	unknown	false		high
api.usbank.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316908709&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2682&N=13&z=1	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en	false		high
about:blank	false	Avira URL Cloud: safe	low
https://tags.tiqcdn.com/utag/usbank/dotcom-homepage/prod/utag.100.js?utv=ut4.46.202304182242	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=*;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html	false		high
https://tr.snapchat.com/cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316888262&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=33721&N=172&P=13&z=1	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316884006&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2515&N=9&z=1	false		high
https://cdn.appdynamics.com/adrum/adrum-latest.js	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://analytics.twitter.com/i/adsct?p_user_id=21449694286267189811878938773483760058&p_id=38594	false		high
https://6219543.fls.doubleclick.net/activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?	false		high
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg=&google_tc=	false		high
https://dpm.demdex.net/ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en	false		high
https://di.rlcdn.com/api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1	false		high
https://smetrics.usbank.com/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=675616D751E567410A490D4C%40AdobeOrg&mid=21375164595563744931909202357212933986&ts=1715316799067	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/v3/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1715316805506	false		high
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent=	false		high
https://smetrics.usbank.com/b/ss/usbankcom/10/JS-2.18.0/s5991795903118?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F4%2F2024%206%3A53%3A26%205%20-120&d.&nsid=0&jsonv=1&.d&sdid=40DCE03561CEE31B-618DC03130DF2483&mid=21375164595563744931909202357212933986&aamlh=7&ce=UTF-8&pageName=Personal%20Home%20Page&g=https%3A%2F%2Fwww.usbank.com%2Findex.html&cc=USD&c53=personal%20home%20page%3Alogin%20widget%20error&pe=lnk_o&pev2=personal%20home%20page%3Alogin%20widget%20error&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=675616D751E567410A490D4C%40AdobeOrg&lrt=1782&AQE=1	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30	false		high
https://usbank.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.usbank.com	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316819110&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=1333&N=2&z=1	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316904254&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2657&N=12&z=1	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316939412&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2747&N=16&z=1	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1	false		high
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	false	Avira URL Cloud: safe	unknown
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828016&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30623&N=136&P=4&z=1	false		high
https://mid.rkdms.com/bct?pid=8bc436aa-e0fc-4baa-9c9a-06fbeca87826&puid=21449694286267189811878938773483760058&_ct=img	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=23FC2B2FA67E6B5B3B573F54A7F86A66	false		high
https://mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usbank.com/index.html	false		high
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg=	false		high
https://tags.tiqcdn.com/utag/usbank/dotcom-homepage/prod/utag.105.js?utv=ut4.46.202403072057	false		high
https://ingest.quantummetric.com/horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316814115&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=756&N=1&z=1	false		high
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	false		high
https://562-ct.c3tag.com/c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800	false	Avira URL Cloud: safe	unknown
https://sc-static.net/scevent.min.js	false	URL Reputation: safe	unknown
https://res.cisco.com/websafe/images/loginbg.gif	false		high
https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomMjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTgQABoNCMLQ9rEGEgUI6AcQAEIASgA	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://it-api.usbank.com/authentication/customer-auth/app-config/v1/config	chromecache_204.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9729-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://562-ct.c3tag.com	chromecache_269.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5335-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6002-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/?channel=mobileweb	chromecache_251.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9866-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/152-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/424-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_268.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9245-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3454-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9798-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5820-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://mpsnare.iesnare.com	chromecache_228.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usbank.com/home-loans/home-equity.html	chromecache_263.2.dr, chromecache_327.2.dr	false		high
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	chromecache_257.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/812-87380e51541a822e4552.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://www.finra.org/	chromecache_251.2.dr	false		high
https://applications.usbank.com/pdap	chromecache_296.2.dr	false		high
https://lineto.com/licensinghttps://lineto.com/licensingU.S.	chromecache_300.2.dr	false		high
https://www.usbank.com/locations/search/	chromecache_251.2.dr	false		high
https://res.cisco.com:443	securedoc_20240509T112530.html	false		high
https://res.cisco.com:443/keyserver/keyserver	securedoc_20240509T112530.html	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/653-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://requirejs.org/docs/errors.html#	chromecache_294.2.dr	false		high
https://applications.usbank.com/oad	chromecache_296.2.dr	false		high
https://res.cisco.com:443/keyserver/Logout	securedoc_20240509T112530.html	false		high
https://usbank.com/investment-services/access-accounts.html	chromecache_290.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/1763-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/main-4f9a982f8b35c51616b3.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://www.usbank.com/customer-service/global-transition-solutions/welcome.html	chromecache_296.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/209-bdeb3f8784a8d72824a2.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://onlinebanking.usbank.com/Auth/Login	chromecache_251.2.dr	false		high
https://www.myvisacardportal.com/usbank/en_us/altitude"	chromecache_251.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_245.2.dr	false		high
https://www.usbank.com/index.html/#Organization	chromecache_327.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4268-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://api.usbank.com/authentication/customer-auth/app-config/v1/config	chromecache_204.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/remoteEntry.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://ct.pinterest.com/stats/	chromecache_334.2.dr, chromecache_316.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/3878-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://www.usbank.com/home-loans/mortgage.html	chromecache_263.2.dr, chromecache_327.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_265.2.dr, chromecache_249.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/635-5500c6c47dfa1c4299da.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8290-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/usb-shield-bca5e814bbbb4645b709.j	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/686-0ecdeed908fd59a80849.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://smetrics.usbank.com/b/ss/usbankcom	chromecache_204.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/2135-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9504-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/249-f39f9e967bbfec6dd99b.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://onlinebanking.usbank.com/auth/login/wmf/latest/50-adaa4f60dc5972de4b7f.js	chromecache_250.2.dr, chromecache_242.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7623-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://onlinebanking.usbank.com/digital/servicing/smart-assistant/8655-bca5e814bbbb4645b709.js	chromecache_313.2.dr, chromecache_335.2.dr	false		high
https://www.google.com/pagead/1p-user-list/978114044/?random	chromecache_218.2.dr	false		high
https://www.sipc.org/	chromecache_251.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
18.233.198.142	res.cisco.com	United States	14618	AMAZON-AESUS	false
104.21.50.150	siteimproveanalytics.com	United States	13335	CLOUDFLARENETUS	false
35.226.68.60	unknown	United States	15169	GOOGLEUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
34.70.212.173	unknown	United States	15169	GOOGLEUS	false
107.20.120.138	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.5.162.211	glance.net	United States	14618	AMAZON-AESUS	false
54.218.88.117	col.eum-appdynamics.com	United States	16509	AMAZON-02US	false
3.235.201.212	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.217.2.36	unknown	United States	15169	GOOGLEUS	false
63.140.39.35	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
34.29.92.19	unknown	United States	2686	ATGS-MMD-ASUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
34.132.213.129	ingest.quantummetric.com	United States	2686	ATGS-MMD-ASUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
63.140.38.112	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
192.65.229.43	unknown	United States	62961	BISNET1US	false
142.250.191.226	adservice.google.com	United States	15169	GOOGLEUS	false
142.250.190.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.122.199.206	unknown	United States	15169	GOOGLEUS	false
104.244.42.131	s.twitter.com	United States	13414	TWITTERUS	false
18.210.94.219	unknown	United States	14618	AMAZON-AESUS	false
18.172.135.121	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
23.21.63.192	unknown	United States	14618	AMAZON-AESUS	false
44.238.162.224	wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.254.7	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
54.145.109.191	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.84.125.87	cdn.appdynamics.com	United States	16509	AMAZON-02US	false
63.140.39.224	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
172.217.4.68	www.google.com	United States	15169	GOOGLEUS	false
192.65.229.36	562-ct.c3tag.com	United States	62961	BISNET1US	false
104.22.52.252	cdn.quantummetric.com	United States	13335	CLOUDFLARENETUS	false
151.101.192.84	unknown	United States	54113	FASTLYUS	false
172.217.4.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.64.84	unknown	United States	54113	FASTLYUS	false
146.75.80.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false
142.250.190.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
63.140.39.248	usbank.com.ssl.d2.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
52.84.52.50	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
52.26.29.98	unknown	United States	16509	AMAZON-02US	false
192.28.147.68	451-rqs-232.mktoresp.com	United States	53580	MARKETOUS	false
63.140.39.130	demdex.net.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.160.225.62	d2qj7djftjbj85.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.217.4.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
18.235.19.155	glancecdn.net	United States	14618	AMAZON-AESUS	false
99.84.160.111	d10lse0r9n7r80.cloudfront.net	United States	16509	AMAZON-02US	false
34.135.80.45	usbank-sync.quantummetric.com	United States	2686	ATGS-MMD-ASUS	false
3.162.163.99	d2ctznuk6ro1vp.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.190.36	unknown	United States	15169	GOOGLEUS	false
146.75.80.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
34.49.212.111	di.rlcdn.com	United States	2686	ATGS-MMD-ASUS	false
44.221.183.201	unknown	United States	14618	AMAZON-AESUS	false
104.244.42.197	t.co	United States	13414	TWITTERUS	false
142.250.190.34	unknown	United States	15169	GOOGLEUS	false
3.162.163.110	unknown	United States	16509	AMAZON-02US	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
3.160.6.245	sc-static.net	United States	16509	AMAZON-02US	false
104.244.42.5	unknown	United States	13414	TWITTERUS	false
18.160.225.113	unknown	United States	3	MIT-GATEWAYSUS	false
3.227.199.28	mid.rkdms.com	United States	14618	AMAZON-AESUS	false
142.250.191.166	fls.doubleclick.net	United States	15169	GOOGLEUS	false
52.200.169.160	unknown	United States	14618	AMAZON-AESUS	false
66.180.64.123	img.c3tag.com	United States	62961	BISNET1US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1439310
Start date and time:	2024-05-10 06:51:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	securedoc_20240509T112530.html
Detection:	MAL
Classification:	mal48.phis.winHTML@33/262@205/69
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html Browse: http://www.usbank.com/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.190.67, 142.250.191.110, 74.125.129.84, 142.250.191.138, 34.104.35.123, 142.250.191.170, 142.250.191.106, 172.217.4.42, 142.250.191.202, 142.250.191.234, 72.21.81.240, 192.229.211.108, 23.10.202.209, 23.66.69.69, 104.18.40.250, 172.64.147.6, 142.250.190.136, 23.221.245.57, 104.119.189.146, 104.119.189.169, 104.78.233.68, 13.107.21.237, 204.79.197.237, 23.12.20.111, 104.17.208.240, 104.17.209.240, 23.66.85.49, 172.217.2.35, 23.43.12.65, 23.66.127.132, 23.66.127.156, 23.66.127.165, 23.66.127.168, 172.217.0.170, 172.217.5.10, 142.250.191.238
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, schema.milestoneinternet.com.cdn.cloudflare.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, wildcard.marketo.net.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, www.usbank.com.edgekey.net, 2-01-37d2-0018.cdx.cedexis.net, e3644.a.akamaiedge.net, bat.bing.com, update.googleapis.com, onlinebanking.usbank.com.edgekey.net, aut1.edgekey.net, cdn1.adoberesources.net.edgekey.net, optimizationguide-pa.googleapis.com, api.usbank.com.edgekey.net, e35667.a.akamaiedge.net, clients1.google.com, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, e91797.f.akamaiedge.net, c-bing-com.dual-a-0034.a-msedge.net, e14832.dsca.akamaiedge.net, ctldl.windowsupdate.com, content.usbank.com.edgekey.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e7808.dscg.akamaiedge.net, c.bing.com, prodlb.siteinterc
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.0.84	http://www.kidsocialstudies.com/3rd-grade-worksheets.html	Get hash	malicious	Unknown	Browse	widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Fwww.kidsocialstudies.com%2Findex.html&callback=window._ate.cbs.rcb_4pj90
3.33.220.150	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse
	https://flow.page/afalcondocs	Get hash	malicious	Unknown	Browse
	https://www.checktls.com	Get hash	malicious	Unknown	Browse
	https://flow.page/clippsdocs	Get hash	malicious	Unknown	Browse
	https://flow.page/clipasdf	Get hash	malicious	Unknown	Browse
	https://global-lottery.weebly.com/directors.html	Get hash	malicious	Unknown	Browse
	https://xdywna.com/	Get hash	malicious	Unknown	Browse
	https://zieonlineshop.com/	Get hash	malicious	Unknown	Browse
	https://simontatum.com/	Get hash	malicious	Unknown	Browse
	https://pick-2-light.com/	Get hash	malicious	Unknown	Browse
63.140.39.35	https://pick-2-light.com/	Get hash	malicious	Unknown	Browse
	Review_and_sign_today CFA_Agreements0001.14.pdf..msg	Get hash	malicious	HTMLPhisher	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41	Get hash	malicious	Unknown	Browse
	KxgGGaiW3E.exe	Get hash	malicious	Quasar	Browse
	https://librospy.com/	Get hash	malicious	Unknown	Browse
	https://jf3su0nc82kocw61.blob.core.windows.net/jf3su0nc82kocw61/1.html?4WNYDE6475pnqu82jukhgadbqc940IQTGHHCQEULWJIX13036XJPP12205G13#13/82-6475/940-13036-12205	Get hash	malicious	HTMLPhisher	Browse
	https://717d3e7431f2e7c7bb7dd22f0013e4b26da132b85882b1408b2497004a.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:af39b5a2-dad8-480b-b876-bffaa9d66a9b	Get hash	malicious	HTMLPhisher	Browse
	CrucialUKScan(1).exe	Get hash	malicious	Unknown	Browse
	https://login.service-mediobanca.com/?rid=5spGrj3	Get hash	malicious	Unknown	Browse
34.29.92.19	https://717d3e7431f2e7c7bb7dd22f0013e4b26da132b85882b1408b2497004a.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
34.29.92.19	https://estaleiroarrozal.com.br/wp-admin/form/New%20ATT/bill.charged.html	Get hash	malicious	Unknown	Browse
35.71.131.137	https://flow.page/clippsdocs	Get hash	malicious	Unknown	Browse
	https://flow.page/clipasdf	Get hash	malicious	Unknown	Browse
	https://flow.page/paliodocs	Get hash	malicious	Unknown	Browse
	https://shorturl.at/gjty7	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/17YMCXDA4jsPyAwJs6MDCV?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://windowsprogramdangererrorfoundcritical.kesug.com/?i=3	Get hash	malicious	Unknown	Browse
	http://www.paviarealestate.com	Get hash	malicious	HTMLPhisher	Browse
	https://xdywna.com/	Get hash	malicious	Unknown	Browse
	https://mandrillapp.com/track/click/30551860/topbusiness.ro?p=eyJzIjoiWmkwVnFVYXdRYlFmYnVnd3Y3OWdtR2h1anpvIiwidiI6MSwicCI6IntcInVcIjozMDU1MTg2MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL3RvcGJ1c2luZXNzLnJvXFxcL3dwLWFkbWluXFxcL2pzXFxcL3dpZGdldHNcXFwvbWVkaWFcXFwvP2FjdGlvbj12aWV3JjE0MD1jMk52ZEhRdVpHRm9ibXRsUUd4allYUjBaWEowYjI0dVkyOXQmcjE9MTQwJnIyPTE0MCZub2lzZT00Q0hBUlwiLFwiaWRcIjpcImVjMTY1MjE1OWRhYTRjZTA5ZGZhODE5NTEzNzU2Mjg1XCIsXCJ1cmxfaWRzXCI6W1wiOGMyZTc5NjYyNTU5N2FjNDFlODZkYmM4MWMwMjI2MTFjZjYyYTIzMlwiXX0ifQ	Get hash	malicious	HTMLPhisher	Browse
34.132.213.129	https://f91121849f3ccdefb0248c58ce8950cd858718b2ee03ebc2e3c3b6a251.pages.dev/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
dg2iu7dxxehbo.cloudfront.net	Sean Eichler.htm	Get hash	malicious	Unknown	Browse	13.224.0.51
	https://global-lottery.weebly.com/directors.html	Get hash	malicious	Unknown	Browse	108.139.33.128
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	18.173.140.104
	http://www.paviarealestate.com	Get hash	malicious	HTMLPhisher	Browse	108.139.33.128
	Sean Eichler.htm	Get hash	malicious	Unknown	Browse	108.139.33.128
	https://uaqtu.com	Get hash	malicious	Unknown	Browse	18.172.135.121
	HQuxVxuLV.ps1	Get hash	malicious	NetSupport RAT	Browse	18.172.135.121
	https://in.xero.com/VmFUGq2DR0w0RroiyvWAWXw083jyp1tZyI3WNgUe?utm_source=invoiceEmailViewInvoiceButtonSecondary&utm_campaign=invoicesEmailStandardV2	Get hash	malicious	Unknown	Browse	18.154.142.121
	_file____C__Users_hp_Downloads_C__Users_moodyt_AppData_Local_Temp_2_RemittanceAdvice17-Apr-2024.html	Get hash	malicious	Unknown	Browse	13.32.206.122
	Remittance. #U0440df.html	Get hash	malicious	HTMLPhisher	Browse	13.32.206.122
res.cisco.com	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20240212T082824.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20240207T142952.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	bankozk_securedoc_20231214T140252.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	http://res.cisco.com/envelopeopener/pf/ZGJAUG9zdFhuZXQgVG9rZW46MTAwMDE!/fhj.kysPBL1vCr-Ap0cgAxtf-4oAnvhBQdGWEbLmIsfjOkRt1iRs6AjBPp6q3ex6OVzfkENWZJb6NYNiwEi.uZSk84ZMSx7qDA!!/	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20231101T114817.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20231030T033913.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	https://tinyurl.com/mu4vnty3	Get hash	malicious	HTMLPhisher	Browse	184.94.241.74
col.eum-appdynamics.com	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	54.148.65.130
	https://survey.medallia.eu/CSEU?cs_unit=fedex_cs_NTU0Nzg5OQ&lang=en&t=1	Get hash	malicious	Unknown	Browse	52.34.218.207
	https://lunarcowry.com/	Get hash	malicious	Unknown	Browse	35.160.0.108
	https://www.business.hsbc.com.hk/en-gb/products/hsbc-business-express-mobile-app	Get hash	malicious	Unknown	Browse	35.162.33.152
cdn.quantummetric.com	https://orange-cloud-2260.on.fleek.co/currently.html	Get hash	malicious	HTMLPhisher	Browse	104.22.52.252
	https://717d3e7431f2e7c7bb7dd22f0013e4b26da132b85882b1408b2497004a.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.22.53.252
	https://f91121849f3ccdefb0248c58ce8950cd858718b2ee03ebc2e3c3b6a251.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.22.53.252
	https://estaleiroarrozal.com.br/wp-admin/form/New%20ATT/bill.charged.html	Get hash	malicious	Unknown	Browse	172.67.20.158
	https://xsetlp3sattty7yhmls.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	172.67.20.158
	https://still-firefly-5807.on.fleek.co/	Get hash	malicious	Unknown	Browse	172.67.20.158
	https://r20.rs6.net/tn.jsp?f=001EZpgOm6BBWLOSzaUpjEpj7pKTXvFuLi419V1wPUu-h8LmUypza5lgWI390GTg6F4cIxuQ9Ol6gruXuWmeA5eesgPMCrWpSrWmXkyPmiGqOPtQvHgPfnHfXo_Gqj1r-7dZ6S-GnoghBE=&c=&ch==&__=wp/acme-challenge/yjfyjjffdddtd/gghjhfggd/#ZW5mb3JjZUBhY2Nlc3MtYm9hcmQuZ292	Get hash	malicious	Unknown	Browse	104.22.52.252
	https://mtb-repo.pages.dev/	Get hash	malicious	Unknown	Browse	172.67.20.158
	https://r20.rs6.net/tn.jsp?f=001woRi3_IBLR7xd4CFc-rCCtzgEtLmDlq2Q8hq6tydFaZCGYucU1Mq3x8KigHJI8u01XqzggZcT4VV-w-OJew3ypBUF8m-_-RoHacY1xSzIxwsKuqQfkemJzd96LH6ilc8voDdpL4kvBelRGBxIbj3cQ==&c=&ch=&__=cnRob21zb25AYWtpbm5ncm91cC5jb20=	Get hash	malicious	Unknown	Browse	104.22.53.252
	https://65dca88c3cb88e0721d4594e--visionary-daifuku-00a3a7.netlify.app/	Get hash	malicious	Unknown	Browse	172.67.20.158

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	0N0OYq2TLb.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	172.67.182.192
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	104.26.3.30
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse	104.21.93.126
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	172.67.75.166
	https://apphu7bh2.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-866-993-2498	Get hash	malicious	TechSupportScam	Browse	172.67.208.186
	SecuriteInfo.com.Riskware.Yandex.12786.6213.exe	Get hash	malicious	PrivateLoader	Browse	1.1.1.1
	SecuriteInfo.com.Riskware.Yandex.5580.5774.exe	Get hash	malicious	PrivateLoader	Browse	1.1.1.1
	SecuriteInfo.com.Riskware.Yandex.12786.6213.exe	Get hash	malicious	PrivateLoader	Browse	1.1.1.1
	SecuriteInfo.com.Riskware.Yandex.5580.5774.exe	Get hash	malicious	PrivateLoader	Browse	1.1.1.1
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	104.18.24.173
AMAZON-AESUS	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	52.20.167.129
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	100.25.124.23
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	54.144.73.197
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	23.22.155.157
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	3.222.145.108
	http://cytechltd.net/blueridgesupport	Get hash	malicious	Unknown	Browse	34.199.8.144
	https://flow.page/bucksdocs	Get hash	malicious	Unknown	Browse	3.233.152.248
	https://docu578.sharefile.com/public/share/web-aeb1a3de99b24ec0	Get hash	malicious	HTMLPhisher	Browse	52.45.86.192
	Oferta 10935 planta GNL GRANDES VINOS Y VI#U00d1EDOS.eml	Get hash	malicious	Unknown	Browse	34.231.53.248
	Oferta 10935.eml	Get hash	malicious	Unknown	Browse	18.212.47.155
AMAZON-AESUS	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	52.20.167.129
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	100.25.124.23
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	54.144.73.197
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	23.22.155.157
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	3.222.145.108
	http://cytechltd.net/blueridgesupport	Get hash	malicious	Unknown	Browse	34.199.8.144
	https://flow.page/bucksdocs	Get hash	malicious	Unknown	Browse	3.233.152.248
	https://docu578.sharefile.com/public/share/web-aeb1a3de99b24ec0	Get hash	malicious	HTMLPhisher	Browse	52.45.86.192
	Oferta 10935 planta GNL GRANDES VINOS Y VI#U00d1EDOS.eml	Get hash	malicious	Unknown	Browse	34.231.53.248
	Oferta 10935.eml	Get hash	malicious	Unknown	Browse	18.212.47.155
FASTLYUS	OR20240905662201.js	Get hash	malicious	STRRAT	Browse	199.232.192.209
	OR20240905662201.js	Get hash	malicious	STRRAT	Browse	199.232.196.209
	OR20240905662201.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	OR20240905662201.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	151.101.193.192
	https://uumm6-secondary.z13.web.core.windows.net/werrx01USAHTML/?bcda=1-855-399-1004	Get hash	malicious	TechSupportScam	Browse	151.101.194.137
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	151.101.193.138
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fcwconfeccoes.com.br%25252Fimages%25252Fportfolio%25252F893746354278945372465289049736275368923453%25252F987654r6849878675436834945%25252F589765345783909324849434w336452%252FLxSB%252FVDS1AQ%252FAQ%252Fcd4f3188-392c-428c-ac63-bc4ae3b44e15%252F1%252FxVxcH6z_PJ%2FLxSB%2FVDS1AQ%2FAQ%2F2a49c7ab-aefe-4029-ba47-cccb14ac5016%2F1%2Fp-Kk1qAP6N/LxSB/VTS1AQ/AQ/fc5370ab-5cbb-4beb-a06d-5c10ecbd947e/1/m6N65vctnP	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%253A%252F%252Flaunch%252F%253futm_content%253dUL_hero%2526utm_source%253dsf%2526utm_medium%253dcrm%2526utm_campaign%253dnl%2526utm_term%253dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%2526mktportal%253dNL&af_web_dp=https://royalgourmet.com.br/logs/8656/new/new/bgarcia@sedbud.com##	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://github.com/Alex313031/Thorium-Win/releases/download/M123.0.6312.133/thorium_AVX2_mini_installer.exe	Get hash	malicious	Havoc	Browse	185.199.110.133
AMAZON-AESUS	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	52.20.167.129
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	100.25.124.23
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	54.144.73.197
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	23.22.155.157
	Benefits_Policy.docx	Get hash	malicious	Unknown	Browse	3.222.145.108
	http://cytechltd.net/blueridgesupport	Get hash	malicious	Unknown	Browse	34.199.8.144
	https://flow.page/bucksdocs	Get hash	malicious	Unknown	Browse	3.233.152.248
	https://docu578.sharefile.com/public/share/web-aeb1a3de99b24ec0	Get hash	malicious	HTMLPhisher	Browse	52.45.86.192
	Oferta 10935 planta GNL GRANDES VINOS Y VI#U00d1EDOS.eml	Get hash	malicious	Unknown	Browse	34.231.53.248
	Oferta 10935.eml	Get hash	malicious	Unknown	Browse	18.212.47.155

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://www.xtransfer.cn/unsubscribe?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://smbjxijw.com/login.php	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://smbjxbbf.com/login.php	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://tron2qu8g.z13.web.core.windows.net/Apple0s01Ersys44/index.html	Get hash	malicious	TechSupportScam	Browse	23.1.237.91
	https://uumm6-secondary.z13.web.core.windows.net/werrx01USAHTML/?bcda=1-855-399-1004	Get hash	malicious	TechSupportScam	Browse	23.1.237.91
	c6d56ca.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	SecuriteInfo.com.Trojan-PSW.Agent.7485.24815.exe	Get hash	malicious	AsyncRAT, VenomRAT	Browse	23.1.237.91
	https://jongordon.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.1980media.com/caa/	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://api.dyh8ken8pc.com	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	40.127.169.103 23.221.246.93
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse	40.127.169.103 23.221.246.93
	https://www.xtransfer.cn/unsubscribe?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse	40.127.169.103 23.221.246.93
	https://xtrfr.com/t/1/m3hVkr?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse	40.127.169.103 23.221.246.93
	https://apphu7bh2.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-866-993-2498	Get hash	malicious	TechSupportScam	Browse	40.127.169.103 23.221.246.93
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	40.127.169.103 23.221.246.93
	https://tron2qu8g.z13.web.core.windows.net/Apple0s01Ersys44/index.html	Get hash	malicious	TechSupportScam	Browse	40.127.169.103 23.221.246.93
	https://uumm6-secondary.z13.web.core.windows.net/werrx01USAHTML/?bcda=1-855-399-1004	Get hash	malicious	TechSupportScam	Browse	40.127.169.103 23.221.246.93
	https://tronkf5r1.z13.web.core.windows.net/	Get hash	malicious	TechSupportScam	Browse	40.127.169.103 23.221.246.93
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fcwconfeccoes.com.br%25252Fimages%25252Fportfolio%25252F893746354278945372465289049736275368923453%25252F987654r6849878675436834945%25252F589765345783909324849434w336452%252FLxSB%252FVDS1AQ%252FAQ%252Fcd4f3188-392c-428c-ac63-bc4ae3b44e15%252F1%252FxVxcH6z_PJ%2FLxSB%2FVDS1AQ%2FAQ%2F2a49c7ab-aefe-4029-ba47-cccb14ac5016%2F1%2Fp-Kk1qAP6N/LxSB/VTS1AQ/AQ/fc5370ab-5cbb-4beb-a06d-5c10ecbd947e/1/m6N65vctnP	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 23.221.246.93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 10 03:52:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984719077980698
Encrypted:	false
SSDEEP:	48:8JdBTpd+H1idAKZdA19ehwiZUklqeh9y+3:8dLkey
MD5:	C26E833103AB74775C6E7BF3B496F89F
SHA1:	B3C20E6C4D6BC190E8341F18BB75AA84E7D02D0D
SHA-256:	37F6C39686207DB2B7DAB3F0DDFA0BA19CA4F410AC77356518119B7509C629E9
SHA-512:	0AF90A84BD0DD37FD424676D5834D04AC1C02FD36A0DE0BCDD71DA00EE8B251B273C408D0701D8ED0122F6CAD9D26079AB81B3C8E72C3786D6E1873A247DA4C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......f....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.&...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 10 03:52:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9997252930923795
Encrypted:	false
SSDEEP:	48:8j2dBTpd+H1idAKZdA1weh/iZUkAQkqehOy+2:8YLW9Qry
MD5:	DFC26E1631877E7B795DF4285CA4F045
SHA1:	45934FDBE31B0B37F5132F9C78E06314C18A5CEC
SHA-256:	54E4B09DED4C9E5072D5DDF88B432FA3DB08C97A0C72931C4388D27836747B0D
SHA-512:	EE21995D6C1811531B7CC0B7C0BD51B74821313D13F39C60DBB879827855EFE8566EA965F0691D7A3C001777EBDF8CA3F04822C671960B7584705FDF3F14FD25
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Y....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.&...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007023330726574
Encrypted:	false
SSDEEP:	48:8x2dBTpdsH1idAKZdA14tseh7sFiZUkmgqeh7ssy+BX:8xcL8nKy
MD5:	93246538727B4826AA3A653F9BEF23DD
SHA1:	FD246BF1C168DCF4408043E575D03E11DE7B91C3
SHA-256:	4E561DE2E4386A72CD2143C18415CAE74D0ED9DB73DC8886D5FD7FA079AEE6DF
SHA-512:	17916E18890804351BE2E32C8162FD92ACBD851601D906D8D3AD8BAE0175FF4DBCD4485E17A1412FCB3D19223C9A8E1AFFAE90BE2167A23D5274F8294CCCFB2C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 10 03:52:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9973040585677797
Encrypted:	false
SSDEEP:	48:8PdBTpd+H1idAKZdA1vehDiZUkwqehiy+R:8/L9ky
MD5:	D238D6468C52A9A9DED691AB9FEBAC3A
SHA1:	391008E981557C3BDEB5A925A9049DAD547A0785
SHA-256:	136F6A6BEEBB0BBE27ADA9DDFBE18B7BEA912195A955C20756D4DAA6346F37D0
SHA-512:	D41090C5F5149B3B975B514C8525324F51C7FF9864CE80AB9EC8794C94036C50558BFDA558F5E7DAABD0BD17453EAD0D405601CDC843D4A80E556773F795AEFA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=.T....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.&...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 10 03:52:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9879663439247306
Encrypted:	false
SSDEEP:	48:8ldBTpd+H1idAKZdA1hehBiZUk1W1qehYy+C:85Ld94y
MD5:	29807119F3ECC39B5F2F01564BC8C277
SHA1:	BCB3AF36217FC052C04CE2518D70C635CB72EB49
SHA-256:	EBC89830B76DEC8829AAF554AA54EFCF31BE8FF9E101E600C381B7C10223F7DC
SHA-512:	D5705ECCA4488B1E77954DA7BF1D7412B00CDE71095C467423C5443DB420BA5F7773BA45E8CABDAFEFB0839D16AC08DA434666FFFE5E27C575F5528CBDFA3C83
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\|.^....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.&...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 10 03:52:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.995552887320944
Encrypted:	false
SSDEEP:	48:8KdBTpd+H1idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbKy+yT+:8wLhT/TbxWOvTbKy7T
MD5:	86D7252E0D92378C5FF3D9FD86133076
SHA1:	4C39A498F30C64A4A2D67423574E4E26C38E1FE9
SHA-256:	D202D46C5730ED9CC44291885BC38F4621962049F38869A6581AB0C00353D8C3
SHA-512:	DA507BDE698DECADFE7365F70FCD1D0F15DF3C61C51D1208412427C558B3AB4FC332E32128E3E61AF59E473BE7EB91030B457D1EB1EE5AA5303E5444EA23BA56
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....p/L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.&....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.&....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.&....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.&..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.&...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............87L.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	125526
Entropy (8bit):	5.0618980601159205
Encrypted:	false
SSDEEP:	1536:jfy0/DEC/9Je2j2L292cghoO/BEKLLnMmbCQd7zWiRcZMLcv0b4zZxMOXObVHnd5:9D1Je2j2L292cgRBPvMm2QpzWiRcvA
MD5:	1444470212C91839F71D8F970716C08E
SHA1:	221878F028DFAECEA3C2C51E8EA8037BD6A29FE8
SHA-256:	1A5395EF53168235A0738B5133B5EA056B6982627CB95BCA76C74EAE87586FCD
SHA-512:	F90ABF0615AFF1FED1735EACA00EF0B30832DD36F15316F5B06E15C7749C92597BF1536C48449B237B52A10DFAD13B9B76CA7F349D5271436B0709587691C896
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://static.cres-aws.com/postx.css
Preview:	./* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");. }. . @font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");. }. . @font-face {

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	5.012306171970382
Encrypted:	false
SSDEEP:	6:YmQ3R/E76v6npXAzbovNoAzfW/LK4JYCP38:YmQhlv6+0qATW/5Jls
MD5:	04C3F2AEA574307173C8812E2B4CADC3
SHA1:	D09F4FA6B1D6DD76B75CF9BA29604FE30AA49C24
SHA-256:	52CB4201CD4BDA9CA3338C1069F450009EB6BBC976B190C15DE3F001BB07218B
SHA-512:	8F5D167B27F1043387C42801EE18BA6D9C801F78B999CE518243DEF13975505127EE273D6089CA234DEDD373EDCB1A74590AB9709B1031100548C0CC8548D218
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_bNJ69FZUut5fiwB&Version=1&Q_InterceptID=SI_57GL0UFxoO6mKC9&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"CreativeDefinition":{"BrandID":"usbank","CreativeID":"CR_bNJ69FZUut5fiwB","Revision":"1","Title":"Embedded Link","ZoneID":"ZN_6VxkyqYWaF9f1T7","Type":"Link","Options":{"linkText":"Give Feedback"}}}

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (908), with no line terminators
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	5.737071244362969
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzg/PqjCC5zqinzYjnpRnLxR2+YI:YyLVkczEzlYnbuO
MD5:	A17872C9FE68815A6725E90325F9FDF8
SHA1:	9DE46C4ABDE2A6A7119E3C8EC5F0D9198719E8D3
SHA-256:	69EB8AFBCE89174970066CD6E36037878ED2001815ED6D9DC12693FCB1B90097
SHA-512:	907A028EA416FA1715749D5CBFA805271A65324E690DF6C9C54C454529D6FF89BE1AC362FA74D0DF140F41077415260FD4EFA16AECC665C2C09949A8405EEC6B
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8586215969"}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body></html>

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	downloaded
Size (bytes):	121474
Entropy (8bit):	5.4153473023524805
Encrypted:	false
SSDEEP:	1536:bpWCt7IYRQ/+opcOzUgxzPFbeSZp+uapkAvcYFmRfftD/ES8R9t:zt7Ij/+opcOhfapkAvcYFmRfftDMSo
MD5:	D1741FF16B2AAE43560BB01538B77293
SHA1:	D3361857FAC42060EA346D50C706A8E2E0A2C1E1
SHA-256:	7642B27CB76CC34AB04DF9FFD5A84A36297CDDF20E4A3C797BB3264EFB81610B
SHA-512:	D546AC6FB9BA39F2152969BB6909CCFB13F9C90C028FE051E3F1C30F43320375B30371E105464FE7A2C847A467EF8CE3ECC88CBDB44563A0DA4C0C0333AD252A
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum/adrum-latest.js
Preview:	;/* Copyright (c) 2010-2021 Google LLC. http://angular.io/license. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:. The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 375 x 705, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20794
Entropy (8bit):	7.936523155519427
Encrypted:	false
SSDEEP:	384:Q6Rihv2S+tzE/RCr39a1sQfSAagvTs0HZzDG0NavmRBqlwAyC5sHbPkKzmc:nRu2BiRCudIQTf5/G0TDlOkbM2
MD5:	19FEB65D89C09F703CDB7A4AEEE02866
SHA1:	80A44351B88429AC46F2FD48C8485354364F2911
SHA-256:	E95D04F4704BA557873F9A01C0595A5ED3A55EA59865EF5F6CE6384266AA71AB
SHA-512:	5FFE40F2760A9944E29321B7BFB78040C26F852744DD2BBC5DEABC4A7CE8B0676853181ABF1A0600583CD2B3941B3D92B7576CD498F233ED936613578714A1E0
Malicious:	false
Preview:	.PNG........IHDR...w..........e.9....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-06-05T20:57:03.736-05:00". dam:Bitsperpixel="8". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="d7ac8c17c3a7982b4ce842def9987311e9db9df9". dam:size="19769". tiff:ImageLength="705". tiff:ImageWidth="375". dc:format="image/png". dc:modified="2023-06-05T21:01:53.012

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 42380, version 0.0
Category:	downloaded
Size (bytes):	42380
Entropy (8bit):	7.993430285067233
Encrypted:	true
SSDEEP:	768:Vv4s0aCsM6DNsCETPdf+OQr7kr3fYojYvcM6xnxr/s1KXND9:x1CBOGCeWOC7kr3f/jYvcM6xnCKdR
MD5:	6DEBDB366391FBBE088D588D05F7909D
SHA1:	4E9F9DA4594C7AB08C562E55FAB6669D414F5DB7
SHA-256:	F0D0BF9731F51367F0CAFA9B577E7CC77C1532E7C66B27BD51F7C8BB670D05D6
SHA-512:	7839A3E16249C3E05A856E68C51BCD649A03716466434F8556D989ED849AEB746932635A2FD09E1D7D684EB81BFB5F4704A54906BF495329516BDD6CAF68F300
Malicious:	false
URL:	https://content.usbank.com/content/dam/onlinebanking/common/static/fonts/HelveticaNeueLTW04-55Roman.woff2
Preview:	wOF2OTTO...........@...........4...W...$.........../..z....`..z.6.$..d...... [y.q..E........)Z=,"5..........v..?..W.........._..._..M\|..\|.....I..M......C...I&.r....d...j.8.'.$u....!..#i^V...;...X.L%"..u.....,s..3...(.. ...F..hl7...C..81.,.....]H..k....'...J.b.m...............:....q..uD....}.G...k.........D.%$.Y..D@...`H..D1...".(.`BPPp......P...wD..{...s.......f...hF1...d..$.a..T8E....#qaA.!..K.. ."F..R..{w<...Iv..x....$6.H.".I+'....[.....t.9..S...h..........&.g.........Was."(.,9)...\ p...U..N.........._j..Im..$'.0(@..J.9.f.......p@.!.Pr'...L...mz.u^.I...........9.9..D.b..9....O-.D..IEi.........9...Yv.......).+..* .HZ`...H%^@o.....=...../..6;......$.AP..=.a...SK.%y..W.....@......../K./Y...).V..w.....i.M:2L.U.77v..u_j....jE.......X. ,.......><....x)..\.E.Bg....E..]..~.`..5...Q...]J....X...r.....(..)]./R.RHm..SN..]..N..U..wm...b....(..e9.&.}.(.....*~...My.+j,U.P....:.H.k(&..;5..3.{..z...~...!$(.3...~e.-D.G..:A.D..D.6.vi.a..]...R=c..m.....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	34494
Entropy (8bit):	2.7709743289564965
Encrypted:	false
SSDEEP:	96:DHv/f8MIDdwjNhDbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbw6v1PoecI6/al1wv:Dnf8MIDS79HOar7Gp
MD5:	76743AD3DD8A91C7DADD37D3C9256098
SHA1:	BEB969EC3DDFC3381BAEC6504103D81F95468090
SHA-256:	9EFC05A969C9148250C3B3E652DE5C947F12171A20B5A7546EB61FE23CD28522
SHA-512:	7C3686E910F73CF714A83BAF1F940C96AC21A0CC6ACD0CE583E8E64CCFA21D608D642CD0063A64CA8901B6BC5A868934C8A217F23A23691BA15CAA1F012CA517
Malicious:	false
URL:	https://www.usbank.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......@@.... .(B...D..(....... ..... ...................................................2+..+..+..N+...................................+...+..R+..+...+...+...+...+...+..j...................+...+..l+...+...+...+...+...+...+...+...+...+...+....,+...+..h...*...+...+...+...+...+...+...+...+...+...+...+...+...+..+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x869, components 3
Category:	dropped
Size (bytes):	201312
Entropy (8bit):	7.98100421417824
Encrypted:	false
SSDEEP:	6144:8s35ggJqJZxVFyMj77xMnb0B4bENbPGpT2:XgJfFvj77ab0B4QpepK
MD5:	7104CAAC23FDF0AFF3745EE1F0D40C16
SHA1:	1ADDF1D53A2F49CD5C7744B282336150ACB32A8F
SHA-256:	2BBA5842E060ABCC55A25198649FA7E94D4E07D8A07BBAB56F579A02C97010B9
SHA-512:	05F0B547CCA844172A02FEB9614C35167A21264ECF3EF83A8586EF16320992BFF03FD267B85542B77ABC3306AF92E18C0DA0D422504F50CED3B9CFFAB2D04155
Malicious:	false
Preview:	......Exif..II.................Ducky.......(......Adobe.d.....................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;;;;;;;;;......e...."..................................................................................!..1AQa"..q2..B..#...Rb3..r.C$..S.4%..D...cs.....................!1..AQaq..."2..B....R..br#...3CS..............?..A..X,..~.B.....I..\|_..X....%....+7.y.b..`.....?....7.........4..SK....)`(^....l...TPV.....>..k..Zg...^..tU...)$b{...(l....-...'...U....^...V.W...,.Q..V.4../.%.....q.,.._...2[.fWa8.36[..;..s...j2....<.n..q.e.Cp.\.....wA.>..U......n.q.Y....($`C\|.;s.KV..1.n@[.m.m.=......A.9.....2.g.X..P=...6......}.6..j0lj%/,p.:...m[...EN4.S.Q..i.L...].}`Mn..'.{...=..q..>g....\|JX[.8......E...@.@.iP..>..b.n..@.,...43...t.0.y.nAf\|&...).le..zK3.V....a.....)....*.........c..5..3Ooke...........D...Qq.`H...(c......u;......Kq.....^.;.......%U.,......i.>..+.Y ..y..+....

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/ecm-global/clientlibs/clientlib-vendor/jquery.min.dc5e7f18c8d36ac1d3d4753a87c98d0a.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (680)
Category:	downloaded
Size (bytes):	39136
Entropy (8bit):	4.683808161068123
Encrypted:	false
SSDEEP:	384:tl8HdGVSMLPXyeOYwK6KGErD9Jw+e/eHqURFTzLIqVae:tWySMhOJ3KDD9JwViTae
MD5:	7196D757CE12520CEC667EEBD08FAF0D
SHA1:	EF4293675FF9B66CBA4E26C8E2019AF97FDC635C
SHA-256:	783B03FA0668B8EC6FECFF66410E36ED03479751CBCAA63046B908F9FC4AF584
SHA-512:	3BFDBCAA15AC7D6FEE905787528CBC3E49D40CDE62B10296551FEBB680EEE6B0183C5C58DB9A967B694134A4D88589D3EB6D9D3A530EF0E50DF88327AF18B850
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/loginwidget_react.js?var=11
Preview:	$(function loginLoading() {. function detectBrowser() {. var ua = navigator.userAgent;. uaArr = ua.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i) \|\| [];.. return { browserType: uaArr[1], browserVersion: uaArr[2]}. };. function browserUpdateInfo() {. location.href = 'https://www.usbank.com/customer-service/knowledge-base/KB0070130.html';. }. function closeInfo() {. const browserMessage = document.getElementById('safa-overlay');. browserMessage.classList.remove('safa-visible');. browserMessage.classList.add('safa-hidden');. }. function displayPopup(){.. var safaOverlay = document.createElement("div");. safaOverlay.id = "safa-overlay";. safaOverlay.className = "safa-overlay safa-visible";.. var safaContent = document.createElement("div");. safaContent.className = "safa-content";.. var browserErrorTxt = document.createElement("div");. browserErrorTxt.id = "browser_error_txt";. browserErrorTxt.set

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1167
Entropy (8bit):	5.421458169813511
Encrypted:	false
SSDEEP:	24:yVfAosXcXGEFTkfHW6BvRcHKoDvwZd9p6PborxoxCPtupmD5Rc:yVfAowEZMHW686R6cr+OtEmrc
MD5:	F27C52B982860B5E85455FC46A118119
SHA1:	6688B47A9BD2C2BEB0D27C68990BBF84C4F68C29
SHA-256:	EF4A38A30A1E2CBA609BC375F3A4554C93211560EF140394C6994EC1ECD5751E
SHA-512:	EB08AA59F2719E709D9C258629FCF5EA04B50C73504B334B182070AE4EA2D1A148D20CC3CED73AE2C89299744BDBB050326E2C9ECC69C8820ACDD17171E8A07E
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=usbglobalfeeservices400%40usbank.com&df=&tf=&lp=en&v=2&m=%7c1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22.usbank.com&s=1&f=0&d=1715316751535&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'action':'open'..,'status':21..,'message':'Cannot identify recipient.'..,'state':1..,'reqTime':1715316751535..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'sessionId':'B4AC08064AEB8B1BEF1BAF63822B671B'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=null'..,'waitTime':50000..,'minPoll':1000..,'maxPoll':5000..,'totalPoll':1200000..,'supportedLocales':[['en','English (US)'],['nl_NL','Dutch'],['de','Deutsch'],['es','Espa\xf1ol'],['fr','Fran\xe7ais'],['it','Italiano'],['pl','Polski'],['pt','Portugu\xeas'],['ru','\u0420\u0443\u0441\u0441\u043a\u0438\u0439'],['zh_CN','\u4e2d\u6587(\u7b80\u4f53)'],['ja','\u65e5\u672c\u8a9e'],['ko','\ud55c\uad6d\uc5b4']]..,'sensitivity':'High'..,'senderAuth':false..,'trafficKey':'Q\

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44603)
Category:	dropped
Size (bytes):	45620
Entropy (8bit):	5.407527279843643
Encrypted:	false
SSDEEP:	768:/+EruwbkyPGlRmvuhmqXyB47eyHJLLRvVNkNWQjYt3mHTndAi5V9PPk6k9cPb5+s:LBQLu5pkhbQFGLDi3
MD5:	FCD6249F2437556DCC7BDB05B3A3BD74
SHA1:	D4029BE39B742125407FF7BA2D820EB4491B49CC
SHA-256:	CC6AA527552F867C0FD7BCE6C3B4EAC47D8A0BC40EE1AD316C21EC8DBD04B301
SHA-512:	17A5AF7B5A4C509843A62C4F015414BECAE08AFDEA1021DEF041DD1902D90BA2FC12732A320CBAB3C89CABFD8921C32EEE4B919E8A86F578607A86B4F74087E6
Malicious:	false
Preview:	/!. @preserve. * . * C3 Metrics. * . * http://www.c3metrics.com. * http://www.c3tag.com. * . * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved. * Patent Pending. */.!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];return function(_0x1780cb,_0x1b4044){var _0x3cb217=_0x2c2ab0?function(){if(_0x1b4044){var _0x37f409=_0x1b4044['apply'](_0x1780cb,arguments);return _0x1b4044=null,_0x37f409;}}:function(){};return _0x2c2ab0=![],_0x3cb217;};}(),_0x1ec1ce={};function _0xf42656(_0x471915){var _0x4818e2=_0x4b2c21(this,function(){var _0x302fc9=function(){var _0x46841c=_0x302fc9['constructor']('return\x20/\x22\x20+\x20this\x20+\x20\x22/')()['constructor']('^([^\x20]+(\x20+[^\x20]+)+)+[^\x20]}');return!_0x46841c['test'](_0x4818e2);};return _0x302fc9();});_0x4818e2();if(_0x1ec1ce[_0x471915])return _0x1ec1ce[_0x471915]['exports'];var _0x3745ef=_0x1ec1ce[_0x471915]={'i':_0x471915,'l':!0x1,'exports':{}};return _0x5d91ed[_0x471915]['call'](_0x3745ef['exports'],_0x3745ef,_0

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=usbank/dotcom-homepage/202405021642&cb=1715316803058
Preview:	//

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	281
Entropy (8bit):	4.555157719337154
Encrypted:	false
SSDEEP:	6:YseTM2zAJCZPiY19ifS0NfIxtHvMSgTP6+YYp6HpcI:YHTloQPieb0o1ESgqII
MD5:	EE83BA4DC7D8735F0C2B5AE6BEAEA699
SHA1:	2D11124F692A3D98E2F91FCD9637803928153642
SHA-256:	87534F7B11A9F31AEB0F49E32413CC812E4695A9E9704DA2C95B78544A18B8EC
SHA-512:	AB74357B6DAF2A9937627DDF293545D8FB48A438E92FA2A543CFA11FD404D349A379244569AB065CA965D7FE3E457717178546BEAD7D43A8B1CAFBEE51B12117
Malicious:	false
Preview:	{"VServer":"lb-video.glance.net","coloSelectUrl":"presence-location.glance.net\/colo-lookup","isMetricsEnabled":false,"isPresenceLoadBalanced":false,"metricsPassword":"","metricsUrl":"","presenceUrl":"","privilegeString":"encrypt:on;guests:10","screenshareTermsUrl":"","service":2}

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39424), with no line terminators
Category:	downloaded
Size (bytes):	39425
Entropy (8bit):	5.226275273980792
Encrypted:	false
SSDEEP:	768:/CurclHwhEqjAjHdcaFrFy8ANqtyQM6resDPByKsV5nx1ECdbbO:/CwrhHwqqtyoresDPB5GT1/pbO
MD5:	5B4618C7AB4E5DFF4CB07FBD27B296BC
SHA1:	FBEFCB841EB8A76C45B502661EF3B137614702A3
SHA-256:	3693A79E3550FA312016EB73D3321B71D24A0B2547C961593FF13A5C9B7EEA59
SHA-512:	5311DAF20FC08933F606D121BAF7335A37A8D8D1FA4593D3ED1EDF82E126B9F3ADA971F159F7777D6E3B36E57DDCECC3B91AE4DAE2E5F1B862DE6E282D238128
Malicious:	false
URL:	https://siteimproveanalytics.com/js/siteanalyze_5093.js
Preview:	var _sz;_sz&&_sz.core&&_sz.core._isloaded!=null?_sz.core.warn&&_sz.core.warn("Script requested to load and execute again, this is not desirable and will be blocked"):(_sz=_sz\|\|[],_sz.push(["accountid",5093]),_sz.push(["region","r1"]),_sz.push(["endpoint","global"]),_sz.push(["heatmap",{matches:{permanent:["https://www.usbank.com/about-us-bank/customer-service.html","https://www.usbank.com/bank-accounts/checking-accounts/checking-customer-resources.html","https://www.usbank.com/bank-accounts/checking-accounts/checking-customer-resources/workplace/deloitte.html","https://www.usbank.com/bank-accounts/checking-accounts/checking-customer-resources/workplace.html","https://www.usbank.com/corporate-and-commercial-banking/access-accounts.html","https://www.usbank.com/corporate-and-commercial-banking/cfo-insights.html","https://www.usbank.com/corporate-and-commercial-banking/client-support.html","https://www.usbank.com/corporate-and-commercial-banking/contact-us.html","https://www.usbank.com/co

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
URL:	https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1543), with no line terminators
Category:	downloaded
Size (bytes):	1543
Entropy (8bit):	5.189811786279408
Encrypted:	false
SSDEEP:	48:/Mf/MdwT+9hCJuYQhwC4yQyWZdcyGCyX+J:/Mf/NSrrSRyAncw5
MD5:	FF67DB2BB397E07F6A3B7B5AC2C712C8
SHA1:	B7C63A86ADB5C1FC00AC8DAA53EAAE0CF6B96A1C
SHA-256:	6B21FD2746C7C19E1151F55083B4239A12C4CE66621A7177ACD7D1F161DF2842
SHA-512:	D4F4EF59D56ADFEFF55C0C4F59B00A5B4F6CD7C2A823C188204DE890012FDECF38C7693B924931AC3D368AD4B7DA6C13C9B686891B957C8F4ABE564384F04275
Malicious:	false
URL:	https://schema.milestoneinternet.com/schema/js/msschemaloader_usb_min.js
Preview:	function msSchemaLoader(){try{var t=new XMLHttpRequest;var o=window.location.href;var e=extractSubdomain(o);var n="https://schema.milestoneinternet.com/schema/"+e+"/"+"schema.json";t.onreadystatechange=function(){if(t.readyState==4&&t.status==200){a.remove();jsonld=document.createElement("script");jsonld.type="application/ld+json";jsonld.id="ms-jsonblock";jsonld.innerHTML=t.responseText;document.getElementsByTagName("head")[0].appendChild(jsonld);document.innerHTML=t.responseText}};t.open("GET",n,true);t.setRequestHeader("x-ms-blob-type","BlockBlob");t.send()}catch(r){console.log(r)}}function extractSubdomain(t){var o="";t=t.replace(new RegExp(/^http\:\/\/\|^https\:\/\/\|^ftp\:\/\//i),"");t=t.replace(new RegExp(/^uat\.\|^www\./i),"");t=t.split("?").shift();if(t!=null){o=trimTrailingChars(t,"/")}return o}function trimTrailingChars(t,o){var e=new RegExp(o+"+$");var n=t.replace(e,"");return n}var a={t:"load",remove:function(){a.o();a.i()},i:function(){var t=document.querySelectorAll('[type="

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	4.557130678753019
Encrypted:	false
SSDEEP:	6:5m8n0+DyL/UGIjS5CXLB8BMlB9RSfKTWWylwTDQPpha/mX4QL:4E0+VbzRCEyiHLuoQL
MD5:	481E1F2E2953E7E1F95854C53CD73FB5
SHA1:	4D90933EACCDEEA162DF65311044118143AA2A0E
SHA-256:	BF8C46A5817BDE1C5E0F23CB9C56B69992CE2B114781B0FFA4D6F501D6D8CD37
SHA-512:	4AB5DA94B287EE8D9CBE1BEEE2D5D95B5894EA9ECD766C739BEF98BFEADD35532DFF9C007D8824098F8E99985171E9D163DD67BD9BE35D25A52D1EDC96EDE36F
Malicious:	false
Preview:	.<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>. <head><title>405 Method GET not supported</title></head>. <body>. <h1>Method GET not supported</h1>. <p>Cannot serve request to /svt/ecm/smartassistant on this server</p>. . . . <hr>. <address>Apache Sling</address>. </body>.</html>.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	104033
Entropy (8bit):	5.418239575298822
Encrypted:	false
SSDEEP:	1536:4HvmxIHKjYkp+ugJzNDor4bMoAXJBZa1PqyulHBcHH/R7XcZ5zK090MuDKq:4pYYNutw3R7XizKm0MQ
MD5:	851722E61B1043270C981C220BBF37ED
SHA1:	3BC31C72FDC02969E6E8F4C67925261C3317AE67
SHA-256:	3475964F410FCC1E1EF5CCA4DB5E7D2741982AE1298FFA3D6920E5A25B3356A9
SHA-512:	1A06735738EF5A6C33806F5F0D32C47883B244D6A9A79CABE9158D09FF13399A422E9F9CC8CEDD1C61A7C078D161F2B2D29E8FD4EA6A980319B99346AA5D846C
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7479
Entropy (8bit):	5.046203884298902
Encrypted:	false
SSDEEP:	192:P9wRQa297BolVMeYmG+WAyjp6wRn17BolVMeYmG+WAyjb:VOQa297BolVNY7+WlQOn17BolVNY7+Wd
MD5:	AB8448E1FDB0DC60D6193E540C2E48A0
SHA1:	553A67244FFAA32537D8829C4ABAB2BC827E88E4
SHA-256:	AFEA528C3784AD6CE2D82204938334D618A986B9D32E5A85F02DE94803647DBC
SHA-512:	14A5369E79D7E62C7F8501C806504A9F570151ED49364CF9699DE8E2AAC2D11EEC52E88103177A05DF98871A6B02B254ECB75E25CE685FA058FA3E8A3507FF7F
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_57GL0UFxoO6mKC9&Version=11&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"InterceptDefinition":{"BrandID":"usbank","InterceptID":"SI_57GL0UFxoO6mKC9","InterceptName":"Persistent Feedback Embedded Link","Revision":"11","DeletedDate":null,"ActionSets":{"AS_6sxWQLZpws73aux":{"ID":"AS_6sxWQLZpws73aux","Label":null,"Creative":"CR_bNJ69FZUut5fiwB","CreativeType":"Link","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_4UcQWmoXvR22RSZ"},"EmbeddedData":[{"name":"webVer","type":"JavaScriptVal","value":"QSI.Browser.version"},{"name":"webBrow","type":"JavaScriptVal","value":"QSI.Browser.name"},{"name":"webScreenDimension","type":"JavaScriptVal","value":"window.screen"},{"name":"webVersion","type":"JavaScriptVal","value":"navigator.appVersion"},{"name":"webEnvironment","type":"JavaScriptVal","value":"s.account"},{"name":"webURL","type":"JavaScriptVal","value":"document.URL"},{"name":"webReferrer","type":"JavaScriptVal","value":"document.referrer"},{"name":"webUserAgent","type":"JavaScriptVal","value":"User Agent"},{"name":"hashLPID","type":"Cookie

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28835)
Category:	downloaded
Size (bytes):	29688
Entropy (8bit):	5.20681443083328
Encrypted:	false
SSDEEP:	768:4sErTKABAYAcyCIADmtEeVX85u5y8DiAhAgmtEAn5Xf8a9rihsvgrfSa9wtvfVav:4JTKABAYAcyCIADk60iAhAgydvEsvva7
MD5:	0FAB54BCF479DBDBA3CC06ED719665C2
SHA1:	3F0A1ACEBABE39D2D77F1523DCAE2FAEB86DFB4F
SHA-256:	086D1AD485D9282CCAF5F69E7C3A7E2722C9BE1A70282A6C472E6C2D25E9B136
SHA-512:	DB893D824E45D0C82D499FC305732FB04E53D8F70EEE5DD58E957B99DBD4DD3B80844F2CAF98789D327AFBC00A439171F3A5F3C7E3B11D59C896F98A51A479BB
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/1.63e783d0bfcf19085382.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[1],{26:function(e,t,i){"use strict";i.d(t,"a",(function(){return o}));var n=function(e,t,i,n){return new(i\|\|(i=Promise))((function(r,o)

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2633), with no line terminators
Category:	downloaded
Size (bytes):	2633
Entropy (8bit):	5.850424130689596
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08q6aGxJQ2Sv0792G9sKf6:wsbSUtJfxrqvWWWdV6j1e6aGrNcf
MD5:	1D8620C32BCB1263CFED740142214664
SHA1:	38652F75F1410532BBC2C4CAE15BF674F1E75F6D
SHA-256:	57D9D88A867B936E679C70A34FEA055DA60CA7A756F43FA1D7E9E1FBDB66B339
SHA-512:	804E6CD8076EB4DDCD2AA790B8C02B58167DDCDFE4CDAC87DD20FD061B021509E716CB064A97165C69F26262ED54F91E2DEACD1E521974E21723F8D8B34D5583
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978114044/?random=1715316804134&cv=11&fst=1715316804134&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3074)
Category:	downloaded
Size (bytes):	1404783
Entropy (8bit):	5.423585738940952
Encrypted:	false
SSDEEP:	24576:Ng0F+WcVBa51tXS9RQXKN3QFELFyKzUbGC:W0F+WcVBa51tXYRQXKN3QFELq5
MD5:	EE691A8311FE930D0B2FA71D25DA7931
SHA1:	80E93DD55156B5E4771A24886D3888A4DEA0C724
SHA-256:	2D26C226A1AB241C33ADD4AEB73A88C287421FAE053531F8A6DB877287228FBF
SHA-512:	37CEFABE86B22C25079DF08775ADF06E2BBB64B8CAEBE85EA22FA934F447A181785547B744D24FE3DE309783E316DF1074C47DF4459948140FBD86CD060B4ED4
Malicious:	false
URL:	https://cdn.quantummetric.com/qscripts/quantum-usbank.js
Preview:	/* Copyright 2015-2024 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula 1.35.5 47f7d84dfeba495a63d88dd341c157471aa93f11 */.(function() {.var setInterval = window['__zone_symbol__setInterval'] \|\| window.setInterval;.var clearInterval = window['__zone_symbol__clearInterval'] \|\| window.clearInterval;.var setTimeout = window['__zone_symbol__setTimeout'] \|\| window.setTimeout;.var console = window['console'];.var clearTimeout = window['__zone_symbol__clearTimeout'] \|\| window.clearTimeout;.var MutationObserver = window['__zone_symbol__MutationObserver'] \|\| window.MutationObserver;.var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;.var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){a=["object"==typeof globalThis&&g

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
URL:	https://img.c3tag.com/x.gif
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.516526319369007
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nXNwgjdcpGkfOu0JaJLgAaGoWQo4Ydf2:2d3ATLf3dHcozu00JcnGoWQohe
MD5:	0EBECBAF60BEC8E96D0FAD56341AF87B
SHA1:	C3CD166307192B44EC98795C7AFF7912C52F1C72
SHA-256:	CC74938FE37DA7B3801CA4616DDF030AE89B35D47259683A72FF43CC75D705F6
SHA-512:	073A26B159B135417587EB08DAB19DBE176BA7AC5D7329A42988BE5F9619D18DE9989368331F6AA31CB3764B7DC3063E7CA956F0EC2CCF8A953A505B9D65A4B5
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 16.3 12.8" style="enable-background:new 0 0 16.3 12.8;" xml:space="preserve">.<g id="Layer_4">.</g>.<g id="Layer_7">..<path style="fill:#636466;" d="M0,4.7C0,4.7,8.1,0,8.1,0l8.2,4.7v2h-1.2v6.1h-14V6.6H0V4.7z M8.1,1.9L2.7,4.9v6.2h10.8V4.9L8.1,1.9...z M5.3,7.1h5.6V5.7H5.3V7.1z M5.3,9.3h5.6V7.9H5.3V9.3z"/>.</g>.<g id="Layer_8">.</g>.<g id="Layer_5">.</g>.</svg>.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x420, components 3
Category:	dropped
Size (bytes):	50165
Entropy (8bit):	7.981117147377038
Encrypted:	false
SSDEEP:	768:SfUFpEtj0u/OhF4oOj+eQBkegcP+MuTQWD5fHLm+fd+UQGXx5ZA9kLQtDuboZc/:Lp8/2RSQB1+MuTbDlHBUPAHAKCU
MD5:	07714B32D7A07DF374760F3EF58ED995
SHA1:	9839E4E20D5314DD1130ED1365CEE435A56B06FC
SHA-256:	F37F2CDE7F440CA77F8757EE4603B459B7B3F558D4515C8388DB8DA4915B2CEE
SHA-512:	25750C4D16227CA632D0DD61F72A1228938F1F0940A735230F4A6562B4CA76C173B0ACAD004E01845CFAC3EF9531611341AAB9AF7A1A62273BC70592C85A8523
Malicious:	false
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e3fffa36-5a35-43cf-b725-2052c998dd8d" xmpMM:DocumentID="xmp.did:FDBCF49CE60A11EE98A5DB33B93F2C10" xmpMM:InstanceID="xmp.iid:A4812178E60A11EE98A5DB33B93F2C10" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d308e7b1-0e66-4963-a9c3-8ef6c01f6fb2" stRef:documentID="adobe:docid:photoshop:e9900d2b-5f5b-9f41-b23c-44f727ee9414"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
URL:	https://d.agkn.com/pixel/12563/?che=5712298564241596&MCVISID=21375164595563744931909202357212933986
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2697)
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	5.2304456619589335
Encrypted:	false
SSDEEP:	48:Hl9USHDxtgtCVGbgGbIUdBqN2CZrRbvd9M2xvhol3fssqZwFbCLQ+GFKhn//zTLt:F9UgwrBqIwjRVhOLFOzGE9//zHt
MD5:	0C88426DEDC85F6DAFAB826D5733D5DA
SHA1:	38F0ED054AC2790C5156C55FD7FA38A55EC7822B
SHA-256:	923861E968A292A581B28A42331827F9927FFBD404D5BA2DA90AAA893BD48661
SHA-512:	152621F0991943B4090B2A11031FE6910EB81AF59B56B9C6DF68794BC01BBE4BB90CCBE278593018AAC34EB8529A8C607D9445EBDCCFBF6FE58F5F4B7EF96F61
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/micro-app-loader/dist/umd/index.js
Preview:	/* @usb-ui-tools/react-component-lib v1.0.0 . 2022 U.S. Bank - UXTechnology */.!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n(require("react")):"function"==typeof define&&define.amd?define(["react"],n):(e=e\|\|self).DS=n(e.React)}(this,(function(e){"use strict";var n="default"in e?e.default:e;function t(e,n,t,o){return new(t\|\|(t=Promise))((function(r,i){function a(e){try{c(o.next(e))}catch(e){i(e)}}function u(e){try{c(o.throw(e))}catch(e){i(e)}}function c(e){var n;e.done?r(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(a,u)}c((o=o.apply(e,n\|\|[])).next())}))}function o(e,n){var t,o,r,i,a={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:u(0),throw:u(1),return:u(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function u(i){return function(u){return function(i){if(t)throw new TypeError("Generator is already executing.");for(;a;)try{if(t=1,o&&(r=2&i[0]?o.return:

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3478)
Category:	downloaded
Size (bytes):	3640
Entropy (8bit):	5.378228636149937
Encrypted:	false
SSDEEP:	96:oJVXnoqd+ur7H0HrZHDm/rCucTVBfoLs7tRWT016:UVXVd+u3H0H9jm/8TtWTp
MD5:	660502FEF400AFED695CB8F105AE24B6
SHA1:	3A82A5B3FFB8179128BCD0BDB69F62E556F84789
SHA-256:	72A60F920DE7187E4D9ACC796B6F614672724FB70B3F0949664E434445D94903
SHA-512:	67FEBC5ABFDF9F89B91177CC58CB8DFFC71344694C2CDEA8AD08DC4DB4715E9FEF8860505A0709E3106FA073CD7C5EF66B89A5F7BCBC8F303EFFB7F1225F3644
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/132-dae71e255da2c1033c7e.js
Preview:	/* Auth Login Module : @usb-sharedauth/react-login-npm-module - 8.14.0 . Published Date : 17 Apr 2024 - 21:6:5 . . 2024 Digital LoginWeb Authentication Team */..(self.webpackChunkUSBAuthLoginModule=self.webpackChunkUSBAuthLoginModule\|\|[]).push([[132],{727:()=>{window.io_global_object_name="IGLOO",window.IGLOO=window.IGLOO\|\|{enable_flash:!1,loader:{subkey:"",version:"general5",uri_hook:"/Proxy/iojs"}}},970:()=>{!function e(){function t(e,t){var r,o={};for(r=e.length-1;-1<r;r--)0<r?o[r]=function(){var n=r;return function(){return a(e[n],o[n+1],t)}}():a(e[r],o[r+1],t)}function a(e,t,a){var o,n=document.createElement("script"),i=e[0].split("?")[0].split("/");o=i[i.length-1].split(".")[0],i=s[a]&&s[a].staticVer&&s[a].staticVer+"/"\|\|e[1],/([0-9]+\.){2}[0-9]+\//.test(e[1])&&i!==e[1]&&r("loader: Overriding configured version with staticVer."),e[0]=e[0].replace("##version##",i),n.setAttribute("src",e[0]),n&&n.addEventListener?n.addEventListener("error",(function(){l[a+"_"+o+"_load_failure"]="t

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 420x420, components 3
Category:	dropped
Size (bytes):	13874
Entropy (8bit):	7.408233479886717
Encrypted:	false
SSDEEP:	192:rVb0fHPVgzLL08pvj8IPmo9WjQfoSXwDSjz4eiwRmijl9/n1DWCspqqUGI:KgLDvj8IP39WjQfoSwOxiwRxjNupqqU
MD5:	7909D375D7D2A8F8683D80D21DD83A98
SHA1:	0C3365C3177968F9E88600A421FE6C6A1896A4B5
SHA-256:	A955CDD37C661D7A11BBEDA05935EB93280590F1881A9BCB6EBBCAFE34414E7F
SHA-512:	DE77EE80FEA278B2910B8DAFE1765F77B43FF5F8C3366E5AC36C3D4F31B216FCD2F2093EA29D543249248C107D1DDD6177D281C49627BFE34350142B89C2986D
Malicious:	false
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..............................................................................................................................................................................................................................................1.!AQ...r..3.U.aq"R..Ss.T56....B...$4t..2#....7...%EV.b.Cc.u.......................1...Qq.2R.3.!Aa..rS.4......Bb."...C.#.............?..2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................Y.....2..?.?.........)........o...~<.....`..?.........)........o...~<.....`..?.........)........o...~<.....`..?.........

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x420, components 3
Category:	downloaded
Size (bytes):	32345
Entropy (8bit):	7.9189975085267434
Encrypted:	false
SSDEEP:	768:rYBH3um4WsRwMjm+CemdjzQnhJ2ch9GubbXhIzH6Zk0:rYpu5Ws167j8h8cwQhG6q0
MD5:	80671D9C77A081CD606957EF4B20E084
SHA1:	B28F60556D3B9BB187BA1DC409FA2E2CC63F124E
SHA-256:	272795138FB063749F50F2CD5821C2E0E3D8EB74D2F67E0B9D8B327DAFC8979C
SHA-512:	473E1702A3D1C2556615141847CB8A626C970A947F3164BA0C9F24C82151D94EEBB3D71A012D9DCE89571C0300D76CFD2F8088503C83F7957B54254491C7099C
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/photo-military-banking-cards-420x420.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e3fffa36-5a35-43cf-b725-2052c998dd8d" xmpMM:DocumentID="xmp.did:CAA17E09F04A11EE88EDA876E2B84350" xmpMM:InstanceID="xmp.iid:CAA17E08F04A11EE88EDA876E2B84350" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0d934c1f-40ac-4c4a-881e-3ea3dc51c96a" stRef:documentID="adobe:docid:photoshop:32f2732a-5625-7044-9439-a4f3c6371cf1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	downloaded
Size (bytes):	12588
Entropy (8bit):	5.375681256654863
Encrypted:	false
SSDEEP:	192:ox0YLUOElc2YdiQDzCV80hb/9669bPy2igFN0r3Mp/Cqbs3PqWKRzf4OK7MlrH:o7f1cQDIen+N0r3MpyqWKRzf4OK7MlrH
MD5:	0647CBBCB7475B4EC406CAAC8C5E6258
SHA1:	E9A31ED770ED6C07BF265B68DCB3F7673AA5EC7D
SHA-256:	11FD2F39B756A643009F1A77F536122D54BFBD552890313C083167C7BB6363A5
SHA-512:	51C83AAACFEF5A4B3327104DE5A37557952892B493AE9413813A02DD8802D4C661D945292EFC011D86BFA72FA16B55D463D9E63D2BD01D2786D5B44C438471D2
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/react.production.min.js
Preview:	/** @license React v16.12.0. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.'use strict';(function(v,m){"object"===typeof exports&&"undefined"!==typeof module?module.exports=m():"function"===typeof define&&define.amd?define(m):v.React=m()})(this,function(){function v(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function m(a,.b,c){this.props=a;this.context=b;this.refs=da;this.updater=c\|\|ea}function fa(){}function M(a,b,c){this.props=a;this.context=b;this.refs=da;this.updater=c\|\|ea}function ha(a,b,c){var d,e={},p=null,f=null;if(null!=b)for(d in void 0!==b.ref&&(f=b.ref

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1591
Entropy (8bit):	4.891644797490271
Encrypted:	false
SSDEEP:	24:YZiCBQL+I/pgrNToQNDR311fJ2Jz/lS/hneNTohFNDR31uAmGN2LtTa:YoiQgxoEDRl1R2JAnIohzDRluAmE2ZO
MD5:	8C3A492ACC656D5063DB2FC032DD72D7
SHA1:	BB8BCA8E6D8E32B15DC7C7459C4D8C3BD9712734
SHA-256:	A905DA5DBDA25A6E363F0F935296B8FCC5DDD4E53AAC3BECA79D185319BA292E
SHA-512:	C55CB5F8921FE59A6AA93E0E8D69F98D0B008A09DC998E85A9A66CB1EFD778660BFA0303A4A4FA6EB527F58F7682605B201F4B364C905CDA99D33A29963369BD
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_0JPnt5m2zBFt605&Version=3&Q_InterceptID=SI_d6z3Ch2S2wcWuma&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"CreativeDefinition":{"BrandID":"usbank","CreativeID":"CR_0JPnt5m2zBFt605","Revision":"3","Title":"Persistent Feedback Badge","ZoneID":"ZN_6VxkyqYWaF9f1T7","Type":"FeedbackButton","Options":{"Desktop":{"LookAndFeel":{"ButtonPosition":"right","ButtonText":"Give feedback","ButtonIcon":"none","TextColor":"#FFFFFF","ButtonColor":"#0a41c5","BorderRadius":"moderately-rounded","UseCustomButtonPosition":true,"ButtonPositionBottomAdjustment":37,"ButtonPositionLeftAdjustment":0,"CustomButton":{"UseCustomButtonPosition":false,"CustomButtonImageName":"","CustomButtonImageId":"","CustomButtonAltText":"","ResizeImage":true,"ButtonPosition":"left","ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":10}},"HowItDisplays":{"DisplayType":"slider","SurveySize":75,"IFrameTitle":"Survey window","OpacityLevel":0.25,"ShowCloseButton":true,"CloseButtonBehavior":"remove"}},"Mobile":{"LookAndFeel":{"DoNotShow":false,"ButtonText":"Give Feedback","ButtonPosition":"bottom-right","ButtonIcon":"none",

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/websafe/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2045)
Category:	downloaded
Size (bytes):	2898
Entropy (8bit):	5.239699559799549
Encrypted:	false
SSDEEP:	48:svxTFcCPrwbrJbGqU/RNsJG7HW36Hg9vzEjdWVO4Yxxt2CjWMjc9sk/jYINKOToe:sZRxaZWM/vzNwtIruhcc3l7s
MD5:	D5BBC96C73884F9828F519CF531B35F1
SHA1:	EEC9A06335D14190E2BE8BE904123ACF488EBA6C
SHA-256:	077F749583AC7257763350E57E4D566ED638EDDF5AA12D184BCEFC120F926F8F
SHA-512:	4B536674F07F665A013FE20C66CA12A1157202DCE4B28F9A3AB68E503C5CF7AFF3E28A7638DB85ABABBD0721EAE7E16FA92F82B806688C3E3EF3A6F0E9F90E98
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/7.8e62d1a979d0c1ed6038.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[7],{38:function(e,n,t){"use strict";t.r(n);var d=function(e,n){this.payload=n,this.type=e};t.d(n,"addPopunderEmbeddedDataHandler",(func

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 16 tables, 1st "DSIG", 32 names, Macintosh, \251 2023, Copyright by Lineto. All rights reserved.U.S. Bank Circular TTBoldLineto: U.S. Bank C
Category:	downloaded
Size (bytes):	143772
Entropy (8bit):	6.054512929226935
Encrypted:	false
SSDEEP:	3072:qk7GgQbUkIfKJKx47JOfuUYvksULdkdwRThluvcaYWPwHtzf+j:qk7GgAys74fuUZdk+XEvpINzGj
MD5:	9613A08208573AF5EDF998EC243A5B9B
SHA1:	2C17BB68E1713D29CFFF09511EDC4ECEBC51B4AC
SHA-256:	392882A13A4793382C0BFFFCC80944A35BA496EFA44FE8E772E04C99354F97A9
SHA-512:	838A46E8F49D71AAB5EE7AFE4E899B45507FD1391607187B18B9797D4706288857933955359F876DD493B0B4041503B79966560CC323B486F59765A00164E6F2
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/ecm-global/clientlibs/clientlib-site/resources/fonts/U.S.BankCircular-Bold.ttf
Preview:	............DSIG......1.....GPOS..N....8..x.GSUB.5.W..&.....OS/2P"r0.......`cmapo..z........gasp.......0....glyf%=.+........head$.w........6hhea.......D...$hmtx.U.........kern6.>....t....loca}.]....D...fmaxp.B.....h... name.......p...7post..n.........preph......<............h.._.<............_.....-&..B.............................D.B.=...................2.....2.X...Q.......................6.........X...K...X...^.2..................P..{........LNTO................ .............. .....................?...).P...P.#.P.....)...).S.(.S.....&.P.3...-...4...1.....P...P.w.P.'.P...P...P.'.P...P.".P.!.P.....1.../.P.J.P.6.P.X.....>.(.....n.T...)...T.F.T.4.T...)...T.4.T.1.....T.+.T...T...T.+.).].T.+.).w.T.b. .m.....M...................).S.P.....S...(...A.!.(.....&.f.D.'.&.e.'.2.&.y...Z.&.D.D...4.....).D...D.r.D.D.D.P.&.f.D.e.'...D...".....D.?.(...H.......2.....,... ...T.....}.6.......9.P.<.P.(.P.&.P.....T...3.....O.7.z...9.-.P.%.......6.O.....6.P.>.h.".l...'...[.M.......3.*...........9.,........

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, software=Adobe Photoshop 23.1 (Macintosh)], baseline, precision 8, 800x450, components 3
Category:	dropped
Size (bytes):	55040
Entropy (8bit):	7.859193094122368
Encrypted:	false
SSDEEP:	1536:PArA/yRuzd/CO/oHXAmQUq0wY6PzdGgUsNEi:IseuJ/u3AmQUSRGgUsNEi
MD5:	902224C91E0B80AF182ADBF909BA6634
SHA1:	DA4AD296652DA4499A615B544AF057C3730F978B
SHA-256:	12E13590681989DC431CC8F533C91FA7EF24846AD85C2E2C7D14880B2F4E697C
SHA-512:	170ADEB890F483110E0FC9A705C65EE2449F7B74F1555241E72BB79827ECD46FEBE5F4D397B0D6B840FA5ED69CE7B54BA5D51CA32326289BE6E451F1A28D7A25
Malicious:	false
Preview:	.....`Exif..II*...............1...!.......;.......P.......Adobe Photoshop 23.1 (Macintosh)..PIKSEL......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dam="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" dam:Physicalheightininches="-1.0" dam:Physicalwidthininches="-1.0" dam:Fileformat="JPEG" dam:Progressive="no" dam:extracted="2023-06-05T23:14:50.579-05:00" dam:Bitsperpixel="24" dam:MIMEtype="image/jpeg" dam:Physicalwidthindpi="-1" dam:Physicalheightindpi="-1" dam:Numb

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6427
Entropy (8bit):	5.005987678293101
Encrypted:	false
SSDEEP:	96:0rrqFw38uJ7/np56E8ZHMgJRI6mleOZ7jkco59C+8wm/nQ6iZISwbtgQJ3PV9i/x:0rGGzLI+l+O/nQ6ictTJ3dge9MD
MD5:	A045CD4211BA65BBEB0294EB24907E1E
SHA1:	9C83B5196A8B2F761984E8C14B73360551A6A00B
SHA-256:	73DF226DB3CECCB8FBD5E34A218C18552504D15434BC45D68D753ECEC50C24E1
SHA-512:	5F51C25E740BB8F4D14E3E15B5B7733292AFEE14965AE258C8623E75EF7BD7E51DEB853048381E4B350860E227D43DA7C1F5D74B9FBAB089FF7227F3ADEAF931
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/loginhotfixesGlobalTemp.css
Preview:	#LoginWidgetApp .usb-notification .icon svg {. position: static;. width:20px;.}..#LoginWidgetApp .usb-notification .icon {.margin-right: 0.75rem !important;.}..#ReactLoginWidgetApp .usb-button.button--secondary {.color: #0a41c5 !important;.}.#ReactLoginWidgetApp .usb-button.button--secondary:hover {.color: #fff !important;.}..#ReactLoginWidgetApp #otp-button-group button#otp-cancl-button {.color: #0a41c5 !important;.float:unset !important;.}..#ReactLoginWidgetApp #otp-button-group button{.width:100%;.outline-offset: 0.25rem;.}..#ReactLoginWidgetApp .form-control__radio .input__container input[type=radio]:before{.left: 0.8rem !important;.top: 0.8rem !important;.height: 1.75rem !important;.width: 1.75rem !important;.}.#ReactLoginWidgetApp .form-control__radio .input__container input[type=radio]:after{.left: 0.8rem !important;.top: 0.8rem !important;.height: 1.25rem !important;.width: 1.25rem !important;.}.#ReactLoginWidgetApp #otp-button-group button.usb-button.button--text {.color

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45483)
Category:	downloaded
Size (bytes):	45510
Entropy (8bit):	5.500529389546581
Encrypted:	false
SSDEEP:	768:lIemuoTiQK7cQx28hS5KjRtJBr1ji4RPtidM6kRsy0:lI1IcQGKjRfrjpRPtidM6k2d
MD5:	77B80A557D94FDE40D70038E0E9CB8FF
SHA1:	3503389E5F90BCDAB0D599CAA88E554AF8609E84
SHA-256:	5EF6D7000762E103C3A5D0451A96A8175675226CB598799DB8A74738E704AD21
SHA-512:	72E3B3BA727637D68C6FA079373B1D7C41184459DE6F28F0E2D1A20C89BC1668B7BD29FA2FA458763542891244D5BA83EECF4AD40B6730927E8659673ECDF6D1
Malicious:	false
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (995)
Category:	downloaded
Size (bytes):	3059
Entropy (8bit):	5.225485866478248
Encrypted:	false
SSDEEP:	48:F1z4nPWNnR6IMI+wB/o1yteGCvQ6ChZJ6JUjcu1gGzjMSI3qy1hp5ZZIt3xTJsMp:F1cnP4ReIZB/o1y0GCEh36JUjcuS6EqZ
MD5:	1C92BBE4D6F99172B120F62CDF90E3C5
SHA1:	7095575DF1A7B5961BB934B411BA8FBC30E1AC97
SHA-256:	D36A59E9CFB9A25D159B689872B6B633EC48D2CED67D0965F3B54715A7935128
SHA-512:	39212D6D0259A6DC758A075C1DFAED5046592861CBD987F2983539C9267B1D3F7DCA6E30639621C1B6DA3DDE7307E3ED3C2BE1188E0FC1CBD470FF89BA5BCF42
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/usbank/dotcom-homepage/prod/utag.100.js?utv=ut4.46.202304182242
Preview:	//tealium universal tag - utag.100 ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=null;

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10378)
Category:	downloaded
Size (bytes):	13696
Entropy (8bit):	5.168088500407627
Encrypted:	false
SSDEEP:	384:ApI8XyWPbWeAExXfgxH7RqzGbcQdVzCbUm6HwT9eei:MbXdFGbcczC/6QT9e1
MD5:	D7A175DCF106AF47E1C0F608B892A115
SHA1:	2A30207E817E1E8510E710A034C18E990A30AEF8
SHA-256:	4B52781951C70CC8A2AE2AFDAAC5D673C656C3BE0F1C769FA6C1E9E4F5ED8D3B
SHA-512:	6BA05DA9C48F27B70A1DE5B2D427DB7BF84625E69911598F32DCAAA4823D5853B7F4EA868467BE3D2D1682D1C9C5DEDAE2ED2B2D5F533D84A434BB4E97C6F680
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/axios.min.js?
Preview:	/* axios v0.19.0 \| (c) 2019 by Matt Zabriskie */.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.axios=t():e.axios=t()}(this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="",t(0)}([function(e,t,n){e.exports=n(1)},function(e,t,n){"use strict";function r(e){var t=new i(e),n=s(i.prototype.request,t);return o.extend(n,i.prototype,t),o.extend(n,t),n}var o=n(2),s=n(3),i=n(5),a=n(22),u=n(11),c=r(u);c.Axios=i,c.create=function(e){return r(a(c.defaults,e))},c.Cancel=n(23),c.CancelToken=n(24),c.isCancel=n(10),c.all=function(e){return Promise.all(e)},c.spread=n(25),e.exports=c,e.exports.default=c},function(e,t,n){"use strict";function r(e){return"[object Array]"===j.call(e)}function o(e){return"[object ArrayBuffer]"===j.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8160)
Category:	downloaded
Size (bytes):	8176
Entropy (8bit):	5.443633344040274
Encrypted:	false
SSDEEP:	192:7T/XsoaxLo7L1AsLVllMA5/VYZncbsPYxb2g9n/m5iCyK08l9l4E+kghMnf4W5Qe:/X9aNo7LWsLPnYZncbs5UeiCyK0Q9l4W
MD5:	933934A7DC7443853D850D5734E92098
SHA1:	8934DF557C759867599CF73D6761E99C8D4FD97F
SHA-256:	6CFE129DA95500565C5A51ADF8B3A8A5CB116DED53A624DE73F25C1BD33BC45C
SHA-512:	D3558885B149152F95D4727E5C060309681F63BE54E6CAE89D934D3AB02F9AB6B68B511B6175C9CF5CADFCB685C948667C6FAFE0A45668221348E38DF7CF07C1
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/uuid.min.js?
Preview:	//Version-8.3.2.!function(r,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((r="undefined"!=typeof globalThis?globalThis:r\|\|self).uuid={})}(this,(function(r){"use strict";var e,n=new Uint8Array(16);function t(){if(!e&&!(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto)))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(n)}var o=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\|00000000-0000-0000-0000-000000000000)$/i;function a(r){return"string"==typeof r&&o.test(r)}for(var i,u,f=[],s=0;s<256;++s)f.push((s+256).toString(16).substr(1));function c(r){var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0,n=(f[r[e+0]]+f[r[e+1]]+f[r[e+2]]+f[

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1963
Entropy (8bit):	5.079180513328498
Encrypted:	false
SSDEEP:	48:M7FEl+FxF6F9sFiZFUJFsFz/FaLZFpiFXQUF5EFrF3FlVgghFvEFF2FJF9fsFUyc:YFLFxF6F9sF+FUJFsFz/FaLZFsFXfF2D
MD5:	0553784E5E0431A5F1015BF7CC97920D
SHA1:	CF2A40F3D3DC774B3E122B7E62121B67035C2870
SHA-256:	987A7D3B313600D239C1714EC7B201EC895A432FD3E207BA595CDCED6E99264E
SHA-512:	F5A91832A67AD6C4BDEE3614D04B18C3CBF8DFAF3F5D73B5C259E512F2D5A712625C28902394BDCC20D7E858D60509F10CDC44EBDFF335A1AF95E9CA5FD5B31C
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/manifest.json
Preview:	{. "main.js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/main-4f9a982f8b35c51616b3.js",. "microapp_auth_loginmodule.js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/remoteEntry.js",. "63-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/63-182fa76e160e328ede5d.js",. "770-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/770-67642a76c3cd2c640fc8.js",. "351-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/351-2a144078e2d7e0134bee.js",. "686-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/686-0ecdeed908fd59a80849.js",. "8-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/8-dff4d0a0d37888a16a9a.js",. "524-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/524-7a7e6123ad6fcf8e45ff.js",. "931-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/931-5738f79d51b2f62431e7.js",. "946-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/946-85f6ba284c118003f344.js",. "249-js": "

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (458)
Category:	downloaded
Size (bytes):	466675
Entropy (8bit):	5.0368486004774695
Encrypted:	false
SSDEEP:	12288:suA2xFwKcDoaOmgwkh4ZaT45rbOZ/aRmUg27:8
MD5:	499CB5A7CA3329040C643A423E556285
SHA1:	A28876DA29A64882B2707CFC23589C59F3B58F1D
SHA-256:	2A352DD8F659A7B7D62F32915C785E1FEA6308154FDF4CEF175E4874500C5421
SHA-512:	8C33C9F313FEB17E729710920DACBFAAA34C3594915402F9B56C13ED76A99CD77CCEB90CAF416786D096E2A2DCFE17F7063F54AB321296EDC06F49172CBDF974
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/usbank/clientlibs/clientlib-ghp/styles/ghp.min.499cb5a7ca3329040c643a423e556285.css
Preview:	.component-container .text .component-container [class=gc-],..component-fullpage {. display: block;. width: 100%.}.body.menu-lock,.body.modal-lock {. touch-action: pan-y;. overflow: hidden.}..shield-content .global-nav form[role=search] .input-field button.clear-search::after,..shield-content .icon.close,..shield-content .icon.close.after::after,..shield-content .searchfilter form[role=search] .input-field button.clear-search::after,..shield-content .shield-forms form[role=search] .input-field button.clear-search::after,..shield-content .shield-search form[role=search] .input-field button.clear-search::after,..shield-content [class=icon-size].close,..shield-content [class*=icon-size].close.after::after {. background-image: url(data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20data-name%3D%22Outline%22%20viewBox%3D%220%200%2020%2020%22%3E%3Cpath%20d%3D%22M14%207l-3%203%203%203-1%201-3-3-3%203-1-1%203-3-3-3%201-1%203%203%203-3zm5.22%203A9.25%209.25%2

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8035)
Category:	downloaded
Size (bytes):	9840
Entropy (8bit):	5.487206784775905
Encrypted:	false
SSDEEP:	192:pIURupNRxauPT2Gh6N+rHfGWTddZBobKTPsGD6u0IMmu/RLl7s:kRxHc+T+WxBobKTPsGD6JIMmu/k
MD5:	6A02158562D94FDBED08FB8BC682C443
SHA1:	C6A4ABDA4F9154F4527ADB25CF713F992236488A
SHA-256:	BA80B95F056A6055D69AE78FFF31A4047414AC99C759F7CBF5674BB424439875
SHA-512:	0103B35407B7F51F57EA28A080F5348AEFEFC525724EAB1701D6923F2976BDDB300DDABE04450603C997414E8301910DBDF1EC9293F760D6958FEEFD5CCFFF11
Malicious:	false
URL:	https://zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_6VxkyqYWaF9f1T7&Q_LOC=https%3A%2F%2Fwww.usbank.com%2Findex.html
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_6VxkyqYWaF9f1T7"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.5.0./../*@license.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 420x420, components 3
Category:	dropped
Size (bytes):	13725
Entropy (8bit):	7.318244673640702
Encrypted:	false
SSDEEP:	192:Hh4bJSwoIEXgbSIH5Kv8Rp+tTRwNkXiaam2WtvG/mGxDxDxDBEQWADIHYyyyaS4q:yJSPIEXgnnRp+tVwOLaYtvQllNFWoeuq
MD5:	084EB35A34E19C4BE4142BB5E64A4BF9
SHA1:	58DB17E448FD6F41F2002393C18A7258157943CB
SHA-256:	28C7553D2C9CEEBC51E726B55E8C8044C5DD03AC252229B57DFA881558F8AB91
SHA-512:	2B4EDFBB3B1112686FC49DCDB1C3DC3B21D9392A7843C37368C6AB1E9E4CD000EACB4730B947F4AAA6EAFED87334B3A624838D6967F106AB2F1F8D214CAA228B
Malicious:	false
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..............................................................................................................................................................................................................................................!.1AQ.R...U..aq..T..."2Br.s......b..3S.4t57.#C.Vc$u6....DE&.......................QR..!1........Aq."2..3S..a.Br.b4.#$............?...R..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2692
Entropy (8bit):	4.625570836530717
Encrypted:	false
SSDEEP:	48:0xyZWUQZYjIIuzz/25aeTd522pPOsZ3lak:fiY2sPB1J
MD5:	10C08C0FCE3A12CC03BA45F4D3B46464
SHA1:	E30F056890C1CB3FA8D2EBF6874F6FCA920C5FD2
SHA-256:	45AF6B9CCB8C5611F81CC5F99761B96CF7F12647446C34B8F5069BC50F1B365A
SHA-512:	F233ACA9C85C644EC5D131876B239750A7427273F2FF671232D8E6AE7DCA132409813708CA6B02E6CB5B8638AC756DD5212B4C070D3620FE25ABEF45BA69AE60
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/ecm-global/clientlibs/clientlib-site/resources/images/svg/logo-personal.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 258.52 72"><path d="M286,83.37a3.25,3.25,0,1,0,3.25,3.24A3.22,3.22,0,0,0,286,83.37Zm0,6a2.81,2.81,0,1,1,2.79-2.81A2.77,2.77,0,0,1,286,89.42Z" transform="translate(-30.74 -38.59)" fill="#001e79"/><path d="M287.41,87.62a1,1,0,0,0-.19-.55.87.87,0,0,0-.61-.35,1.22,1.22,0,0,0,.51-.17.79.79,0,0,0,.35-.7.89.89,0,0,0-.55-.91,2.87,2.87,0,0,0-1-.13H284.7v3.57h.62V87h.5a1.63,1.63,0,0,1,.7.11c.35.21.33.66.34,1.06a.58.58,0,0,0,0,.23h.58a.55.55,0,0,1-.05-.23C287.41,88,287.41,87.91,287.41,87.62Zm-1.52-1.08h-.57v-1.3h.54c.76,0,1,.18,1,.66S286.44,86.54,285.89,86.54Z" transform="translate(-30.74 -38.59)" fill="#001e79"/><path d="M148.71,52.13c-5,0-9,2.06-10.55,4.33V38.59H127.24V89.42H138v-4.1c1.69,2.79,5.42,4.91,10.26,4.91,10.18,0,17.36-8,17.36-19.12C165.63,60.19,159.26,52.13,148.71,52.13Zm-2.42,28.14c-4.32,0-8.28-3.08-8.28-9.09s4-9,8.28-9,8.21,2.86,8.21,9S150.61,80.27,146.29,80.27Z" transform="translate(-30.74 -38.59)

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1963
Entropy (8bit):	5.079180513328498
Encrypted:	false
SSDEEP:	48:M7FEl+FxF6F9sFiZFUJFsFz/FaLZFpiFXQUF5EFrF3FlVgghFvEFF2FJF9fsFUyc:YFLFxF6F9sF+FUJFsFz/FaLZFsFXfF2D
MD5:	0553784E5E0431A5F1015BF7CC97920D
SHA1:	CF2A40F3D3DC774B3E122B7E62121B67035C2870
SHA-256:	987A7D3B313600D239C1714EC7B201EC895A432FD3E207BA595CDCED6E99264E
SHA-512:	F5A91832A67AD6C4BDEE3614D04B18C3CBF8DFAF3F5D73B5C259E512F2D5A712625C28902394BDCC20D7E858D60509F10CDC44EBDFF335A1AF95E9CA5FD5B31C
Malicious:	false
Preview:	{. "main.js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/main-4f9a982f8b35c51616b3.js",. "microapp_auth_loginmodule.js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/remoteEntry.js",. "63-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/63-182fa76e160e328ede5d.js",. "770-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/770-67642a76c3cd2c640fc8.js",. "351-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/351-2a144078e2d7e0134bee.js",. "686-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/686-0ecdeed908fd59a80849.js",. "8-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/8-dff4d0a0d37888a16a9a.js",. "524-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/524-7a7e6123ad6fcf8e45ff.js",. "931-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/931-5738f79d51b2f62431e7.js",. "946-js": "https://onlinebanking.usbank.com/auth/login/wmf/latest/946-85f6ba284c118003f344.js",. "249-js": "

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (776), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	197745
Entropy (8bit):	4.265109958163852
Encrypted:	false
SSDEEP:	3072:9aWDdvLeOe6uFQfBoDMSmiYmY0oiESbHM26veWm1A:9aWD5L4Y0oiVuea
MD5:	56E0406A45626A7BADAB2BE638D7ED01
SHA1:	E56E9435F46F118EACD56A9D98C04C139778624E
SHA-256:	FE910B2C92326689AD626B8921238176B5EA6EA110F911BF95BDF5706AF8F31D
SHA-512:	5BA959491E7ED9A2E18E3F51E066DB245F36D9414D6A4354083AE422BB035AD6D421ED910F528551ECAA0B4175DBB344407CFFF28750353722E9F0B61A51A0B3
Malicious:	false
URL:	https://www.usbank.com/index.html
Preview:	. <!DOCTYPE HTML>. <html lang="en-US">. <head>. <meta charset="UTF-8"/>. <title>Consumer banking \| Personal banking \| U.S. Bank</title>. <meta name="keywords" content="usbank.com,personal banking,usbank,mufg union bank,banking,us bank,bank"/>. <meta name="description" content="Bank smarter with U.S. Bank and browse personal and consumer banking services including checking and savings accounts, mortgages, home equity loans, and more."/>. <meta name="template" content="usbank-ghp-template"/>. <meta name="viewport" content="width=device-width, initial-scale=1"/>. .<script type='text/javascript'> . .window.reportingData = {. currentPage: "Personal Home Page",. siteSection: "home pg",. subSiteSection: "home page rebranded ghp",. sitePlatform: "dotcom",. transactionStatus: "",. formName:"",. products: "",. siteTool: "",. language :"en-us",. pageType :"sell

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	636
Entropy (8bit):	5.516526319369007
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nXNwgjdcpGkfOu0JaJLgAaGoWQo4Ydf2:2d3ATLf3dHcozu00JcnGoWQohe
MD5:	0EBECBAF60BEC8E96D0FAD56341AF87B
SHA1:	C3CD166307192B44EC98795C7AFF7912C52F1C72
SHA-256:	CC74938FE37DA7B3801CA4616DDF030AE89B35D47259683A72FF43CC75D705F6
SHA-512:	073A26B159B135417587EB08DAB19DBE176BA7AC5D7329A42988BE5F9619D18DE9989368331F6AA31CB3764B7DC3063E7CA956F0EC2CCF8A953A505B9D65A4B5
Malicious:	false
URL:	https://www.usbank.com/dam/visual-assets/logos/logo-equal-housing-lender.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 16.3 12.8" style="enable-background:new 0 0 16.3 12.8;" xml:space="preserve">.<g id="Layer_4">.</g>.<g id="Layer_7">..<path style="fill:#636466;" d="M0,4.7C0,4.7,8.1,0,8.1,0l8.2,4.7v2h-1.2v6.1h-14V6.6H0V4.7z M8.1,1.9L2.7,4.9v6.2h10.8V4.9L8.1,1.9...z M5.3,7.1h5.6V5.7H5.3V7.1z M5.3,9.3h5.6V7.9H5.3V9.3z"/>.</g>.<g id="Layer_8">.</g>.<g id="Layer_5">.</g>.</svg>.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 375 x 705, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20794
Entropy (8bit):	7.936523155519427
Encrypted:	false
SSDEEP:	384:Q6Rihv2S+tzE/RCr39a1sQfSAagvTs0HZzDG0NavmRBqlwAyC5sHbPkKzmc:nRu2BiRCudIQTf5/G0TDlOkbM2
MD5:	19FEB65D89C09F703CDB7A4AEEE02866
SHA1:	80A44351B88429AC46F2FD48C8485354364F2911
SHA-256:	E95D04F4704BA557873F9A01C0595A5ED3A55EA59865EF5F6CE6384266AA71AB
SHA-512:	5FFE40F2760A9944E29321B7BFB78040C26F852744DD2BBC5DEABC4A7CE8B0676853181ABF1A0600583CD2B3941B3D92B7576CD498F233ED936613578714A1E0
Malicious:	false
URL:	https://www.usbank.com/dam/homepage/photo-mobile-app-account-screen-375x705.png
Preview:	.PNG........IHDR...w..........e.9....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-06-05T20:57:03.736-05:00". dam:Bitsperpixel="8". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="d7ac8c17c3a7982b4ce842def9987311e9db9df9". dam:size="19769". tiff:ImageLength="705". tiff:ImageWidth="375". dc:format="image/png". dc:modified="2023-06-05T21:01:53.012

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	204100
Entropy (8bit):	5.522708848251636
Encrypted:	false
SSDEEP:	3072:LLvWuawx8nxZ8urmUB8Qz+8w3JriOqnHiGK2/ifxYgPZ/UykvB:/eFnxSur3vWr1oiGK2/iJkykZ
MD5:	09B65033149DC6EEED523C5DB6A96173
SHA1:	BFAFE512589C80B46006107239AE94F66C9FC83F
SHA-256:	3FF5DADA784E90057627011442D707F145AD4D8117629E85F9141E146F3D6C2D
SHA-512:	9C3C35D6B14F6B12DB3D6A3F997A519BAB422A5E79985BF1B0B9BC47E42ABDAAFE35C1E0AD44C551E5EF21C40E2538AB470B136BE6D3CB284DC84968634B11A2
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=DC-8176182
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{do

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x420, components 3
Category:	downloaded
Size (bytes):	50165
Entropy (8bit):	7.981117147377038
Encrypted:	false
SSDEEP:	768:SfUFpEtj0u/OhF4oOj+eQBkegcP+MuTQWD5fHLm+fd+UQGXx5ZA9kLQtDuboZc/:Lp8/2RSQB1+MuTbDlHBUPAHAKCU
MD5:	07714B32D7A07DF374760F3EF58ED995
SHA1:	9839E4E20D5314DD1130ED1365CEE435A56B06FC
SHA-256:	F37F2CDE7F440CA77F8757EE4603B459B7B3F558D4515C8388DB8DA4915B2CEE
SHA-512:	25750C4D16227CA632D0DD61F72A1228938F1F0940A735230F4A6562B4CA76C173B0ACAD004E01845CFAC3EF9531611341AAB9AF7A1A62273BC70592C85A8523
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/photo-woman-in-garden-420x420.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e3fffa36-5a35-43cf-b725-2052c998dd8d" xmpMM:DocumentID="xmp.did:FDBCF49CE60A11EE98A5DB33B93F2C10" xmpMM:InstanceID="xmp.iid:A4812178E60A11EE98A5DB33B93F2C10" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d308e7b1-0e66-4963-a9c3-8ef6c01f6fb2" stRef:documentID="adobe:docid:photoshop:e9900d2b-5f5b-9f41-b23c-44f727ee9414"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64912)
Category:	downloaded
Size (bytes):	89891
Entropy (8bit):	5.178658948188848
Encrypted:	false
SSDEEP:	1536:RTLDHj/+4YXh+XfkNBrey6HgNcdEqD3wSbb/k0kc:RyhzwdEqz3/D
MD5:	A354F6F40F9FCF7A4202A88281C05B42
SHA1:	D42F01E4407B8FCA80D954EA4F2A50348D8F692F
SHA-256:	B36144CFF8179C6F8C412EC58835B67D1169629F913C3542693CFCBFAFCE12F9
SHA-512:	438290B95DB77B76EA6030B3612327774D91C61AF7D9870321A9DF9792C84E0B6E16E78CB26132AA8F0013E56C9FF6DA70EC0CC777D01D2D9FDFBD641F3A9762
Malicious:	false
URL:	https://cdn1.adoberesources.net/alloy/2.16.0/alloy.min.js
Preview:	/*. Copyright 2019 Adobe. All rights reserved.. * This file is licensed to you under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License. You may obtain a copy. * of the License at http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software distributed under. * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS. * OF ANY KIND, either express or implied. See the License for the specific language. * governing permissions and limitations under the License.. */..!function(){"use strict";if(document.documentMode&&document.documentMode<11)console.warn("The Adobe Experience Cloud Web SDK does not support IE 10 and below.");else{var e="Chrome",n="Edge",t="EdgeChromium",r="Unknown",o=function(e,n){return-1!==e.indexOf(n)},i=[e,n,t,"IE",r],a=function(e){return o(i,e)},c=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,s=Objec

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (990)
Category:	downloaded
Size (bytes):	12988
Entropy (8bit):	5.506004222972036
Encrypted:	false
SSDEEP:	384:yOhgDu46su3BhkvDZHZanuLu4PIY/aUc2sxao631sOPR24VPJXo:yOxH3BQandJfD631NM4VPK
MD5:	4D0E72A0976EBCBFEEF4C2808B68B9A4
SHA1:	706B691190E534DF8F1687F2897C43B55EE069F6
SHA-256:	23BFC6FE9E661FAB5685EB0060B116644FD1CC2A58C1FF197D8966F70B0D8FFC
SHA-512:	1D05E0BA83DDABD42610ABD98E8578AE64A4F94608262213A65716FF9675BA21ABAE4281440D1A0503CFE43B8E49866F9C70CAD15759B9DB74A069EC115D6971
Malicious:	false
URL:	https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.17.0M.js
Preview:	(function() {/. Copyright 2022 Glance Networks, Inc../.function k(a,...c){!window.console\|\|!window.console[a]\|\|window.GLANCE_COBROWSE&&window.GLANCE_COBROWSE.disableLogging\|\|(c=c.map(b=>{if("object"===typeof b)try{b=JSON.stringify(b)}catch(f){console.error(f),b="unable to convert object to string"}return"string"===typeof b?b.replace(/[\r\n]/g," ").replace("<","<"):b}),window.console[a](...c))}function n(...a){k("log",...a)}function p(...a){n("DEBUG:",...a)};/. Copyright (c) 2022 Glance Networks, Inc../.window.GLANCE=window.GLANCE\|\|{};window.GLANCE.VERSION="6.17.0.1166337359";window.GLANCE.PATCH="";window.GLANCE.Lib=window.GLANCE.Lib\|\|{};.var y=function(){var a=navigator.userAgent.toLowerCase(),c=navigator.platform.toLowerCase(),b=a.match(/(edge\|edg)[\s\/:]([\w\d\.]+)?/)\|\|a.match(/(opera\|ie\|firefox\|chrome\|crios\|version)[\s\/:]([\w\d\.]+)?.*?(safari\|version[\s\/:]([\w\d\.]+)\|$)/)\|\|a.match(/(rv):([\w\d\.]+)/)\|\|[null,"unknown",0];"edg"===b[1]&&(b[1]="edge");"crios"===b[1]?b[1]="chro

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 16 tables, 1st "DSIG", 32 names, Macintosh, \251 2023, Copyright by Lineto. All rights reserved.U.S. Bank Circular TTRegularLineto: U.S. Ban
Category:	downloaded
Size (bytes):	142464
Entropy (8bit):	6.051412558131951
Encrypted:	false
SSDEEP:	3072:jqx3RarQLyBJixRkMVTDeNQDEEDWC944FVzJy5Vim1bvU/hDrXeWj:jiBarQLyBwxRleNgEs44Xk5Vim1rU93j
MD5:	9533EA5002BC852202E52EBBD045C3D9
SHA1:	1997F7802ED3974B2FD66FC05B043F31AA2E4740
SHA-256:	456BD79F6861997E7D6FC29FD178E1DE7DE119A48ED6429A8CADA09D1889D3FF
SHA-512:	694B5E5D3775FDE1843748773E60E26EBD55CE9A9CFD9D8303C3F91557B9612863A0723A8E42A0249FDE55F8B8C1560B3D53877803F05FA9317A5FB079D87B1A
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/ecm-global/clientlibs/clientlib-site/resources/fonts/U.S.BankCircular-Regular.ttf
Preview:	............DSIG......,x....GPOSr>\o......t.GSUB.5.W..!.....OS/2N.o/.......`cmapo..z........gasp............glyf..a.........head$.w........6hhea.......D...$hmtx..f.........kernt...........loca...?...D...fmaxp.B.....h... name.E.c........post..n.........preph......<............~..j_.<............`.....-&..@...............................@.;...................2.....2.X...M.......................".........X...K...X...^.2..................P..{........LNTO................ .............. .....................H.s.6.P...P.1.P.....2...6.1.1.2.....5.P.G...H.y.7...N.....P.$.P...P.9.P.*.P...P.4.P.'.P.(.P.4.P.&...N...J.P.T.P.D.P.e.....A.0.....d.a...2...a.D.a...a...3...a...a.......a. .a...a...a.".2.P.a.".2.n.a.M.&.].....Z.........f...p...t.(.,.\.....,. ...)._.0...(...0.K.N.....E..."./.R...=...&.N...:.......N...N.R.N.&.N.<...K.N.H...`.N...'.]...'.H.....&.............-.`.$...b.`...e.>.......@.P.M.P.5.P.5.P.....b...<.n.(.T.=.k.....0.P.6.y.....>.Y.(...5.P.O.O.#._.....(.C.Y.a.....D./.(....... ...5........

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.1898980954642875
Encrypted:	false
SSDEEP:	3:YWR4b5C:YWyb5C
MD5:	28EC1EEE5F4049E3C4F2135069C1D2C8
SHA1:	3505519507CA1C2A089C46E100B80408CA278421
SHA-256:	EDC48CD3B0BC4FA7BA23AAD40B8508A17D370CA38BE174BAE2A2F64634E65A2B
SHA-512:	F71618E40EBAA14AB6D523A2341258C0DA264B545388F8FFFD14C31C64B35F94B21EB633316C4D77AFCD864AADE1DB588EF6387EE0C4787E6F7770DB0ABC1183
Malicious:	false
Preview:	{"status":true}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 420x420, components 3
Category:	downloaded
Size (bytes):	13725
Entropy (8bit):	7.318244673640702
Encrypted:	false
SSDEEP:	192:Hh4bJSwoIEXgbSIH5Kv8Rp+tTRwNkXiaam2WtvG/mGxDxDxDBEQWADIHYyyyaS4q:yJSPIEXgnnRp+tVwOLaYtvQllNFWoeuq
MD5:	084EB35A34E19C4BE4142BB5E64A4BF9
SHA1:	58DB17E448FD6F41F2002393C18A7258157943CB
SHA-256:	28C7553D2C9CEEBC51E726B55E8C8044C5DD03AC252229B57DFA881558F8AB91
SHA-512:	2B4EDFBB3B1112686FC49DCDB1C3DC3B21D9392A7843C37368C6AB1E9E4CD000EACB4730B947F4AAA6EAFED87334B3A624838D6967F106AB2F1F8D214CAA228B
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/illustration-piggybank-student-banking-420x420.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..............................................................................................................................................................................................................................................!.1AQ.R...U..aq..T..."2Br.s......b..3S.4t57.#C.Vc$u6....DE&.......................QR..!1........Aq."2..3S..a.Br.b4.#$............?...R..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3797
Entropy (8bit):	5.040908858833374
Encrypted:	false
SSDEEP:	48:Yh/FDv6mvMlHA5NN4Tzwr0CBqZlyN6M1HnQhpW34kUwWFj8fa+/dlluC/C5+bYOm:A/FxwTz07BolVMVQRFj4a+//lG+drAy0
MD5:	8B97F35587E2687E4260DA0B97254EA9
SHA1:	35DE9568349687E872CC7E37C91C96992ECBD88C
SHA-256:	E3201B914AB514D904794FB249368A4654A5BC85745D3BC15F3D9F1AB211EF77
SHA-512:	E267B6C4D706CBD47D449E80248CB2F05FBA041DC4C2FF6F644E404AB6512981E2210B0CC53259F85E2EB17983587E4C634EB4CCB90EC29682D6F0A90FF8643B
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_e39Wa46ASKtqbcx&Version=3&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"InterceptDefinition":{"BrandID":"usbank","InterceptID":"SI_e39Wa46ASKtqbcx","InterceptName":"Apply Persistent Feedback - Embedded Link","Revision":"3","DeletedDate":null,"ActionSets":{"AS_0dLuMiPwh9U6ukR":{"ID":"AS_0dLuMiPwh9U6ukR","Label":null,"Creative":"CR_a2AsGQKhBoo8TgV","CreativeType":"Link","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_6E6UYu7Dc6nykiF"},"EmbeddedData":[{"name":"webVer","type":"JavaScriptVal","value":"QSI.Browser.version"},{"name":"webBrow","type":"JavaScriptVal","value":"QSI.Browser.name"},{"name":"webScreenDimension","type":"JavaScriptVal","value":"window.screen"},{"name":"webEnvironment","type":"JavaScriptVal","value":"s.account"},{"name":"webURL","type":"JavaScriptVal","value":"document.URL"},{"name":"webReferrer","type":"JavaScriptVal","value":"document.referrer"},{"name":"webUserAgent","type":"JavaScriptVal","value":"User Agent"},{"name":"hashLPID","type":"Cookie","value":"riblpid"},{"name":"olbLogin","type":"Cookie","value":"inc_

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4627
Entropy (8bit):	5.065735983894692
Encrypted:	false
SSDEEP:	96:IuYJ6cTguYJXZhYKI5K8KdUfwKGPFs/JhajJF5HW+ID:IZNUZXIKI5K8Kdji/Y6
MD5:	788CAA2B792A46011CDCD73BC4B6D4A6
SHA1:	85F5ACFD31BC8C6F83F71801F1992A2DCE6C06CD
SHA-256:	84F4FBB82DFEFDF3FFFEB88428CDD100C6E66584E41895E8E253204A891D870E
SHA-512:	52213C8B57B2840C03EDA70BE82AC7D8ABA023C678179DE6242B64436D984F66519F880BA9DAD6CF8BA865B9C1435893EE37E69BECCF298D61258D2B4445355B
Malicious:	false
URL:	https://schema.milestoneinternet.com/schema/usbank.com/index.html/schema.json
Preview:	[{"@context":"http://schema.org","@type":"MobileApplication","applicationCategory":["FinanceApplication"],"description":["Bank from almost anywhere with the U.S. Bank Mobile App."],"installUrl":["https://apps.apple.com/us/app/u-s-bank-simpler-faster/id458734623"],"name":["U.S. Bank Mobile App"],"operatingSystem":["iOs"],"provider":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"url":["https://www.usbank.com/online-mobile-banking/mobile-banking.html#gettheapp"]},{"@context":"http://schema.org","@type":"MobileApplication","applicationCategory":["FinanceApplication"],"description":["Bank from almost anywhere with the U.S. Bank Mobile App."],"installUrl":["https://play.google.com/store/apps/details?id=com.usbank.mobilebanking&hl=en_US&pli=1"],"name":["U.S. Bank Mobile App"],"operatingSystem":["Android"],"provider":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"url":["https://www.usbank.com/online-mobile-banking/mobile-banking.html#gettheapp"]},{"@context":"http:/

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	245
Entropy (8bit):	6.790474343248209
Encrypted:	false
SSDEEP:	6:6v/lhPrG3MRjAQQThe3xPZrTW5nKzFLFvHl4ifGaNcY1IqVu+p:6v/7C3MjAQMhehPlTVbN4aiGIqEs
MD5:	4E704B1CA59BE0DD3E47AB4271AE836D
SHA1:	970F215302B7E3642664C0C5E1FDD6EB27175BDC
SHA-256:	88A249614A097DFD513C1599B937D89C8E48BB981BB6A273165DABE58535E33B
SHA-512:	0AB0D69BEEDF6FC5C568D53DC4C6FCAC088251724FA9BE4221E198949A26812BE8B701B649E43F1F05164EA9ECCC3337D2657BBC4512249981DFB7BAA7B145D8
Malicious:	false
Preview:	.PNG........IHDR...$...$.....K.P.....sRGB.........IDATx..K.. ....pJ.{.n.m...HHw..4....?P...h(P......;N...(.s......6.E)..S.9.....qG...`b...."...M....2<.3.b.@=0.E.."....P.x.g\|..5.c......o........Z....Gi.d.].&"....7Z.-...S.2K.O.....IEND.B`.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (5418)
Category:	downloaded
Size (bytes):	341457
Entropy (8bit):	5.452701458723726
Encrypted:	false
SSDEEP:	3072:WCBlxJv0x5VumBpVknW+7v+psYMN2rXsyVNYstxYQWrrcz2aQX7f1:WCTxJv0fVuqVknkpsRiBBDYQ1z2aQrf1
MD5:	6E934B5A78B3088A03B53B6D0B6E7AEF
SHA1:	A3E6EC3F8A0B4397D1DCE700F0E4579698D9BEBB
SHA-256:	3ACD5144331F92B6C9DEB7098328CFD37D78808A84C2E7864C2D281C9AF50533
SHA-512:	549EA74F9D65A372995B90230385B199EB1AE7FF67C39EA14EF98978CBC0A9A5737C317A4A11B215165EB355CF3DFE399223021312D53BA7383BD59504DB2C2D
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/usbank/dotcom-homepage/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{try{window.daePrivacy=window.daePrivacy\|\|{adobe:{optOutEvent:'event838',optOutEvar:'eVar201'},trackOptOutEvent:function(payload){payload=payload\|\|{};var s=window.s;if(!s)return;var linkTrackVars=['eVar1','eVar3','eVar8','eVar9','eVar13','eVar27','eVar35','eVar37','eVar40','eVar71','eVar90','eVar96','eVar132','eVar201','prop1','prop2','prop3','prop4','prop6','prop7','prop8','prop14','prop16','prop17','prop18','prop19','prop24','prop25','prop29','prop30','prop40','prop50','prop53','events','contextData.cm.ssf'];var pageName='usb:information:consumer privacy:california privacy choices';var linkName='usb:information:consumer privacy:california privacy choices:opt-out click';s.events='event838';s.eVar35=pageName;s.eVar201='basic';if(payload.emailOptOut){s.eVar201=s.eVar201+',email';}.s.prop1='information';s.prop2='co

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	downloaded
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44603)
Category:	downloaded
Size (bytes):	44882
Entropy (8bit):	5.394331133801901
Encrypted:	false
SSDEEP:	768:/+EruwbkyPGlRmvuhmqXyB47eyHJLLRvVNkNWQjYt3mHTndAi5V9PPk6k9cPb5+z:LBQLu5pkhbQFGLDiA
MD5:	BF03C593A8045B2F27A516BA7E143473
SHA1:	85E2B0407E8033387186759E2923D99DFBD54B17
SHA-256:	6C219EEFB79A9A5F30F921F0D0313B071BDC2FDA19F5B4FB75B2DABB6B0973F5
SHA-512:	EB4454A5E5E6E142B76FFB709A82EF2BC1BE22263354129091315332067E83B7EE187AD00A0E49599A5FF5A4F64D09ABF9933E109D301944C78DA2E297103FA2
Malicious:	false
URL:	https://562-ct.c3tag.com/c3metrics-562.js
Preview:	/!. @preserve. * . * C3 Metrics. * . * http://www.c3metrics.com. * http://www.c3tag.com. * . * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved. * Patent Pending. */.!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];return function(_0x1780cb,_0x1b4044){var _0x3cb217=_0x2c2ab0?function(){if(_0x1b4044){var _0x37f409=_0x1b4044['apply'](_0x1780cb,arguments);return _0x1b4044=null,_0x37f409;}}:function(){};return _0x2c2ab0=![],_0x3cb217;};}(),_0x1ec1ce={};function _0xf42656(_0x471915){var _0x4818e2=_0x4b2c21(this,function(){var _0x302fc9=function(){var _0x46841c=_0x302fc9['constructor']('return\x20/\x22\x20+\x20this\x20+\x20\x22/')()['constructor']('^([^\x20]+(\x20+[^\x20]+)+)+[^\x20]}');return!_0x46841c['test'](_0x4818e2);};return _0x302fc9();});_0x4818e2();if(_0x1ec1ce[_0x471915])return _0x1ec1ce[_0x471915]['exports'];var _0x3745ef=_0x1ec1ce[_0x471915]={'i':_0x471915,'l':!0x1,'exports':{}};return _0x5d91ed[_0x471915]['call'](_0x3745ef['exports'],_0x3745ef,_0

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	75389
Entropy (8bit):	5.317998421041909
Encrypted:	false
SSDEEP:	1536:4nzjSf/dcNANA2AWIIql+HbZ/f3OL4/4K:4zjSf/d8l+HbZ/PN
MD5:	25BFB70085441577363541B4DF4A77E7
SHA1:	0F9DEF166C5537480C274BCDF079ACADCBF0B196
SHA-256:	4018D7F0A983131974ACBEA85F1BE1A84C2CCA541C584F98B5C5C83413913695
SHA-512:	AC5FE942E0F74684DCA14BFD69F06A94DFE21485D9A9F4FE2360A5E194D1D180B4330015295E7700418D2BC5C271686337D359CDAB087775D543822E58A45137
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.ffd98a9d3b8cbf2075ed.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=www.usbank.com
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return a

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.2bdc3040.js", last modified: Wed May 1 18:11:28 2024, from Unix, original size modulo 2^32 70611
Category:	downloaded
Size (bytes):	23061
Entropy (8bit):	7.990844256375966
Encrypted:	true
SSDEEP:	384:0/d0Vh7dJTtf9q47qX5/bAJPDWeMf8XG2QSY5uVBrggWHiy8h7P3LbVwln:60z7nTbh7qXxAJrWey80SVVBrggQilv4
MD5:	502643635C99771E124DE408718C65B3
SHA1:	AC111B326DB429D34F517ED197B8F4C02F95B6EF
SHA-256:	43333E8FFEAC64D2470D49B30683A7D9A06A6CFAF3FFCB0EDC040563D0FCD033
SHA-512:	25C8778AF5AA656D0E98A2B538CC76C0D674E5B835DF9BE8BED625A623E3E5513D0D987C4DB6D13E7F45C8DE43C16ED5CC9400145C6E8E451E3657FFB9286229
Malicious:	false
URL:	https://s.pinimg.com/ct/lib/main.2bdc3040.js
Preview:	.....2f..main.2bdc3040.js..\.s...2g..!...,;.......^.t...:.... ....H...~......H.q..66..............$.6#..q.K..v..{.-T3.fL....3q.....}HB....e.......e.h8..k...v...uF.fM.<...[...27..i.?..B&.e@..S.$...?.\..l.p.k..L..n....,./.,..WL.lK.@/3......u@...K.......W..".,.._}...........u.B.tQ...%n..Va....B)j...........~g60.=...V........,....}..X.}q..-..3..f.b.&H............ZX..U.9.1.8r....,..b.K...u.z.k....B..^&\|!q..!......7.P.$.1..U.br..y..<.j....Vl.X..GI.bW.Rr.&KE.s.......<R./ ..jYn.L..}f....../g=.....`wZ..?m...)...7..G.VJVOe5......8..?.>...~.2.....x4....w4:....h[..............gw..b~.N......au.E.....Y...._..U-L..H......\|.%wxq!.wqAW5.C...MAtg........H.........co6b.. k....EpE......z.D..e..V...H.5...]+..4.e..y..~=...y.L.ub.8..-.,...+P!.z...].^.+.Wl-..I=.D...x0.....M..+K..3&O.q..Wj.-.Q...b.d.X.....%... ..-(Cj...^...".E.m6fKTt..t..x..L....S..[d.jT8v..x.....VR%.Sz...{ \|E._]'...MI..C. .~.,....M.......)q..!u.9}(......5Lr..vR.yJ...NJ.!.w@.].....V.~?...{h..?..@

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44603)
Category:	downloaded
Size (bytes):	45621
Entropy (8bit):	5.407532085555041
Encrypted:	false
SSDEEP:	768:/+EruwbkyPGlRmvuhmqXyB47eyHJLLRvVNkNWQjYt3mHTndAi5V9PPk6k9cPb5+9:LBQLu5pkhbQFGLDis
MD5:	2A3A0C8243B5701823DD4460D42E2981
SHA1:	8A8B7E1358EED24CEE4882359AB8E78D7186E024
SHA-256:	137A015EA9D9C3E230B1E8438546A165275BDF770285892883450A5DD710ACD3
SHA-512:	69A97E088BF57467DB5AE8A9A57AA0CA9CE104F539380FB46A8B21CED8347B6E1B4468C3F866866AF081E7B0367319E19ADA6AE1A1297D8C52CE4F066FF9A1BD
Malicious:	false
URL:	https://562-ct.c3tag.com/c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800
Preview:	/!. @preserve. * . * C3 Metrics. * . * http://www.c3metrics.com. * http://www.c3tag.com. * . * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved. * Patent Pending. */.!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];return function(_0x1780cb,_0x1b4044){var _0x3cb217=_0x2c2ab0?function(){if(_0x1b4044){var _0x37f409=_0x1b4044['apply'](_0x1780cb,arguments);return _0x1b4044=null,_0x37f409;}}:function(){};return _0x2c2ab0=![],_0x3cb217;};}(),_0x1ec1ce={};function _0xf42656(_0x471915){var _0x4818e2=_0x4b2c21(this,function(){var _0x302fc9=function(){var _0x46841c=_0x302fc9['constructor']('return\x20/\x22\x20+\x20this\x20+\x20\x22/')()['constructor']('^([^\x20]+(\x20+[^\x20]+)+)+[^\x20]}');return!_0x46841c['test'](_0x4818e2);};return _0x302fc9();});_0x4818e2();if(_0x1ec1ce[_0x471915])return _0x1ec1ce[_0x471915]['exports'];var _0x3745ef=_0x1ec1ce[_0x471915]={'i':_0x471915,'l':!0x1,'exports':{}};return _0x5d91ed[_0x471915]['call'](_0x3745ef['exports'],_0x3745ef,_0

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, software=Adobe Photoshop 23.1 (Macintosh)], baseline, precision 8, 800x450, components 3
Category:	downloaded
Size (bytes):	55040
Entropy (8bit):	7.859193094122368
Encrypted:	false
SSDEEP:	1536:PArA/yRuzd/CO/oHXAmQUq0wY6PzdGgUsNEi:IseuJ/u3AmQUSRGgUsNEi
MD5:	902224C91E0B80AF182ADBF909BA6634
SHA1:	DA4AD296652DA4499A615B544AF057C3730F978B
SHA-256:	12E13590681989DC431CC8F533C91FA7EF24846AD85C2E2C7D14880B2F4E697C
SHA-512:	170ADEB890F483110E0FC9A705C65EE2449F7B74F1555241E72BB79827ECD46FEBE5F4D397B0D6B840FA5ED69CE7B54BA5D51CA32326289BE6E451F1A28D7A25
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/photo-woman-smiling-at-phone-800x450.jpg
Preview:	.....`Exif..II*...............1...!.......;.......P.......Adobe Photoshop 23.1 (Macintosh)..PIKSEL......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dam="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" dam:Physicalheightininches="-1.0" dam:Physicalwidthininches="-1.0" dam:Fileformat="JPEG" dam:Progressive="no" dam:extracted="2023-06-05T23:14:50.579-05:00" dam:Bitsperpixel="24" dam:MIMEtype="image/jpeg" dam:Physicalwidthindpi="-1" dam:Physicalheightindpi="-1" dam:Numb

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	245
Entropy (8bit):	6.790474343248209
Encrypted:	false
SSDEEP:	6:6v/lhPrG3MRjAQQThe3xPZrTW5nKzFLFvHl4ifGaNcY1IqVu+p:6v/7C3MjAQMhehPlTVbN4aiGIqEs
MD5:	4E704B1CA59BE0DD3E47AB4271AE836D
SHA1:	970F215302B7E3642664C0C5E1FDD6EB27175BDC
SHA-256:	88A249614A097DFD513C1599B937D89C8E48BB981BB6A273165DABE58535E33B
SHA-512:	0AB0D69BEEDF6FC5C568D53DC4C6FCAC088251724FA9BE4221E198949A26812BE8B701B649E43F1F05164EA9ECCC3337D2657BBC4512249981DFB7BAA7B145D8
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png
Preview:	.PNG........IHDR...$...$.....K.P.....sRGB.........IDATx..K.. ....pJ.{.n.m...HHw..4....?P...h(P......;N...(.s......6.E)..S.9.....qG...`b...."...M....2<.3.b.@=0.E.."....P.x.g\|..5.c......o........Z....Gi.d.].&"....7Z.-...S.2K.O.....IEND.B`.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x420, components 3
Category:	dropped
Size (bytes):	32345
Entropy (8bit):	7.9189975085267434
Encrypted:	false
SSDEEP:	768:rYBH3um4WsRwMjm+CemdjzQnhJ2ch9GubbXhIzH6Zk0:rYpu5Ws167j8h8cwQhG6q0
MD5:	80671D9C77A081CD606957EF4B20E084
SHA1:	B28F60556D3B9BB187BA1DC409FA2E2CC63F124E
SHA-256:	272795138FB063749F50F2CD5821C2E0E3D8EB74D2F67E0B9D8B327DAFC8979C
SHA-512:	473E1702A3D1C2556615141847CB8A626C970A947F3164BA0C9F24C82151D94EEBB3D71A012D9DCE89571C0300D76CFD2F8088503C83F7957B54254491C7099C
Malicious:	false
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e3fffa36-5a35-43cf-b725-2052c998dd8d" xmpMM:DocumentID="xmp.did:CAA17E09F04A11EE88EDA876E2B84350" xmpMM:InstanceID="xmp.iid:CAA17E08F04A11EE88EDA876E2B84350" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0d934c1f-40ac-4c4a-881e-3ea3dc51c96a" stRef:documentID="adobe:docid:photoshop:32f2732a-5625-7044-9439-a4f3c6371cf1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x869, components 3
Category:	downloaded
Size (bytes):	201312
Entropy (8bit):	7.98100421417824
Encrypted:	false
SSDEEP:	6144:8s35ggJqJZxVFyMj77xMnb0B4bENbPGpT2:XgJfFvj77ab0B4QpepK
MD5:	7104CAAC23FDF0AFF3745EE1F0D40C16
SHA1:	1ADDF1D53A2F49CD5C7744B282336150ACB32A8F
SHA-256:	2BBA5842E060ABCC55A25198649FA7E94D4E07D8A07BBAB56F579A02C97010B9
SHA-512:	05F0B547CCA844172A02FEB9614C35167A21264ECF3EF83A8586EF16320992BFF03FD267B85542B77ABC3306AF92E18C0DA0D422504F50CED3B9CFFAB2D04155
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/photo-woman-dog-in-rain-1920x869.jpg
Preview:	......Exif..II.................Ducky.......(......Adobe.d.....................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;;;;;;;;;......e...."..................................................................................!..1AQa"..q2..B..#...Rb3..r.C$..S.4%..D...cs.....................!1..AQaq..."2..B....R..br#...3CS..............?..A..X,..~.B.....I..\|_..X....%....+7.y.b..`.....?....7.........4..SK....)`(^....l...TPV.....>..k..Zg...^..tU...)$b{...(l....-...'...U....^...V.W...,.Q..V.4../.%.....q.,.._...2[.fWa8.36[..;..s...j2....<.n..q.e.Cp.\.....wA.>..U......n.q.Y....($`C\|.;s.KV..1.n@[.m.m.=......A.9.....2.g.X..P=...6......}.6..j0lj%/,p.:...m[...EN4.S.Q..i.L...].}`Mn..'.{...=..q..>g....\|JX[.8......E...@.@.iP..>..b.n..@.,...43...t.0.y.nAf\|&...).le..zK3.V....a.....)....*.........c..5..3Ooke...........D...Qq.`H...(c......u;......Kq.....^.;.......%U.,......i.>..+.Y ..y..+....

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.892625197481474
Encrypted:	false
SSDEEP:	12:UsTh9D1ksr8QQgUhKAB3FG6BYNrO7rWuNhcYcdNA4I:BTN/bQBxhBIyFENA4I
MD5:	37D40FDFB791FC582C9522CBA9EDF1C5
SHA1:	5B77E5C4FED06BB12B159B47726C0E6A75E0D6E6
SHA-256:	A43EBC63C4B68327BED73EC050DD70CF77F1011F83E52BFCD5862481449604CC
SHA-512:	D3041B505C2FCD7F843DF1214CC4E8261785745F61B49001CE48E67C890DC106D43B7DF47DE1DDBBE187A0CDCD5F5F8037CCD7CE4852ABCAAE15FA13308F1AAD
Malicious:	false
URL:	https://mpsnare.iesnare.com/5.7.0/logo.js
Preview:	/. Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.logoVer="5.7.0";b&&b._if_ubb&&(b._CTOKEN="clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=",b._if_ubb());try{a.api.io_bb.add("LID","0Drt3fdasiFRhdXG7CWPgPiuY2fjQTFVTyxCVwiiP0YAjCwHS6sHX/HaBs2MxDctCD7APMtNCqfyA+la2Apscw==")}catch(d){}})();.}).call(this);.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:q36suIzn:q3uE
MD5:	BA101C8FF52C2F6AD6C85744F1C3A1E6
SHA1:	6DA3AAA2FFF6DF225C5D2BB8ABD204EBC6C09EC7
SHA-256:	26CC39940BACFDD0FECD7DA0E5052CED01F4FAAFFE7FD297CE2B5E9E51656396
SHA-512:	458C6A594459144C0A6C0932830ECDE959E2FF3CA0EA4F19A9A99BBCBF1C48577ABFCCE901AD7225F857B612A766D5626F4064B3AFAF01829EA6D105FD07C541
Malicious:	false
URL:	https://fls.doubleclick.net/json?spot=3033967&src=1521091&var=s_6_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_6_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1517995152937
Preview:	var s_6_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65335)
Category:	downloaded
Size (bytes):	102078
Entropy (8bit):	5.432858131234249
Encrypted:	false
SSDEEP:	1536:6lMjetxdGWzhg9iOZ8A9yA3Jd3LUr8DFMUaXoA+b3n46w:IS9l0A/FMUaXoA+bQ
MD5:	D192D121C52A822EE91F6FF28E104238
SHA1:	CD7186E5D24254DFE494C334B1862D485A780369
SHA-256:	DC941E52F5AAEB5AEDCF5370E69509D19034F3B3116678046CFFEBCBA8FFA022
SHA-512:	B23500D63812345133EAAB580A00B0AACF2A56FD35D606CFDCAF2B433A7FA6777359508A61635E6B533C3B5ABBFD3FE3FDCCCCE60531A0326502B46CA4752DDA
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/646-54dd81dd41f600c5fb5a.js
Preview:	/* Auth Login Module : @usb-sharedauth/react-login-npm-module - 8.14.0 . Published Date : 17 Apr 2024 - 21:6:5 . . 2024 Digital LoginWeb Authentication Team */..(self.webpackChunkUSBAuthLoginModule=self.webpackChunkUSBAuthLoginModule\|\|[]).push([[646],{646:()=>{if(void 0===e)var e=new Object;var t="R Nov 2022\|AM_2.22.4\|11.14.2022\|baseOLB";if(window.s=new o("[report suite id(s)]"),"undefined"!=typeof Visitor&&(s.visitor=Visitor.getInstance("675616D751E567410A490D4C@AdobeOrg"),s.c_r("appVisitorAID")&&visitor.setAnalyticsVisitorID(s.c_r("appVisitorAID")),s.c_r("appVisitorMID")&&visitor.setMarketingCloudVisitorID(s.c_r("appVisitorMID"))),void 0===e)e=new Object;var r=document.location.hostname.toString();if(""==r&&"function"==typeof ApplicationContext&&(r=ApplicationContext.getContext().getContextProp("SERVICE_HOSTNAME")),r.match(/uat[\d]?/)\|\|r.match(/it[\d]?/)\|\|r.match(/stage-authmodules/)?s.account="usbankdev":r.indexOf("usbank.com")>-1\|\|r.indexOf("liveperson.net")>-1\|\|r.indexOf("emp-onl

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	217
Entropy (8bit):	1.9224224668141432
Encrypted:	false
SSDEEP:	3:I/i26/0KBMJdF/FiptxWWKGXjHvFNFESl:bcaxDDKGL6Sl
MD5:	3896964DD154C3BE5CCA2DC78ECC0599
SHA1:	8CB1819F22B6A363AB6D0B4B31C30493234482ED
SHA-256:	58E355B1CC94C4593D54AE444C24A486E2C0945B93212A94FD7267AD0ABE85AA
SHA-512:	CC34B9B6F94D66B0945FD39A10CAB556A95C0018EA606B37DF2FF650ACD0310766349AB0D477DAC082B9A833AF3AEBF26CD70D1BAC5010A86A7FB89564352E33
Malicious:	false
Preview:	. {. "error":. {. "code" : "400",. "message" : "Missing Headers". }. }.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093)
Category:	downloaded
Size (bytes):	42706
Entropy (8bit):	5.870970107521293
Encrypted:	false
SSDEEP:	768:B02NAlNR1TtZgfgnbAKjXQvEhfoAhUex4sIu08fBJLqh1mhhfZH:6nHR1pWonccX9oAqsIu08fjOhIhx
MD5:	25B51FC4DC57145AED41C15FBBD3819B
SHA1:	09F5D20E655EF3E84EA079234EB0EC7B17E17CF5
SHA-256:	E7CC8D09D2A4DAE5A05D7D6A7684B44D8D8CA71BD1B2BBD373BD7680F018ED97
SHA-512:	3F19053011E06E852A57A27D0B4F55352E3673A4FB4A6E0CFB273B4B220911B483707517D8A1942B233583EE3BE108B782C943789DA1A640B452CCEBE804E031
Malicious:	false
URL:	https://mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false
Preview:	/. Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function Wa(){function Xa(){var a={optional:[{RtpDataChannels:!0}]},b;if(b="function"===typeof v.RTCPeerConnection&&v.RTCPeerConnection\|\|"function"===typeof v.mozRTCPeerConnection&&v.mozRTCPeerConnection\|\|"function"===typeof v.webkitRTCPeerConnection&&v.webkitRTCPeerConnection){f.add("RTCT",b.name);var c=Da();try{if(c&&c.ua){var d=new b(c.ua,a);d.onicecandidate=function(g){var k=c.cb;g&&g.target&&g.target.localDescription&&g.target.localDescription.sdp&&(g=g.target.localDescription.sdp)&&(g=A.encode(I.Y(g.substring(0,.2E3))),f.add("RTCSDP",g),f.add("RTCH",k))};d.onerror=Ea;d.createDataChannel("");d.createOffer&&0===d.createOffer.length?d.createOffer().then(function(g){"object"===typeof g&&d.setLocalDescription(g).then(function(){}).catch(Fa)}).catch(Ga):d.createOffer&&d.createOffer(function(g){"object"===typeof g&&d.setLocalDescription(g,function(){},Fa)},Ga)}else f.add("RTC

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (483), with no line terminators
Category:	downloaded
Size (bytes):	483
Entropy (8bit):	5.553133215083514
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH2L0d4UupQYBWX8z8:hMiRO9DQ2S8z8
MD5:	7324E4FDC1EAD2FB64B584F4F717408F
SHA1:	74A10F8EF946A25DCCEAFB11218FF219B559183C
SHA-256:	5D788591A7D9BBDBB5B3EC2E3ABAEA4F3A6475586C3151070A8CA519D84E4D5B
SHA-512:	AA10AD92A3731C895ABD8A7F294CFD1307D93F69708F3CED8F33CEC8F829A4A2F9F38602DBCB4D5FF42BCFFB622B2B9E012BC1021DA82EE0860ECA57660516DD
Malicious:	false
URL:	https://6219543.fls.doubleclick.net/activityi;dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=*;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html"/></body></html>

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	204100
Entropy (8bit):	5.522778128290628
Encrypted:	false
SSDEEP:	3072:LLvWuawx8nxZ8urmdB8Vz+8w3JriOqnHiGK2/ifxYgPZ/UBkvB:/eFnxSurXvWr1oiGK2/iJkBkZ
MD5:	F2115576DC63D362E18F757326E6078A
SHA1:	40B434D32EDF7A7EEC547FB8472450A5272B6098
SHA-256:	2B63E21881EB390202DE8D3026C0A5881DE6C40DED71ECC0B0B4A16BED47534E
SHA-512:	187334AFE90F7C634C0F4C6120639CE81B5080C017A511C11BB81CA2F6DB34CCB57EF8EE80729AFE968CCD159226A59D75509ACA381425BE555A9E6EFA3DFF82
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=DC-6219543
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{do

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (558)
Category:	downloaded
Size (bytes):	54962
Entropy (8bit):	5.387590970360018
Encrypted:	false
SSDEEP:	768:VTxvs85F559ipZrQB8WBicTLvsZ5hyBbcodRYt7NNqVyXScCqWe5C/jd5VqZsTF+:5xvs895ITw8W8QqobcZtnKe5M+
MD5:	51FC2A7FE901A5A93406BAB767B7414E
SHA1:	68F6B9D1DFD4517FD1A951527C881DF6E23DFFB2
SHA-256:	5CF8592F9BED352EFC158A4675CFF7BD24AA338934ED4ED3EC22AA073D9849C6
SHA-512:	A968034EC3AE34A5406AD15FB7F733EB95E93706EC6E6683950A2B5F5F8366CE979569E1D0C293E4C9BE06CD33571A33CD1E87E64D67DA9019B3BDB3F7F8F48D
Malicious:	false
URL:	https://cdn.appdynamics.com/adrum-ext.8ad16b8375327e66a32816a8ad7be617.js
Preview:	;/* Version 8ad16b8375327e66a32816a8ad7be617 v:24.4.0.4454, c:60c7a5beaa793e7d662bbc98b0baeea814901fdf, b:24.4.0.4454 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var m=window.ADRUM;if(m&&m.q&&!0!==window["adrum-disable"]){var B=window.console,C=B&&"function"==typeof B.log?B:{log:function(){

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10158)
Category:	downloaded
Size (bytes):	10159
Entropy (8bit):	5.258869481621991
Encrypted:	false
SSDEEP:	192:LnmBNp87rbM3DM15HKoFIqfezsAVTwUZ/hR79BWbbQGVaC5hRyhGWS44qpK7YXW:LmBN+M3DMfWzf79BWbcotDRsG14X4
MD5:	D6F0435164AEFE6CF324147B77C7B6BB
SHA1:	41050F6640694E4FB214881216207B0B2A080137
SHA-256:	3A95689E90E588B166F7B3ECD334959A2D6A3DA1D73D557C8FB72FA10CF465DD
SHA-512:	74A349346D3FFC1AC88DAF1B614859233D2D3B8315913F1D7B73DCD31AD85E7513BC1509778866B812936FDBDB78E11D4A751CB0007A51071678A93EF356C70F
Malicious:	false
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function u(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340)
Category:	downloaded
Size (bytes):	2061473
Entropy (8bit):	5.598347246388243
Encrypted:	false
SSDEEP:	49152:Q3AgPSNWmde0pyEWNrWRg1sOB00GPoqZPGPoqZjxGPoqZjGPoqZmGPoqZuGPoqZN:cCPpM
MD5:	839913C41A1C564E5B11C6FEEA8D6746
SHA1:	314D5146E128E6789DF1D34BB8EB23189EEE2A1D
SHA-256:	8621D25807FD6088FA7536C1CAE23E203A936C14BDCF65190389D5C5BC36020C
SHA-512:	E3F8F5677410DEF94E65D87F36896F8AAB5EF0CF7D3E2CFECEBDC56D94544939BF0C3194206F701D085E4F4200B22498827C43669E47EA9AAEC9A146D5B9E404
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/main-4f9a982f8b35c51616b3.js
Preview:	/* Auth Login Module : @usb-sharedauth/react-login-npm-module - 8.14.0 . Published Date : 17 Apr 2024 - 21:6:5 . . 2024 Digital LoginWeb Authentication Team */..var USBAuthLoginModule;(()=>{var e,t,n,o,i,r,a={710:(e,t,n)=>{"use strict";n.d(t,{A:()=>kS});var o=n(664),i=n.n(o),r=n(556),a=n.n(r),s=n(761);function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(e)}function u(e,t,n){return(t=function(e){var t=function(e,t){if("object"!=c(e)\|\|!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var o=n.call(e,"string");if("object"!=c(o))return o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==c(t)?t:t+""}(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}e=n.hmd(e);var l=i().createContext(null),d=function(e){e()},p=funct

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5208
Entropy (8bit):	4.9465874603428075
Encrypted:	false
SSDEEP:	96:LRRW0W6syNN3+qaoSiSjqrjCMvL+UAs+IKRA3l+wzVUmGo6pVrP1lUJ+6IgOG4iB:dw0EyD3+q7ajZMvL+Uv+IKRWlZzV0pV+
MD5:	895B196173F86DAE8C9538646889D0BC
SHA1:	B023625D139B03000C31D448215EB1B7F67006AE
SHA-256:	9ABF907A2E8494807BDFCEF93C4C831B064F6BEA124D3FB402E61FB6622CFDDF
SHA-512:	F7633818F02AA961E46E2A02B4C1AC856AF189A47A25F5968FC604855FF6546963B3398B6451D59DBE4D788874AD508D7015849B86F09C6C4259105B29941AAB
Malicious:	false
Preview:	{"commonDetails":{"ltpAccountText":"ACCOUNT","ltpCopyButtonText":"Copy","ltpExternalAccountsHiddenText":"We only show you the accounts eligible for transfers.","ltpNoText":"No","ltpYesText":"Yes","ltpCopiedText":"Copied","ltpCheckingSavingsText":"CHECKING & SAVINGS","ltpConfirmationText":"Confirmation","ltpAddExternalAccountsText":"Add external account","ltpLetsFixText":"Let\u2019s fix this","ltpCancelText":"Cancel","ltpAmountText":"Amount","ltpAccountsText":"Accounts","ltpDollar":"$","ltpContinueText":"Continue","ltpCheckNumberText":"CHECK NUMBER"},"saTitles":{"ltpPayoffTitle":"Accounts eligible for payoff","ltpManagePaymentText":"Choose a payment activity.","ltpBillPayBillerOptionsText":"Choose a bill.","ltpPayoffDetailsTitle":"Total payoff amount","ltpStopPaymentProvideCheckNumText":"Provide a check number.","ltpDepositCheckOptionsText":"See how to deposit a check.","ltpSelectPaymentOptionText":"Choose a payment method.","ltpTransactionText":"Transactions","ltpStopTransfer":"Stop tr

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.103334618504774
Encrypted:	false
SSDEEP:	6:YmQ3R/E76v6+fiXSCbovNoAzaIAW/LK4JYCPX8:YmQhlv6+f+SlqA29W/5JlM
MD5:	3EEF0761C7E634458109C7240DDE6B90
SHA1:	18F0B73761B664A0B2EFF9EAEE49F44DDCBE7E11
SHA-256:	44E8247F315D91B1BF58EC655A23BF36F4783141B111630B1126D2FAF10802E5
SHA-512:	F6D26C21A9DCE0B145D031EA4B37974A4F497F6608C25C6CC2039B260DFD449DA9E2E2A15F84268D8A1B12DE7B9E90ADC4F39CE1FD3E57088EE94BBB6AEBB995
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_a2AsGQKhBoo8TgV&Version=1&Q_InterceptID=SI_e39Wa46ASKtqbcx&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"CreativeDefinition":{"BrandID":"usbank","CreativeID":"CR_a2AsGQKhBoo8TgV","Revision":"1","Title":"Embedded Link - Apply","ZoneID":"ZN_6VxkyqYWaF9f1T7","Type":"Link","Options":{"linkText":"Give feedback"}}}

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1686)
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	5.098986203762534
Encrypted:	false
SSDEEP:	48:svxTFcCPrwbc975WOzj1SrrIJkuTWdDPp36T+6tz7tp/33s46SBl7s:sZRxac/IQWuiDd6tT3s4nBl7s
MD5:	FB2E39A1AD8EECE0FD04AD7746E66565
SHA1:	08380A96AA9C16D2670811B1394391B3073E83D3
SHA-256:	781536458D7C9A1576135C959BD81E2F85692644A125E4FA12972ED10B66B155
SHA-512:	4E446671B1AE8E4795DD381608D3D42DC022CC1AC576FB59D73FF022C64E94B650EDF400F46986B4C32A53F7F3A4B3C980395FB84990F86E3A74CC8FAB41602E
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/LinkModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var i={};function e(n){if(i[n])return i[n].exports;var o=i[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=i,e.d=function(t,i,n){e.o(t,i)\|\|Object.defineProperty(t,i,{enumerable:!0,get

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539)
Category:	downloaded
Size (bytes):	15666
Entropy (8bit):	5.369432639111234
Encrypted:	false
SSDEEP:	384:iYXeo6zN8VX7As6ZPqnMbj4tJPl+i+Sh2kRQlsd84:Puo6zNoLAnH4tJPlASh2kRQlsdL
MD5:	5922EBC75E45A8CA8A7539AB367D1E01
SHA1:	9FF29784E0967B7D003270D5225840BFC2B4D7D2
SHA-256:	AD05AACAF6D286FB497B47BC76F375215F0BE5AAD326956B62E3BA4F9BE25051
SHA-512:	3A88DCEAC1D65586DEB0DC9787A3C91A28EA69CBCD96EC537F9863090F27AA3B50C1C62BE21601B0E4A42867B7515B71BF80DC7441B8B06DF5ADD3664DAFCB59
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/usbank/clientlibs/clientlib-reactLogin.min.5922ebc75e45a8ca8a7539ab367d1e01.js
Preview:	var requirejs,require,define;.!function(ia,U){function na(b,c){return c\|\|""}function L(b){return"[object Function]"===V.call(b)}function M(b){return"[object Array]"===V.call(b)}function y(b,c){var d;if(b)for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}function aa(b,c){var d;if(b)for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));--d);}function v(b,c){return oa.call(b,c)}function n(b,c){return v(b,c)&&b[c]}function D(b,c){for(var d in b)if(v(b,d)&&c(b[d],d))break}function ba(b,c,d,f){return c&&D(c,function(c,g){!d&&v(b,g)\|\|(!f\|\|"object"!=.typeof c\|\|!c\|\|M(c)\|\|L(c)\|\|c instanceof RegExp?b[g]=c:(b[g]\|\|(b[g]={}),ba(b[g],c,d,f)))}),b}function z(b,c){return function(){return c.apply(b,arguments)}}function ja(b){throw b;}function ka(b){if(!b)return b;var c=ia;return y(b.split("."),function(b){c=c[b]}),c}function I(b,c,d,g){c=Error(c+"\nhttps://requirejs.org/docs/errors.html#"+b);return c.requireType=b,c.requireModules=g,d&&(c.originalError=d),c}function pa(b){function c(a,e,b){var h,k,c,w,d;e=e&&e.s

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.947363562844465
Encrypted:	false
SSDEEP:	12:UsTh9D1ksr8QQgUhKiJecB3FYvlKL7rWuwqAjA0B2NA4I:BTN/bQBR/SdKLK1jA0wNA4I
MD5:	269F19B042795E6741CE4C37EC40CD8E
SHA1:	44CB9098DED0373C34148AD2B10272EB20BC74B9
SHA-256:	BEF9FE19283C32DB25956843E82DB3A9C37821545423AE53464E9D2BA5118404
SHA-512:	CD2EF03DB4DF2C0AA456FCCD070529F3D6E82BD29F92D22B7E04034884DC3B68028A52CD9FEB3E14B0A8AD17D397B72114228D6762E49DAA41A1C0CF102A0AD1
Malicious:	false
URL:	https://www.usbank.com/Proxy/iojs/5.7.0/logo.js
Preview:	/. Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.fp=a.fp\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.logoVer="5.7.0";b&&b._if_ubb&&(b._CTOKEN="8NkPS0UWmDy+pNEaXrzHdr6rADy7ayG1++E1ulE2sGo=",b._if_ubb());try{a.api.io_bb.add("LID","0Drt3fdasiFRhdXG7CWPgPACybMZzQCgV0DVX6ZL+moroOQtLW+NRprXJkgFOixGkOPxSduSW9yYTd+t4JppBA==")}catch(d){}})();.}).call(this);.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (772)
Category:	downloaded
Size (bytes):	170152
Entropy (8bit):	5.386265592729929
Encrypted:	false
SSDEEP:	3072:RVsFPDylwitlIOxR6Ra+KZbsN8s5NolglmDbyblgkE3LXjXrX3Lw+XK4AHaw4wHc:pR6RtKZbsNYkQkuFA7fCL448bNCSyTu2
MD5:	9F6327053AFE76DC82FD321005AA7727
SHA1:	B461E31C4D5F1A9A58AF53B92B36189B81459CB3
SHA-256:	AA242403A07F0365EBFCCD09DB14A85C60A8E75543122B55A8D438F9AE4AD673
SHA-512:	0BBF022EE594AF7E7D364CBAC8BE7DF37140EADE9B9AB8630540BD5BD0D9584F280E2966D6D5B30FA31D392AAA4E844264A1D4DAB2C78766F974CA0E83C9C7DD
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/usbank/clientlibs/clientlib-ghp/scripts.min.9f6327053afe76dc82fd321005aa7727.js
Preview:	var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};$jscomp.arrayIterator=function(a){return{next:$jscomp.arrayIteratorImpl(a)}};$jscomp.makeIterator=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):$jscomp.arrayIterator(a)};var usbUtils=usbUtils\|\|{},sizes={small:672,medium:1056};.(function(){usbUtils={nodeListArray:function(a){return a.length&&0<a.length?Array.from?Array.from(a):Array.prototype.slice.call(a):[]},selectNodes:function(a,b){var c=b&&1==b.nodeType?b.querySelectorAll(a):document.querySelectorAll(a);return usbUtils.nodeListArray(c)},selectVisibleNodes:function(a,b){return usbUtils.visibleNodes(usbUtils.selectNodes(a,b))},visibleNodes:function(a){return usbUtils.nodeListArray(a).filter(function(a){return a&&null!==a&&!!(a.offsetWidth\|\|a.offsetHeight\|\|a.getClientRects().length)})},.nodesBoundary:function(a){a=usbUtils.se

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4378)
Category:	downloaded
Size (bytes):	248444
Entropy (8bit):	5.543425439143513
Encrypted:	false
SSDEEP:	3072:VW6vWuawx8nxZ8uzmNU8Vz+8w3JNPY64V7m/HiGK2/ifxwgPZmsh4o0t:3eFnxSuzGvWZamPiGK2/iJNh8
MD5:	6D49203A4758BCF18010F59CDF8F83B8
SHA1:	6B0E4AECC898551E447DFB603A55D4DF9B963D9C
SHA-256:	E7A5067B79AA9E815E5835871ED29F2026C5589DFA03E8E09D674290BA13C706
SHA-512:	7BF39869A42A7BFF3DEF4528B8AE320FD95DACD1A0250DF26CE76818E5717F9D1D277DF21DB7D0FB2C07DB18B141C568437DA6650DA43C03666FE5EAD147EDDA
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=AW-978114044&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":19,"vtp_instanceDestinationId":"AW-978114044","tag_id":116},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameV

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=*;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7611)
Category:	downloaded
Size (bytes):	8464
Entropy (8bit):	5.249853918342814
Encrypted:	false
SSDEEP:	192:sZRxaB2gQ/8o84cxT9OAnn/BwGeySty0qSGQspaS7ABHz0ul7s:4RSl9OAn/aGeyStynl3B
MD5:	598BD35F963215D0164D0CACCBAC00F4
SHA1:	3D48145DF81CFBAE37908E7B5C500DD53A9A5DBE
SHA-256:	ACAD1137CAA1B6DA1DD0F67F56D17430A5D6CCD00F8A923FDCC831224EF751FE
SHA-512:	707F8231769ABC9161D4D4ADE9F95913A06B0C4D29178E1332AF1955B21F87C929B8ACF14E5DEEBA556D94623AF8B59EC68D9E99CAA6F737259518F6E8B146E9
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/EmbeddedTargetModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var e={};function i(o){if(e[o])return e[o].exports;var n=e[o]={i:o,l:!1,exports:{}};return t[o].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,o){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 16 tables, 1st "DSIG", 36 names, Macintosh, \251 2023, Copyright by Lineto. All rights reserved.U.S. Bank Circular TT MediumRegularLineto: U
Category:	downloaded
Size (bytes):	143660
Entropy (8bit):	6.064141235139533
Encrypted:	false
SSDEEP:	3072:W7iEM7DYcGpqyEWNJ/cFjrmt4vWe2EYDAHVRZV0S+7VFq3ZnNj:WOEsD4pREWNqy4vWe2JDA1h0S+kZNj
MD5:	C45F21F4E0AE907A019ED239817885E1
SHA1:	D0DD1AFCB21DB35DFFC89E88ABC934C09EEA5E5E
SHA-256:	41D4EE4574AFBDA380F0AAA982B63E43F83DF23ECEB5AD4FD0457048CD52CBD1
SHA-512:	F8F64DF4B6305BC0E2A1FAEC61F8D565795B537133A1C749CE612199BA7CFFD3E449C44F54A44248CAB3688BB2BA9D4836579653AADA0C11821CCDE7CFC6B024
Malicious:	false
URL:	https://www.usbank.com/etc.clientlibs/ecm-global/clientlibs/clientlib-site/resources/fonts/U.S.BankCircular-Medium.ttf
Preview:	............DSIG......1$....GPOS$.n....\|..w.GSUB.5.W..&h....OS/2OZp........`cmapo..z........gasp.......t....glyf..S........head$.w........6hhea.......D...$hmtx.[2........kernK$q....\....loca..`....D...fmaxp.B.....h... name;......X....post..n.........preph......<............}Po._.<............_.....-&..A.............................6.A.=...................2.....2.U...Q.......................0.........X...K...X...^.2..................P..{........LNTO................ .............. .....................C...-.P...P.(.P.....,...-.G.,.G.....0.P.:...5...6...;.....P...P.}.P.-.P. .P...P.,.P...P.$.P.'.P.....;...9.P.N.P.:.P.].....@.+.....l.Y...,...Y.F.Y.2.Y...-...Y.,.Y.+.....Y.'.Y...Y...Y.).,.[.Y.).,.w.Y.Z.".g.....Q.................}.).G.T.....G...$...K.&.......(.^.H. .).Y.).-.).k...Q.(.<.H...6.......H...H.f.H.<.H.K.).^.H.[.).x.H...%.q...;.C.....=.......(.....-.y.!...Y.y...z.;.......<.P.A.P.-.P.+.P.....Y...7... .N.8.v...&./.P.+.......9.R.....9.P.D.^.".h.......R.Q.......9.(...........&.1........

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (761)
Category:	downloaded
Size (bytes):	40931
Entropy (8bit):	5.852661443133896
Encrypted:	false
SSDEEP:	768:DuR/rm+y2OEwlp07nhTMSmuA7K4jp9phoTCpevsK0nCZ+uy2O:DucX2ObAnhTMSm/KmNoTtsK0nCZ+Z2O
MD5:	8960F94EA2082983640A8E5597FCC56A
SHA1:	23530AC15B77E791AAC405224137FA728EB28561
SHA-256:	7BDFD46CDAC7D6E9A54B7E63D8C43CCE2A82269CC72C3A2CB471EAB955240A5B
SHA-512:	BF40752D56E8F6BB1567F71B9E42FCD90903F61C6B14A1FD7F2F5A7F06B868E76BF974A2AE043B6769FDA2209014DCADB6B294E8C2C8AC10721F77D8B0A02037
Malicious:	false
URL:	https://www.usbank.com/Proxy/iojs/general5/static_wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false
Preview:	/. Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function Za(){function $a(){var a={optional:[{RtpDataChannels:!0}]},b;if(b="function"===typeof v.RTCPeerConnection&&v.RTCPeerConnection\|\|"function"===typeof v.mozRTCPeerConnection&&v.mozRTCPeerConnection\|\|"function"===typeof v.webkitRTCPeerConnection&&v.webkitRTCPeerConnection){f.add("RTCT",b.name);var c=Fa();try{if(c&&c.ua){var d=new b(c.ua,a);d.onicecandidate=function(g){var k=c.cb;g&&g.target&&g.target.localDescription&&g.target.localDescription.sdp&&(g=g.target.localDescription.sdp)&&(g=z.encode(I.Y(g.substring(0,.2E3))),f.add("RTCSDP",g),f.add("RTCH",k))};d.onerror=Ga;d.createDataChannel("");d.createOffer&&0===d.createOffer.length?d.createOffer().then(function(g){"object"===typeof g&&d.setLocalDescription(g).then(function(){}).catch(Ha)}).catch(Ia):d.createOffer&&d.createOffer(function(g){"object"===typeof g&&d.setLocalDescription(g,function(){},Ha)},Ia)}else f.add("RTC

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	4.555157719337154
Encrypted:	false
SSDEEP:	6:YseTM2zAJCZPiY19ifS0NfIxtHvMSgTP6+YYp6HpcI:YHTloQPieb0o1ESgqII
MD5:	EE83BA4DC7D8735F0C2B5AE6BEAEA699
SHA1:	2D11124F692A3D98E2F91FCD9637803928153642
SHA-256:	87534F7B11A9F31AEB0F49E32413CC812E4695A9E9704DA2C95B78544A18B8EC
SHA-512:	AB74357B6DAF2A9937627DDF293545D8FB48A438E92FA2A543CFA11FD404D349A379244569AB065CA965D7FE3E457717178546BEAD7D43A8B1CAFBEE51B12117
Malicious:	false
URL:	https://www.glance.net/services/authorizationservice/GetVisitorSettings3?groupid=19921&site=production&service=presence
Preview:	{"VServer":"lb-video.glance.net","coloSelectUrl":"presence-location.glance.net\/colo-lookup","isMetricsEnabled":false,"isPresenceLoadBalanced":false,"metricsPassword":"","metricsUrl":"","presenceUrl":"","privilegeString":"encrypt:on;guests:10","screenshareTermsUrl":"","service":2}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	34
Entropy (8bit):	2.882524990934808
Encrypted:	false
SSDEEP:	3:CUXCXk5q:4k5q
MD5:	A82BA3A9D42148E9CF209DF13D8C3F3D
SHA1:	DBA80835D31175BDCF0BCAD1ABAFEFB06D86E304
SHA-256:	1E85EC81B9800B4C443D39CACA0D0926089A3AC201120DB1CEB45B93789480B8
SHA-512:	97777A4B16BEDD7547A46B1AB1D146C50C1547BBE23C70708806A357352A1291A4EB6CDAE049D0E334F33903DBC98D7054EB5BFF84DAB0EDCD091241EBBE5353
Malicious:	false
Preview:	GIF89a.............,...........L.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
URL:	https://www.usbank.com/dam/images/svg1/privacyoptions.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65374)
Category:	downloaded
Size (bytes):	393648
Entropy (8bit):	5.56922317124014
Encrypted:	false
SSDEEP:	3072:RnrX6barWGPHsA75NABeUfJSIr7v5jnbQwWUgqawWo97f/WY:aXJd5jYUgqawWw7f/WY
MD5:	67B064339091C7CA9A27AFF81745733B
SHA1:	C3710EFC3CFE8D834BCBF60F87E3525E238D794B
SHA-256:	3760A30CCBB15EF158AFFACD7B8139251DE294B4B7B6F812F13E2C3DDFA72448
SHA-512:	9285E8A4134B4BD726BD2731BBBB65B4D48D8DA2F87B0DCCAF3C150D10DFF7FEEAF34B5A332F180389FA6F64164C7554B4FC55C6C84D8F212BB3AB937A36C175
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/635-5500c6c47dfa1c4299da.js
Preview:	/* Auth Login Module : @usb-sharedauth/react-login-npm-module - 8.14.0 . Published Date : 17 Apr 2024 - 21:6:5 . . 2024 Digital LoginWeb Authentication Team */.."use strict";(self.webpackChunkUSBAuthLoginModule=self.webpackChunkUSBAuthLoginModule\|\|[]).push([[635],{635:(e,t,a)=>{a.r(t),a.d(t,{LoginPage:()=>pn,default:()=>pn});var n=a(664),s=a.n(n),l=a(556),i=a.n(l);function r(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function o(e,t){return e(t={exports:{}},t.exports),t.exports}var d=r(o((function(e){function t(){return e.exports=t=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e},e.exports.__esModule=!0,e.exports.default=e.exports,t.apply(this,arguments)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports}))),c=o((function(e){function t(a){return e.exports=t="function"==typeof Symbol&&"symbol"==typ

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1314)
Category:	downloaded
Size (bytes):	19098
Entropy (8bit):	5.407873420705524
Encrypted:	false
SSDEEP:	384:tOnSDUw8zPTh4dItSQ0JBDwL1q8nPNWw//xyefENyNwbGc1nSei2vhvqpbP6vX2B:tQBSQ0TSqgPN7OGcpSeVYk2wp+
MD5:	396C1742ECABFF1BDCAEEAB9FA027890
SHA1:	467EDC6C6EA4F80AC7CB9C06452F55C1845FB496
SHA-256:	AAABF258DDFE039BD4FE5A1FE9FC57BE924C9459ACB506B0D0B4CCA7BA5F30EB
SHA-512:	BBF9267B47419088116CDAD4E10EED6909EA13A979228819F9A629739314EC260409DFCEA9B9A5E705C9A818956D1B50367D4688910EE563E1FDF43141336A6E
Malicious:	false
URL:	https://storage.glancecdn.net/cobrowse/js/GlancePresenceVisitor_6.17.0M.js
Preview:	(function() {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa=this\|\|self;/. Copyright 2022 Glance Networks, Inc../.var h=["6","17","0","1166337359"].slice(0,3).join(".");Uint8Array.prototype.slice\|\|(Uint8Array.prototype.slice=function(a,b){return new Uint8Array(this.subarray(a,b))});.ArrayBuffer.prototype.slice\|\|(ArrayBuffer.prototype.slice=function(a,b){void 0===a&&(a=0);void 0===b&&(b=this.byteLength);a=Math.floor(a);b=Math.floor(b);0>a&&(a+=this.byteLength);0>b&&(b+=this.byteLength);a=Math.min(Math.max(0,a),this.byteLength);b=Math.min(Math.max(0,b),this.byteLength);if(0>=b-a)return new ArrayBuffer(0);var c=new ArrayBuffer(b-a),d=new Uint8Array(c);a=new Uint8Array(this,a,b-a);d.set(a);return c});.var k=navigator.userAgent.toLowerCase(),m=k.match(/(edge)[\s\/:]([\w\d\.]+)?/)\|\|k.match(/(opera\|ie\|firefox\|chrome\|version)[\s\/:]([\w\d\.]+)?.*?(safari\|version[\s\/:]([\w\d\.]+)\|$)/)\|\|k.match(/(rv):([\w\d\.]+)/)\|\|[null,"unknown",0];"rv"===m[1]&&(m[

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9525)
Category:	downloaded
Size (bytes):	26289
Entropy (8bit):	4.923271426533634
Encrypted:	false
SSDEEP:	192:MgFnNojImVVMgqKIulg8LJq5lg8LJEvlLxXxl68Jg/8l68JgrYlljLWfFEiKuuRr:MkNsImVVMgqKJy2MPSLXHlVo1y2P3UN5
MD5:	01CBE649BE06CCD44938192420AD5569
SHA1:	20CA92D1E1CF7676E1EDD288DBB4E206F67608CC
SHA-256:	65E19AE296DD37C3A70A9C4FE9D86F7FBF5FE8ECF969435D53B1277FF88D1BB6
SHA-512:	929020BDD05119EC6B4F42CB79B0D703DA7A1DB8D3A4308E43AFA3D4307D9B06710A01028ED7A7B162EE37749188D14057B96FBBFC6A84CBB9BC66D3D2EE65DE
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/usbank/dotcom-homepage/prod/utag.105.js?utv=ut4.46.202403072057
Preview:	//tealium universal tag - utag.105 ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved..var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14965)
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 245 x 90
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	7.2092595064413665
Encrypted:	false
SSDEEP:	48:LHU2k7N7YtG8EqNwEomblrS35ijT8wFLAfuXPMWXjCCxvr7/jZI8lqgDxantGk:rU2k7N7YrEowEPZu35if8wFEKjj1Zvj4
MD5:	7474B6BC2C188C77CDF623B5EFF4267E
SHA1:	583DE8161D1948F2420A53C51F4D4FFD66C42868
SHA-256:	1293BD34269EF3D6A8D2F71DA58D4B1BF883E7906E6D3D15B63D1B00827BB058
SHA-512:	9F04BFE429E7D6FA231A06DAE66AC2AAF6681F4F243FC9196E7320D8E3546AA9A12E970B99C110C12B7C8DD06220D4F0AC7480FCA041E8295600E99A664B0230
Malicious:	false
URL:	https://res.cisco.com/websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1
Preview:	GIF89a..Z.................................................................................................................................3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........!.......,......Z........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...\.p.B.+..i....-[.j.....\...4..F..a...'1....CKy.../k..y......S.F...c...Y*..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	34
Entropy (8bit):	2.882524990934808
Encrypted:	false
SSDEEP:	3:CUXCXk5q:4k5q
MD5:	A82BA3A9D42148E9CF209DF13D8C3F3D
SHA1:	DBA80835D31175BDCF0BCAD1ABAFEFB06D86E304
SHA-256:	1E85EC81B9800B4C443D39CACA0D0926089A3AC201120DB1CEB45B93789480B8
SHA-512:	97777A4B16BEDD7547A46B1AB1D146C50C1547BBE23C70708806A357352A1291A4EB6CDAE049D0E334F33903DBC98D7054EB5BFF84DAB0EDCD091241EBBE5353
Malicious:	false
URL:	https://5093.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fwww.usbank.com%2Findex.html&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&res=1280x1024&accountid=5093&rt=8385&prev=b02ecca2-2bad-f1d6-188e-68be725f696a&luid=25751cf8-eef9-41bf-f6b6-3aa7abecca19&rnd=65791
Preview:	GIF89a.............,...........L.;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 420x420, components 3
Category:	downloaded
Size (bytes):	13874
Entropy (8bit):	7.408233479886717
Encrypted:	false
SSDEEP:	192:rVb0fHPVgzLL08pvj8IPmo9WjQfoSXwDSjz4eiwRmijl9/n1DWCspqqUGI:KgLDvj8IP39WjQfoSwOxiwRxjNupqqU
MD5:	7909D375D7D2A8F8683D80D21DD83A98
SHA1:	0C3365C3177968F9E88600A421FE6C6A1896A4B5
SHA-256:	A955CDD37C661D7A11BBEDA05935EB93280590F1881A9BCB6EBBCAFE34414E7F
SHA-512:	DE77EE80FEA278B2910B8DAFE1765F77B43FF5F8C3366E5AC36C3D4F31B216FCD2F2093EA29D543249248C107D1DDD6177D281C49627BFE34350142B89C2986D
Malicious:	false
URL:	https://www.usbank.com/dam/images/homepage/illustration-home-refinance-420x420.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..............................................................................................................................................................................................................................................1.!AQ...r..3.U.aq"R..Ss.T56....B...$4t..2#....7...%EV.b.Cc.u.......................1...Qq.2R.3.!Aa..rS.4......Bb."...C.#.............?..2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................Y.....2..?.?.........)........o...~<.....`..?.........)........o...~<.....`..?.........)........o...~<.....`..?.........

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1086)
Category:	downloaded
Size (bytes):	2622
Entropy (8bit):	5.967277967424826
Encrypted:	false
SSDEEP:	48:BTIhIPrbaVi+MlNSSzvz0zMYnM/FkhORCwpJpTj1PKBSze8rYBbZZH:poI26VbgoXmhh4jlyVZH
MD5:	D9140C72F1A8E36760A7C4B13B0D7542
SHA1:	34CC86E68C4F89924B27F41C7D4A77CEE429AC8E
SHA-256:	8331B5AF8A4E84DFD36B8399ABE4383A4925195CF2B7CAE65FCC56CD739F326B
SHA-512:	BC92F58F01791EA425985CD9CFA9C1FBEB38A82790CAA5719160C59DCC4B8DBACFFACBA152BCA242D656B4D4B609B4AE1D1576BB226B9B8FAE3C8F2EB19B2159
Malicious:	false
URL:	https://www.usbank.com/Proxy/iojs/5.7.0/dyn_wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false
Preview:	/. Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function k(){function a(g,h){h&&(f.nuidIndex.push(g),f[g]=h)}var d=window\|\|this,b=d.io_global_object_name\|\|"IGLOO",c=d[b]=d[b]\|\|{};b=c.fp=c.fp\|\|{};var e=b.api\|\|{},f={nuidIndex:[]};d=d.decodeURIComponent;if(c.loader&&!1===c.loader.fp_dyn\|\|b.dynMain)return!1;b.dynMain=k;e&&(a("jstoken","xSRURrKJtWg082Rg0jt4dv8m68HzKTx2R5iYCt6Gjmc="),e.decode&&(c=e.decode,b.ripServerUrl=c("Zmlyc3QuaW92YXRpb24uY29tOjQ0My9zcGFjZQ=="),b.contentServerHost=c("aHR0cHM6Ly93d3cudXNiYW5rLmNvbS8="),b.contentServerPath=c("aW9qcy9yZXNvdXJjZXMvc3RhdGlj"),b.ctokenScriptPath=c("aW9qcy9sYXRlc3QvbG9nby5qcw=="),b.rtcServerList=.c("c3R1bjpzdHVuLmwuZ29vZ2xlLmNvbToxOTMwMixzdHVuOnN0dW4zLmwuZ29vZ2xlLmNvbToxOTMwMixzdHVuOnN0dW4yLmwuZ29vZ2xlLmNvbToxOTMwMixzdHVuOnN0dW4uc3R1bnByb3RvY29sLm9yZzozNDc4LHN0dW46bnVtYi52aWFnZW5pZS5jYTozNDc4LHN0dW46c3R1bi52aXZveC5jb206MzQ3OCxzdHVuOnN0dW4uc2lwLnVzOjM0Nzgsc3R1bjpzdHVuLmNvbW1wZWFrLm

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6951
Entropy (8bit):	4.896223467596766
Encrypted:	false
SSDEEP:	48:MWGu+ebiWJcK2TGJQ2J8CSC6QyiSa+e24a4u+pYJAXy+iaKxOS2ioacJYOyV5yJq:1FL3d6KZw5y/tgBrXWq
MD5:	DE961C6A40D9681B7AD4808C2A4B0ED8
SHA1:	375EAD7069B2E048C9C679CA038746AE3C3B848B
SHA-256:	A2DA8848BAECF779E6E7B0F4FE1AA4DF38F1345925374A4FE0B33460E51DECF2
SHA-512:	3257484E69E564B1DCA4431CD20C0354096FC40E817965A7550F925A197A869910C5AB1CEF4C49FE307BA3D830964B6747F9EFF89A8B91F255E6E754ECA4B3A3
Malicious:	false
Preview:	{. "main.js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/main-bca5e814bbbb4645b709.js",. "7725-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7725-bca5e814bbbb4645b709.js",. "7491-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7491-bca5e814bbbb4645b709.js",. "6002-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6002-bca5e814bbbb4645b709.js",. "4816-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4816-bca5e814bbbb4645b709.js",. "4076-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4076-bca5e814bbbb4645b709.js",. "4762-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4762-bca5e814bbbb4645b709.js",. "9245-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9245-bca5e814bbbb4645b709.js",. "5195-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5195-bca5e814bbbb4645

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 245 x 90
Category:	dropped
Size (bytes):	2878
Entropy (8bit):	7.2092595064413665
Encrypted:	false
SSDEEP:	48:LHU2k7N7YtG8EqNwEomblrS35ijT8wFLAfuXPMWXjCCxvr7/jZI8lqgDxantGk:rU2k7N7YrEowEPZu35if8wFEKjj1Zvj4
MD5:	7474B6BC2C188C77CDF623B5EFF4267E
SHA1:	583DE8161D1948F2420A53C51F4D4FFD66C42868
SHA-256:	1293BD34269EF3D6A8D2F71DA58D4B1BF883E7906E6D3D15B63D1B00827BB058
SHA-512:	9F04BFE429E7D6FA231A06DAE66AC2AAF6681F4F243FC9196E7320D8E3546AA9A12E970B99C110C12B7C8DD06220D4F0AC7480FCA041E8295600E99A664B0230
Malicious:	false
Preview:	GIF89a..Z.................................................................................................................................3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........!.......,......Z........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...\.p.B.+..i....-[.j.....\...4..F..a...'1....CKy.../k..y......S.F...c...Y*..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	34494
Entropy (8bit):	2.7709743289564965
Encrypted:	false
SSDEEP:	96:DHv/f8MIDdwjNhDbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbw6v1PoecI6/al1wv:Dnf8MIDS79HOar7Gp
MD5:	76743AD3DD8A91C7DADD37D3C9256098
SHA1:	BEB969EC3DDFC3381BAEC6504103D81F95468090
SHA-256:	9EFC05A969C9148250C3B3E652DE5C947F12171A20B5A7546EB61FE23CD28522
SHA-512:	7C3686E910F73CF714A83BAF1F940C96AC21A0CC6ACD0CE583E8E64CCFA21D608D642CD0063A64CA8901B6BC5A868934C8A217F23A23691BA15CAA1F012CA517
Malicious:	false
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......@@.... .(B...D..(....... ..... ...................................................2+..+..+..N+...................................+...+..R+..+...+...+...+...+...+..j...................+...+..l+...+...+...+...+...+...+...+...+...+...+....,+...+..h...*...+...+...+...+...+...+...+...+...+...+...+...+...+..+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+...+...+...+...+...+...+..+...+...+...+...+...+...+...+...+...+.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4103), with no line terminators
Category:	downloaded
Size (bytes):	4103
Entropy (8bit):	5.560712042985278
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALw/7a:eMilPFfmo4+7Cpi4/m
MD5:	19C94B308DEAF8FBF050B4FCA2FA21B7
SHA1:	27EC80C930408C635835426C194DCEFF81E3C15D
SHA-256:	CD56592299C1C670FB97EF28BCB50048508C01879ECB23B71364AECC0483E202
SHA-512:	4D91A569C2780F16D627967653972EF9E82475579C83F7F4E62724BFAE7788ED9235E7A86CF1D2387B81BBEBF5567945C08567A99E7C64C5281B6130FB6F20DE
Malicious:	false
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4250
Entropy (8bit):	5.054464537586602
Encrypted:	false
SSDEEP:	48:Y5HEmS+v64vMlHA5NNv4RwRJr0nqglyWAVCb1CIWs1natJ4S+v64vMlHA5NNX4R8:uXSau292PlvrTWDUSam292PlvrTWL
MD5:	F38937030B7282686C46BCB9E383AA31
SHA1:	EC697E32B0D6038B1C2AD6F5F177BF45A694C54B
SHA-256:	56EFD8F8E83460A6A05CFEE311B6D6CDAA041308329AD450564CA71367A7148E
SHA-512:	6C741C8244928CB0B6A959BC35896183CE7A7907C7112108411FF9C8C3855A08D42C0B83D77F7F516F52EC9713E9E094F188339440A00E94FD1F0D901B2A7819
Malicious:	false
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_d6z3Ch2S2wcWuma&Version=8&Q_ORIGIN=https://www.usbank.com&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"InterceptDefinition":{"BrandID":"usbank","InterceptID":"SI_d6z3Ch2S2wcWuma","InterceptName":"Dotcom Persistent Feedback Button - No Mobile","Revision":"8","DeletedDate":null,"ActionSets":{"AS_5droAR3SyzCtj9Q":{"ID":"AS_5droAR3SyzCtj9Q","Label":"English-NonIE","Creative":"CR_0JPnt5m2zBFt605","CreativeType":"FeedbackButton","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_6wYJzxKBu4Bgdut"},"EmbeddedData":[{"name":"webVer","type":"JavaScriptVal","value":"QSI.Browser.version"},{"name":"webBrow","type":"JavaScriptVal","value":"QSI.Browser.name"},{"name":"webScreenDimension","type":"JavaScriptVal","value":"window.screen"},{"name":"webVersion","type":"JavaScriptVal","value":"navigator.appVersion"},{"name":"webEnvironment","type":"JavaScriptVal","value":"s.account"},{"name":"webURL","type":"JavaScriptVal","value":"document.URL"},{"name":"webReferrer","type":"JavaScriptVal","value":"document.referrer"},{"name":"webUserAgent","type":"JavaScriptVal","value":"User Agent"},{

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62901)
Category:	downloaded
Size (bytes):	65276
Entropy (8bit):	5.686331824002571
Encrypted:	false
SSDEEP:	768:4Jg9tyqHoPcYSzpen3JY74fq12KQcCh2GbjynzSJCcZa:4JuT8olR73qg
MD5:	3D67230C0EB75B796C0B999A9DAF3D8D
SHA1:	72873696D3310C0A8690351EBAF4AE4F7CD07BB4
SHA-256:	4CD759E06B78CCDA4B5AB88D8951E59F9C12DAD548576910720C00DF948BFE07
SHA-512:	978173AF3520A23757464D34C269D4817F049A18ED467949200038432EC0D56D7D4606246B4912FEAF5A8BB20BDC7D4910224D18203223D68D5C3863E66204AA
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://di.rlcdn.com/api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65364)
Category:	downloaded
Size (bytes):	84440
Entropy (8bit):	4.880866773256155
Encrypted:	false
SSDEEP:	384:UVoYqeq9fAXEkCQeJg2FPde7iC+I02xNCn+M9jY:eoYqeq9fAXEHJg2FPde7z02xNCn+KY
MD5:	894BB480B590D8F8397587CD976951E5
SHA1:	1C4A8DBD4879D2C8CED10A7F1C18779DBCFE612B
SHA-256:	77E891AAB257B7D2EA59868C1CC024EE36D7FB30AE2E125FD555AB24863533D2
SHA-512:	9385BFB4423490B1D09F8678FCDC7370BBA3544118DB50A8EB620CBB1F793BD7EEF4532A05CADAF31F5A09423E5E0F82A8C745B18DC52704D4EE8838A7413FE6
Malicious:	false
URL:	https://onlinebanking.usbank.com/auth/login/wmf/latest/61-27d77f52309eae970dc4.js
Preview:	/* Auth Login Module : @usb-sharedauth/react-login-npm-module - 8.14.0 . Published Date : 17 Apr 2024 - 21:6:5 . . 2024 Digital LoginWeb Authentication Team */..(self.webpackChunkUSBAuthLoginModule=self.webpackChunkUSBAuthLoginModule\|\|[]).push([[61],{61:()=>{window.Omniture={},window.Omniture.constants={},window.Omniture.constants.OmniSitePrefix="omni",window.Omniture.constants.LoginWidget={},window.Omniture.constants.StepUpAuthentication={},window.Omniture.constants.LoginWidget.siteSection="login",window.Omniture.constants.LoginWidget.subSiteSection="login",window.Omniture.constants.LoginWidget.MortgageNewToOlb={},window.Omniture.constants.LoginWidget.MortgageNewToOlb={eventname:"enter personal ID mortgage selection new to olb options",uxNameForSiteCat:"desktop",appNameForSiteCat:"olb"},window.Omniture.constants.LoginWidget.PersonalIdSystemError={},window.Omniture.constants.LoginWidget.PersonalIdSystemError={siteSection:"login",subSiteSection:"system errors",eventname:"enter personal

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60397)
Category:	downloaded
Size (bytes):	154317
Entropy (8bit):	5.3123648400377395
Encrypted:	false
SSDEEP:	1536:N9C5kvGy8Vkw+GV/gECbY6Ba8aJm5On5lHijkDDMozdls5aQ0GHlxFmV79xBr:1Gy8/v83k8wxN/NBr
MD5:	075A3288CF00D4BE548B281F564DC18A
SHA1:	17E3F3F1AC26D63C410AAF2E5A5548B1678C8E02
SHA-256:	F8C6279362FCE3545AD469D2E1E4AA964F4357A442F6D727117C1298CFBEC243
SHA-512:	475F85FAFE1774B28527B5F3A9329321E9FCC90B6AEDFF486B7234F727A18044FC53FE0E5C728BE1345BDEB844B19316DD124CD1702B38FE6F33C3409BCB6C12
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/usbank/global-sync/prod/utag.sync.js
Preview:	//tealium universal tag - utag.sync ut4.0.202405092138, Copyright 2024 Tealium.com Inc. All Rights Reserved..var e=function(){"use strict";function e(t){return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}function t(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function n(){return{callbacks:{},add:function(e,t){this.callbacks[e]=this.callbacks[e]\|\|[];var n=this.callbacks[e].push(t)-1,i=this;return function(){i.callbacks[e].splice(n,1)}},execute:function(e,t){if(this.callbacks[e]){t=void 0===t?[]:t,t=t instanceof Array?t:[t];try{for(;this.callbacks[e].length;){var n=this.callbacks[e].shift();"function"==typeof n?n.apply(null,t):n instanceof Array&&n[1].apply(n[0],t)}delete this.callbacks[e]}catch(e){}}},executeAll:function(e,t){(t\|\|e&&!j.isObjectEmpty(e))&&Object.k

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	119008
Entropy (8bit):	5.372807541433058
Encrypted:	false
SSDEEP:	1536:dS6Ulqs8E0hMtKgxL852wptOg9pm/yT7SOrY42RYSl9/vX+Xm6a7E7:g628EGA0X1pL7SO842R5l9/8m6aI7
MD5:	2863C1B44510710629FABFA3824F0C36
SHA1:	30779021E1D1F8EF874F491690EE4B30B4A03690
SHA-256:	A76CAE15D13C84D66C437D5093EB3C37E31ED9F2F971CE8D297382D14F6E1B0C
SHA-512:	5CBA8235473D09D5975C91372A0430890891711A500AB7D6D294A66EE20B95FD8BB1CCDE1037CC8E4C0CB5BA840DAEF68BFD7E311C9FBDB1DA248C749C656154
Malicious:	false
URL:	https://www.usbank.com/LoginModuleHelpers/react-dom.production.min.js
Preview:	/** @license React v16.12.0. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /./. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(la,m){"object"===typeof exports&&"undefined"!==typeof module?module.exports=m(require("react")):"function"===typeof define&&define.amd?define(["react"],m):la.ReactDOM=m(la.React)})(this,function(la){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function uf(){if(qc)for(var a in bb){var b=bb[a],c=qc.indexOf(a);if(!(-1<c))throw Error(m(96,a));if(!rc[c]){if(!b.extractEvents)throw Error(m(97,a));rc[c]=b;c=b.eventT

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2692
Entropy (8bit):	4.625570836530717
Encrypted:	false
SSDEEP:	48:0xyZWUQZYjIIuzz/25aeTd522pPOsZ3lak:fiY2sPB1J
MD5:	10C08C0FCE3A12CC03BA45F4D3B46464
SHA1:	E30F056890C1CB3FA8D2EBF6874F6FCA920C5FD2
SHA-256:	45AF6B9CCB8C5611F81CC5F99761B96CF7F12647446C34B8F5069BC50F1B365A
SHA-512:	F233ACA9C85C644EC5D131876B239750A7427273F2FF671232D8E6AE7DCA132409813708CA6B02E6CB5B8638AC756DD5212B4C070D3620FE25ABEF45BA69AE60
Malicious:	false
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 258.52 72"><path d="M286,83.37a3.25,3.25,0,1,0,3.25,3.24A3.22,3.22,0,0,0,286,83.37Zm0,6a2.81,2.81,0,1,1,2.79-2.81A2.77,2.77,0,0,1,286,89.42Z" transform="translate(-30.74 -38.59)" fill="#001e79"/><path d="M287.41,87.62a1,1,0,0,0-.19-.55.87.87,0,0,0-.61-.35,1.22,1.22,0,0,0,.51-.17.79.79,0,0,0,.35-.7.89.89,0,0,0-.55-.91,2.87,2.87,0,0,0-1-.13H284.7v3.57h.62V87h.5a1.63,1.63,0,0,1,.7.11c.35.21.33.66.34,1.06a.58.58,0,0,0,0,.23h.58a.55.55,0,0,1-.05-.23C287.41,88,287.41,87.91,287.41,87.62Zm-1.52-1.08h-.57v-1.3h.54c.76,0,1,.18,1,.66S286.44,86.54,285.89,86.54Z" transform="translate(-30.74 -38.59)" fill="#001e79"/><path d="M148.71,52.13c-5,0-9,2.06-10.55,4.33V38.59H127.24V89.42H138v-4.1c1.69,2.79,5.42,4.91,10.26,4.91,10.18,0,17.36-8,17.36-19.12C165.63,60.19,159.26,52.13,148.71,52.13Zm-2.42,28.14c-4.32,0-8.28-3.08-8.28-9.09s4-9,8.28-9,8.21,2.86,8.21,9S150.61,80.27,146.29,80.27Z" transform="translate(-30.74 -38.59)

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5208
Entropy (8bit):	4.9465874603428075
Encrypted:	false
SSDEEP:	96:LRRW0W6syNN3+qaoSiSjqrjCMvL+UAs+IKRA3l+wzVUmGo6pVrP1lUJ+6IgOG4iB:dw0EyD3+q7ajZMvL+Uv+IKRWlZzV0pV+
MD5:	895B196173F86DAE8C9538646889D0BC
SHA1:	B023625D139B03000C31D448215EB1B7F67006AE
SHA-256:	9ABF907A2E8494807BDFCEF93C4C831B064F6BEA124D3FB402E61FB6622CFDDF
SHA-512:	F7633818F02AA961E46E2A02B4C1AC856AF189A47A25F5968FC604855FF6546963B3398B6451D59DBE4D788874AD508D7015849B86F09C6C4259105B29941AAB
Malicious:	false
URL:	https://content.usbank.com/en-us/onlinebanking/diy/smart-assistant/com.model.json
Preview:	{"commonDetails":{"ltpAccountText":"ACCOUNT","ltpCopyButtonText":"Copy","ltpExternalAccountsHiddenText":"We only show you the accounts eligible for transfers.","ltpNoText":"No","ltpYesText":"Yes","ltpCopiedText":"Copied","ltpCheckingSavingsText":"CHECKING & SAVINGS","ltpConfirmationText":"Confirmation","ltpAddExternalAccountsText":"Add external account","ltpLetsFixText":"Let\u2019s fix this","ltpCancelText":"Cancel","ltpAmountText":"Amount","ltpAccountsText":"Accounts","ltpDollar":"$","ltpContinueText":"Continue","ltpCheckNumberText":"CHECK NUMBER"},"saTitles":{"ltpPayoffTitle":"Accounts eligible for payoff","ltpManagePaymentText":"Choose a payment activity.","ltpBillPayBillerOptionsText":"Choose a bill.","ltpPayoffDetailsTitle":"Total payoff amount","ltpStopPaymentProvideCheckNumText":"Provide a check number.","ltpDepositCheckOptionsText":"See how to deposit a check.","ltpSelectPaymentOptionText":"Choose a payment method.","ltpTransactionText":"Transactions","ltpStopTransfer":"Stop tr

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	5.065735983894692
Encrypted:	false
SSDEEP:	96:IuYJ6cTguYJXZhYKI5K8KdUfwKGPFs/JhajJF5HW+ID:IZNUZXIKI5K8Kdji/Y6
MD5:	788CAA2B792A46011CDCD73BC4B6D4A6
SHA1:	85F5ACFD31BC8C6F83F71801F1992A2DCE6C06CD
SHA-256:	84F4FBB82DFEFDF3FFFEB88428CDD100C6E66584E41895E8E253204A891D870E
SHA-512:	52213C8B57B2840C03EDA70BE82AC7D8ABA023C678179DE6242B64436D984F66519F880BA9DAD6CF8BA865B9C1435893EE37E69BECCF298D61258D2B4445355B
Malicious:	false
Preview:	[{"@context":"http://schema.org","@type":"MobileApplication","applicationCategory":["FinanceApplication"],"description":["Bank from almost anywhere with the U.S. Bank Mobile App."],"installUrl":["https://apps.apple.com/us/app/u-s-bank-simpler-faster/id458734623"],"name":["U.S. Bank Mobile App"],"operatingSystem":["iOs"],"provider":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"url":["https://www.usbank.com/online-mobile-banking/mobile-banking.html#gettheapp"]},{"@context":"http://schema.org","@type":"MobileApplication","applicationCategory":["FinanceApplication"],"description":["Bank from almost anywhere with the U.S. Bank Mobile App."],"installUrl":["https://play.google.com/store/apps/details?id=com.usbank.mobilebanking&hl=en_US&pli=1"],"name":["U.S. Bank Mobile App"],"operatingSystem":["Android"],"provider":[{"@id":"https://www.usbank.com/index.html/#Organization"}],"url":["https://www.usbank.com/online-mobile-banking/mobile-banking.html#gettheapp"]},{"@context":"http:/

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html?
Preview:	<html></html>

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	5.062138584432737
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxdsLNxLjAOSlY1f22HhJzWLKjUSHJb4CNw1B:qQQjgYkedsL7jAcV3ULA1Hx4CNw1B
MD5:	DF64F09081E344ED232A6F41662E1BCF
SHA1:	D749ED4330190CC0EE4962F1EE19F239D8E1549A
SHA-256:	DBAD50C2A9F5324E11BB853E12F806E744B60B96B11979874A01EB5862B13705
SHA-512:	EC927F4FB74FAA080A86FD18F654E43919DDF0E54E2DE00CC13D3FB94579B4181211C954725ADD6D1B3B654AE4F34A94946DF5BD6BCF97FE97C33A2C9C76FEC2
Malicious:	false
URL:	https://tr.snapchat.com/config/com/89cfe344-53d3-4495-9a99-77bfbb3bf779.js?v=3.16.3-2405090301
Preview:	!function(){"use strict";try{window.snaptr.cfg('89cfe344-53d3-4495-9a99-77bfbb3bf779',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.458694969562842
Encrypted:	false
SSDEEP:	3:mSlVioJoCkuS5/nYn:mSa5uS5wn
MD5:	A1EC4288660E72B9A3A6CF8A6F6F0B03
SHA1:	BE45BBF875B73CD1B0118DAA30F752C39133DFF1
SHA-256:	AA8EFA19222BCFA86AD542880D7650575C3E6220057CB1E810850135160F0DA1
SHA-512:	49A4099C50C6EA319B82BF29CBFFD43D1E219FBB4830E6569D4BA350FD8F2FC37087C026F3F3ACB6A6B5C155CAEBFD30B5102A7AB1A95B0C557444C9CD4AF43D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnKItd0dPAPLxIFDdstO7QSBQ2hlY2PEgUNZSGZ6g==?alt=proto
Preview:	ChsKBw3bLTu0GgAKBw2hlY2PGgAKBw1lIZnqGgA=

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	204133
Entropy (8bit):	5.522931613040052
Encrypted:	false
SSDEEP:	3072:LLvWuawx8nxZ8urmdU8zz+8w3JriOqnHiGK2/ifxtgPZ/UBkvt:/eFnxSurivWr1oiGK2/iJvBkl
MD5:	C36C88708B6A368F20E3B1EC28A736FF
SHA1:	FFBCCAE7C3567F03AE497635E13E1B92B6DCD401
SHA-256:	C7FA8CD7CFCA6B241D36B5DBB0D1FB199B3461968D78D2BA8D7DA6C671922A05
SHA-512:	82A92D86664A7C5F46A423003BB40ED83B07E0EB2E331A84A3A2B94FEAD8C3D59FC9A6BC9280571472285292A3E8BDFABA35C175A45F2598D67932BC3784F6BF
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=DC-6219543&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{do

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4779), with no line terminators
Category:	downloaded
Size (bytes):	4779
Entropy (8bit):	5.428979771695266
Encrypted:	false
SSDEEP:	96:9WsFpRR6JYMuuwCp0yXALwpdh02MGkm8NVvJeTy1pecbt:9+d2CpRpjfMigvJ2iwcbt
MD5:	F1BBA52AB91FDAB0938377D8E6D7B533
SHA1:	C40DF235D4697579CA6348F767A36A5C94FF7E9A
SHA-256:	0882BE2BB685D64AE46B56574B330FB1AFE5DFEF39F940D12CA776475248EAA8
SHA-512:	12DF19B68E561BE5ED19917FC23A4A9EDFB9967504FAFBAB3CFFA31A6F63D85A66CD08E171ED2CCCFEC4930A73E2E7D4E4D937DEE2F99DA12CC849FE5A9044EF
Malicious:	false
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6951
Entropy (8bit):	4.896223467596766
Encrypted:	false
SSDEEP:	48:MWGu+ebiWJcK2TGJQ2J8CSC6QyiSa+e24a4u+pYJAXy+iaKxOS2ioacJYOyV5yJq:1FL3d6KZw5y/tgBrXWq
MD5:	DE961C6A40D9681B7AD4808C2A4B0ED8
SHA1:	375EAD7069B2E048C9C679CA038746AE3C3B848B
SHA-256:	A2DA8848BAECF779E6E7B0F4FE1AA4DF38F1345925374A4FE0B33460E51DECF2
SHA-512:	3257484E69E564B1DCA4431CD20C0354096FC40E817965A7550F925A197A869910C5AB1CEF4C49FE307BA3D830964B6747F9EFF89A8B91F255E6E754ECA4B3A3
Malicious:	false
URL:	https://onlinebanking.usbank.com/digital/servicing/smart-assistant/manifest.json?ver=1715316801110
Preview:	{. "main.js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/main-bca5e814bbbb4645b709.js",. "7725-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7725-bca5e814bbbb4645b709.js",. "7491-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/7491-bca5e814bbbb4645b709.js",. "6002-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/6002-bca5e814bbbb4645b709.js",. "4816-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4816-bca5e814bbbb4645b709.js",. "4076-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4076-bca5e814bbbb4645b709.js",. "4762-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/4762-bca5e814bbbb4645b709.js",. "9245-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/9245-bca5e814bbbb4645b709.js",. "5195-js": "https://onlinebanking.usbank.com/digital/servicing/smart-assistant/5195-bca5e814bbbb4645

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	976565
Entropy (8bit):	5.515241717247961
Encrypted:	false
SSDEEP:	12288:yxJIKOpVx+D7nxbonovoD9zhIhYOb616DEGBC:6IKOpVx+XiovoD9zmYOb63
MD5:	8AA2CE91AEAA1E2414891E2ED22089E1
SHA1:	98CD4B82EEA5ABCBDCBE3CAF0B8C15041F701266
SHA-256:	3174962BE2C07F89E9BE6B99C7E81D959D15896D1F99D7F794CF67B56AE2F1D2
SHA-512:	5EFFFAF7964AF672A38535706FBA9D83035774EEF929E25F277BECD4F7B4DA33776A3EC6FF27660577C6E645A4B3EF4D37DA12F39B8C8897630B839B007AFCCE
Malicious:	false
URL:	https://onlinebanking.usbank.com/digital/servicing/smart-assistant/main-bca5e814bbbb4645b709.js
Preview:	/! For license information please see main-bca5e814bbbb4645b709.js.LICENSE.txt /.var SmartAssistant;SmartAssistant=(()=>{var e,t,a={67228:e=>{e.exports=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var a=0,n=new Array(t);a<t;a++)n[a]=e[a];return n},e.exports.__esModule=!0,e.exports.default=e.exports},22858:e=>{e.exports=function(e){if(Array.isArray(e))return e},e.exports.__esModule=!0,e.exports.default=e.exports},23646:(e,t,a)=>{var n=a(67228);e.exports=function(e){if(Array.isArray(e))return n(e)},e.exports.__esModule=!0,e.exports.default=e.exports},81506:e=>{e.exports=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e},e.exports.__esModule=!0,e.exports.default=e.exports},48926:e=>{function t(e,t,a,n,r,s,i){try{var o=e[s](i),l=o.value}catch(e){return void a(e)}o.done?t(l):Promise.resolve(l).then(n,r)}e.exports=function(e){return function(){var a=this,n=arguments;return new Promise((function(r,s){var i=e.app

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (474), with CRLF, LF line terminators
Entropy (8bit):	6.199000770308808
TrID:	Scalable Vector Graphics (18501/1) 24.18% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (11501/1) 15.03% HyperText Markup Language (11501/1) 15.03%
File name:	securedoc_20240509T112530.html
File size:	456'450 bytes
MD5:	97da59d6454b6e3defce88ff7ad2353b
SHA1:	48aa3b4eee85ac751c81da03ba25dee0c348e889
SHA256:	3df536eda6985c16e4b68ac1f73fc669893ccfb17145a716e9303aaeaac7f75b
SHA512:	13cc6e95236402383d57ba17d9f223dd49fb59adc67d7981aba4f2e3e96678570592800bb9cf0dc89a388bed83e00dbb506da0b6085ad931a0ab92588304428c
SSDEEP:	12288:I/LQIGgm2SVOUG4aL8TJaD+xC9c37m4e3:I/LQIG52SzRZTU+xCGs3
TLSH:	8EA4E0886622643242F518B2B47B254639394817084C6CB5EBADC1DC7FEEDA740BBFDD
File Content Preview:	saved from url=(0025)https://res.cisco.com:443 -->..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN". "http://www.w3.org/TR/html4/loose.dtd"><html.lang="en"><head><base href="http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 10, 2024 06:52:16.343709946 CEST	49675	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:16.343710899 CEST	49674	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:16.453043938 CEST	49673	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:25.952961922 CEST	49674	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:25.955616951 CEST	49675	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:26.062319994 CEST	49673	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:27.463484049 CEST	443	49703	23.1.237.91	192.168.2.5
May 10, 2024 06:52:27.463711977 CEST	49703	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:31.422930002 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.422950983 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.423000097 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.423240900 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.423264980 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.423316956 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.423505068 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.423523903 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.423728943 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.423744917 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.461466074 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.461791992 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.462495089 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.462543011 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.462601900 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.463115931 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.463133097 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.580785036 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.590136051 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.590210915 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.590595007 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.592394114 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.592453003 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.593936920 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.652225971 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.652281046 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.652452946 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.652465105 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.652607918 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.652626991 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.653580904 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.653589964 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.653651953 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.653655052 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.654747009 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.654803038 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.655097008 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.655106068 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.655277014 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.655333996 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.655560970 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.655569077 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.688940048 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.689155102 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.689176083 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.690020084 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.690090895 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.690979958 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.691035986 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.691104889 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.691118002 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.711749077 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.711910009 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.718913078 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.718955040 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.724807024 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.724843025 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.724862099 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.724900007 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.724939108 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.724987030 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.725001097 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.725054026 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.816968918 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.816982985 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.817116976 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.817118883 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.855766058 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.855834007 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.855928898 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.855940104 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.855952024 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.855962992 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.855993032 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.856009960 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.856044054 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.856067896 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.856087923 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.856128931 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.856154919 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.856256962 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.879188061 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.879215956 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:31.879286051 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.879364014 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.879389048 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:31.879435062 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.880511045 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.880525112 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:31.880825996 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:31.880841017 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:31.905827045 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.915785074 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915826082 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915852070 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915878057 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915879965 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.915890932 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915916920 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.915927887 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915950060 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.915973902 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.915981054 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916017056 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.916645050 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916687012 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916742086 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.916754961 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916831017 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916857004 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.916874886 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.916883945 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.917654991 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.917678118 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.917699099 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.917702913 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.917716026 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.917731047 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.917754889 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.917759895 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918513060 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918541908 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918559074 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918560028 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.918567896 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918600082 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.918680906 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.918720961 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.918728113 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919434071 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919466972 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919492006 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919511080 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919518948 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.919526100 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919528008 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919552088 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919559002 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.919576883 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919579983 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.919586897 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919625998 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.919632912 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919790030 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919814110 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.919840097 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920125008 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920150995 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920154095 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920166969 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920167923 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920213938 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920259953 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920268059 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920438051 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920495987 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920634985 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920663118 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920670033 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920676947 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920713902 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920716047 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920722961 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920763016 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.920789003 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920849085 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.920896053 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.921433926 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.921478033 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.921523094 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.921530962 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.921621084 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.921664000 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.921672106 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.921984911 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.921993971 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922023058 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922040939 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922044992 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.922048092 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922061920 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922075033 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.922081947 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.922102928 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.922264099 CEST	49708	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.922275066 CEST	443	49708	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.922470093 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.922535896 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:31.922543049 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:31.939750910 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.939759016 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.939771891 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.939789057 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.939822912 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.939831972 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:31.939846039 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:31.986766100 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.986954927 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987056971 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987082005 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987164021 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987210989 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987248898 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987289906 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987312078 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987323046 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987382889 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987416983 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987441063 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987473965 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987529993 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:31.987557888 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:31.987637043 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.003880024 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.004029989 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.024188995 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.024195910 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.024228096 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.024235964 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.024266005 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.024275064 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.024297953 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.024317026 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.025481939 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025490046 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025528908 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025546074 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.025561094 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025577068 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.025599003 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.025826931 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025834084 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025876045 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.025882959 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025901079 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.025947094 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.026609898 CEST	49707	443	192.168.2.5	104.17.24.14
May 10, 2024 06:52:32.026619911 CEST	443	49707	104.17.24.14	192.168.2.5
May 10, 2024 06:52:32.045588017 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.045594931 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.045628071 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.045639038 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.045670986 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.045681953 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.045706034 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.045713902 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.065480947 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.065495014 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.065556049 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.065565109 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.065607071 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.117976904 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.117990017 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118000031 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118118048 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118148088 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118205070 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118218899 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118282080 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118309975 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118391991 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118402958 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118458986 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118482113 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118501902 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118542910 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118571043 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118577003 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118590117 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118617058 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118638992 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118659019 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118669033 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118691921 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118717909 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118747950 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118803024 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118813992 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118823051 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118833065 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118841887 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118851900 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118875027 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118899107 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118913889 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118947029 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.118969917 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.118980885 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119004011 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119019985 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.119029999 CEST	49710	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.119039059 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119049072 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119060040 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119122028 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119144917 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119182110 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119266987 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119278908 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.119288921 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.126378059 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.126393080 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.126477003 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.126491070 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.127602100 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.141864061 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.141879082 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.141958952 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.141969919 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.143481016 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.143549919 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.145205975 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.146578074 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.146637917 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.151336908 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.151386023 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.151560068 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.152774096 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.152781010 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.152790070 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.152803898 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.153873920 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.153909922 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.153960943 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.153992891 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.161386013 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.188858986 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.188961983 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.188998938 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.189071894 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.189243078 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.189254999 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.189316988 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.189331055 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.191390991 CEST	49712	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.191402912 CEST	443	49712	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.249061108 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249125004 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249135971 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249146938 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249202967 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249212980 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249243975 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249284029 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249378920 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249389887 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249463081 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249519110 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249592066 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249641895 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249783039 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249824047 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249917984 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249928951 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249960899 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.249979019 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250044107 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250085115 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250130892 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250143051 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250154018 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250164032 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250212908 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250224113 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250240088 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250281096 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250291109 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250299931 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250309944 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250356913 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250366926 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250375986 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250432014 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250535011 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250545025 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250580072 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250593901 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250610113 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250652075 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250761032 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250771999 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250782013 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250849962 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250890970 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250901937 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250911951 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250921011 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.250953913 CEST	80	49710	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.276565075 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.276856899 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.290035963 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.290072918 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.290148020 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.290390968 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.290407896 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.290750980 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.290801048 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.291640043 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.292104959 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.292118073 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.304282904 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.331585884 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.341612101 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.341646910 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.341825008 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.342215061 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.342232943 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.342288971 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.342439890 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.342454910 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.342600107 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.342612982 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.343107939 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.343126059 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.343185902 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.343350887 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.343364954 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.343754053 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.343776941 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.343835115 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.344017029 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.344029903 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.396570921 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.396589041 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.396605015 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.396640062 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.396641970 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.396687031 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.398861885 CEST	49717	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.398880959 CEST	443	49717	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.404983044 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.407371998 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.407387018 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.407469988 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.407731056 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.407741070 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.407804012 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.407872915 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.410039902 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.410052061 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.410147905 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.411180019 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.411192894 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.411412001 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.411474943 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.411526918 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.411989927 CEST	49716	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.411998034 CEST	443	49716	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.487406969 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.487436056 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.487620115 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.487731934 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.487749100 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.506815910 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.506926060 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.514081001 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.514360905 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.514374971 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.514661074 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.514955997 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.515011072 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.515100002 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.541825056 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.541842937 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.541913986 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.541971922 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.542000055 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.542186022 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.542197943 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.542212009 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.542356014 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.542373896 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.556849003 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.559794903 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.559804916 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.560121059 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.560148954 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.560498953 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.560560942 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.560642004 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.565239906 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.566257000 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.566471100 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.566479921 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.566557884 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.566565990 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.567334890 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.567420006 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.567439079 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.567491055 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.567976952 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.568197012 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.568248987 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.568267107 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.568572044 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.568583012 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.568658113 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.568666935 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.568943024 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.568998098 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.569027901 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.569036007 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.569109917 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.569117069 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.569422960 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.569485903 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.569509029 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.569565058 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.569783926 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.569839954 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.570046902 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.570099115 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.570141077 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.570147991 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.570214033 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.570221901 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.608114004 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.616079092 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.616297007 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.631407022 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.631408930 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.666650057 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.666974068 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.666990995 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.667270899 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.667555094 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.667610884 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.667697906 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.669835091 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.670017004 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.670027018 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.670877934 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.670958996 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.671219110 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.671274900 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.671317101 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.712114096 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.716129065 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.741784096 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.741791010 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.745769024 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.752859116 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.753065109 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.753072977 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.754163027 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.754225016 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.755063057 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.755121946 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.755211115 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.755217075 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.762115955 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.762132883 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.762207031 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.762219906 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.762269020 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.780395985 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.780412912 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.780510902 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.780519009 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.799455881 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.800563097 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.805731058 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.805732012 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.808743954 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.809453964 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.809456110 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.809708118 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.809737921 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.809894085 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.809905052 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.810594082 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.810658932 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.810776949 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.810828924 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.811954975 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.812017918 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.812266111 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.812330008 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.812403917 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.812412024 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.812453985 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.812462091 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:32.815728903 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.815737009 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.815747023 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.815823078 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.815840006 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.815896034 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.816425085 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816433907 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816478014 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816488981 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.816493988 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816504002 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816521883 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.816535950 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.816544056 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.816569090 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.824618101 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824628115 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824659109 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824678898 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824687004 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824696064 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.824707031 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.824728966 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.824754953 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.827943087 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.827950954 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.827977896 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.828017950 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.828027964 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.828037977 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.834727049 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.834743977 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.834822893 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.834830999 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836569071 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836596966 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836605072 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836630106 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836659908 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836663008 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.836673021 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.836700916 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.836718082 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.842957973 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.842976093 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.845776081 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.845786095 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.854885101 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.854904890 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.854971886 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.854980946 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.855537891 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.864906073 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.864928007 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.865005970 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.865025997 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.886346102 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.886362076 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.886384964 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.886425972 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.886432886 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.886461973 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.906183004 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.906203032 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.906233072 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.906270981 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.906277895 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.906310081 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.910176992 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.910192013 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.910268068 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.910284042 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.918915987 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.918937922 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.918983936 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.918993950 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.919017076 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.926634073 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.926642895 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.926662922 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.926676989 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.926707983 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.926727057 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:32.926738977 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.926774025 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:32.927100897 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.927119017 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.927172899 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.927184105 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930052996 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930088997 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930099010 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930109978 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930130959 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.930140972 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.930175066 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.936153889 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.936213017 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.936222076 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937268019 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937299013 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937310934 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937328100 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.937345028 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937352896 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.937366962 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.937391996 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.938208103 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.938225985 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.938308001 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.938319921 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.938357115 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.943475008 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.943583965 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:32.945463896 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.945498943 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.945513010 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.945533991 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.945543051 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.945560932 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.945574999 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.945606947 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.956044912 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.956079960 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.956089020 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.956104040 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.956118107 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.956135988 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.956152916 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.957221031 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.957233906 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.957263947 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.957292080 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.957303047 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.957320929 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.957346916 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.959598064 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.959615946 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.959681988 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.959691048 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.959733009 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.965351105 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965358019 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965364933 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965379000 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965393066 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965404034 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965420008 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.965420961 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.965428114 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965429068 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.965482950 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.966094017 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.968372107 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.968426943 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.979480028 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.979496002 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.979552031 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.979562044 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.979600906 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.980935097 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.980947018 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.980969906 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.980997086 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.981007099 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.981013060 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.981023073 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.981045961 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.995163918 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.995201111 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.995240927 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.995245934 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.995287895 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.997838974 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.997855902 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.997941017 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:32.997958899 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:32.998008966 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.010620117 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.010633945 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.010721922 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.010735035 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.010782003 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.017523050 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.017581940 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.017589092 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.017635107 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.019153118 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.019166946 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.019190073 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.019196033 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.019222975 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.019239902 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.019257069 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.019277096 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.020235062 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.020252943 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.020313978 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.020327091 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.020368099 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.020633936 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.020773888 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.020817041 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.021295071 CEST	49718	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.021306992 CEST	443	49718	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.030699015 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.030715942 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.030796051 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.030810118 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.030853033 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.034384966 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.034394026 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.034424067 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.034454107 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.034460068 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.034470081 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.034502983 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.034523010 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.035526037 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.035545111 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.035603046 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.035613060 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.035657883 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.037599087 CEST	49726	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.037619114 CEST	443	49726	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.044765949 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.044795990 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.044847965 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.044856071 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.044889927 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.044909954 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.044915915 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.044950008 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.044976950 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.044984102 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.045026064 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.047070980 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.047102928 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.047169924 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.047687054 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.047698021 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.050623894 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050642014 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050695896 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050710917 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.050712109 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050723076 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050776005 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.050785065 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.050816059 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.050825119 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.054371119 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054383993 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054404974 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054425955 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054459095 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054497957 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054517984 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054524899 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054548025 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054572105 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054573059 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054580927 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054588079 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054594040 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054605961 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054609060 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054614067 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054632902 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.054645061 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.054682970 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.060065985 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.060081005 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.060167074 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.060177088 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.060208082 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.061155081 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.061168909 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.061227083 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.061234951 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.061256886 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.061270952 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.065821886 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.065838099 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.065902948 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.065912008 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.065957069 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.066226006 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.066241980 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.066298962 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.066308022 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.066345930 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.072259903 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.072277069 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.072293043 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.072321892 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.072339058 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.072370052 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.073539972 CEST	49727	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.073551893 CEST	443	49727	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.073993921 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074028015 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074029922 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074040890 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074060917 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.074069023 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074129105 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.074137926 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.074163914 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.074183941 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.076339006 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.076385975 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.076427937 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.076474905 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.077261925 CEST	49728	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.077272892 CEST	443	49728	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.077409029 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.077440977 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.077472925 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.077482939 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.077503920 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.081474066 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.081489086 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.081562042 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.081572056 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.081612110 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.088486910 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.088501930 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.088773966 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.088783979 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.088824987 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.090095043 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.090109110 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.090164900 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.090173960 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.091383934 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.091397047 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.091455936 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.091464996 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.095621109 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.095628977 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.095695972 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.095705032 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.095751047 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.097587109 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.097603083 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.097685099 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.097693920 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.097738981 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.100965023 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.100980043 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.101068974 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.101078033 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.101124048 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.104088068 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.104110956 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.104178905 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.104192972 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.105964899 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.105978966 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.106060982 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.106071949 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.111573935 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.111588001 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.111663103 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.111673117 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.111721992 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.114813089 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.114830017 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.114896059 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.114903927 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.114944935 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.116914988 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.116928101 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.117005110 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.117013931 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.123366117 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.123380899 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.123457909 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.123467922 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.123507023 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.129759073 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.129772902 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.129843950 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.129853964 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.136120081 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.136135101 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.136197090 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.136214018 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.136236906 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.136259079 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.137469053 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.137485027 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.137552977 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.137567997 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.137609005 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.139820099 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.139832973 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.139916897 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.139929056 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.141398907 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.141454935 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.141463995 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.141932011 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.141949892 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.141988993 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.142002106 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.142033100 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.147814035 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.147830009 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.147898912 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.147907019 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.147939920 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.147968054 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.147984028 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.148037910 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.148047924 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.148082972 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.151694059 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.151714087 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.151772022 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.151781082 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.151808977 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.153659105 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.153673887 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.153734922 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.153747082 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.153779984 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.157311916 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.157331944 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.157382011 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.157388926 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.157432079 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.157452106 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.158857107 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.158873081 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.158938885 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.158946991 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.158982992 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.160808086 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.160821915 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.160877943 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.160887003 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.160916090 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.164033890 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.164051056 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.164119005 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.164128065 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.167026997 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.167042017 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.167126894 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.167135954 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.167176008 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.169534922 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.169553995 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.169732094 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.169739962 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.169779062 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.170432091 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.170449972 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.170491934 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.170500040 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.170535088 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.173315048 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.173326969 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.173394918 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.173403025 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.173428059 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.175751925 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.175770998 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.175853014 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.175859928 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.175899982 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.179018021 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179032087 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179116964 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.179125071 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179415941 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179430008 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179491997 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.179502964 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.179537058 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.182089090 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.182135105 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.182176113 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.182207108 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.182956934 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.182974100 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.183067083 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.183077097 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.183855057 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.183901072 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.183914900 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.183947086 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.184848070 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.184866905 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.184931993 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.184941053 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.184987068 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.187598944 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.187647104 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.187676907 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.187724113 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.188666105 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.188684940 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.188751936 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.188757896 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.188796997 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.191541910 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.191554070 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.191628933 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.191637993 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196458101 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196506977 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196535110 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.196573019 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.196929932 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196964979 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196985006 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.196991920 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.197030067 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.234067917 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.234240055 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.234369993 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.236181021 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.236202955 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.236274004 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.236535072 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.236546993 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.236830950 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.237447023 CEST	49725	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.237456083 CEST	443	49725	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.300996065 CEST	49722	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.301012993 CEST	443	49722	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.302491903 CEST	49723	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.302506924 CEST	443	49723	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.303169012 CEST	49720	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.303179979 CEST	443	49720	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.305146933 CEST	49721	443	192.168.2.5	18.160.225.62
May 10, 2024 06:52:33.305155039 CEST	443	49721	18.160.225.62	192.168.2.5
May 10, 2024 06:52:33.306986094 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.309441090 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.309448957 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.309745073 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.314624071 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.314681053 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.326358080 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.367928982 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.367952108 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.368022919 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.368261099 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.368272066 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.372121096 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.458530903 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.458822012 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.458832979 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.459695101 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.459757090 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.460120916 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.460165977 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.460329056 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.460335970 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.505455971 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.564241886 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.564287901 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.564379930 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.569194078 CEST	49729	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:33.569211960 CEST	443	49729	52.200.169.160	192.168.2.5
May 10, 2024 06:52:33.587261915 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.587289095 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.587376118 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.587629080 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.587639093 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.628433943 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.628667116 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.628678083 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.628956079 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.629302979 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.629354000 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.629628897 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.672116995 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.678065062 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.693510056 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.693517923 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.693528891 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.693648100 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.693672895 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.693734884 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.711869001 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.711889029 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.711967945 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.711976051 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.764782906 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.796454906 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.796466112 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.796505928 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.796541929 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.796552896 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.796593904 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.796612978 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.814812899 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.814847946 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.814901114 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.814909935 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.814941883 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.834741116 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.834755898 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.834844112 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.834857941 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.852860928 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.853038073 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.853051901 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.853125095 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.853141069 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.882177114 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.882191896 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.882520914 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.884881020 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.884936094 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.885054111 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.886697054 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.886715889 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.886748075 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.886780024 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.886796951 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.886842966 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:33.897980928 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.908545017 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.908555031 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.908586979 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.908620119 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.908646107 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.908657074 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.908684969 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.908705950 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.925160885 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.925178051 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.925250053 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.925259113 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.925302029 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.932116985 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:33.940542936 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.940557957 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.940634012 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.940643072 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.940679073 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.947556019 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.947607994 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:33.947643042 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.947679043 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.947885990 CEST	49732	443	192.168.2.5	18.160.225.113
May 10, 2024 06:52:33.947900057 CEST	443	49732	18.160.225.113	192.168.2.5
May 10, 2024 06:52:34.015058041 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.015120983 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.015233040 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.015245914 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.015280962 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.015320063 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.061000109 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.061167002 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.061175108 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.102686882 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.116067886 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.116122007 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.116174936 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.143640995 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.143691063 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.143737078 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.143784046 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.178077936 CEST	49734	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.178092003 CEST	443	49734	18.233.198.142	192.168.2.5
May 10, 2024 06:52:34.181066036 CEST	49733	443	192.168.2.5	18.233.198.142
May 10, 2024 06:52:34.181080103 CEST	443	49733	18.233.198.142	192.168.2.5
May 10, 2024 06:52:36.709925890 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:36.709959030 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:36.710016966 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:36.710381031 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:36.710397005 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:36.944350958 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:36.949769020 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:36.949785948 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:36.950736046 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:36.950799942 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:37.504951954 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.504976988 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.505042076 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.508369923 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.508383036 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.736135006 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.736207962 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.740776062 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.740781069 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.740983009 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.808474064 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.813636065 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.856190920 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:37.856236935 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:37.856313944 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:37.858810902 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:37.858828068 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:37.860119104 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.958128929 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.958192110 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.958344936 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.958457947 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.958457947 CEST	49739	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.958472013 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.958479881 CEST	443	49739	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.992079020 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.992115974 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:37.992260933 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.995587111 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:37.995601892 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.214376926 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.214514971 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.215723038 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.215730906 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.215930939 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.217194080 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.260128021 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.442620993 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.442663908 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.442785025 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.445899963 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.445914030 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.445943117 CEST	49742	443	192.168.2.5	23.221.246.93
May 10, 2024 06:52:38.445949078 CEST	443	49742	23.221.246.93	192.168.2.5
May 10, 2024 06:52:38.461749077 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:38.461898088 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:38.494673014 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:38.494797945 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:38.607063055 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:38.607085943 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:38.644206047 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:38.644238949 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:38.644462109 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:38.800338984 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:38.800425053 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:39.837609053 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:39.880131960 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.002825975 CEST	49703	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.003118038 CEST	49703	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.003458977 CEST	49746	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.003498077 CEST	443	49746	23.1.237.91	192.168.2.5
May 10, 2024 06:52:40.003705025 CEST	49746	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.003987074 CEST	49746	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.004000902 CEST	443	49746	23.1.237.91	192.168.2.5
May 10, 2024 06:52:40.152842045 CEST	443	49703	23.1.237.91	192.168.2.5
May 10, 2024 06:52:40.153042078 CEST	443	49703	23.1.237.91	192.168.2.5
May 10, 2024 06:52:40.232438087 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232464075 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232474089 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232491970 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232503891 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232506990 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232732058 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:40.232757092 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232768059 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232791901 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232804060 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.232822895 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:40.232891083 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:40.312210083 CEST	443	49746	23.1.237.91	192.168.2.5
May 10, 2024 06:52:40.315603018 CEST	49746	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:40.666620970 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:40.666620970 CEST	49740	443	192.168.2.5	40.127.169.103
May 10, 2024 06:52:40.666640043 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:40.666652918 CEST	443	49740	40.127.169.103	192.168.2.5
May 10, 2024 06:52:43.487965107 CEST	49746	443	192.168.2.5	23.1.237.91
May 10, 2024 06:52:46.948817968 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:46.948859930 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:46.948894024 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:47.820508003 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:47.820563078 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:47.820622921 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:47.931374073 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:47.931431055 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:47.931484938 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.200999022 CEST	49719	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.201035023 CEST	443	49719	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.201431036 CEST	49724	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.201462984 CEST	443	49724	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.209549904 CEST	49738	443	192.168.2.5	172.217.4.68
May 10, 2024 06:52:48.209578037 CEST	443	49738	172.217.4.68	192.168.2.5
May 10, 2024 06:52:48.210163116 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.210192919 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.210272074 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.210875034 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.210913897 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.210973978 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.211401939 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.211412907 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.211774111 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.211793900 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.474445105 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.474565029 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.474709988 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.474728107 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.474889994 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.474905968 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.475025892 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.475199938 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.475429058 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.475481033 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.476105928 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.476166010 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.476270914 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.476320982 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:52:48.520118952 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:52:48.524128914 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:53:17.233462095 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.233489990 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.233705044 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.234958887 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.234972954 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.246195078 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.246205091 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.246287107 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.247771978 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.247782946 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.406208038 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:53:17.421160936 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:53:17.461572886 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.461935043 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.461946011 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.462914944 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.463063955 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.465075016 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.465075016 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.465089083 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.465161085 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.473754883 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.474148989 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.474159956 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.475202084 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.475375891 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.478634119 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.478698969 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.479782104 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.479788065 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.521565914 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.521567106 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.521576881 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.533384085 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:53:17.550847054 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:53:17.568016052 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.700068951 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700093985 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700107098 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700130939 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700155973 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700164080 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.700170040 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.700202942 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.703569889 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.718194008 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.718211889 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.718323946 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.718331099 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.718550920 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.744045019 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744062901 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744069099 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744103909 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744112968 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744122982 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744184971 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.744185925 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.744204044 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744210958 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.744260073 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.761836052 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.761845112 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.761878967 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.761914015 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.761924982 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.761945009 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.806030035 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.806799889 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.806822062 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.806930065 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.806930065 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.806936979 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.807028055 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.828064919 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.828080893 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.828129053 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.828135014 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.828198910 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.838797092 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.838807106 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.838845015 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.838874102 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.838882923 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.838926077 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.838926077 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.847760916 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.847784996 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.847853899 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.847853899 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.847861052 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.848000050 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.850801945 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.850990057 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.850999117 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.859819889 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.859848022 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.859877110 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.859884977 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.860177040 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.874975920 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.875006914 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.875036001 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.875045061 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.875071049 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.875130892 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.881015062 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.881045103 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.881071091 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.881078959 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.881107092 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.890326023 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.890465975 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.890474081 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.890710115 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.903810978 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.903847933 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.903867960 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.903873920 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.903918028 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.903978109 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.908252001 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.908268929 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.908329010 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.908334970 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.908418894 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.924346924 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.924362898 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.924479008 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.924484968 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.924618006 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.931797981 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.931881905 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.931905985 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.931952000 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.936731100 CEST	49763	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:17.936743021 CEST	443	49763	52.84.125.87	192.168.2.5
May 10, 2024 06:53:17.951529026 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.951575994 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.951622963 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.951630116 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.951680899 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.951704025 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.960838079 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.960871935 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.960958958 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.960966110 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.961092949 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.973619938 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.973659992 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.973740101 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.973740101 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.973748922 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.973850965 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.978509903 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.978802919 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.989931107 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.989967108 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.990016937 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.990024090 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.990063906 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.992166996 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.992213011 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.992214918 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:17.992264986 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.993762970 CEST	49762	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:17.993771076 CEST	443	49762	52.84.52.50	192.168.2.5
May 10, 2024 06:53:18.471307993 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:18.471335888 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.471412897 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:18.472451925 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:18.472465992 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.741606951 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.799213886 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:18.955944061 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:18.955971956 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.957071066 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.957082033 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:18.957149029 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.013005972 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.013065100 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.016823053 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.016839027 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.031096935 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.031125069 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.031178951 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.040719986 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.040733099 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.070835114 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.148180962 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.148222923 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.148298979 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.262722969 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.305779934 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.375320911 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.375333071 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.375829935 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.379380941 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.379452944 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.379475117 CEST	49768	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.379498959 CEST	443	49768	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.387898922 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.421533108 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.421561003 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.421623945 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.422924042 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.422938108 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.432117939 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.566109896 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581497908 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581506014 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581523895 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581546068 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.581557989 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581568003 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.581576109 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.581619978 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.599653959 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.599669933 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.599716902 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.599725962 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.599757910 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.651798010 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.683712006 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.683718920 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.683753014 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.683774948 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.683782101 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.683801889 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.683810949 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.683852911 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.688415051 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.688749075 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.688762903 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.689052105 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.689446926 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.689511061 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.689873934 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.701905012 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.701947927 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.701983929 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.701992035 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.702014923 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.721582890 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.721597910 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.721649885 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.721659899 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.721692085 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.736115932 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.742831945 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.742851973 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.742892027 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.742906094 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.742928982 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.791531086 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.793214083 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.793222904 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.793247938 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.793270111 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.793286085 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.793294907 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.793324947 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.793339014 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.804965019 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.805003881 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.805071115 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.805078030 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.805114985 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.807244062 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.807292938 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.807301044 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.822503090 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.822523117 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.822560072 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.822567940 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.822597980 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.836554050 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.836569071 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.836616993 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.836626053 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.850688934 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.850712061 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.850749969 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.850758076 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.850790977 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.862566948 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.862582922 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.862634897 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.862643957 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.862683058 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.864573956 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.864620924 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.877290010 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.877305984 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.877340078 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.877346992 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.877381086 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.877399921 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.889067888 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.889097929 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.889127016 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.889134884 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.889170885 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.900523901 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.900541067 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.900597095 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.900604963 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.900645971 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.903461933 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.903513908 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.909198046 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.909229994 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.909256935 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.909262896 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.909280062 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.918387890 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.918402910 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.918441057 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.918450117 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.918486118 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.927946091 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.927963018 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.927998066 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.928008080 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.928041935 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.936517954 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.936532974 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.936573982 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.936582088 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.936614037 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.942995071 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.943008900 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.943052053 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.943061113 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.943100929 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.950560093 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.950609922 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:19.950659037 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.951252937 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.951282978 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.951311111 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.951316118 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.951322079 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.951343060 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.951360941 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:19.951361895 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.951400995 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:19.956619024 CEST	49775	443	192.168.2.5	107.20.120.138
May 10, 2024 06:53:19.956629992 CEST	443	49775	107.20.120.138	192.168.2.5
May 10, 2024 06:53:20.052512884 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:20.052529097 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:20.052624941 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:20.055408955 CEST	49773	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:20.055416107 CEST	443	49773	52.84.52.50	192.168.2.5
May 10, 2024 06:53:20.081883907 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:20.081899881 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:20.172708035 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:20.172734022 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:20.172950983 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:20.173801899 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:20.173816919 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:20.174930096 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:20.174948931 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:20.175776005 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:20.176858902 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:20.176870108 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:20.441111088 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:20.441240072 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:20.599133968 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:20.599138021 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:20.679269075 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:20.681814909 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.021485090 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.021518946 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.021576881 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.022943974 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.022964954 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.023014069 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.023859024 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.023870945 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.023997068 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.024008989 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.024806023 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.024817944 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.024868011 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.024933100 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.024944067 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.024982929 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.026216030 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.026223898 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.026274920 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.026855946 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.026860952 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.026928902 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.027426958 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.027439117 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.027770996 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.027776003 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.029391050 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.029448986 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.032800913 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.032879114 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.033672094 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.033680916 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.034231901 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.034250021 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.034692049 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.034699917 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.035202026 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.035207987 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.053940058 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.053962946 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.054192066 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.065323114 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.108114958 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.166083097 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.166094065 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.166110992 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.166131973 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.166140079 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.166182041 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.170453072 CEST	49785	443	192.168.2.5	18.210.94.219
May 10, 2024 06:53:21.170463085 CEST	443	49785	18.210.94.219	192.168.2.5
May 10, 2024 06:53:21.199024916 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.235507011 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.235523939 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.235584974 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.236633062 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.236665010 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.236728907 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.238347054 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.238358021 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.238755941 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.238770008 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.249712944 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.249749899 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.249804020 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.250268936 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.250283957 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.286122084 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.288283110 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.290889025 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.300267935 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.300317049 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.300359011 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.378247023 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.378257036 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.378654957 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.378667116 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.379190922 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.379203081 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.379251957 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.379308939 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.379316092 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.379578114 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.379589081 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.379638910 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.380261898 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.380273104 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.380320072 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.390221119 CEST	49784	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:21.390229940 CEST	443	49784	63.140.39.248	192.168.2.5
May 10, 2024 06:53:21.391546011 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.391598940 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.396470070 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.396475077 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.402389050 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.402443886 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.403727055 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.403733015 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.403744936 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.404421091 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.404486895 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.405138969 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.405145884 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.428488016 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.429217100 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.429229021 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.429282904 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.430834055 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.430850029 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.431096077 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.431103945 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.431955099 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.432015896 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.433619976 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.433669090 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.433752060 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.433758020 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.444125891 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.460542917 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.460864067 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.460874081 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.461724997 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.461860895 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.462513924 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.462994099 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.463010073 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.463018894 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.463023901 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.463074923 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.463083029 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.463119030 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.463136911 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.463161945 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.463392019 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.463401079 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.463479042 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.463484049 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.464262962 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.464315891 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.464442015 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.465313911 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.465365887 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.465473890 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.465481997 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.467304945 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.467309952 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.467322111 CEST	49783	443	192.168.2.5	40.127.169.103
May 10, 2024 06:53:21.467325926 CEST	443	49783	40.127.169.103	192.168.2.5
May 10, 2024 06:53:21.471766949 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.471770048 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.472496986 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.472790956 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.472805023 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.473642111 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.473692894 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.474765062 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.474817991 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.474993944 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.475002050 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.540199995 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.540216923 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.540272951 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.540286064 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.540327072 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.543767929 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.543814898 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.543823004 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.543862104 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.548206091 CEST	49792	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:21.548212051 CEST	443	49792	54.145.109.191	192.168.2.5
May 10, 2024 06:53:21.569447041 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.569493055 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.569839954 CEST	49790	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:21.569844961 CEST	443	49790	18.235.19.155	192.168.2.5
May 10, 2024 06:53:21.584219933 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.584229946 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.599822044 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.599961996 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.606782913 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.606801987 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.606851101 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.607141972 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.607157946 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.659907103 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.659920931 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.659979105 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.660167933 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.660175085 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.663161039 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663168907 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663203955 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663213968 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663216114 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663266897 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663382053 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663388968 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663403988 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663417101 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663427114 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663434029 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663450956 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663456917 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.663469076 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.663495064 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.682722092 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.682740927 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.682796001 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.683023930 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.683036089 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.690264940 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.690313101 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.690354109 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.690758944 CEST	49795	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.690767050 CEST	443	49795	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.692706108 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.692722082 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.692780972 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.693088055 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.693100929 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.693226099 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.695895910 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.696121931 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.696135998 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.696428061 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.696789980 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.696856022 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.697072029 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.697098017 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.697103977 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.705095053 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.705360889 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.705404997 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.706326008 CEST	49797	443	192.168.2.5	3.162.163.99
May 10, 2024 06:53:21.706335068 CEST	443	49797	3.162.163.99	192.168.2.5
May 10, 2024 06:53:21.713707924 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.713783026 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.713824034 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.713835001 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.713871956 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.715718985 CEST	49796	443	192.168.2.5	157.240.254.7
May 10, 2024 06:53:21.715729952 CEST	443	49796	157.240.254.7	192.168.2.5
May 10, 2024 06:53:21.750087976 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750108004 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750119925 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750134945 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750143051 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750145912 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750227928 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.750227928 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.750297070 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750346899 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.750401974 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.750422001 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.751061916 CEST	49791	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.751071930 CEST	443	49791	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.786231995 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.786240101 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.786268950 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.786303043 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.786309958 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.786314011 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.786345959 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.786370039 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.806869984 CEST	49788	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:21.806880951 CEST	443	49788	192.65.229.36	192.168.2.5
May 10, 2024 06:53:21.824556112 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:21.824585915 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:21.824639082 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:21.825022936 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:21.825037003 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:21.870779037 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.881256104 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.902560949 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.912913084 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.935316086 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:21.935332060 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:21.935390949 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:21.935787916 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.935797930 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.935976982 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.935986042 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.936124086 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.937279940 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.937340021 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.938577890 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.938585997 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.938863993 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.938872099 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.939626932 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.939687967 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:21.939738035 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.939745903 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.939765930 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.939775944 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.939791918 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.939824104 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.940113068 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:21.940121889 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:21.943322897 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.943417072 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.944561005 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.944622993 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.947345972 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.947438955 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.947537899 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:21.947855949 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:21.947864056 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:21.948065996 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.948075056 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:21.948232889 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.948241949 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:21.978481054 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.978703976 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.978750944 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.979389906 CEST	49800	443	192.168.2.5	63.140.39.35
May 10, 2024 06:53:21.979403019 CEST	443	49800	63.140.39.35	192.168.2.5
May 10, 2024 06:53:21.989779949 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:21.989780903 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:21.992110968 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.042996883 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.043263912 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.043287992 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.044178963 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.044447899 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.044646025 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.044646025 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.044702053 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.085114956 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.087795019 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.087816000 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.087946892 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.088530064 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.088541031 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.113694906 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.113790035 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.115869999 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.116622925 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.116636038 CEST	443	49809	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.116648912 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.116751909 CEST	49809	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.117449999 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.117461920 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.117778063 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.119363070 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.119374990 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.128371000 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128396034 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128402948 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128417015 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128423929 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128443003 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.128443956 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128458023 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128483057 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.128484011 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.128505945 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.128565073 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.131062984 CEST	49810	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:22.131069899 CEST	443	49810	99.84.160.111	192.168.2.5
May 10, 2024 06:53:22.145653963 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.145709038 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.146568060 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.151792049 CEST	49811	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.151803970 CEST	443	49811	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.181111097 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:22.181157112 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:22.181581974 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:22.182604074 CEST	49808	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:22.182615042 CEST	443	49808	63.140.38.112	192.168.2.5
May 10, 2024 06:53:22.193120003 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.193130016 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.259983063 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.260504961 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.260514021 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.261508942 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.261595964 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.262542963 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.262608051 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.262914896 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.262921095 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.265635967 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.265674114 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.265794039 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.266041994 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.266057968 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.280436993 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.280575037 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.281372070 CEST	49813	443	192.168.2.5	3.162.163.110
May 10, 2024 06:53:22.281384945 CEST	443	49813	3.162.163.110	192.168.2.5
May 10, 2024 06:53:22.339493990 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.339796066 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.339807987 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.340090036 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.340529919 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.340529919 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.340543985 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.340595007 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.350975037 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.351288080 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.351300001 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.352257013 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.352423906 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.352674961 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.352730036 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.352758884 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.395653009 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.395782948 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.396117926 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.484251976 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.484263897 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.486099005 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.487793922 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.487804890 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.488804102 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.488912106 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.489203930 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.489264011 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.495033979 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.495044947 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.548547029 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.548573017 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.548894882 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.551799059 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.551814079 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.573189974 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.573219061 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.573302984 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.573987961 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.574003935 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.575108051 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.575234890 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.575443983 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.578270912 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.578285933 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.579830885 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.579860926 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.579981089 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.580076933 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.580751896 CEST	49814	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.580751896 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.580759048 CEST	443	49814	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.580765009 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.584583998 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.584587097 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.586347103 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.586357117 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.586419106 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.587183952 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.587193012 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.611347914 CEST	49819	443	192.168.2.5	35.244.154.8
May 10, 2024 06:53:22.611354113 CEST	443	49819	35.244.154.8	192.168.2.5
May 10, 2024 06:53:22.623502970 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.623538017 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.623625994 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.623800039 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.623810053 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.656011105 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.656611919 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.656807899 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.656883955 CEST	49817	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.656893015 CEST	443	49817	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.657921076 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.657949924 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.658047915 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.659799099 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.659812927 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.720304012 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.720351934 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.720535040 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.723793983 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.723810911 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.723900080 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.726128101 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.726130962 CEST	49825	443	192.168.2.5	34.49.212.111
May 10, 2024 06:53:22.726140022 CEST	443	49825	34.49.212.111	192.168.2.5
May 10, 2024 06:53:22.726140022 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.741563082 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.741584063 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.741738081 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.741897106 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.741910934 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.778937101 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.779798985 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.779810905 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.780668020 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.780775070 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.781689882 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.781744003 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.781856060 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.781863928 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:22.803894997 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.804126024 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.804135084 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.805233002 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.805507898 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.806118965 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.806173086 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.806309938 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.806315899 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:22.858714104 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.858935118 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.858947992 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.859992027 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.860075951 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.861094952 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.861094952 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:22.861105919 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.861156940 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:22.867705107 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:22.867737055 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:22.867837906 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:22.868038893 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:22.868056059 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:22.879559040 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:22.879559994 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:22.905813932 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.907634974 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.907655954 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.908523083 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.908610106 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.909921885 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.909976959 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.910181999 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:22.912343979 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.912578106 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.912592888 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.913449049 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.913548946 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.913837910 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.913888931 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.914005041 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.914010048 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:22.923619986 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.924151897 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.924165010 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.924467087 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.927448988 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.927508116 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.927676916 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:22.952131033 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:22.969770908 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.970705032 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.970733881 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.971611977 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.971692085 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.972121000 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:22.973243952 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.973243952 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:22.973258972 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.973300934 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:22.990895033 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:22.991262913 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.991688967 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.991698980 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.992575884 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.992683887 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.993165970 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.993217945 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:22.993289948 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:22.993297100 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:23.020278931 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.020313025 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.020328999 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.020344973 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.020382881 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.020389080 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.020404100 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.020438910 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.020445108 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.021209955 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021226883 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021234035 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021259069 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021271944 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021287918 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:23.021292925 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.021311045 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:23.021333933 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:23.023865938 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.023910046 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.023919106 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.027486086 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.027535915 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.027545929 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.028713942 CEST	49831	443	192.168.2.5	18.172.135.121
May 10, 2024 06:53:23.028724909 CEST	443	49831	18.172.135.121	192.168.2.5
May 10, 2024 06:53:23.032695055 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.032727957 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.032784939 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.033083916 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.033097982 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.034780025 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.034810066 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.034827948 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.034836054 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.034888983 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.038486004 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.042069912 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.042097092 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.042120934 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.042129040 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.042175055 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.045252085 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045286894 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045317888 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045327902 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.045345068 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045382023 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.045388937 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045490026 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045532942 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.045546055 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045722008 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.045869112 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045895100 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045907974 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.045916080 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.045954943 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.046304941 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.046370983 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.046401024 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.046410084 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.046418905 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.046458006 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.046464920 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047256947 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047283888 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047297955 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.047306061 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047333956 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047343016 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.047348976 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.047388077 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.047394037 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048320055 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048346043 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048362970 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.048372030 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048391104 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048420906 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.048430920 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.048474073 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.049133062 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049182892 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049210072 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049221992 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.049231052 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049264908 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.049269915 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049279928 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.049312115 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.049335957 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.049362898 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.049376965 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.049385071 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.049416065 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.050010920 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050048113 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050076008 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050086021 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.050101042 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050137997 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.050143957 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050951004 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050986052 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.050995111 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.051002979 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.051037073 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.051040888 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.051049948 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.051091909 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.052467108 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.052516937 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.053009987 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.056660891 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.056703091 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.056711912 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.060312033 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.060355902 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.060363054 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.068118095 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:23.068161964 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:23.085664034 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:23.085799932 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:23.085844994 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:23.087059975 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:23.087125063 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.087138891 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.089334965 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.092269897 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.092289925 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.092566967 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.108397961 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.108470917 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.113213062 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.128547907 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.128583908 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.128593922 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.128604889 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.128648996 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.130208015 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.133627892 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.133651018 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.133672953 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.133686066 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.133728027 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.136643887 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.139700890 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.139744043 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.139751911 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.142560959 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.142601967 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.142610073 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.145473957 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.145518064 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.145525932 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.147931099 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.147979021 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.147985935 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.150593996 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.150634050 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.150636911 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.150710106 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.152178049 CEST	49833	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:23.152194023 CEST	443	49833	142.250.190.98	192.168.2.5
May 10, 2024 06:53:23.154210091 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154269934 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.154277086 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154288054 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154347897 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.154356003 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154396057 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.154685020 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154720068 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154731035 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.154737949 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.154766083 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.154783964 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.156128883 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.156764984 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.156800985 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.156815052 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.156822920 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.156848907 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.157140017 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.157179117 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.157186031 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.157241106 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.157670975 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.157701015 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.157723904 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.157728910 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.157751083 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.157780886 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.158514023 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.158549070 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.158552885 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.158560038 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.158611059 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.159436941 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.159441948 CEST	49828	443	192.168.2.5	146.75.80.157
May 10, 2024 06:53:23.159452915 CEST	443	49828	146.75.80.157	192.168.2.5
May 10, 2024 06:53:23.159481049 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.160821915 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.160856009 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.160862923 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.160868883 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.160892010 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.161156893 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.161202908 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.161210060 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.161246061 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.161355972 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.161405087 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.164277077 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:23.208391905 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.208452940 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.230989933 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:23.231029034 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:23.231075048 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:23.236016035 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:23.236022949 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236061096 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236066103 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:23.236074924 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.236088037 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236118078 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:23.236136913 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.236145020 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236298084 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236319065 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236332893 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236339092 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.236346960 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.236378908 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.237055063 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237082958 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237098932 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.237106085 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237152100 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.237159014 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237853050 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237883091 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237895012 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.237901926 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237926006 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237948895 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.237957954 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.237998009 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.238676071 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.238737106 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.238765955 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.238781929 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.238790035 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.238822937 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.239387989 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.239449978 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.239476919 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.239490032 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.239499092 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.239542961 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.239550114 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240274906 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240304947 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240319967 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.240329027 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240365982 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.240371943 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240390062 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.240432978 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.254120111 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.255194902 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:23.255239010 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:23.255283117 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:23.261857986 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.261930943 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.262562990 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.262594938 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.262613058 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.262624025 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.262635946 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.263041973 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.263071060 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.263081074 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.263087988 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.263118029 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.264211893 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.264244080 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.264266968 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.264275074 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.264297009 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.265155077 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.265189886 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.265208960 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.265216112 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.265230894 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.265242100 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.265278101 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.265283108 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.265321970 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.266042948 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.266078949 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.266098022 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.266103983 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.266141891 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.266943932 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.267000914 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.267000914 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.267010927 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.267045021 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.267834902 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.267893076 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.268310070 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.268337965 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.268359900 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.268367052 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.268378019 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.269254923 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.269303083 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.269310951 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.269345045 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.270159006 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.270193100 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.270207882 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.270212889 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.270241022 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.270251989 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.271085978 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.271142006 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.272475958 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.272507906 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.272536993 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.272545099 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.272556067 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.274311066 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.274322987 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.274374008 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.274382114 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.276586056 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.276598930 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.276654005 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.276664019 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.276695013 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.278498888 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.278511047 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.278565884 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.278575897 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.278590918 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.280301094 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.280313969 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.280360937 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.280369043 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.282130957 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.282149076 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.282206059 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.282215118 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.282248020 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.284310102 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.284321070 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.284390926 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.284399986 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.286187887 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.286201954 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.286262989 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.286272049 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.312908888 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.370223045 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.370238066 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.370302916 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.370313883 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.371759892 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.371777058 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.371813059 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.371819973 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.371850014 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.373414040 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.373428106 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.373466969 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.373473883 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.373498917 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.374373913 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.374512911 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.374557972 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.374571085 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.374610901 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.374969006 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.374979019 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.374985933 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.375014067 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.375021935 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.375029087 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.375061035 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.375061035 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.376760006 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.376775026 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.376826048 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.376833916 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.379492998 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.379508972 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.379535913 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.379542112 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.379566908 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.381331921 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.381344080 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.381386995 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.381393909 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.381411076 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.383780956 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.383795977 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.383866072 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.383876085 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.385416985 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.385430098 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.385473967 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.385482073 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.385513067 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.387188911 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.387206078 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.387239933 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.387248039 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.387274027 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.389102936 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.389115095 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.389149904 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.389158010 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.389208078 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.390925884 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.390939951 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.390980005 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.390986919 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.391014099 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.392816067 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.392832994 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.392868042 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.392874956 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.392904043 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.395657063 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.397579908 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397593021 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397775888 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.397783995 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397794962 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397810936 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397845030 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.397851944 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.397880077 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.399094105 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.399107933 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.399141073 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.399149895 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.399183989 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.400553942 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.400583982 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.400608063 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.400615931 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.400635004 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.400652885 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.402304888 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.402318954 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.402354002 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.402360916 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.402385950 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.402399063 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.405971050 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.405983925 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.406050920 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.406059027 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.406116009 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.407337904 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.407351971 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.407404900 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.407412052 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.407445908 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.409456015 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.409470081 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.409507990 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.409514904 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.409549952 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.409570932 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.411127090 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.411140919 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.411175013 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.411181927 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.411207914 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.411223888 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.413054943 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.413069010 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.413131952 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.413139105 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.413173914 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.413255930 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.413261890 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.413566113 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.415119886 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.415133953 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.415174007 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.415182114 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.415204048 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.415224075 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.417053938 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.417068005 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.417119980 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.417131901 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.417165995 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.418967009 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.418982029 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.419017076 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.419023037 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.419054985 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.419069052 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.420758009 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.420772076 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.420813084 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.420819998 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.420842886 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.420861006 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.426297903 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.426311970 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.426352024 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.426359892 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.426393032 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.426413059 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.479279995 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.479296923 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.479341984 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.479351997 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.479378939 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.479393959 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.481102943 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.481117964 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.481161118 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.481173992 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.481208086 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.481219053 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.482989073 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.483002901 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.483045101 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.483052969 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.483078003 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.483098984 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.483855009 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.483908892 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.483916044 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.485702038 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.485717058 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.485755920 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.485764027 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.485793114 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.487938881 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.487956047 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.487993002 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.487999916 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.488054991 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.489793062 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.489811897 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.489878893 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.489891052 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.489911079 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.491626024 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.491642952 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.491688967 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.491695881 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.491729021 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.493482113 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.493494987 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.493536949 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.493546009 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.493571043 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.495728016 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.495748997 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.495784998 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.495790958 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.495810986 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.497355938 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.497539997 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.497553110 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.497610092 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.497618914 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.497646093 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.499397039 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.499413967 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.499466896 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.499478102 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.499512911 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.501207113 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.501220942 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.501257896 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.501266956 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.501281977 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.503921032 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.503941059 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.503981113 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.503990889 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.504004955 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.505322933 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.505336046 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.505378008 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.505387068 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.505409002 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.507124901 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.507141113 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.507179976 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.507190943 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.507203102 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.509881020 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.509895086 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.509939909 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.509949923 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.509988070 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.511667013 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.511682987 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.511718988 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.511725903 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.511759996 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.513534069 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.513550043 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.513581991 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.513590097 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.513621092 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.514894962 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.514910936 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.514940977 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.514947891 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.514974117 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.517611027 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.517622948 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.517654896 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.517662048 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.517703056 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.519378901 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.519397974 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.519434929 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.519442081 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.519473076 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.521265984 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.521281958 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.521315098 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.521322012 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.521353006 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.523083925 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.523094893 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.523129940 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.523138046 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.523163080 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.525353909 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.525369883 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.525408983 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.525418043 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.525454998 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.527162075 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.527173996 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.527221918 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.527231932 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.527245045 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.528891087 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.528909922 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.528943062 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.528950930 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.528971910 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.530606031 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.530617952 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.530667067 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.530674934 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.530699968 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.532401085 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.532418013 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.532455921 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.532464981 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.532493114 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.534481049 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.534495115 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.534570932 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.534583092 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.536358118 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.536375999 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.536412954 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.536421061 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.536442041 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.537208080 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.537220001 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.537257910 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.537265062 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.537290096 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.538819075 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.538836002 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.538866043 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.538872957 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.538892984 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.539813995 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.539825916 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.539864063 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.539872885 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.539904118 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.541932106 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.541953087 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.541982889 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.541990995 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.542017937 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.542896032 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.542912960 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.542942047 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.542949915 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.542975903 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.544609070 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.544631004 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.544660091 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.544668913 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.544693947 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.545357943 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.545387983 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.545408010 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.545416117 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.545432091 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:23.545444965 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.545471907 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.600872040 CEST	49835	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:23.600897074 CEST	443	49835	63.140.39.130	192.168.2.5
May 10, 2024 06:53:23.601771116 CEST	49837	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:23.601790905 CEST	443	49837	44.221.183.201	192.168.2.5
May 10, 2024 06:53:23.604727030 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.604796886 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.611022949 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.656121016 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.668837070 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.669122934 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.686507940 CEST	49832	443	192.168.2.5	66.180.64.123
May 10, 2024 06:53:23.686527014 CEST	443	49832	66.180.64.123	192.168.2.5
May 10, 2024 06:53:23.688258886 CEST	49842	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.688275099 CEST	443	49842	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.744334936 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:23.744359970 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:23.744417906 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:23.745137930 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:23.745146036 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:23.745192051 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:23.781938076 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797276974 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797283888 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797307968 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797319889 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797333002 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797337055 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.797363043 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797378063 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.797384024 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.797399044 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.803780079 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:23.803792953 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:23.804126978 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:23.804137945 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:23.809339046 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.809346914 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.809370041 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.809380054 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.809382915 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.809396029 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.809421062 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.809443951 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.816979885 CEST	49840	443	192.168.2.5	104.21.50.150
May 10, 2024 06:53:23.816993952 CEST	443	49840	104.21.50.150	192.168.2.5
May 10, 2024 06:53:23.842152119 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:23.842175007 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:23.842227936 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:23.842624903 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:23.842639923 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:23.876486063 CEST	49845	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:23.876499891 CEST	443	49845	52.84.52.50	192.168.2.5
May 10, 2024 06:53:23.983433008 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:23.983457088 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:23.983511925 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:23.984055042 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:23.984080076 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:23.984142065 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:23.984293938 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:23.984308958 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:23.984433889 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:23.984443903 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:23.993282080 CEST	49827	443	192.168.2.5	104.22.52.252
May 10, 2024 06:53:23.993307114 CEST	443	49827	104.22.52.252	192.168.2.5
May 10, 2024 06:53:24.056607008 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.056835890 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.056845903 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.057202101 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.057550907 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.057611942 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.057684898 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.065427065 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.065706015 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.065715075 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.066060066 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.067022085 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.067090034 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.067142963 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.074542046 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.074558020 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.074762106 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.074994087 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.075007915 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.095609903 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.095635891 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.095917940 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.096152067 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.096165895 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.096684933 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.096716881 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.096849918 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.097074032 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.097090006 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.100120068 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.107193947 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.107741117 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.107748985 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.108061075 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.108125925 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.108381987 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.108438015 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.108846903 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.108871937 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.110692978 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.110718012 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.110780954 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.111674070 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.111689091 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.113780975 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.113790989 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.114015102 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.115176916 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.115184069 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.116537094 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.116549015 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.116616011 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.116813898 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.116822004 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.191490889 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.191490889 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.191536903 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.222671032 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.222697973 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.222771883 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.223191023 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.223201036 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.236694098 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.236713886 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.236958027 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.237241983 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.237253904 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.260432005 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.260653973 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.260662079 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.261249065 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.261526108 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.261580944 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.261707067 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.261720896 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.262578011 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.262638092 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.262759924 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.262814045 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.262923002 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.263900042 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.263951063 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.264040947 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.304121017 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.307221889 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.307523966 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.307532072 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.308120012 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.308377028 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.308444977 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.309506893 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.309556007 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.309703112 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.309710026 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.323415041 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.323642969 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.323661089 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.324446917 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.324531078 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.324603081 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.324624062 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.324640989 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.325485945 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.325562000 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.325675011 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.325731039 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.326144934 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.326153994 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.326565027 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.326622009 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.326724052 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.328775883 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.328819990 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.329158068 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.329170942 CEST	443	49847	18.235.19.155	192.168.2.5
May 10, 2024 06:53:24.329205036 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.329236984 CEST	49847	443	192.168.2.5	18.235.19.155
May 10, 2024 06:53:24.330763102 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.330790043 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.330900908 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.331116915 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.331130028 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.344388008 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.344841957 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.344849110 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.345132113 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.345726967 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.345777988 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.346297979 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.371093035 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.371295929 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.371304989 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.371488094 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.371496916 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.371519089 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.371531010 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.371599913 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.371913910 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.371988058 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.372033119 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.376957893 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.377157927 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.377167940 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.377994061 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.378052950 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.378952980 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.378993988 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.379147053 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.380462885 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.380508900 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.380563021 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.381618977 CEST	49850	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.381627083 CEST	443	49850	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.392115116 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.395350933 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.395359039 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.395365000 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.395368099 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.412116051 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.420125008 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.447895050 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447913885 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447921991 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447942019 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447952032 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447961092 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.447979927 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.447993994 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.448052883 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.448112011 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.448120117 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.448160887 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.448174000 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473093987 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473102093 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473114967 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473123074 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473148108 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.473160028 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.473182917 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.475902081 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.476406097 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.476419926 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.477272987 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.477333069 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.477653980 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.477705002 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.477783918 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.486148119 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.486149073 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.509746075 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.510068893 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.510077953 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.511231899 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.511316061 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.511569023 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.511629105 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.511682987 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.524116039 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.531017065 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.531039953 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.531244993 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.532028913 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.532042980 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.550538063 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.550851107 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.550860882 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.551141024 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.552129030 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.553471088 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.553535938 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.553813934 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.562252045 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.562367916 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.562438011 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.570766926 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.571949005 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.572017908 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.572201014 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.572263002 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.572273016 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.572287083 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.572330952 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.572339058 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.575834036 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.578295946 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.578435898 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.578615904 CEST	49848	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.578634024 CEST	443	49848	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.578659058 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.584120035 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.584197044 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.585587025 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.585599899 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.585611105 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.592756987 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.592834949 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.592844963 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.592880011 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.592947960 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.596127033 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.597418070 CEST	49856	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.597429991 CEST	443	49856	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.602262974 CEST	49857	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:24.602273941 CEST	443	49857	142.250.190.66	192.168.2.5
May 10, 2024 06:53:24.611228943 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.611251116 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.611480951 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.612243891 CEST	49861	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:24.612251043 CEST	443	49861	142.250.190.98	192.168.2.5
May 10, 2024 06:53:24.612720013 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.612734079 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.614854097 CEST	49858	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.614866018 CEST	443	49858	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.626837969 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.626889944 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.626961946 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.628586054 CEST	49859	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:24.628593922 CEST	443	49859	54.145.109.191	192.168.2.5
May 10, 2024 06:53:24.633582115 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.633604050 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.633670092 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.634042978 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.634059906 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.639050007 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.639142036 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.639305115 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.639682055 CEST	49854	443	192.168.2.5	104.244.42.197
May 10, 2024 06:53:24.639689922 CEST	443	49854	104.244.42.197	192.168.2.5
May 10, 2024 06:53:24.641011953 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.641053915 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.641200066 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.642168999 CEST	49853	443	192.168.2.5	104.244.42.131
May 10, 2024 06:53:24.642175913 CEST	443	49853	104.244.42.131	192.168.2.5
May 10, 2024 06:53:24.657494068 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:24.657509089 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:24.657577038 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:24.657759905 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:24.657773018 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:24.679755926 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.680083990 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.680129051 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.685586929 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.685591936 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.687714100 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.695101976 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.695137978 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.695225954 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.696841955 CEST	49860	443	192.168.2.5	63.140.39.130
May 10, 2024 06:53:24.696850061 CEST	443	49860	63.140.39.130	192.168.2.5
May 10, 2024 06:53:24.699371099 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.699387074 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.726509094 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.726528883 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.726754904 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.727324963 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.727336884 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.728868961 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.728919983 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.728986979 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.729625940 CEST	49863	443	192.168.2.5	192.65.229.43
May 10, 2024 06:53:24.729635954 CEST	443	49863	192.65.229.43	192.168.2.5
May 10, 2024 06:53:24.732920885 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.732939959 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.733006954 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.733256102 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.733268976 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.737494946 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.737502098 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.737653971 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.738332033 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.738344908 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.748502970 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.748512983 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.748579025 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.749042988 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:24.749053001 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.753535032 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.754095078 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.754102945 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.754434109 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.755418062 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.755481005 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.756732941 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.756747961 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.756922960 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.757307053 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.757720947 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.757735014 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.760251999 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:24.760270119 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:24.760332108 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:24.760754108 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:24.760768890 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:24.761902094 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.761913061 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.761986971 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.762367964 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.762384892 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.764120102 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:24.764127970 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:24.764194965 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:24.764718056 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:24.764729977 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:24.767474890 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.767769098 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.767790079 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.767852068 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.768759012 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:24.768770933 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:24.779635906 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.779652119 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.779735088 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.779752016 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.779819965 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.782567978 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.782612085 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.782624006 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.782649040 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.790435076 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.800123930 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.824306011 CEST	49866	443	192.168.2.5	99.84.160.111
May 10, 2024 06:53:24.824316025 CEST	443	49866	99.84.160.111	192.168.2.5
May 10, 2024 06:53:24.840770960 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.841028929 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.841048002 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.841372967 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.842014074 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.842080116 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.842582941 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:24.884126902 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:24.887485027 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.887553930 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.887823105 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.892117977 CEST	49864	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:24.892123938 CEST	443	49864	104.244.42.195	192.168.2.5
May 10, 2024 06:53:24.899477959 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.899923086 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.899939060 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.900229931 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.900809050 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.900866985 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.901205063 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:24.944005966 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.944134951 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:24.944518089 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.944542885 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.945380926 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.945453882 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.946890116 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.946944952 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.947415113 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.947427988 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:24.961041927 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.961625099 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.961637020 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.962552071 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.962631941 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.963496923 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.963551044 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.963558912 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.967796087 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.967803001 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.968108892 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.968179941 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.968696117 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.968755960 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.972040892 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.972081900 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:24.972646952 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:24.982464075 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:24.982471943 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.983691931 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:24.983768940 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:24.984059095 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:24.985210896 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:24.994496107 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:24.998941898 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.003370047 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.003379107 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.003717899 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.003736019 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.003961086 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.003971100 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.004129887 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.004868031 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.004933119 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.004997969 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.005013943 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.005861044 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.005913019 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.006104946 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.006167889 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.007014990 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.007074118 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.007469893 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.007525921 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.007936954 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.008209944 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.008219004 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.008311033 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.008321047 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.032932997 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.033544064 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.033564091 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.034301996 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.034482956 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.034535885 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.035310030 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.045057058 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.045085907 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.045535088 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.046999931 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.047060013 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.047414064 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.047427893 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.047905922 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.047985077 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.048243999 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.048258066 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.048511028 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.048537016 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.048648119 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.048698902 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.048887014 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.048892975 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.049493074 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.049580097 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.049606085 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.052114964 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.052942038 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.085536003 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.085545063 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.086533070 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.086599112 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.087771893 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.087830067 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.087965965 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.087977886 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.092127085 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.099716902 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.100004911 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.100008965 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.100011110 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.118321896 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:25.119812965 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:25.119872093 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:25.153817892 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.161542892 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.161556959 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.162115097 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:25.162161112 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:25.162220001 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:25.162513971 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.162574053 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.169914007 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.169975042 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.170356989 CEST	49871	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:25.170377016 CEST	443	49871	44.221.183.201	192.168.2.5
May 10, 2024 06:53:25.170965910 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.170974016 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.175499916 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.175532103 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.175554991 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.175561905 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.175571918 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.175600052 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.177747965 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.177824974 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.184153080 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.184159040 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.184240103 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.188733101 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.188747883 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.188807011 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.189110041 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.189122915 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.192342043 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.199747086 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.209062099 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.209069967 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.209080935 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.209151983 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.209162951 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.209213018 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.219671011 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.219711065 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.219765902 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.225249052 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.226284027 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.226342916 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.226741076 CEST	49876	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.226749897 CEST	443	49876	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.227861881 CEST	49868	443	192.168.2.5	52.84.52.50
May 10, 2024 06:53:25.227879047 CEST	443	49868	52.84.52.50	192.168.2.5
May 10, 2024 06:53:25.228945017 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.228952885 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.228984118 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.229038000 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.229046106 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.229084015 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.232233047 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.232281923 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.232287884 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.234894037 CEST	49870	443	192.168.2.5	172.217.4.70
May 10, 2024 06:53:25.234900951 CEST	443	49870	172.217.4.70	192.168.2.5
May 10, 2024 06:53:25.251833916 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.251893044 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.251904964 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.253773928 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.253823042 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.255963087 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.256042957 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.256194115 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.271950006 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.285912991 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.285979033 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.298835039 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.298882008 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.298933029 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.301975012 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.302011967 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.302138090 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.302838087 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.302850008 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.317449093 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.317457914 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.317487955 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.317502022 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.317517042 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.317573071 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.348551035 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.348593950 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.348728895 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.349922895 CEST	49880	443	192.168.2.5	104.244.42.5
May 10, 2024 06:53:25.349935055 CEST	443	49880	104.244.42.5	192.168.2.5
May 10, 2024 06:53:25.353166103 CEST	49877	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.353176117 CEST	443	49877	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.355365038 CEST	49873	443	192.168.2.5	3.33.220.150
May 10, 2024 06:53:25.355374098 CEST	443	49873	3.33.220.150	192.168.2.5
May 10, 2024 06:53:25.368379116 CEST	49874	443	192.168.2.5	3.160.6.245
May 10, 2024 06:53:25.368396044 CEST	443	49874	3.160.6.245	192.168.2.5
May 10, 2024 06:53:25.388981104 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.388988018 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395040989 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395049095 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395073891 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395092964 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395109892 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395118952 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.395128012 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395179033 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.395195007 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395229101 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395235062 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.395239115 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395276070 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395277023 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.395284891 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.395322084 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.410206079 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410212994 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410232067 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410240889 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410254002 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410260916 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.410279989 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.410330057 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.411915064 CEST	49879	443	192.168.2.5	172.217.4.38
May 10, 2024 06:53:25.411931038 CEST	443	49879	172.217.4.38	192.168.2.5
May 10, 2024 06:53:25.413677931 CEST	49875	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.413688898 CEST	443	49875	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.416817904 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.420725107 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.420751095 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.420813084 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.420828104 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.420854092 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.420990944 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.438043118 CEST	49882	443	192.168.2.5	3.235.201.212
May 10, 2024 06:53:25.438062906 CEST	443	49882	3.235.201.212	192.168.2.5
May 10, 2024 06:53:25.438637972 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.438647985 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.438937902 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.439415932 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.439435005 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.439651966 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.440768003 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.440778971 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.494025946 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.504220963 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.504301071 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.505373955 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.505390882 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.506674051 CEST	49881	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:25.506684065 CEST	443	49881	104.244.42.195	192.168.2.5
May 10, 2024 06:53:25.507939100 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:25.507957935 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:25.508037090 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:25.518310070 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.518317938 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.518342972 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.518367052 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.518383980 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.518425941 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.518773079 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518810034 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518842936 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518860102 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.518870115 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518881083 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518901110 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.518918037 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.518938065 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.518945932 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518961906 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.518984079 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.519007921 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.526496887 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:25.526514053 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:25.529604912 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.530463934 CEST	49883	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:25.530476093 CEST	443	49883	63.140.39.248	192.168.2.5
May 10, 2024 06:53:25.531068087 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.531757116 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.531765938 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.532639980 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.532715082 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.541690111 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.541747093 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.542160988 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.542175055 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.572124004 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.578108072 CEST	49878	443	192.168.2.5	192.65.229.36
May 10, 2024 06:53:25.578116894 CEST	443	49878	192.65.229.36	192.168.2.5
May 10, 2024 06:53:25.599812031 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.661678076 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.667431116 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.667445898 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.667818069 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.673268080 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.673290014 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.673346996 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.674823999 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.674882889 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.721801043 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.721823931 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.725231886 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.725263119 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.725373983 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.728458881 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.728748083 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.728775978 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.734195948 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.738425970 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.738437891 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.738776922 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.738842964 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.739615917 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:25.739656925 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:25.767513037 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.767755032 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.767827988 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.767844915 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.767884970 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.767935038 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.767949104 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.769002914 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.769057035 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.770657063 CEST	49884	443	192.168.2.5	142.250.190.66
May 10, 2024 06:53:25.770670891 CEST	443	49884	142.250.190.66	192.168.2.5
May 10, 2024 06:53:25.771265984 CEST	49885	443	192.168.2.5	142.250.190.98
May 10, 2024 06:53:25.771277905 CEST	443	49885	142.250.190.98	192.168.2.5
May 10, 2024 06:53:25.772114992 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.880537033 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.880611897 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.880655050 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.880669117 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.880677938 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.880713940 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.880728006 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.882908106 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.885431051 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.885466099 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.885488987 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.885494947 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.885519981 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.887995958 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.889846087 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.889852047 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.890496969 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.890538931 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.890542030 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.893023014 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.894720078 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.894726038 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.895562887 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.897999048 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.898005009 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.898088932 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.898124933 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.898128986 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.898180962 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.898953915 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.948164940 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.950953960 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.968349934 CEST	49889	443	192.168.2.5	146.75.80.84
May 10, 2024 06:53:25.968375921 CEST	443	49889	146.75.80.84	192.168.2.5
May 10, 2024 06:53:25.984205008 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.984215021 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.985095024 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.985157967 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.987171888 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:25.987180948 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.988111019 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:25.988169909 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.167464018 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.209999084 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.210011959 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.210886002 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.210956097 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.396394014 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:26.396503925 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:26.398940086 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.399040937 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.399228096 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.399286032 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.399705887 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.399779081 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.400224924 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:26.400238037 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:26.401860952 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.401881933 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.402045965 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.402071953 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.402209997 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.402223110 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.489411116 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.489413977 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:26.489701033 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.489701986 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.524967909 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.525065899 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.525142908 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.533966064 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.533993959 CEST	443	49893	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.534004927 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.534133911 CEST	49893	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.556586981 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:26.557692051 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:26.557770014 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:26.563316107 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.563371897 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.563424110 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.564734936 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.564770937 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.564825058 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.612996101 CEST	49891	443	192.168.2.5	192.28.147.68
May 10, 2024 06:53:26.613007069 CEST	443	49891	192.28.147.68	192.168.2.5
May 10, 2024 06:53:26.616513968 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.616527081 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.616765976 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.616996050 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.617022991 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.617089987 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.617470026 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.617489100 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.617583990 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.619272947 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.619297981 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.619350910 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.620073080 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.620086908 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.620636940 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.620647907 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.621272087 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.621288061 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.621480942 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.621493101 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.681657076 CEST	49892	443	192.168.2.5	35.190.43.134
May 10, 2024 06:53:26.681674004 CEST	443	49892	35.190.43.134	192.168.2.5
May 10, 2024 06:53:26.684247971 CEST	49890	443	192.168.2.5	142.250.191.226
May 10, 2024 06:53:26.684257984 CEST	443	49890	142.250.191.226	192.168.2.5
May 10, 2024 06:53:26.841361046 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.842035055 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.842272997 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.850667000 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.888762951 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.888776064 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889075041 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.889089108 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889102936 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889164925 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.889401913 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889466047 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.889700890 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889707088 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.889724016 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.889751911 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.889998913 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.890042067 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.890054941 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.890081882 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.890095949 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.890116930 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.890652895 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.890688896 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.891182899 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.891237020 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.893191099 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.893249035 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.893659115 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.893716097 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.893897057 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.893948078 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.894056082 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.894113064 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.894629955 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.894637108 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:26.894973993 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.894980907 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.895179987 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.895186901 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.896311045 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.896318913 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:26.968071938 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:26.968118906 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:26.968183994 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:26.969793081 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:26.969809055 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:26.974371910 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:26.974402905 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:26.974499941 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:26.975212097 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:26.975225925 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:26.987587929 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:26.987602949 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:26.987812042 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:26.988156080 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:26.988168955 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:26.999428034 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:26.999442101 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:26.999444008 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.035574913 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.035588026 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.035756111 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.036892891 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.036902905 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.050079107 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.050096035 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.050204992 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.050637007 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.050649881 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.062365055 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.086357117 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:27.086478949 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:27.086535931 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:27.087419033 CEST	49898	443	192.168.2.5	172.217.2.36
May 10, 2024 06:53:27.087431908 CEST	443	49898	172.217.2.36	192.168.2.5
May 10, 2024 06:53:27.091532946 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.091577053 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.091633081 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.092142105 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.092156887 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.117000103 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.117016077 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.117080927 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.117958069 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.117969990 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.163028955 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.163104057 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.163147926 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.163799047 CEST	49897	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.163806915 CEST	443	49897	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.165940046 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.166028976 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.166145086 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.167067051 CEST	49896	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.167078972 CEST	443	49896	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.236437082 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.236687899 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:27.236699104 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.236979008 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.237785101 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:27.237839937 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.238015890 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:27.244841099 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.245290995 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:27.245304108 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.245606899 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.246036053 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:27.246102095 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.246284962 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:27.253235102 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.276134014 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:27.276141882 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.276428938 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.276840925 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:27.276896000 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.277240038 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:27.277271032 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.284115076 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.288115978 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.316143990 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.348526001 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.348542929 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.349457979 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.349525928 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.357600927 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.357681990 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.358088017 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.358097076 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.437074900 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.448308945 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.448327065 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.449172974 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.449234009 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.452567101 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.452624083 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.452958107 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.452966928 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.484960079 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.487579107 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.487658978 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.487716913 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.488538980 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.494077921 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.494132042 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.494240999 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:27.499435902 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.499456882 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.500538111 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.500597000 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.502437115 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.502496958 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.502604961 CEST	49895	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:27.502625942 CEST	443	49895	151.101.0.84	192.168.2.5
May 10, 2024 06:53:27.503663063 CEST	49901	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:27.503676891 CEST	443	49901	54.145.109.191	192.168.2.5
May 10, 2024 06:53:27.505189896 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.505198002 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.512868881 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.542148113 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.542166948 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.543057919 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.543118954 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.543857098 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.543899059 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.543946028 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:27.550652981 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.550713062 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.562437057 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.562482119 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.562537909 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:27.575923920 CEST	49902	443	192.168.2.5	63.140.38.112
May 10, 2024 06:53:27.575937033 CEST	443	49902	63.140.38.112	192.168.2.5
May 10, 2024 06:53:27.576848984 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.576860905 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.577054977 CEST	49900	443	192.168.2.5	104.244.42.195
May 10, 2024 06:53:27.577069998 CEST	443	49900	104.244.42.195	192.168.2.5
May 10, 2024 06:53:27.593270063 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.593271971 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.599658012 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.599742889 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:27.599790096 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:27.627166033 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.627218008 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.627305984 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.627482891 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.627495050 CEST	443	49904	63.140.39.224	192.168.2.5
May 10, 2024 06:53:27.627502918 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.627593994 CEST	49904	443	192.168.2.5	63.140.39.224
May 10, 2024 06:53:27.635858059 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.635930061 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.636010885 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.640139103 CEST	49906	443	192.168.2.5	35.71.131.137
May 10, 2024 06:53:27.640156031 CEST	443	49906	35.71.131.137	192.168.2.5
May 10, 2024 06:53:27.697479010 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.707758904 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.707803011 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:27.707849979 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.708731890 CEST	49907	443	192.168.2.5	23.21.63.192
May 10, 2024 06:53:27.708740950 CEST	443	49907	23.21.63.192	192.168.2.5
May 10, 2024 06:53:28.138442039 CEST	49903	443	192.168.2.5	3.227.199.28
May 10, 2024 06:53:28.138467073 CEST	443	49903	3.227.199.28	192.168.2.5
May 10, 2024 06:53:28.217360973 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.217370033 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.217417002 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.218128920 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.218137026 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.222673893 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.222718000 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.222774982 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.222989082 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.223006010 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.225182056 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.225189924 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.225291967 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.225460052 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.225467920 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.227458000 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.227480888 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.227623940 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.227807045 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.227818966 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.228303909 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.228319883 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.228374004 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.228535891 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.228545904 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.228984118 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.228995085 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.229057074 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.229269028 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.229280949 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.229640007 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.229667902 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.229715109 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.229927063 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.229942083 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.448139906 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.448698044 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.451034069 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.453017950 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.466155052 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:28.466197968 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:28.466408014 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:28.466778040 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.466847897 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.466907024 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.467422962 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:28.467454910 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:28.467624903 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:28.467762947 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.467777967 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.468080997 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.468472004 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.468492985 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.468823910 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.468858004 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.468866110 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.469084024 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.469099045 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.469290018 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.469418049 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.469480038 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.470007896 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.470055103 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.493323088 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.493571997 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.494013071 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.597904921 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.599834919 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.617271900 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.617275953 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.617475986 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.617500067 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.617588043 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.617811918 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.617985964 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.617990017 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.618429899 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.619076967 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.619146109 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.620198011 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.620368004 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.620697975 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.620784044 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.621081114 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.621167898 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.621335983 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:28.621351004 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:28.622693062 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.622715950 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.622826099 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:28.622838020 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:28.623199940 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.623208046 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.623270988 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.623297930 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.623307943 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.623346090 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.626902103 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.626986980 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.627185106 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.627243996 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.627413988 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.627465010 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.664123058 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.668118954 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.692991018 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.692991018 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.734071016 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.734127045 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.734163046 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.734185934 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.734200001 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.734210968 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.734250069 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.746874094 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:28.746921062 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:28.747035980 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.747085094 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.747209072 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747224092 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747230053 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747256994 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747268915 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747277975 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747286081 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.747304916 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.747329950 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.747354984 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.765574932 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.765582085 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.765613079 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.765626907 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.765639067 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.765655041 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.765678883 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.765691042 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.779174089 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.780275106 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:28.780522108 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:28.792117119 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.792126894 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.845143080 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.856049061 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.856057882 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.856086016 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.856126070 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.856144905 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.856174946 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.856190920 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.865187883 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.865231991 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:28.865279913 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.865325928 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:28.881608963 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.881656885 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.881800890 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.881989956 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.882041931 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.882110119 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.916831970 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.916851044 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.917171955 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.917182922 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.917278051 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.917776108 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.917964935 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.951865911 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.951971054 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:28.952085018 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.994134903 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:28.994204044 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:28.995668888 CEST	49911	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.995681047 CEST	443	49911	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.996319056 CEST	49910	443	192.168.2.5	44.221.183.201
May 10, 2024 06:53:28.996336937 CEST	443	49910	44.221.183.201	192.168.2.5
May 10, 2024 06:53:28.997692108 CEST	49912	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:28.997703075 CEST	443	49912	151.101.0.84	192.168.2.5
May 10, 2024 06:53:29.000070095 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:29.000081062 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:29.012475014 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.013931036 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.017847061 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:29.017909050 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:29.018004894 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:29.083911896 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.083914042 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:29.099927902 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.106784105 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.106791973 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.107693911 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.107703924 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.107780933 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.108715057 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.108721972 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.109616041 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.109627008 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.109675884 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.115781069 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.115807056 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.116058111 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.118923903 CEST	49913	443	192.168.2.5	63.140.39.248
May 10, 2024 06:53:29.118936062 CEST	443	49913	63.140.39.248	192.168.2.5
May 10, 2024 06:53:29.123558998 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.123573065 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.125763893 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.125839949 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.126256943 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.126313925 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.126532078 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.126538992 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.126790047 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.126796961 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.184880018 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.201298952 CEST	49909	443	192.168.2.5	142.250.190.34
May 10, 2024 06:53:29.201308966 CEST	443	49909	142.250.190.34	192.168.2.5
May 10, 2024 06:53:29.214051008 CEST	49914	443	192.168.2.5	151.101.0.84
May 10, 2024 06:53:29.214061975 CEST	443	49914	151.101.0.84	192.168.2.5
May 10, 2024 06:53:29.217813969 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:29.217888117 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:29.217998028 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:29.234023094 CEST	49915	443	192.168.2.5	52.84.125.87
May 10, 2024 06:53:29.234039068 CEST	443	49915	52.84.125.87	192.168.2.5
May 10, 2024 06:53:29.256378889 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.256459951 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.257262945 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.257307053 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.257436037 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.291630983 CEST	49921	443	192.168.2.5	151.101.64.84
May 10, 2024 06:53:29.291651011 CEST	443	49921	151.101.64.84	192.168.2.5
May 10, 2024 06:53:29.334577084 CEST	49922	443	192.168.2.5	15.197.193.217
May 10, 2024 06:53:29.334597111 CEST	443	49922	15.197.193.217	192.168.2.5
May 10, 2024 06:53:29.394203901 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.434063911 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.434087038 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.434982061 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.435035944 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.442665100 CEST	49920	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:29.442687035 CEST	443	49920	52.5.162.211	192.168.2.5
May 10, 2024 06:53:29.444252014 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.444313049 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.444657087 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.444665909 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.486774921 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.667387009 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.667435884 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.667505980 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.668668985 CEST	49923	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.668685913 CEST	443	49923	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.754245996 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.754273891 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.754407883 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.755070925 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:29.755085945 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:29.864928007 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:29.864960909 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:29.865020037 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:29.865217924 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:29.865232944 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.019731998 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.020148039 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.020169020 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.020467997 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.020833015 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.020884991 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.021137953 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.064121962 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.264714003 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.290621996 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.290682077 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.290791988 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.296638012 CEST	49927	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.296653032 CEST	443	49927	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.299148083 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:30.299161911 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:30.299330950 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:30.299715996 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.299726009 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.300554991 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.300561905 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.300632954 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.300651073 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.300684929 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.301219940 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.301259041 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.301323891 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.301567078 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.301595926 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.301668882 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.305766106 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.305775881 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.306154966 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.306173086 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.307347059 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.307359934 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.307543993 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.307614088 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.308150053 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:30.308160067 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:30.308412075 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.308419943 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.308587074 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.308619022 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.308707952 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.308720112 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.314227104 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.314238071 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.314476013 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.315120935 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.315129042 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.319708109 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.319715977 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.319859028 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.320245028 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.320257902 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.320996046 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.321007013 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.321063995 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.321409941 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.321424007 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.323581934 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.323606968 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.323681116 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.323934078 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.323945045 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.526156902 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.528687000 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.535214901 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.538098097 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:30.544466019 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:30.571402073 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.571465015 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:30.571521044 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:30.578778982 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:30.583273888 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.586349010 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.586464882 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:30.587127924 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:30.682456017 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.682457924 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.682461023 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:30.682462931 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:30.698342085 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:30.698446035 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:31.678749084 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:31.678792000 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:31.678859949 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:31.680102110 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:31.680111885 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:31.680268049 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:31.680296898 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:31.680454969 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:31.680475950 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:31.680532932 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:31.680665970 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:31.680825949 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:31.681823969 CEST	49928	443	192.168.2.5	34.135.80.45
May 10, 2024 06:53:31.681843996 CEST	443	49928	34.135.80.45	192.168.2.5
May 10, 2024 06:53:31.683540106 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.683564901 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.683929920 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.683939934 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.683963060 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:31.683973074 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:31.683989048 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.684298992 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.684314013 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.684547901 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.684592962 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.684685946 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.684736967 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.684851885 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:31.684904099 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:31.685182095 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.685193062 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685305119 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685345888 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.685595989 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.685605049 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685753107 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685777903 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685808897 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.685971022 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.685982943 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.686032057 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.686167002 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:31.686177969 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:31.686224937 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:31.686589956 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.686633110 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.854757071 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:31.854764938 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.854773998 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.896706104 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:31.896728039 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:31.969029903 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.969203949 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.977144957 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:31.977216959 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:31.982718945 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.982805967 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:31.983027935 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:31.983130932 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.052201986 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:32.052268028 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:32.054086924 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.054172039 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.066065073 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.066142082 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.078392982 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.078418016 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.078948975 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.078963041 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.079600096 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.079689980 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.081094980 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.081110001 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.081928968 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:32.081939936 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:32.082022905 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.082043886 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.082072020 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.082089901 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.082784891 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:32.083009958 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:32.083015919 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:32.083188057 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.083349943 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.083518028 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.083532095 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.124114037 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.124126911 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.141233921 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.141264915 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.141264915 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.192939997 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:32.192951918 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.213512897 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.213567019 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.213618994 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.215619087 CEST	49938	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.215631008 CEST	443	49938	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.216070890 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.216131926 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.216240883 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.219573975 CEST	49937	443	192.168.2.5	54.145.109.191
May 10, 2024 06:53:32.219583988 CEST	443	49937	54.145.109.191	192.168.2.5
May 10, 2024 06:53:32.297977924 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.298111916 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.298173904 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.313819885 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:32.313961029 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:32.314009905 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:32.332088947 CEST	49932	443	192.168.2.5	142.250.190.36
May 10, 2024 06:53:32.332097054 CEST	443	49932	142.250.190.36	192.168.2.5
May 10, 2024 06:53:32.340636015 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.340997934 CEST	49939	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.341015100 CEST	443	49939	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.342123032 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.342142105 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.343041897 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.343106985 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.343173981 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.344252110 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.344259024 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.344975948 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.345047951 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.345211029 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.345263004 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.348206043 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.348263979 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.358721972 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.358731031 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.358738899 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:32.358795881 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:32.358843088 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:32.360178947 CEST	49936	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:32.360191107 CEST	443	49936	34.132.213.129	192.168.2.5
May 10, 2024 06:53:32.361155033 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.361162901 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.409110069 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.409197092 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.409241915 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.415204048 CEST	49935	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.415210009 CEST	443	49935	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.487636089 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.487656116 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.603514910 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.603564978 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.603609085 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.604456902 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.604497910 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.604562044 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.606245041 CEST	49940	443	192.168.2.5	52.5.162.211
May 10, 2024 06:53:32.606270075 CEST	443	49940	52.5.162.211	192.168.2.5
May 10, 2024 06:53:32.608421087 CEST	49942	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:32.608424902 CEST	443	49942	34.122.199.206	192.168.2.5
May 10, 2024 06:53:32.623469114 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.623558998 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.623609066 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.625092983 CEST	49934	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.625107050 CEST	443	49934	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.628271103 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.628405094 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:32.628442049 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.629460096 CEST	49933	443	192.168.2.5	151.101.192.84
May 10, 2024 06:53:32.629467964 CEST	443	49933	151.101.192.84	192.168.2.5
May 10, 2024 06:53:33.582844973 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:53:33.582851887 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:53:33.694087982 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:53:33.694114923 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:53:33.957575083 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:33.957592964 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:33.957710981 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:33.958931923 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:33.958942890 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.222853899 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.256177902 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:34.256186008 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.256500006 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.257566929 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:34.257626057 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.257858992 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:34.300117970 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.499865055 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.499902010 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:34.499983072 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:34.918126106 CEST	49959	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:34.918143034 CEST	443	49959	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.094749928 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.094778061 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.094856977 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.129347086 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.129376888 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.305188894 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.305197001 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.305267096 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.305665970 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.305675030 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.393560886 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.394125938 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.394154072 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.394437075 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.399893045 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.399955988 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.400079012 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.444118023 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.535696030 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.542968035 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.542974949 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.543267012 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.544395924 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.544455051 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:35.588475943 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:35.613034964 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.613043070 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.613101959 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.617666960 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.617675066 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.669867039 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.669900894 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.669994116 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.671827078 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.671842098 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.707030058 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.707073927 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.707124949 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.707429886 CEST	49960	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:35.707442999 CEST	443	49960	34.132.213.129	192.168.2.5
May 10, 2024 06:53:35.756509066 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:35.756520033 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:35.756583929 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:35.756835938 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:35.756846905 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:35.763782978 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.763811111 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.763871908 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.764074087 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.764087915 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.882034063 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.884089947 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.884103060 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.884372950 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.884718895 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.884769917 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.884849072 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.899532080 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:35.899544954 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:35.899616003 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:35.899853945 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:35.899864912 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:35.928117037 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.936075926 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.940859079 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.940871954 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.941157103 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.941494942 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.941560984 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.941657066 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.977639914 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.977677107 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.977746010 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.978434086 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:35.978449106 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:35.988115072 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.028017998 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.028728962 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.028738976 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.029618025 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.029750109 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.030177116 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.030177116 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.030235052 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.098670006 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.098691940 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.151815891 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.152087927 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.152113914 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.153161049 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.153343916 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.153604984 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.153661013 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.153923988 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.153930902 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.197828054 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.197877884 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.198002100 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.199119091 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.199146032 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.199292898 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.199440956 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.199453115 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.205080032 CEST	49971	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.205094099 CEST	443	49971	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.240714073 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.241420984 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.241437912 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.242501974 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.242599964 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.242837906 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.243695021 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.243762016 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.244083881 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.244086027 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.244093895 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.244112968 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.244393110 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.244813919 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.244813919 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.244868994 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.285329103 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.285417080 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.285958052 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.285959959 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.285959959 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.288213015 CEST	49973	443	192.168.2.5	35.226.68.60
May 10, 2024 06:53:36.288223982 CEST	443	49973	35.226.68.60	192.168.2.5
May 10, 2024 06:53:36.288561106 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.288590908 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.288649082 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.289005995 CEST	49974	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:36.289028883 CEST	443	49974	34.122.199.206	192.168.2.5
May 10, 2024 06:53:36.429563999 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.429941893 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.429960012 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.430828094 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.430955887 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.431965113 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.432018995 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.433907032 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.433912992 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.490340948 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.569891930 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.569910049 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.569916964 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.569941998 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.569968939 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.570035934 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.570035934 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.570053101 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.570127964 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.701890945 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.703227997 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.706286907 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.706480980 CEST	49986	443	192.168.2.5	142.250.191.166
May 10, 2024 06:53:36.706492901 CEST	443	49986	142.250.191.166	192.168.2.5
May 10, 2024 06:53:36.736351013 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.736402035 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.736417055 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.736444950 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.736454964 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.736536026 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.736536026 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.736545086 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.736555099 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.738948107 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.745866060 CEST	49982	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.745873928 CEST	443	49982	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.748162031 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.748176098 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.750989914 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.751441956 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.751452923 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.782938957 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.782941103 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.782953024 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.782963037 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.783032894 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.783045053 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.783833027 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.783853054 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.784399033 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.784400940 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.784410000 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.784440994 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:36.784549952 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.785180092 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:36.785192966 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.086894989 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.118623972 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.120556116 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.121690989 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.185475111 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.185487032 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.185781002 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.189392090 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.189444065 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.189637899 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.189659119 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.189749002 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.189758062 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.189857006 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.189865112 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190221071 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190618992 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190629959 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190676928 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.190953016 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190963984 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.190998077 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.355739117 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.355895042 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.356669903 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.356776953 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.356936932 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.357038975 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.357574940 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.359078884 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.359086990 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.359149933 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.359167099 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.359309912 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.400119066 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.400126934 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.490335941 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.490346909 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.527574062 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.527612925 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.527654886 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.529266119 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.529284954 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.529356003 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.529362917 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.529401064 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.529421091 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.530383110 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.530426979 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.530468941 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.673877001 CEST	49994	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.673885107 CEST	443	49994	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.683589935 CEST	49996	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.683614969 CEST	443	49996	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.684612989 CEST	49995	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.684619904 CEST	443	49995	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.687302113 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.687339067 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:37.687392950 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.688199043 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:37.688219070 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.028207064 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.048063040 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.048082113 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.048388004 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.099606991 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.275851965 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.275968075 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.352117062 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.400113106 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.455912113 CEST	49997	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.455929041 CEST	443	49997	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.521068096 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.521114111 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.521192074 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.545393944 CEST	50002	443	192.168.2.5	44.238.162.224
May 10, 2024 06:53:38.545408964 CEST	443	50002	44.238.162.224	192.168.2.5
May 10, 2024 06:53:38.669641972 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:38.669668913 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:38.669723034 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:38.670006990 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:38.670025110 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.165855885 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.165877104 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.166030884 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.166219950 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.166233063 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.176403999 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.187278032 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.187292099 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.188148975 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.188226938 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.199013948 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.199089050 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.199608088 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.199616909 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.199775934 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.199810982 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.199899912 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.199928045 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.429970980 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.430777073 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.430785894 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.431060076 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.431984901 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.432034969 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.432600975 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.432662964 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:39.432687044 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.543592930 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.543653011 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:39.543704987 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:39.706075907 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.706125021 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:39.706237078 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.046895027 CEST	50010	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.046905041 CEST	443	50010	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.048355103 CEST	50008	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:40.048384905 CEST	443	50008	54.218.88.117	192.168.2.5
May 10, 2024 06:53:40.066458941 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.066493034 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.066662073 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.067399979 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.067415953 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.333268881 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.359628916 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.359646082 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.360018969 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.364293098 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.364346981 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.364554882 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.412112951 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.467670918 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.467700005 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.467773914 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.468605995 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.468621969 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.584590912 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:40.584616899 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:40.584784985 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:40.585779905 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:40.585803986 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:40.612216949 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.612272024 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.612333059 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.613436937 CEST	50012	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:40.613462925 CEST	443	50012	34.132.213.129	192.168.2.5
May 10, 2024 06:53:40.624397039 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.624413013 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.624562025 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.625057936 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.625072002 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.734678984 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.734949112 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.734966993 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.735254049 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.735635996 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.735692978 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.735832930 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.776119947 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.892677069 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.893003941 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.893016100 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.893311024 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.893656015 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.893711090 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.893815994 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:40.940119982 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.999428034 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.999485016 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:40.999553919 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:41.000683069 CEST	50015	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:41.000703096 CEST	443	50015	34.122.199.206	192.168.2.5
May 10, 2024 06:53:41.091342926 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.091646910 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.091655970 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.092546940 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.092617035 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.092911959 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.092968941 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.093097925 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.093105078 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.261221886 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:41.261311054 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.263117075 CEST	50016	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:41.263137102 CEST	443	50016	52.26.29.98	192.168.2.5
May 10, 2024 06:53:44.545527935 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:44.545545101 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:44.545638084 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:44.546092987 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:44.546102047 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.050036907 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.050338984 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.050352097 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.050694942 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.051301003 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.051372051 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.051461935 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.051637888 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.051666975 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.383137941 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.383239985 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.383380890 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.385291100 CEST	50023	443	192.168.2.5	54.218.88.117
May 10, 2024 06:53:45.385303020 CEST	443	50023	54.218.88.117	192.168.2.5
May 10, 2024 06:53:45.390489101 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.390536070 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.390613079 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.391110897 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.391125917 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.540055037 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:45.540118933 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:45.540170908 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:45.622801065 CEST	49966	443	192.168.2.5	172.217.4.68
May 10, 2024 06:53:45.622814894 CEST	443	49966	172.217.4.68	192.168.2.5
May 10, 2024 06:53:45.726382017 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.726793051 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.726813078 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.727164030 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.727654934 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.727720022 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:45.727977991 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:45.772113085 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:46.060529947 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:46.060653925 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:46.060739994 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:46.061362982 CEST	50024	443	192.168.2.5	52.26.29.98
May 10, 2024 06:53:46.061383009 CEST	443	50024	52.26.29.98	192.168.2.5
May 10, 2024 06:53:48.970768929 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:48.970815897 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:48.970868111 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:48.972208023 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:48.972223043 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.235904932 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.236903906 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.236922979 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.237287045 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.238630056 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.238696098 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.239614010 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.280128956 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.511310101 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.511393070 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.511445999 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.512140036 CEST	50025	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.512154102 CEST	443	50025	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.519649029 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.519692898 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.519833088 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.521424055 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.521442890 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.536416054 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.536447048 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.536592960 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.537311077 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.537336111 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.786689997 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.789021015 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.789036989 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.789395094 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.790224075 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.790285110 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.790755987 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:49.801508904 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.803365946 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.803378105 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.803695917 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.804711103 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.804766893 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:49.804980040 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:49.836112022 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:49.852116108 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.059457064 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:50.059540033 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:50.059588909 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:50.059911966 CEST	50026	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:50.059927940 CEST	443	50026	34.132.213.129	192.168.2.5
May 10, 2024 06:53:50.060076952 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.060141087 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.060189009 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.060537100 CEST	50027	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.060550928 CEST	443	50027	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.329288960 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.329317093 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.329396963 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.330302954 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.330319881 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.592547894 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.593035936 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.593046904 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.593390942 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.594310999 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.594376087 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:50.594897985 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:50.636118889 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:53:53.978708029 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:53.978765965 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:53.978893042 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:53.979840994 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:53.979856968 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.242089033 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.242454052 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.242471933 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.242769957 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.243047953 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.243103027 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.243228912 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.288125038 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.518805981 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.518850088 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.518979073 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.519258976 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.519273043 CEST	443	50029	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.519283056 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.519314051 CEST	50029	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.526634932 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.526663065 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.526751041 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.527230978 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.527242899 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.529133081 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.529161930 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.529314041 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.529509068 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.529519081 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.789256096 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.789525986 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.789535999 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.789823055 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.790368080 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.790419102 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.790652990 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:54.793229103 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.793471098 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.793482065 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.793795109 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.794240952 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.794290066 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:54.794387102 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:54.836117983 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:54.840116024 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.053309917 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.053359985 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.053457022 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.053817034 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.053828001 CEST	443	50031	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.053836107 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.053879023 CEST	50031	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.062657118 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:55.062700987 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:55.062762022 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:55.115114927 CEST	50030	443	192.168.2.5	34.132.213.129
May 10, 2024 06:53:55.115125895 CEST	443	50030	34.132.213.129	192.168.2.5
May 10, 2024 06:53:55.121656895 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.121669054 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.121746063 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.122019053 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.122026920 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.384752989 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.385016918 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.385029078 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.385320902 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.385840893 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.385889053 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:53:55.385988951 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.427176952 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:53:55.427182913 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:54:02.537062883 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:54:02.552371025 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:54:02.665443897 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:54:02.683357000 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:54:04.046189070 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.046226978 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.046293020 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.046591043 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.046602964 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.310986042 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.311454058 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.311486006 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.311794043 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.312191963 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.312252998 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.312448978 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.360110998 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.586077929 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.586146116 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:04.586206913 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.607652903 CEST	50034	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:04.607671976 CEST	443	50034	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.069152117 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.069202900 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.069322109 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.069535017 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.069550037 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.076752901 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.076792002 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.076872110 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.077613115 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.077625036 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.339206934 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.345277071 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.367121935 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.367144108 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.367324114 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.367335081 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.367466927 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.367746115 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.368423939 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.368467093 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.369290113 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.369328976 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.369631052 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.369724035 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.412118912 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.416109085 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.605859995 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.605912924 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.605966091 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.606653929 CEST	50036	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.606671095 CEST	443	50036	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.617888927 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.618031979 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.618079901 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.618525982 CEST	50035	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:05.618544102 CEST	443	50035	34.132.213.129	192.168.2.5
May 10, 2024 06:54:05.628957987 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.628995895 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.629131079 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.629342079 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.629357100 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.894675970 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.894979954 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.895009041 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.895312071 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.896152020 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.896241903 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:05.896528006 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:05.940124035 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:14.063806057 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.063846111 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.064120054 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.064692020 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.064703941 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.326175928 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.326673031 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.326689959 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.326986074 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.327627897 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.327685118 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.328469992 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.376117945 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.598913908 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.598972082 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.599020958 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.600172997 CEST	50038	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.600191116 CEST	443	50038	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.618118048 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.618149042 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.618201017 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.620071888 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.620089054 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.883141041 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.883781910 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.883795977 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.884090900 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.884748936 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.884807110 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:14.885373116 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:14.928128004 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:15.158999920 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:15.159064054 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:15.159713984 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:15.159734011 CEST	443	50039	34.132.213.129	192.168.2.5
May 10, 2024 06:54:15.159758091 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:15.159877062 CEST	50039	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:18.583411932 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:18.583436012 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:54:18.706825972 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:18.706844091 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:54:20.938630104 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:20.938656092 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:54:21.254962921 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:21.254981041 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:54:24.091923952 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.091974974 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.092050076 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.098681927 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.098705053 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.361726046 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.362003088 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.362035036 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.362391949 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.362724066 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.362782955 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.362875938 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.404126883 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.415985107 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.663372040 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.663424969 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.663584948 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.665426016 CEST	50040	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.665442944 CEST	443	50040	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.678289890 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.678328991 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.678503990 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.679616928 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.679627895 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.942373037 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.944169044 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.944190025 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.944519997 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.946671009 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.946718931 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:24.947304010 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:24.988118887 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:25.241934061 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:25.241996050 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:25.242048979 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:25.665678024 CEST	50041	443	192.168.2.5	34.132.213.129
May 10, 2024 06:54:25.665704012 CEST	443	50041	34.132.213.129	192.168.2.5
May 10, 2024 06:54:25.942898035 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:25.942909956 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:54:29.235868931 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.235903978 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.235961914 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.236197948 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.236215115 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.499187946 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.499500990 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.499515057 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.499833107 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.500149012 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.500214100 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.500313997 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.544121027 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.776478052 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.776571989 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:29.776626110 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.777031898 CEST	50042	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:29.777043104 CEST	443	50042	34.29.92.19	192.168.2.5
May 10, 2024 06:54:33.745387077 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:54:33.745506048 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:54:33.745558023 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:33.746627092 CEST	49754	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:33.746649027 CEST	443	49754	52.200.169.160	192.168.2.5
May 10, 2024 06:54:33.746967077 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:54:33.747076035 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:54:33.747124910 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:33.747509003 CEST	49755	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:33.747525930 CEST	443	49755	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.088521004 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.088558912 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.088634014 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.089106083 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.089150906 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.089200020 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.090068102 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.090080023 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.090338945 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.090357065 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.154253960 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.154301882 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.158459902 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.161613941 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.161632061 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.351524115 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.354641914 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.354684114 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.355143070 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.355698109 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.356126070 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.356149912 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.356498957 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.356853008 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.356853008 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.356868029 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.356944084 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.357323885 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.357405901 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.357671976 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.400125980 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:54:34.414124012 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:54:34.427803040 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.428647041 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.428672075 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.428983927 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.430531025 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.430591106 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.430768967 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.472125053 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.705929995 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.706012011 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.706150055 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.706841946 CEST	50045	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.706857920 CEST	443	50045	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.712259054 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.712290049 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.712743044 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.714148998 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.714159966 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.981372118 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.981632948 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.981656075 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.981930017 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.982351065 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:34.982388973 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:34.982486010 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:35.028105974 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:35.036031961 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:35.258341074 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:35.258413076 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:35.258464098 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:35.259254932 CEST	50046	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:35.259268999 CEST	443	50046	34.29.92.19	192.168.2.5
May 10, 2024 06:54:35.451004982 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:35.451040030 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.451102972 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:35.451387882 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:35.451394081 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.645368099 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:35.645395994 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:54:35.683073044 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.683518887 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:35.683530092 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.683821917 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.684412956 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:35.684478045 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:35.739105940 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:39.155505896 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.155551910 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.155766010 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.157720089 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.157735109 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.424356937 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.424834967 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.424855947 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.425204992 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.425532103 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.425591946 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.426008940 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.468116045 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.702189922 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.702259064 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:39.702326059 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.763969898 CEST	50048	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:39.763998032 CEST	443	50048	34.29.92.19	192.168.2.5
May 10, 2024 06:54:40.442683935 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:40.442711115 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:54:44.203525066 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.203571081 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.203639030 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.206063032 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.206077099 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.469166040 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.469846964 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.469858885 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.470230103 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.471184015 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.471244097 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.471585989 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.512124062 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.742283106 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.742343903 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.742391109 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.742711067 CEST	50049	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.742727041 CEST	443	50049	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.955883026 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.955928087 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:44.955987930 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.956312895 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:44.956326962 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.221050978 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.232517004 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:45.232527971 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.232929945 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.234637976 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:45.234731913 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.235645056 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:45.276125908 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.495877981 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.495939016 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.496190071 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:45.496889114 CEST	50050	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:45.496897936 CEST	443	50050	34.29.92.19	192.168.2.5
May 10, 2024 06:54:45.672306061 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:45.672384024 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:45.672472954 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:47.678173065 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:54:47.694217920 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:54:47.806353092 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:54:47.825634003 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:54:48.028995991 CEST	50047	443	192.168.2.5	172.217.4.68
May 10, 2024 06:54:48.029021978 CEST	443	50047	172.217.4.68	192.168.2.5
May 10, 2024 06:54:49.212500095 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.212534904 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.212614059 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.213432074 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.213447094 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.476687908 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.477236986 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.477255106 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.477550030 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.478833914 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.478893042 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.479059935 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.524118900 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.749479055 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.749547005 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:49.750210047 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.762351990 CEST	50051	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:49.762378931 CEST	443	50051	34.29.92.19	192.168.2.5
May 10, 2024 06:54:50.942259073 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:54:50.942281008 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:54:55.196629047 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.196661949 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.196718931 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.222377062 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.222400904 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.486383915 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.486622095 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.486644030 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.486943960 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.487323999 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.487379074 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.487483025 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.528124094 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.761816978 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.761895895 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.761944056 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.762749910 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.762767076 CEST	443	50052	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.762774944 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.762815952 CEST	50052	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.773473024 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.773518085 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:55.773574114 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.774341106 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:55.774353027 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.041137934 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.041831017 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:56.041855097 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.042154074 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.043344975 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:56.043396950 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.043936968 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:56.088124990 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.313916922 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.314003944 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:56.314127922 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:56.314657927 CEST	50053	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:56.314673901 CEST	443	50053	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.642698050 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.642745972 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.642819881 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.643610001 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.643620014 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.906913996 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.915298939 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.915326118 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.915736914 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.916063070 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.916140079 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:54:59.916290998 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:54:59.960133076 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.185338974 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.185422897 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.185478926 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.188353062 CEST	50054	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.188374996 CEST	443	50054	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.194247007 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.194279909 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.194339037 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.194750071 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.194760084 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.457741976 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.510215998 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.613804102 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.613826990 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.614269972 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.618812084 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.618877888 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.619102001 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.664119005 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.892858982 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.892921925 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.893860102 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.893877983 CEST	443	50055	34.29.92.19	192.168.2.5
May 10, 2024 06:55:00.893910885 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:00.894033909 CEST	50055	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.652210951 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.652251005 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.652328014 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.656208992 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.656225920 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.922214031 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.922596931 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.922610998 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.922913074 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.923595905 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.923595905 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:04.923612118 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.923660040 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:04.974148035 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.198307991 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.198368073 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.200218916 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.200231075 CEST	443	50056	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.200263977 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.200303078 CEST	50056	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.204085112 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.204121113 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.204504967 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.205108881 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.205126047 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.469367027 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.469841003 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.469866037 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.470169067 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.471139908 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.471196890 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.472088099 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.512119055 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.748739004 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.748784065 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.748826981 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.749208927 CEST	50057	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:05.749226093 CEST	443	50057	34.29.92.19	192.168.2.5
May 10, 2024 06:55:05.942837000 CEST	49968	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:05.942851067 CEST	443	49968	34.122.199.206	192.168.2.5
May 10, 2024 06:55:06.256220102 CEST	49984	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:06.256232977 CEST	443	49984	34.122.199.206	192.168.2.5
May 10, 2024 06:55:09.658673048 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:09.658716917 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.658771038 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:09.659749985 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:09.659765959 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.925848007 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.952832937 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:09.952863932 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.953234911 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.954063892 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:09.954133987 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:09.954339027 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:10.000128984 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:10.204617023 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:10.204654932 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:10.204708099 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:10.206741095 CEST	50058	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:10.206757069 CEST	443	50058	34.29.92.19	192.168.2.5
May 10, 2024 06:55:10.957813025 CEST	50017	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:10.957824945 CEST	443	50017	34.122.199.206	192.168.2.5
May 10, 2024 06:55:14.665823936 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.665857077 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.666049957 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.666227102 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.666245937 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.931123018 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.931433916 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.931447983 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.931749105 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.932080030 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.932149887 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:14.932384968 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:14.980118990 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:15.205456018 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:15.205497026 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:15.205600023 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:15.208250999 CEST	50059	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:15.208271980 CEST	443	50059	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.364502907 CEST	50044	443	192.168.2.5	52.200.169.160
May 10, 2024 06:55:19.364526987 CEST	443	50044	52.200.169.160	192.168.2.5
May 10, 2024 06:55:19.411371946 CEST	50043	443	192.168.2.5	52.200.169.160
May 10, 2024 06:55:19.411396980 CEST	443	50043	52.200.169.160	192.168.2.5
May 10, 2024 06:55:19.683984995 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.684024096 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.684093952 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.685220957 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.685228109 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.950014114 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.950275898 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.950292110 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.950750113 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.951109886 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.951179028 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:19.951292992 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:19.996114016 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.223839045 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.223912954 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.223968983 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.225409985 CEST	50060	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.225425005 CEST	443	50060	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.230844975 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.230878115 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.231019974 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.231923103 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.231935024 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.495661974 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.532695055 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.532706976 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.533020973 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.534528971 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.534574032 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.534837008 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.576117992 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.647547960 CEST	50028	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:20.647561073 CEST	443	50028	34.122.199.206	192.168.2.5
May 10, 2024 06:55:20.827600956 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.827642918 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:20.827688932 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.828538895 CEST	50061	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:20.828552008 CEST	443	50061	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.694730997 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:24.694768906 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.694916010 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:24.695168972 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:24.695184946 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.957890987 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.958441019 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:24.958473921 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.958825111 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.959177971 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:24.959244013 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:24.959342957 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:25.000124931 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:25.231292963 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:25.231352091 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:25.231592894 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:25.232050896 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:25.232069016 CEST	443	50062	34.29.92.19	192.168.2.5
May 10, 2024 06:55:25.232081890 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:25.232125998 CEST	50062	443	192.168.2.5	34.29.92.19
May 10, 2024 06:55:25.443272114 CEST	50032	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:25.443296909 CEST	443	50032	34.122.199.206	192.168.2.5
May 10, 2024 06:55:29.809547901 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:29.809578896 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:29.809659004 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:29.810123920 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:29.810138941 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.073785067 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.130765915 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.152882099 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.152910948 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.153353930 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.154263973 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.154337883 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.155273914 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.196151972 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.348126888 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.348172903 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.348262072 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.350382090 CEST	50063	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.350399017 CEST	443	50063	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.357374907 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.357395887 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.357491016 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.357904911 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.357917070 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.624589920 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.625067949 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.625092030 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.625391006 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.625678062 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.625725031 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.626019955 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.668117046 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.927309990 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.927359104 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:30.927407980 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.928123951 CEST	50064	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:30.928139925 CEST	443	50064	34.70.212.173	192.168.2.5
May 10, 2024 06:55:32.408377886 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:55:32.408447027 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:55:32.411968946 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:55:32.412045002 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:55:33.622823954 CEST	49711	80	192.168.2.5	18.233.198.142
May 10, 2024 06:55:33.622915030 CEST	49715	80	192.168.2.5	18.233.198.142
May 10, 2024 06:55:33.750025034 CEST	80	49711	18.233.198.142	192.168.2.5
May 10, 2024 06:55:33.752618074 CEST	80	49715	18.233.198.142	192.168.2.5
May 10, 2024 06:55:34.710851908 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:34.710887909 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.711400032 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:34.711515903 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:34.711534023 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.975522995 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.976227045 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:34.976243019 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.976537943 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.976948977 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:34.977005959 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:34.977135897 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:35.020121098 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:35.250767946 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:35.250818014 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:35.250924110 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:35.255830050 CEST	50065	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:35.255851984 CEST	443	50065	34.70.212.173	192.168.2.5
May 10, 2024 06:55:35.942964077 CEST	50037	443	192.168.2.5	34.122.199.206
May 10, 2024 06:55:35.942986012 CEST	443	50037	34.122.199.206	192.168.2.5
May 10, 2024 06:55:39.756618023 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:39.756670952 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:39.756740093 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:39.757138968 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:39.757158041 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.022852898 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.067958117 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.150504112 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.150515079 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.150855064 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.151420116 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.151477098 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.152023077 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.196122885 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.354701996 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.354765892 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.354809046 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.356424093 CEST	50066	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.356434107 CEST	443	50066	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.361252069 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.361285925 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.361529112 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.361795902 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.361812115 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.626424074 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.626668930 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.626682043 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.626965046 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.627332926 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.627388954 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.627485037 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.672113895 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.902112961 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.902162075 CEST	443	50067	34.70.212.173	192.168.2.5
May 10, 2024 06:55:40.902224064 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.903872967 CEST	50067	443	192.168.2.5	34.70.212.173
May 10, 2024 06:55:40.903888941 CEST	443	50067	34.70.212.173	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 10, 2024 06:52:31.311543941 CEST	57023	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.311887980 CEST	65101	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.312478065 CEST	51876	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.312853098 CEST	62366	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.321150064 CEST	61892	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.321324110 CEST	61138	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.400183916 CEST	53	54719	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.420398951 CEST	53	55244	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.422281981 CEST	53	62366	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.422406912 CEST	53	51876	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.434201956 CEST	53	61892	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.438843012 CEST	53	59231	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.448157072 CEST	53	65101	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.453675985 CEST	53	61138	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.456059933 CEST	53	57023	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.721640110 CEST	57366	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.721906900 CEST	58667	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:31.857903957 CEST	53	58667	1.1.1.1	192.168.2.5
May 10, 2024 06:52:31.878699064 CEST	53	57366	1.1.1.1	192.168.2.5
May 10, 2024 06:52:32.057290077 CEST	53	53527	1.1.1.1	192.168.2.5
May 10, 2024 06:52:32.409255981 CEST	52061	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:32.409632921 CEST	52172	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:32.519603968 CEST	53	52172	1.1.1.1	192.168.2.5
May 10, 2024 06:52:32.541342974 CEST	53	52061	1.1.1.1	192.168.2.5
May 10, 2024 06:52:33.049953938 CEST	60312	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:33.050102949 CEST	64479	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:33.169506073 CEST	53	64479	1.1.1.1	192.168.2.5
May 10, 2024 06:52:33.228935957 CEST	53	60312	1.1.1.1	192.168.2.5
May 10, 2024 06:52:35.316669941 CEST	60459	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:35.317117929 CEST	50778	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:35.426423073 CEST	53	50778	1.1.1.1	192.168.2.5
May 10, 2024 06:52:35.426717997 CEST	53	60459	1.1.1.1	192.168.2.5
May 10, 2024 06:52:36.046231031 CEST	53	61787	1.1.1.1	192.168.2.5
May 10, 2024 06:52:36.575978041 CEST	65400	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:36.576431036 CEST	58640	53	192.168.2.5	1.1.1.1
May 10, 2024 06:52:36.685520887 CEST	53	65400	1.1.1.1	192.168.2.5
May 10, 2024 06:52:36.686331034 CEST	53	58640	1.1.1.1	192.168.2.5
May 10, 2024 06:52:49.788772106 CEST	53	59834	1.1.1.1	192.168.2.5
May 10, 2024 06:53:09.974845886 CEST	53	56679	1.1.1.1	192.168.2.5
May 10, 2024 06:53:15.698856115 CEST	56163	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:15.699368000 CEST	50746	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:16.310147047 CEST	61943	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:16.310359955 CEST	51798	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.123069048 CEST	51895	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.123555899 CEST	50790	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.124984980 CEST	61538	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.125866890 CEST	61365	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.231295109 CEST	53	51895	1.1.1.1	192.168.2.5
May 10, 2024 06:53:17.232678890 CEST	53	50790	1.1.1.1	192.168.2.5
May 10, 2024 06:53:17.234930992 CEST	53	61365	1.1.1.1	192.168.2.5
May 10, 2024 06:53:17.245522976 CEST	53	61538	1.1.1.1	192.168.2.5
May 10, 2024 06:53:17.958391905 CEST	59602	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:17.958960056 CEST	52830	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:18.033122063 CEST	51696	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:18.033299923 CEST	53493	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:18.142878056 CEST	53	53493	1.1.1.1	192.168.2.5
May 10, 2024 06:53:18.143692970 CEST	53	51696	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.053993940 CEST	51667	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.054228067 CEST	59053	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.054776907 CEST	62635	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.054852009 CEST	62987	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.111998081 CEST	60018	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.112695932 CEST	61524	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.112695932 CEST	60794	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.113769054 CEST	56048	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.113769054 CEST	62825	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.114130974 CEST	57101	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.120049953 CEST	61729	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.120415926 CEST	61071	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.139512062 CEST	63181	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.139512062 CEST	51733	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:20.162686110 CEST	53	51667	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.167156935 CEST	53	62635	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.167197943 CEST	53	62987	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.174312115 CEST	53	59053	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.221159935 CEST	53	60018	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.221316099 CEST	53	60794	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.222460985 CEST	53	62825	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.222969055 CEST	53	56048	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.223031044 CEST	53	57101	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.228353977 CEST	53	61729	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.229504108 CEST	53	61071	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.251168966 CEST	53	63181	1.1.1.1	192.168.2.5
May 10, 2024 06:53:20.270493984 CEST	53	51733	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.121072054 CEST	55238	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.121431112 CEST	62871	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.122286081 CEST	56597	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.122453928 CEST	65101	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.123363018 CEST	54104	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.123508930 CEST	50915	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.229809046 CEST	53	62871	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.230387926 CEST	53	55238	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.230993986 CEST	53	56597	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.231908083 CEST	53	54104	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.232074022 CEST	53	50915	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.246640921 CEST	53	65101	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.493716002 CEST	59199	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.493972063 CEST	49956	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.549804926 CEST	54046	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.550076008 CEST	54953	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.571217060 CEST	61288	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.571353912 CEST	63021	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.602452040 CEST	53	59199	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.606326103 CEST	53	49956	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.658337116 CEST	53	54046	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.659528017 CEST	53	54953	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.680147886 CEST	53	61288	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.682245970 CEST	53	63021	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.714263916 CEST	64167	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.714467049 CEST	60121	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.716386080 CEST	59415	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.716523886 CEST	51122	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.819807053 CEST	60434	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.819978952 CEST	55832	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.822328091 CEST	53	64167	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.824111938 CEST	53	60121	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.825979948 CEST	53	59415	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.826287031 CEST	53	51122	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.827296972 CEST	53026	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.928497076 CEST	53	60434	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.928550005 CEST	53	55832	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.935836077 CEST	53	53026	1.1.1.1	192.168.2.5
May 10, 2024 06:53:21.955735922 CEST	60979	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:21.956036091 CEST	51798	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.070961952 CEST	60169	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.070962906 CEST	54411	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.085977077 CEST	53	60979	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.086080074 CEST	53	51798	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.155210972 CEST	60307	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.155210972 CEST	63419	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.263325930 CEST	53	63419	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.264538050 CEST	53	60307	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.437508106 CEST	62713	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.437787056 CEST	52609	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.461462021 CEST	57674	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.461636066 CEST	61080	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.466767073 CEST	54899	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.467061043 CEST	60349	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.511343002 CEST	64366	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.511343002 CEST	64603	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.546242952 CEST	53	62713	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.546418905 CEST	53	52609	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.572482109 CEST	53	57674	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.572500944 CEST	53	61080	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.575489998 CEST	53	60518	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.575756073 CEST	53	54899	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.575905085 CEST	53	60349	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.611351013 CEST	54446	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.611591101 CEST	55392	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.616504908 CEST	60536	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.616638899 CEST	62281	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.622910023 CEST	53	64366	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.622939110 CEST	53	64603	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.632143974 CEST	54004	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.632143974 CEST	53437	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.719276905 CEST	53	54446	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.720520973 CEST	53	55392	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.726511955 CEST	53	62281	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.740569115 CEST	53	54004	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.741058111 CEST	53	53437	1.1.1.1	192.168.2.5
May 10, 2024 06:53:22.774149895 CEST	61959	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:22.774149895 CEST	49979	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.638268948 CEST	64076	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.638727903 CEST	50508	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.855984926 CEST	65079	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.856129885 CEST	56253	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.858535051 CEST	60064	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.858686924 CEST	60973	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.933412075 CEST	61938	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.933609962 CEST	64507	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.964126110 CEST	53	56253	1.1.1.1	192.168.2.5
May 10, 2024 06:53:23.964555979 CEST	53	65079	1.1.1.1	192.168.2.5
May 10, 2024 06:53:23.966527939 CEST	53	60064	1.1.1.1	192.168.2.5
May 10, 2024 06:53:23.966743946 CEST	53	60973	1.1.1.1	192.168.2.5
May 10, 2024 06:53:23.986521959 CEST	53900	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.986664057 CEST	59890	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.987495899 CEST	55243	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.987628937 CEST	61499	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.998250008 CEST	50236	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:23.998435974 CEST	63996	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.010457993 CEST	50598	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.010624886 CEST	64282	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.065965891 CEST	53	61938	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.074028969 CEST	53	64507	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.094806910 CEST	53	53900	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.095200062 CEST	53	59890	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.095695019 CEST	53	61499	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.096350908 CEST	53	55243	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.111397982 CEST	53	63996	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.112173080 CEST	53	50236	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.112602949 CEST	53028	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.112806082 CEST	59238	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.126596928 CEST	49430	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.127120972 CEST	51406	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.221134901 CEST	53	53028	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.222148895 CEST	53	59238	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.235573053 CEST	53	49430	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.235874891 CEST	53	51406	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.547877073 CEST	60369	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.548028946 CEST	57590	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.570142031 CEST	61971	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.570384979 CEST	58822	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.623104095 CEST	62780	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.623266935 CEST	56922	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.627384901 CEST	61482	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.627631903 CEST	61234	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.638418913 CEST	61860	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.638648033 CEST	60917	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.641184092 CEST	59093	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.641418934 CEST	53841	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.645447016 CEST	53264	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.645694017 CEST	65188	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.650542974 CEST	64187	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.650814056 CEST	62100	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.651668072 CEST	62526	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.651891947 CEST	50692	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:24.656147003 CEST	53	60369	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.657162905 CEST	53	57590	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.678659916 CEST	53	58822	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.678895950 CEST	53	61971	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.731816053 CEST	53	56922	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.732167959 CEST	53	62780	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.737040043 CEST	53	61234	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.747864962 CEST	53	61860	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.747883081 CEST	53	60917	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.753566027 CEST	53	53264	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.754640102 CEST	53	65188	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.755728006 CEST	53	59093	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.758527994 CEST	53	64187	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.759504080 CEST	53	62100	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.759959936 CEST	53	62526	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.760953903 CEST	53	50692	1.1.1.1	192.168.2.5
May 10, 2024 06:53:24.763381004 CEST	53	53841	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.187167883 CEST	62573	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.187356949 CEST	49755	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.295629978 CEST	53	49755	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.296248913 CEST	53	62573	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.309393883 CEST	56269	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.310069084 CEST	62538	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.319252968 CEST	58386	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.319822073 CEST	57328	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.417747974 CEST	53	56269	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.418344975 CEST	53	62538	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.429368973 CEST	53	57328	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.447686911 CEST	53	58386	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.509222031 CEST	61741	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.509404898 CEST	49369	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.577513933 CEST	63128	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.577954054 CEST	60701	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:25.617897034 CEST	53	61741	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.618158102 CEST	53	49369	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.686671972 CEST	53	63128	1.1.1.1	192.168.2.5
May 10, 2024 06:53:25.688014030 CEST	53	60701	1.1.1.1	192.168.2.5
May 10, 2024 06:53:26.465116978 CEST	59580	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.465610981 CEST	50440	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.466373920 CEST	51193	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.467025042 CEST	61214	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.575541019 CEST	53	59580	1.1.1.1	192.168.2.5
May 10, 2024 06:53:26.575560093 CEST	53	50440	1.1.1.1	192.168.2.5
May 10, 2024 06:53:26.576970100 CEST	53	61214	1.1.1.1	192.168.2.5
May 10, 2024 06:53:26.923010111 CEST	59445	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.923676014 CEST	58529	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.934915066 CEST	53058	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.935610056 CEST	64500	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.978481054 CEST	55656	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.979043007 CEST	59245	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.980727911 CEST	56048	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.981353998 CEST	54065	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.982887983 CEST	58276	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:26.983412027 CEST	55740	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:27.032854080 CEST	53	59445	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.033816099 CEST	53	58529	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.048358917 CEST	53	53058	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.048940897 CEST	53	64500	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.090383053 CEST	53	56048	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.090497017 CEST	53	54065	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.102248907 CEST	53	58276	1.1.1.1	192.168.2.5
May 10, 2024 06:53:27.115331888 CEST	53	55740	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.061901093 CEST	62459	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.062236071 CEST	51177	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.063386917 CEST	49265	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.063576937 CEST	62324	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.171426058 CEST	53	62459	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.172015905 CEST	53	51177	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.223921061 CEST	63494	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.224344015 CEST	57809	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.224751949 CEST	61490	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.224883080 CEST	63953	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.226094961 CEST	50029	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.226324081 CEST	63653	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.226650953 CEST	55722	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.226902008 CEST	54769	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.333209038 CEST	53	63494	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.334275007 CEST	53	57809	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.334789038 CEST	53	63953	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.336756945 CEST	53	55722	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.337455034 CEST	53	63653	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.339241982 CEST	53	54769	1.1.1.1	192.168.2.5
May 10, 2024 06:53:28.987706900 CEST	49252	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:28.988235950 CEST	56188	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:29.097696066 CEST	53	49252	1.1.1.1	192.168.2.5
May 10, 2024 06:53:29.098916054 CEST	53	56188	1.1.1.1	192.168.2.5
May 10, 2024 06:53:29.441745043 CEST	60381	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:29.442439079 CEST	54920	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:29.551722050 CEST	53	54920	1.1.1.1	192.168.2.5
May 10, 2024 06:53:29.752512932 CEST	61988	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:29.753355026 CEST	64559	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:29.863708019 CEST	53	61988	1.1.1.1	192.168.2.5
May 10, 2024 06:53:29.864440918 CEST	53	64559	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.155091047 CEST	57255	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.155318022 CEST	51218	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.184735060 CEST	53527	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.185791969 CEST	53053	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.264739037 CEST	53	57255	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.264854908 CEST	53	51218	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.296159029 CEST	53	53053	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.357562065 CEST	59210	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.357894897 CEST	63701	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.361568928 CEST	60150	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.361896992 CEST	52241	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.363475084 CEST	57945	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.363894939 CEST	56404	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:30.472862005 CEST	53	60150	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.473025084 CEST	53	52241	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.473332882 CEST	53	57945	1.1.1.1	192.168.2.5
May 10, 2024 06:53:30.475122929 CEST	53	56404	1.1.1.1	192.168.2.5
May 10, 2024 06:53:31.673218966 CEST	57468	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.673521042 CEST	52123	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.673888922 CEST	59851	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.674240112 CEST	55369	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.674386978 CEST	62176	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.674689054 CEST	54971	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:31.782135963 CEST	53	49213	1.1.1.1	192.168.2.5
May 10, 2024 06:53:31.783912897 CEST	53	55369	1.1.1.1	192.168.2.5
May 10, 2024 06:53:31.784030914 CEST	53	59851	1.1.1.1	192.168.2.5
May 10, 2024 06:53:31.785096884 CEST	53	62176	1.1.1.1	192.168.2.5
May 10, 2024 06:53:31.785156012 CEST	53	54971	1.1.1.1	192.168.2.5
May 10, 2024 06:53:33.820251942 CEST	53	54020	1.1.1.1	192.168.2.5
May 10, 2024 06:53:34.982018948 CEST	54169	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:34.982181072 CEST	51256	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.644347906 CEST	57271	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.644704103 CEST	57467	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.698690891 CEST	50849	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.698977947 CEST	60523	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.755229950 CEST	53	57467	1.1.1.1	192.168.2.5
May 10, 2024 06:53:35.756045103 CEST	53	57271	1.1.1.1	192.168.2.5
May 10, 2024 06:53:35.787784100 CEST	60157	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.788013935 CEST	65163	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:35.809833050 CEST	53	60523	1.1.1.1	192.168.2.5
May 10, 2024 06:53:35.898478985 CEST	53	65163	1.1.1.1	192.168.2.5
May 10, 2024 06:53:35.899029016 CEST	53	60157	1.1.1.1	192.168.2.5
May 10, 2024 06:53:36.075838089 CEST	55966	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:36.075838089 CEST	65351	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:36.186181068 CEST	53	55966	1.1.1.1	192.168.2.5
May 10, 2024 06:53:36.198343992 CEST	53	65351	1.1.1.1	192.168.2.5
May 10, 2024 06:53:36.209856033 CEST	55917	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:36.210019112 CEST	52032	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:38.528959036 CEST	57743	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:38.529486895 CEST	57053	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:38.564941883 CEST	53	49677	1.1.1.1	192.168.2.5
May 10, 2024 06:53:38.639313936 CEST	53	57743	1.1.1.1	192.168.2.5
May 10, 2024 06:53:38.639328957 CEST	53	57053	1.1.1.1	192.168.2.5
May 10, 2024 06:53:40.471962929 CEST	51124	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:40.472807884 CEST	61899	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:40.582144022 CEST	53	61899	1.1.1.1	192.168.2.5
May 10, 2024 06:53:40.582207918 CEST	53	51124	1.1.1.1	192.168.2.5
May 10, 2024 06:53:47.777931929 CEST	51031	53	192.168.2.5	1.1.1.1
May 10, 2024 06:53:47.887021065 CEST	53	51031	1.1.1.1	192.168.2.5
May 10, 2024 06:54:02.516480923 CEST	53	58005	1.1.1.1	192.168.2.5
May 10, 2024 06:54:18.545347929 CEST	55578	53	192.168.2.5	1.1.1.1
May 10, 2024 06:54:18.654755116 CEST	53	55578	1.1.1.1	192.168.2.5
May 10, 2024 06:54:29.124186039 CEST	62062	53	192.168.2.5	1.1.1.1
May 10, 2024 06:54:29.124669075 CEST	63257	53	192.168.2.5	1.1.1.1
May 10, 2024 06:54:29.233542919 CEST	53	62062	1.1.1.1	192.168.2.5
May 10, 2024 06:54:29.235310078 CEST	53	63257	1.1.1.1	192.168.2.5
May 10, 2024 06:54:33.973340988 CEST	58730	53	192.168.2.5	1.1.1.1
May 10, 2024 06:54:33.973867893 CEST	55187	53	192.168.2.5	1.1.1.1
May 10, 2024 06:54:34.083776951 CEST	53	58730	1.1.1.1	192.168.2.5
May 10, 2024 06:54:34.087496996 CEST	53	55187	1.1.1.1	192.168.2.5
May 10, 2024 06:54:50.295301914 CEST	53	64836	1.1.1.1	192.168.2.5
May 10, 2024 06:55:07.084619045 CEST	50889	53	192.168.2.5	1.1.1.1
May 10, 2024 06:55:07.195519924 CEST	53	50889	1.1.1.1	192.168.2.5
May 10, 2024 06:55:29.699501038 CEST	50846	53	192.168.2.5	1.1.1.1
May 10, 2024 06:55:29.699721098 CEST	50883	53	192.168.2.5	1.1.1.1
May 10, 2024 06:55:29.765777111 CEST	60670	53	192.168.2.5	1.1.1.1
May 10, 2024 06:55:29.808645964 CEST	53	50846	1.1.1.1	192.168.2.5
May 10, 2024 06:55:29.808731079 CEST	53	50883	1.1.1.1	192.168.2.5
May 10, 2024 06:55:29.875065088 CEST	53	60670	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 10, 2024 06:52:36.685585022 CEST	192.168.2.5	1.1.1.1	c1f5	(Port unreachable)	Destination Unreachable
May 10, 2024 06:53:22.218672037 CEST	192.168.2.5	1.1.1.1	c27c	(Port unreachable)	Destination Unreachable
May 10, 2024 06:53:31.783601999 CEST	192.168.2.5	1.1.1.1	c277	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 10, 2024 06:52:31.311543941 CEST	192.168.2.5	1.1.1.1	0xc330	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.311887980 CEST	192.168.2.5	1.1.1.1	0x2e0d	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
May 10, 2024 06:52:31.312478065 CEST	192.168.2.5	1.1.1.1	0xf6c0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.312853098 CEST	192.168.2.5	1.1.1.1	0x9615	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 10, 2024 06:52:31.321150064 CEST	192.168.2.5	1.1.1.1	0x573d	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.321324110 CEST	192.168.2.5	1.1.1.1	0xd366	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
May 10, 2024 06:52:31.721640110 CEST	192.168.2.5	1.1.1.1	0x9b60	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.721906900 CEST	192.168.2.5	1.1.1.1	0x7782	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
May 10, 2024 06:52:32.409255981 CEST	192.168.2.5	1.1.1.1	0xcf8d	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:32.409632921 CEST	192.168.2.5	1.1.1.1	0xefc0	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
May 10, 2024 06:52:33.049953938 CEST	192.168.2.5	1.1.1.1	0x14d	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:33.050102949 CEST	192.168.2.5	1.1.1.1	0xb9d	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
May 10, 2024 06:52:35.316669941 CEST	192.168.2.5	1.1.1.1	0x9d73	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:35.317117929 CEST	192.168.2.5	1.1.1.1	0xa222	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 06:52:36.575978041 CEST	192.168.2.5	1.1.1.1	0x5f61	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:36.576431036 CEST	192.168.2.5	1.1.1.1	0x45b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 06:53:15.698856115 CEST	192.168.2.5	1.1.1.1	0xc7bb	Standard query (0)	www.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:15.699368000 CEST	192.168.2.5	1.1.1.1	0xa9b2	Standard query (0)	www.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:16.310147047 CEST	192.168.2.5	1.1.1.1	0xe0bc	Standard query (0)	www.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:16.310359955 CEST	192.168.2.5	1.1.1.1	0x7046	Standard query (0)	www.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:17.123069048 CEST	192.168.2.5	1.1.1.1	0x527b	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.123555899 CEST	192.168.2.5	1.1.1.1	0x65a4	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
May 10, 2024 06:53:17.124984980 CEST	192.168.2.5	1.1.1.1	0xbb81	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.125866890 CEST	192.168.2.5	1.1.1.1	0xa15b	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
May 10, 2024 06:53:17.958391905 CEST	192.168.2.5	1.1.1.1	0x5db5	Standard query (0)	www.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.958960056 CEST	192.168.2.5	1.1.1.1	0xd2f0	Standard query (0)	www.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:18.033122063 CEST	192.168.2.5	1.1.1.1	0x331	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.033299923 CEST	192.168.2.5	1.1.1.1	0xa5f9	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:20.053993940 CEST	192.168.2.5	1.1.1.1	0x1bff	Standard query (0)	usbank.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.054228067 CEST	192.168.2.5	1.1.1.1	0x19b7	Standard query (0)	usbank.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:20.054776907 CEST	192.168.2.5	1.1.1.1	0xe10e	Standard query (0)	smetrics.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.054852009 CEST	192.168.2.5	1.1.1.1	0x267a	Standard query (0)	smetrics.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:20.111998081 CEST	192.168.2.5	1.1.1.1	0x71d7	Standard query (0)	www.glancecdn.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.112695932 CEST	192.168.2.5	1.1.1.1	0xe489	Standard query (0)	schema.milestoneinternet.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.112695932 CEST	192.168.2.5	1.1.1.1	0x531	Standard query (0)	www.glancecdn.net	65	IN (0x0001)	false
May 10, 2024 06:53:20.113769054 CEST	192.168.2.5	1.1.1.1	0x2491	Standard query (0)	schema.milestoneinternet.com	65	IN (0x0001)	false
May 10, 2024 06:53:20.113769054 CEST	192.168.2.5	1.1.1.1	0x96d6	Standard query (0)	562-ct.c3tag.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.114130974 CEST	192.168.2.5	1.1.1.1	0x7a5e	Standard query (0)	562-ct.c3tag.com	65	IN (0x0001)	false
May 10, 2024 06:53:20.120049953 CEST	192.168.2.5	1.1.1.1	0x44aa	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.120415926 CEST	192.168.2.5	1.1.1.1	0xbae0	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:20.139512062 CEST	192.168.2.5	1.1.1.1	0x1836	Standard query (0)	usbank.tt.omtrdc.net	65	IN (0x0001)	false
May 10, 2024 06:53:20.139512062 CEST	192.168.2.5	1.1.1.1	0x3326	Standard query (0)	usbank.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.121072054 CEST	192.168.2.5	1.1.1.1	0x6588	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.121431112 CEST	192.168.2.5	1.1.1.1	0x1565	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.122286081 CEST	192.168.2.5	1.1.1.1	0xa26	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.122453928 CEST	192.168.2.5	1.1.1.1	0x4a23	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.123363018 CEST	192.168.2.5	1.1.1.1	0xee49	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.123508930 CEST	192.168.2.5	1.1.1.1	0xc506	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 10, 2024 06:53:21.493716002 CEST	192.168.2.5	1.1.1.1	0xa806	Standard query (0)	smetrics.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.493972063 CEST	192.168.2.5	1.1.1.1	0x8f77	Standard query (0)	smetrics.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.549804926 CEST	192.168.2.5	1.1.1.1	0xce72	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.550076008 CEST	192.168.2.5	1.1.1.1	0x4206	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.571217060 CEST	192.168.2.5	1.1.1.1	0xa858	Standard query (0)	storage.glancecdn.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.571353912 CEST	192.168.2.5	1.1.1.1	0x2038	Standard query (0)	storage.glancecdn.net	65	IN (0x0001)	false
May 10, 2024 06:53:21.714263916 CEST	192.168.2.5	1.1.1.1	0xbb27	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.714467049 CEST	192.168.2.5	1.1.1.1	0x6ec0	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.716386080 CEST	192.168.2.5	1.1.1.1	0xee9d	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.716523886 CEST	192.168.2.5	1.1.1.1	0x1e0a	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
May 10, 2024 06:53:21.819807053 CEST	192.168.2.5	1.1.1.1	0x631f	Standard query (0)	img.c3tag.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.819978952 CEST	192.168.2.5	1.1.1.1	0x69fb	Standard query (0)	img.c3tag.com	65	IN (0x0001)	false
May 10, 2024 06:53:21.827296972 CEST	192.168.2.5	1.1.1.1	0xe737	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.955735922 CEST	192.168.2.5	1.1.1.1	0xff70	Standard query (0)	usbank.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.956036091 CEST	192.168.2.5	1.1.1.1	0xde31	Standard query (0)	usbank.tt.omtrdc.net	65	IN (0x0001)	false
May 10, 2024 06:53:22.070961952 CEST	192.168.2.5	1.1.1.1	0x3e2b	Standard query (0)	onlinebanking.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.070962906 CEST	192.168.2.5	1.1.1.1	0x5034	Standard query (0)	onlinebanking.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.155210972 CEST	192.168.2.5	1.1.1.1	0x6b7b	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.155210972 CEST	192.168.2.5	1.1.1.1	0xd4e8	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.437508106 CEST	192.168.2.5	1.1.1.1	0x4c59	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.437787056 CEST	192.168.2.5	1.1.1.1	0x3f56	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.461462021 CEST	192.168.2.5	1.1.1.1	0x9cb4	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.461636066 CEST	192.168.2.5	1.1.1.1	0xfc39	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.466767073 CEST	192.168.2.5	1.1.1.1	0xa606	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.467061043 CEST	192.168.2.5	1.1.1.1	0xf5e5	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
May 10, 2024 06:53:22.511343002 CEST	192.168.2.5	1.1.1.1	0x6fa0	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.511343002 CEST	192.168.2.5	1.1.1.1	0xb380	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:22.611351013 CEST	192.168.2.5	1.1.1.1	0xb35b	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.611591101 CEST	192.168.2.5	1.1.1.1	0xdd57	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:22.616504908 CEST	192.168.2.5	1.1.1.1	0x6661	Standard query (0)	schema.milestoneinternet.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.616638899 CEST	192.168.2.5	1.1.1.1	0x3105	Standard query (0)	schema.milestoneinternet.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.632143974 CEST	192.168.2.5	1.1.1.1	0x44fa	Standard query (0)	siteimproveanalytics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.632143974 CEST	192.168.2.5	1.1.1.1	0x3af1	Standard query (0)	siteimproveanalytics.com	65	IN (0x0001)	false
May 10, 2024 06:53:22.774149895 CEST	192.168.2.5	1.1.1.1	0xe500	Standard query (0)	cdn1.adoberesources.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.774149895 CEST	192.168.2.5	1.1.1.1	0x697f	Standard query (0)	cdn1.adoberesources.net	65	IN (0x0001)	false
May 10, 2024 06:53:23.638268948 CEST	192.168.2.5	1.1.1.1	0x4703	Standard query (0)	acxmetrics.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.638727903 CEST	192.168.2.5	1.1.1.1	0xe998	Standard query (0)	acxmetrics.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:23.855984926 CEST	192.168.2.5	1.1.1.1	0x9555	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.856129885 CEST	192.168.2.5	1.1.1.1	0x8a74	Standard query (0)	t.co	65	IN (0x0001)	false
May 10, 2024 06:53:23.858535051 CEST	192.168.2.5	1.1.1.1	0x1804	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.858686924 CEST	192.168.2.5	1.1.1.1	0x7344	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
May 10, 2024 06:53:23.933412075 CEST	192.168.2.5	1.1.1.1	0x6022	Standard query (0)	6219543.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.933609962 CEST	192.168.2.5	1.1.1.1	0x939b	Standard query (0)	6219543.fls.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:23.986521959 CEST	192.168.2.5	1.1.1.1	0x60fc	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.986664057 CEST	192.168.2.5	1.1.1.1	0x58ba	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:23.987495899 CEST	192.168.2.5	1.1.1.1	0xfe28	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.987628937 CEST	192.168.2.5	1.1.1.1	0x297c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:23.998250008 CEST	192.168.2.5	1.1.1.1	0xff16	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.998435974 CEST	192.168.2.5	1.1.1.1	0x36db	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:24.010457993 CEST	192.168.2.5	1.1.1.1	0xf93c	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.010624886 CEST	192.168.2.5	1.1.1.1	0xef4	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
May 10, 2024 06:53:24.112602949 CEST	192.168.2.5	1.1.1.1	0x3124	Standard query (0)	img.c3tag.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112806082 CEST	192.168.2.5	1.1.1.1	0x6b5c	Standard query (0)	img.c3tag.com	65	IN (0x0001)	false
May 10, 2024 06:53:24.126596928 CEST	192.168.2.5	1.1.1.1	0x8d82	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.127120972 CEST	192.168.2.5	1.1.1.1	0x7ce1	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
May 10, 2024 06:53:24.547877073 CEST	192.168.2.5	1.1.1.1	0x3553	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.548028946 CEST	192.168.2.5	1.1.1.1	0x2de2	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 10, 2024 06:53:24.570142031 CEST	192.168.2.5	1.1.1.1	0xa158	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.570384979 CEST	192.168.2.5	1.1.1.1	0x1f36	Standard query (0)	sc-static.net	65	IN (0x0001)	false
May 10, 2024 06:53:24.623104095 CEST	192.168.2.5	1.1.1.1	0xb5e0	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.623266935 CEST	192.168.2.5	1.1.1.1	0xbd61	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:24.627384901 CEST	192.168.2.5	1.1.1.1	0xa8cd	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.627631903 CEST	192.168.2.5	1.1.1.1	0x8545	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
May 10, 2024 06:53:24.638418913 CEST	192.168.2.5	1.1.1.1	0xcd3e	Standard query (0)	562-ct.c3tag.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.638648033 CEST	192.168.2.5	1.1.1.1	0x78cb	Standard query (0)	562-ct.c3tag.com	65	IN (0x0001)	false
May 10, 2024 06:53:24.641184092 CEST	192.168.2.5	1.1.1.1	0x4af9	Standard query (0)	5093.global.siteimproveanalytics.io	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.641418934 CEST	192.168.2.5	1.1.1.1	0xbfae	Standard query (0)	5093.global.siteimproveanalytics.io	65	IN (0x0001)	false
May 10, 2024 06:53:24.645447016 CEST	192.168.2.5	1.1.1.1	0xca23	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.645694017 CEST	192.168.2.5	1.1.1.1	0x2de1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:24.650542974 CEST	192.168.2.5	1.1.1.1	0x3ecd	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.650814056 CEST	192.168.2.5	1.1.1.1	0x2885	Standard query (0)	t.co	65	IN (0x0001)	false
May 10, 2024 06:53:24.651668072 CEST	192.168.2.5	1.1.1.1	0x88a9	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.651891947 CEST	192.168.2.5	1.1.1.1	0xb2b2	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
May 10, 2024 06:53:25.187167883 CEST	192.168.2.5	1.1.1.1	0x3f06	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.187356949 CEST	192.168.2.5	1.1.1.1	0x42a8	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:25.309393883 CEST	192.168.2.5	1.1.1.1	0x1a35	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.310069084 CEST	192.168.2.5	1.1.1.1	0x32d8	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 10, 2024 06:53:25.319252968 CEST	192.168.2.5	1.1.1.1	0x58fd	Standard query (0)	451-rqs-232.mktoresp.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.319822073 CEST	192.168.2.5	1.1.1.1	0x434b	Standard query (0)	451-rqs-232.mktoresp.com	65	IN (0x0001)	false
May 10, 2024 06:53:25.509222031 CEST	192.168.2.5	1.1.1.1	0x8375	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.509404898 CEST	192.168.2.5	1.1.1.1	0xe65e	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
May 10, 2024 06:53:25.577513933 CEST	192.168.2.5	1.1.1.1	0x907a	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.577954054 CEST	192.168.2.5	1.1.1.1	0x9426	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
May 10, 2024 06:53:26.465116978 CEST	192.168.2.5	1.1.1.1	0x51f7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.465610981 CEST	192.168.2.5	1.1.1.1	0x3626	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 06:53:26.466373920 CEST	192.168.2.5	1.1.1.1	0x862b	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.467025042 CEST	192.168.2.5	1.1.1.1	0xa608	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 10, 2024 06:53:26.923010111 CEST	192.168.2.5	1.1.1.1	0x244c	Standard query (0)	mid.rkdms.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.923676014 CEST	192.168.2.5	1.1.1.1	0x20c4	Standard query (0)	mid.rkdms.com	65	IN (0x0001)	false
May 10, 2024 06:53:26.934915066 CEST	192.168.2.5	1.1.1.1	0x77ab	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.935610056 CEST	192.168.2.5	1.1.1.1	0xd132	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
May 10, 2024 06:53:26.978481054 CEST	192.168.2.5	1.1.1.1	0xdeb3	Standard query (0)	onlinebanking.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.979043007 CEST	192.168.2.5	1.1.1.1	0xc45b	Standard query (0)	onlinebanking.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:26.980727911 CEST	192.168.2.5	1.1.1.1	0xbc40	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.981353998 CEST	192.168.2.5	1.1.1.1	0xc1e4	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 10, 2024 06:53:26.982887983 CEST	192.168.2.5	1.1.1.1	0x515c	Standard query (0)	5093.global.siteimproveanalytics.io	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.983412027 CEST	192.168.2.5	1.1.1.1	0x358c	Standard query (0)	5093.global.siteimproveanalytics.io	65	IN (0x0001)	false
May 10, 2024 06:53:28.061901093 CEST	192.168.2.5	1.1.1.1	0x95cc	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.062236071 CEST	192.168.2.5	1.1.1.1	0x5576	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 10, 2024 06:53:28.063386917 CEST	192.168.2.5	1.1.1.1	0x6cda	Standard query (0)	content.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.063576937 CEST	192.168.2.5	1.1.1.1	0xc512	Standard query (0)	content.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:28.223921061 CEST	192.168.2.5	1.1.1.1	0xca43	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.224344015 CEST	192.168.2.5	1.1.1.1	0xe3b2	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
May 10, 2024 06:53:28.224751949 CEST	192.168.2.5	1.1.1.1	0x480a	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.224883080 CEST	192.168.2.5	1.1.1.1	0x8d9	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 10, 2024 06:53:28.226094961 CEST	192.168.2.5	1.1.1.1	0xc461	Standard query (0)	zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.226324081 CEST	192.168.2.5	1.1.1.1	0xdae2	Standard query (0)	zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com	65	IN (0x0001)	false
May 10, 2024 06:53:28.226650953 CEST	192.168.2.5	1.1.1.1	0x19aa	Standard query (0)	www.glance.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.226902008 CEST	192.168.2.5	1.1.1.1	0xf971	Standard query (0)	www.glance.net	65	IN (0x0001)	false
May 10, 2024 06:53:28.987706900 CEST	192.168.2.5	1.1.1.1	0x3203	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.988235950 CEST	192.168.2.5	1.1.1.1	0xa458	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:29.441745043 CEST	192.168.2.5	1.1.1.1	0xc852	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.442439079 CEST	192.168.2.5	1.1.1.1	0x4f63	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
May 10, 2024 06:53:29.752512932 CEST	192.168.2.5	1.1.1.1	0xdbce	Standard query (0)	usbank-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.753355026 CEST	192.168.2.5	1.1.1.1	0x8ddc	Standard query (0)	usbank-sync.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:30.155091047 CEST	192.168.2.5	1.1.1.1	0x218	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.155318022 CEST	192.168.2.5	1.1.1.1	0xba41	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 06:53:30.184735060 CEST	192.168.2.5	1.1.1.1	0xd0c0	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.185791969 CEST	192.168.2.5	1.1.1.1	0x2b28	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
May 10, 2024 06:53:30.357562065 CEST	192.168.2.5	1.1.1.1	0x37c0	Standard query (0)	content.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.357894897 CEST	192.168.2.5	1.1.1.1	0xe7cf	Standard query (0)	content.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:30.361568928 CEST	192.168.2.5	1.1.1.1	0x78a1	Standard query (0)	www.glance.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.361896992 CEST	192.168.2.5	1.1.1.1	0xe95c	Standard query (0)	www.glance.net	65	IN (0x0001)	false
May 10, 2024 06:53:30.363475084 CEST	192.168.2.5	1.1.1.1	0x869e	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.363894939 CEST	192.168.2.5	1.1.1.1	0x213b	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:31.673218966 CEST	192.168.2.5	1.1.1.1	0x274	Standard query (0)	content.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.673521042 CEST	192.168.2.5	1.1.1.1	0xfc7e	Standard query (0)	content.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:31.673888922 CEST	192.168.2.5	1.1.1.1	0xde45	Standard query (0)	www.glance.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.674240112 CEST	192.168.2.5	1.1.1.1	0x7229	Standard query (0)	www.glance.net	65	IN (0x0001)	false
May 10, 2024 06:53:31.674386978 CEST	192.168.2.5	1.1.1.1	0x4361	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.674689054 CEST	192.168.2.5	1.1.1.1	0xca69	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:34.982018948 CEST	192.168.2.5	1.1.1.1	0x2cf5	Standard query (0)	api.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:34.982181072 CEST	192.168.2.5	1.1.1.1	0x7bb1	Standard query (0)	api.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:35.644347906 CEST	192.168.2.5	1.1.1.1	0x68fc	Standard query (0)	usbank-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.644704103 CEST	192.168.2.5	1.1.1.1	0x2904	Standard query (0)	usbank-sync.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:53:35.698690891 CEST	192.168.2.5	1.1.1.1	0xdb7c	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.698977947 CEST	192.168.2.5	1.1.1.1	0xea06	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
May 10, 2024 06:53:35.787784100 CEST	192.168.2.5	1.1.1.1	0x39e3	Standard query (0)	mpsnare.iesnare.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.788013935 CEST	192.168.2.5	1.1.1.1	0xa69a	Standard query (0)	mpsnare.iesnare.com	65	IN (0x0001)	false
May 10, 2024 06:53:36.075838089 CEST	192.168.2.5	1.1.1.1	0xd8d	Standard query (0)	fls.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:36.075838089 CEST	192.168.2.5	1.1.1.1	0x5aea	Standard query (0)	fls.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 06:53:36.209856033 CEST	192.168.2.5	1.1.1.1	0xcbad	Standard query (0)	api.usbank.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:36.210019112 CEST	192.168.2.5	1.1.1.1	0x16d2	Standard query (0)	api.usbank.com	65	IN (0x0001)	false
May 10, 2024 06:53:38.528959036 CEST	192.168.2.5	1.1.1.1	0x932d	Standard query (0)	pdx-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.529486895 CEST	192.168.2.5	1.1.1.1	0xe52f	Standard query (0)	pdx-col.eum-appdynamics.com	65	IN (0x0001)	false
May 10, 2024 06:53:40.471962929 CEST	192.168.2.5	1.1.1.1	0x3cfb	Standard query (0)	pdx-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.472807884 CEST	192.168.2.5	1.1.1.1	0x256e	Standard query (0)	pdx-col.eum-appdynamics.com	65	IN (0x0001)	false
May 10, 2024 06:53:47.777931929 CEST	192.168.2.5	1.1.1.1	0xb258	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:18.545347929 CEST	192.168.2.5	1.1.1.1	0x144	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.124186039 CEST	192.168.2.5	1.1.1.1	0xaf06	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.124669075 CEST	192.168.2.5	1.1.1.1	0xdc48	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:54:33.973340988 CEST	192.168.2.5	1.1.1.1	0xa8a	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:33.973867893 CEST	192.168.2.5	1.1.1.1	0x5f6c	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
May 10, 2024 06:55:07.084619045 CEST	192.168.2.5	1.1.1.1	0xbdcd	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.699501038 CEST	192.168.2.5	1.1.1.1	0x809	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.699721098 CEST	192.168.2.5	1.1.1.1	0x7bc6	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
May 10, 2024 06:55:29.765777111 CEST	192.168.2.5	1.1.1.1	0xbef7	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 10, 2024 06:52:31.422281981 CEST	1.1.1.1	192.168.2.5	0x9615	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 10, 2024 06:52:31.422406912 CEST	1.1.1.1	192.168.2.5	0xf6c0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.422406912 CEST	1.1.1.1	192.168.2.5	0xf6c0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.434201956 CEST	1.1.1.1	192.168.2.5	0x573d	No error (0)	res.cisco.com		18.233.198.142	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.434201956 CEST	1.1.1.1	192.168.2.5	0x573d	No error (0)	res.cisco.com		54.160.50.221	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.434201956 CEST	1.1.1.1	192.168.2.5	0x573d	No error (0)	res.cisco.com		52.200.169.160	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.448157072 CEST	1.1.1.1	192.168.2.5	0x2e0d	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:52:31.456059933 CEST	1.1.1.1	192.168.2.5	0xc330	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:52:31.456059933 CEST	1.1.1.1	192.168.2.5	0xc330	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.62	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.456059933 CEST	1.1.1.1	192.168.2.5	0xc330	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.96	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.456059933 CEST	1.1.1.1	192.168.2.5	0xc330	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.16	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.456059933 CEST	1.1.1.1	192.168.2.5	0xc330	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.113	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.878699064 CEST	1.1.1.1	192.168.2.5	0x9b60	No error (0)	res.cisco.com		52.200.169.160	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.878699064 CEST	1.1.1.1	192.168.2.5	0x9b60	No error (0)	res.cisco.com		18.233.198.142	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:31.878699064 CEST	1.1.1.1	192.168.2.5	0x9b60	No error (0)	res.cisco.com		54.160.50.221	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:32.541342974 CEST	1.1.1.1	192.168.2.5	0xcf8d	No error (0)	res.cisco.com		18.233.198.142	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:32.541342974 CEST	1.1.1.1	192.168.2.5	0xcf8d	No error (0)	res.cisco.com		52.200.169.160	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:32.541342974 CEST	1.1.1.1	192.168.2.5	0xcf8d	No error (0)	res.cisco.com		54.160.50.221	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:33.169506073 CEST	1.1.1.1	192.168.2.5	0xb9d	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:52:33.228935957 CEST	1.1.1.1	192.168.2.5	0x14d	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:52:33.228935957 CEST	1.1.1.1	192.168.2.5	0x14d	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.113	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:33.228935957 CEST	1.1.1.1	192.168.2.5	0x14d	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.16	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:33.228935957 CEST	1.1.1.1	192.168.2.5	0x14d	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.96	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:33.228935957 CEST	1.1.1.1	192.168.2.5	0x14d	No error (0)	d2qj7djftjbj85.cloudfront.net		18.160.225.62	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:35.426423073 CEST	1.1.1.1	192.168.2.5	0xa222	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 06:52:35.426717997 CEST	1.1.1.1	192.168.2.5	0x9d73	No error (0)	www.google.com		172.217.4.68	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:36.685520887 CEST	1.1.1.1	192.168.2.5	0x5f61	No error (0)	www.google.com		142.250.191.164	A (IP address)	IN (0x0001)	false
May 10, 2024 06:52:36.686331034 CEST	1.1.1.1	192.168.2.5	0x45b1	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 06:53:15.808273077 CEST	1.1.1.1	192.168.2.5	0xa9b2	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:15.809092045 CEST	1.1.1.1	192.168.2.5	0xc7bb	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:16.419740915 CEST	1.1.1.1	192.168.2.5	0xe0bc	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:16.445697069 CEST	1.1.1.1	192.168.2.5	0x7046	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:17.231295109 CEST	1.1.1.1	192.168.2.5	0x527b	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:17.231295109 CEST	1.1.1.1	192.168.2.5	0x527b	No error (0)	dzfq4ouujrxm8.cloudfront.net		52.84.52.50	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.231295109 CEST	1.1.1.1	192.168.2.5	0x527b	No error (0)	dzfq4ouujrxm8.cloudfront.net		52.84.52.42	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.231295109 CEST	1.1.1.1	192.168.2.5	0x527b	No error (0)	dzfq4ouujrxm8.cloudfront.net		52.84.52.52	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.231295109 CEST	1.1.1.1	192.168.2.5	0x527b	No error (0)	dzfq4ouujrxm8.cloudfront.net		52.84.52.29	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.232678890 CEST	1.1.1.1	192.168.2.5	0x65a4	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:17.245522976 CEST	1.1.1.1	192.168.2.5	0xbb81	No error (0)	cdn.appdynamics.com		52.84.125.87	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.245522976 CEST	1.1.1.1	192.168.2.5	0xbb81	No error (0)	cdn.appdynamics.com		52.84.125.58	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.245522976 CEST	1.1.1.1	192.168.2.5	0xbb81	No error (0)	cdn.appdynamics.com		52.84.125.103	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:17.245522976 CEST	1.1.1.1	192.168.2.5	0xbb81	No error (0)	cdn.appdynamics.com		52.84.125.66	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.069938898 CEST	1.1.1.1	192.168.2.5	0xd2f0	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.070581913 CEST	1.1.1.1	192.168.2.5	0x5db5	No error (0)	www.usbank.com	www.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.142878056 CEST	1.1.1.1	192.168.2.5	0xa5f9	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.142878056 CEST	1.1.1.1	192.168.2.5	0xa5f9	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.142878056 CEST	1.1.1.1	192.168.2.5	0xa5f9	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.20.120.138	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.4.253.253	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.95.44.44	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.208.10.211	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.233.27.11	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.206.63.153	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.12.237	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:18.143692970 CEST	1.1.1.1	192.168.2.5	0x331	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.215.226.32	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	usbank.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.210.94.219	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.212.109.197	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.200.25.94	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.198.84.61	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.208.10.211	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.237.29.40	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.231.73.197	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.162686110 CEST	1.1.1.1	192.168.2.5	0x1bff	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.208.12.151	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	smetrics.usbank.com	usbank.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167156935 CEST	1.1.1.1	192.168.2.5	0xe10e	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.167197943 CEST	1.1.1.1	192.168.2.5	0x267a	No error (0)	smetrics.usbank.com	usbank.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.174312115 CEST	1.1.1.1	192.168.2.5	0x19b7	No error (0)	usbank.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.174312115 CEST	1.1.1.1	192.168.2.5	0x19b7	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.174312115 CEST	1.1.1.1	192.168.2.5	0x19b7	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.221159935 CEST	1.1.1.1	192.168.2.5	0x71d7	No error (0)	www.glancecdn.net	glancecdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.221159935 CEST	1.1.1.1	192.168.2.5	0x71d7	No error (0)	glancecdn.net		18.235.19.155	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.221159935 CEST	1.1.1.1	192.168.2.5	0x71d7	No error (0)	glancecdn.net		3.230.252.23	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.221159935 CEST	1.1.1.1	192.168.2.5	0x71d7	No error (0)	glancecdn.net		3.208.227.48	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.221159935 CEST	1.1.1.1	192.168.2.5	0x71d7	No error (0)	glancecdn.net		52.0.243.26	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.221316099 CEST	1.1.1.1	192.168.2.5	0x531	No error (0)	www.glancecdn.net	glancecdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.222060919 CEST	1.1.1.1	192.168.2.5	0xe489	No error (0)	schema.milestoneinternet.com	schema.milestoneinternet.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.222460985 CEST	1.1.1.1	192.168.2.5	0x96d6	No error (0)	562-ct.c3tag.com		192.65.229.36	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.222969055 CEST	1.1.1.1	192.168.2.5	0x2491	No error (0)	schema.milestoneinternet.com	schema.milestoneinternet.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.145.109.191	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.20.157.54	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.217.165.145	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.224.70.182	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.218.20	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.207.66.134	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.237.29.40	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.228353977 CEST	1.1.1.1	192.168.2.5	0x44aa	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.217.160.157	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.229504108 CEST	1.1.1.1	192.168.2.5	0xbae0	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.229504108 CEST	1.1.1.1	192.168.2.5	0xbae0	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.229504108 CEST	1.1.1.1	192.168.2.5	0xbae0	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.251168966 CEST	1.1.1.1	192.168.2.5	0x1836	No error (0)	usbank.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	usbank.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:20.270493984 CEST	1.1.1.1	192.168.2.5	0x3326	No error (0)	adobetarget.data.adobedc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.230387926 CEST	1.1.1.1	192.168.2.5	0x6588	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.99	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.101	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.110	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.230993986 CEST	1.1.1.1	192.168.2.5	0xa26	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.85	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.231908083 CEST	1.1.1.1	192.168.2.5	0xee49	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.231908083 CEST	1.1.1.1	192.168.2.5	0xee49	No error (0)	scontent.xx.fbcdn.net		157.240.254.7	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.232074022 CEST	1.1.1.1	192.168.2.5	0xc506	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.246640921 CEST	1.1.1.1	192.168.2.5	0x4a23	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.246640921 CEST	1.1.1.1	192.168.2.5	0x4a23	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	smetrics.usbank.com	usbank.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.602452040 CEST	1.1.1.1	192.168.2.5	0xa806	No error (0)	usbank.com.ssl.d2.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.606326103 CEST	1.1.1.1	192.168.2.5	0x8f77	No error (0)	smetrics.usbank.com	usbank.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.658337116 CEST	1.1.1.1	192.168.2.5	0xce72	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.680147886 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.680147886 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	d10lse0r9n7r80.cloudfront.net		99.84.160.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.680147886 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	d10lse0r9n7r80.cloudfront.net		99.84.160.97	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.680147886 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	d10lse0r9n7r80.cloudfront.net		99.84.160.129	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.680147886 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	d10lse0r9n7r80.cloudfront.net		99.84.160.90	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.682245970 CEST	1.1.1.1	192.168.2.5	0x2038	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.110	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.85	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.101	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.822328091 CEST	1.1.1.1	192.168.2.5	0xbb27	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.162.163.99	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.824111938 CEST	1.1.1.1	192.168.2.5	0x6ec0	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.824111938 CEST	1.1.1.1	192.168.2.5	0x6ec0	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:21.825979948 CEST	1.1.1.1	192.168.2.5	0xee9d	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.826287031 CEST	1.1.1.1	192.168.2.5	0x1e0a	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
May 10, 2024 06:53:21.928497076 CEST	1.1.1.1	192.168.2.5	0x631f	No error (0)	img.c3tag.com		66.180.64.123	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.928497076 CEST	1.1.1.1	192.168.2.5	0x631f	No error (0)	img.c3tag.com		192.65.229.43	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:21.935836077 CEST	1.1.1.1	192.168.2.5	0xe737	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	usbank.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.085977077 CEST	1.1.1.1	192.168.2.5	0xff70	No error (0)	adobetarget.data.adobedc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.086080074 CEST	1.1.1.1	192.168.2.5	0xde31	No error (0)	usbank.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.181080103 CEST	1.1.1.1	192.168.2.5	0x3e2b	No error (0)	onlinebanking.usbank.com	onlinebanking.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.218609095 CEST	1.1.1.1	192.168.2.5	0x5034	No error (0)	onlinebanking.usbank.com	onlinebanking.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.264538050 CEST	1.1.1.1	192.168.2.5	0x6b7b	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.546242952 CEST	1.1.1.1	192.168.2.5	0x4c59	No error (0)	cdn.quantummetric.com		104.22.52.252	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.546242952 CEST	1.1.1.1	192.168.2.5	0x4c59	No error (0)	cdn.quantummetric.com		172.67.20.158	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.546242952 CEST	1.1.1.1	192.168.2.5	0x4c59	No error (0)	cdn.quantummetric.com		104.22.53.252	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.546418905 CEST	1.1.1.1	192.168.2.5	0x3f56	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
May 10, 2024 06:53:22.572482109 CEST	1.1.1.1	192.168.2.5	0x9cb4	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.572482109 CEST	1.1.1.1	192.168.2.5	0x9cb4	No error (0)	platform.twitter.map.fastly.net		146.75.80.157	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.572500944 CEST	1.1.1.1	192.168.2.5	0xfc39	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.575756073 CEST	1.1.1.1	192.168.2.5	0xa606	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.575756073 CEST	1.1.1.1	192.168.2.5	0xa606	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.135.121	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.575905085 CEST	1.1.1.1	192.168.2.5	0xf5e5	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.622910023 CEST	1.1.1.1	192.168.2.5	0x6fa0	No error (0)	cm.g.doubleclick.net		142.250.190.98	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.221.183.201	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.0.25.144	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.104.176	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.20.162.91	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.208.12.151	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.236.223.104	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.218.20	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.719276905 CEST	1.1.1.1	192.168.2.5	0xb35b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.198.84.61	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.720520973 CEST	1.1.1.1	192.168.2.5	0xdd57	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.720520973 CEST	1.1.1.1	192.168.2.5	0xdd57	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.720520973 CEST	1.1.1.1	192.168.2.5	0xdd57	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.726511955 CEST	1.1.1.1	192.168.2.5	0x3105	No error (0)	schema.milestoneinternet.com	schema.milestoneinternet.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.726880074 CEST	1.1.1.1	192.168.2.5	0x6661	No error (0)	schema.milestoneinternet.com	schema.milestoneinternet.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.740569115 CEST	1.1.1.1	192.168.2.5	0x44fa	No error (0)	siteimproveanalytics.com		104.21.50.150	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.740569115 CEST	1.1.1.1	192.168.2.5	0x44fa	No error (0)	siteimproveanalytics.com		172.67.163.237	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:22.741058111 CEST	1.1.1.1	192.168.2.5	0x3af1	No error (0)	siteimproveanalytics.com			65	IN (0x0001)	false
May 10, 2024 06:53:22.884675026 CEST	1.1.1.1	192.168.2.5	0x697f	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:22.885514975 CEST	1.1.1.1	192.168.2.5	0xe500	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.746774912 CEST	1.1.1.1	192.168.2.5	0x4703	No error (0)	acxmetrics.usbank.com	aut1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.747833967 CEST	1.1.1.1	192.168.2.5	0xe998	No error (0)	acxmetrics.usbank.com	aut1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.964555979 CEST	1.1.1.1	192.168.2.5	0x9555	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.966527939 CEST	1.1.1.1	192.168.2.5	0x1804	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.966527939 CEST	1.1.1.1	192.168.2.5	0x1804	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.966527939 CEST	1.1.1.1	192.168.2.5	0x1804	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:23.966743946 CEST	1.1.1.1	192.168.2.5	0x7344	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:23.966743946 CEST	1.1.1.1	192.168.2.5	0x7344	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.065965891 CEST	1.1.1.1	192.168.2.5	0x6022	No error (0)	6219543.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.065965891 CEST	1.1.1.1	192.168.2.5	0x6022	No error (0)	dart.l.doubleclick.net		172.217.4.70	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.074028969 CEST	1.1.1.1	192.168.2.5	0x939b	No error (0)	6219543.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.094806910 CEST	1.1.1.1	192.168.2.5	0x60fc	No error (0)	td.doubleclick.net		142.250.190.66	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.095695019 CEST	1.1.1.1	192.168.2.5	0x297c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 10, 2024 06:53:24.096350908 CEST	1.1.1.1	192.168.2.5	0xfe28	No error (0)	ad.doubleclick.net		172.217.4.38	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.111397982 CEST	1.1.1.1	192.168.2.5	0x36db	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.112173080 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.119398117 CEST	1.1.1.1	192.168.2.5	0xf93c	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.120620012 CEST	1.1.1.1	192.168.2.5	0xef4	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.221134901 CEST	1.1.1.1	192.168.2.5	0x3124	No error (0)	img.c3tag.com		192.65.229.43	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.221134901 CEST	1.1.1.1	192.168.2.5	0x3124	No error (0)	img.c3tag.com		66.180.64.123	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.235573053 CEST	1.1.1.1	192.168.2.5	0x8d82	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.235573053 CEST	1.1.1.1	192.168.2.5	0x8d82	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.235573053 CEST	1.1.1.1	192.168.2.5	0x8d82	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.235874891 CEST	1.1.1.1	192.168.2.5	0x7ce1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.235874891 CEST	1.1.1.1	192.168.2.5	0x7ce1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.656147003 CEST	1.1.1.1	192.168.2.5	0x3553	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.656147003 CEST	1.1.1.1	192.168.2.5	0x3553	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.656147003 CEST	1.1.1.1	192.168.2.5	0x3553	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.656147003 CEST	1.1.1.1	192.168.2.5	0x3553	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.678895950 CEST	1.1.1.1	192.168.2.5	0xa158	No error (0)	sc-static.net		3.160.6.245	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.731816053 CEST	1.1.1.1	192.168.2.5	0xbd61	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 10, 2024 06:53:24.732167959 CEST	1.1.1.1	192.168.2.5	0xb5e0	No error (0)	ad.doubleclick.net		172.217.4.38	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.736088991 CEST	1.1.1.1	192.168.2.5	0xa8cd	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.736088991 CEST	1.1.1.1	192.168.2.5	0xa8cd	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.736088991 CEST	1.1.1.1	192.168.2.5	0xa8cd	No error (0)	dualstack.pinterest.map.fastly.net		146.75.80.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.737040043 CEST	1.1.1.1	192.168.2.5	0x8545	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.737040043 CEST	1.1.1.1	192.168.2.5	0x8545	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.747864962 CEST	1.1.1.1	192.168.2.5	0xcd3e	No error (0)	562-ct.c3tag.com		192.65.229.36	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.753566027 CEST	1.1.1.1	192.168.2.5	0xca23	No error (0)	ad.doubleclick.net		172.217.4.38	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.754640102 CEST	1.1.1.1	192.168.2.5	0x2de1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 10, 2024 06:53:24.755728006 CEST	1.1.1.1	192.168.2.5	0x4af9	No error (0)	5093.global.siteimproveanalytics.io	us-east-1.global.siteimproveanalytics.io		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.755728006 CEST	1.1.1.1	192.168.2.5	0x4af9	No error (0)	us-east-1.global.siteimproveanalytics.io	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.755728006 CEST	1.1.1.1	192.168.2.5	0x4af9	No error (0)	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		3.235.201.212	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.755728006 CEST	1.1.1.1	192.168.2.5	0x4af9	No error (0)	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		23.21.63.192	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.758527994 CEST	1.1.1.1	192.168.2.5	0x3ecd	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.759959936 CEST	1.1.1.1	192.168.2.5	0x88a9	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.759959936 CEST	1.1.1.1	192.168.2.5	0x88a9	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.759959936 CEST	1.1.1.1	192.168.2.5	0x88a9	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:24.760953903 CEST	1.1.1.1	192.168.2.5	0xb2b2	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.760953903 CEST	1.1.1.1	192.168.2.5	0xb2b2	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.763381004 CEST	1.1.1.1	192.168.2.5	0xbfae	No error (0)	5093.global.siteimproveanalytics.io	us-east-1.global.siteimproveanalytics.io		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:24.763381004 CEST	1.1.1.1	192.168.2.5	0xbfae	No error (0)	us-east-1.global.siteimproveanalytics.io	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.295629978 CEST	1.1.1.1	192.168.2.5	0x42a8	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 10, 2024 06:53:25.296248913 CEST	1.1.1.1	192.168.2.5	0x3f06	No error (0)	googleads.g.doubleclick.net		142.250.190.98	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.417747974 CEST	1.1.1.1	192.168.2.5	0x1a35	No error (0)	adservice.google.com		142.250.191.226	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.418344975 CEST	1.1.1.1	192.168.2.5	0x32d8	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 10, 2024 06:53:25.447686911 CEST	1.1.1.1	192.168.2.5	0x58fd	No error (0)	451-rqs-232.mktoresp.com		192.28.147.68	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.617897034 CEST	1.1.1.1	192.168.2.5	0x8375	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.617897034 CEST	1.1.1.1	192.168.2.5	0x8375	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.617897034 CEST	1.1.1.1	192.168.2.5	0x8375	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.618158102 CEST	1.1.1.1	192.168.2.5	0xe65e	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.618158102 CEST	1.1.1.1	192.168.2.5	0xe65e	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.686671972 CEST	1.1.1.1	192.168.2.5	0x907a	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.686671972 CEST	1.1.1.1	192.168.2.5	0x907a	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.686671972 CEST	1.1.1.1	192.168.2.5	0x907a	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:25.688014030 CEST	1.1.1.1	192.168.2.5	0x9426	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:25.688014030 CEST	1.1.1.1	192.168.2.5	0x9426	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.575541019 CEST	1.1.1.1	192.168.2.5	0x51f7	No error (0)	www.google.com		172.217.2.36	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.575560093 CEST	1.1.1.1	192.168.2.5	0x3626	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.575865030 CEST	1.1.1.1	192.168.2.5	0x862b	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:26.576970100 CEST	1.1.1.1	192.168.2.5	0xa608	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.576970100 CEST	1.1.1.1	192.168.2.5	0xa608	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:26.576970100 CEST	1.1.1.1	192.168.2.5	0xa608	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.032854080 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	mid.rkdms.com		3.227.199.28	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.032854080 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	mid.rkdms.com		35.170.94.57	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048358917 CEST	1.1.1.1	192.168.2.5	0x77ab	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.048940897 CEST	1.1.1.1	192.168.2.5	0xd132	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.089057922 CEST	1.1.1.1	192.168.2.5	0xdeb3	No error (0)	onlinebanking.usbank.com	onlinebanking.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.089718103 CEST	1.1.1.1	192.168.2.5	0xc45b	No error (0)	onlinebanking.usbank.com	onlinebanking.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.090383053 CEST	1.1.1.1	192.168.2.5	0xbc40	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.090383053 CEST	1.1.1.1	192.168.2.5	0xbc40	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.090383053 CEST	1.1.1.1	192.168.2.5	0xbc40	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.090383053 CEST	1.1.1.1	192.168.2.5	0xbc40	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.102248907 CEST	1.1.1.1	192.168.2.5	0x515c	No error (0)	5093.global.siteimproveanalytics.io	us-east-1.global.siteimproveanalytics.io		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.102248907 CEST	1.1.1.1	192.168.2.5	0x515c	No error (0)	us-east-1.global.siteimproveanalytics.io	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.102248907 CEST	1.1.1.1	192.168.2.5	0x515c	No error (0)	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		23.21.63.192	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.102248907 CEST	1.1.1.1	192.168.2.5	0x515c	No error (0)	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		3.235.201.212	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:27.115331888 CEST	1.1.1.1	192.168.2.5	0x358c	No error (0)	5093.global.siteimproveanalytics.io	us-east-1.global.siteimproveanalytics.io		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:27.115331888 CEST	1.1.1.1	192.168.2.5	0x358c	No error (0)	us-east-1.global.siteimproveanalytics.io	ana-collector-alb-eu-iron-657499614.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.171426058 CEST	1.1.1.1	192.168.2.5	0x95cc	No error (0)	adservice.google.com		142.250.190.34	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.172015905 CEST	1.1.1.1	192.168.2.5	0x5576	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 10, 2024 06:53:28.172858000 CEST	1.1.1.1	192.168.2.5	0x6cda	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.175148964 CEST	1.1.1.1	192.168.2.5	0xc512	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.333209038 CEST	1.1.1.1	192.168.2.5	0xca43	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.333209038 CEST	1.1.1.1	192.168.2.5	0xca43	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.333209038 CEST	1.1.1.1	192.168.2.5	0xca43	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.333209038 CEST	1.1.1.1	192.168.2.5	0xca43	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.334789038 CEST	1.1.1.1	192.168.2.5	0x8d9	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334789038 CEST	1.1.1.1	192.168.2.5	0x8d9	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334789038 CEST	1.1.1.1	192.168.2.5	0x8d9	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.334817886 CEST	1.1.1.1	192.168.2.5	0x480a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.336756945 CEST	1.1.1.1	192.168.2.5	0x19aa	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.336756945 CEST	1.1.1.1	192.168.2.5	0x19aa	No error (0)	glance.net		52.5.162.211	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.336756945 CEST	1.1.1.1	192.168.2.5	0x19aa	No error (0)	glance.net		23.20.127.68	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.336756945 CEST	1.1.1.1	192.168.2.5	0x19aa	No error (0)	glance.net		3.230.23.149	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.336756945 CEST	1.1.1.1	192.168.2.5	0x19aa	No error (0)	glance.net		3.218.95.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:28.337455034 CEST	1.1.1.1	192.168.2.5	0xdae2	No error (0)	zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.337455034 CEST	1.1.1.1	192.168.2.5	0xdae2	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.339241982 CEST	1.1.1.1	192.168.2.5	0xf971	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.340854883 CEST	1.1.1.1	192.168.2.5	0xc461	No error (0)	zn_6vxkyqywaf9f1t7-usbank.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:28.340854883 CEST	1.1.1.1	192.168.2.5	0xc461	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.132.213.129	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		35.239.64.48	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.29.182.184	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.30.222.155	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.31.195.231	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.72.187.34	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.134.7.162	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.097696066 CEST	1.1.1.1	192.168.2.5	0x3203	No error (0)	ingest.quantummetric.com		34.29.92.19	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.551548958 CEST	1.1.1.1	192.168.2.5	0xc852	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:29.551548958 CEST	1.1.1.1	192.168.2.5	0xc852	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:29.551722050 CEST	1.1.1.1	192.168.2.5	0x4f63	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:29.551722050 CEST	1.1.1.1	192.168.2.5	0x4f63	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:29.863708019 CEST	1.1.1.1	192.168.2.5	0xdbce	No error (0)	usbank-sync.quantummetric.com		34.135.80.45	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.863708019 CEST	1.1.1.1	192.168.2.5	0xdbce	No error (0)	usbank-sync.quantummetric.com		35.238.24.177	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.863708019 CEST	1.1.1.1	192.168.2.5	0xdbce	No error (0)	usbank-sync.quantummetric.com		34.27.58.117	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:29.863708019 CEST	1.1.1.1	192.168.2.5	0xdbce	No error (0)	usbank-sync.quantummetric.com		35.226.68.60	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.264739037 CEST	1.1.1.1	192.168.2.5	0x218	No error (0)	www.google.com		142.250.190.36	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.264854908 CEST	1.1.1.1	192.168.2.5	0xba41	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.295145035 CEST	1.1.1.1	192.168.2.5	0xd0c0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.296159029 CEST	1.1.1.1	192.168.2.5	0x2b28	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.296159029 CEST	1.1.1.1	192.168.2.5	0x2b28	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.296159029 CEST	1.1.1.1	192.168.2.5	0x2b28	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.467854977 CEST	1.1.1.1	192.168.2.5	0xe7cf	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.471359968 CEST	1.1.1.1	192.168.2.5	0x37c0	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.472862005 CEST	1.1.1.1	192.168.2.5	0x78a1	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.472862005 CEST	1.1.1.1	192.168.2.5	0x78a1	No error (0)	glance.net		52.5.162.211	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.472862005 CEST	1.1.1.1	192.168.2.5	0x78a1	No error (0)	glance.net		23.20.127.68	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.472862005 CEST	1.1.1.1	192.168.2.5	0x78a1	No error (0)	glance.net		3.230.23.149	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.472862005 CEST	1.1.1.1	192.168.2.5	0x78a1	No error (0)	glance.net		3.218.95.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473025084 CEST	1.1.1.1	192.168.2.5	0xe95c	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		34.122.199.206	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		23.251.152.185	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		34.70.212.173	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		34.30.67.48	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		34.136.205.139	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		35.193.17.96	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		34.70.83.251	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:30.473332882 CEST	1.1.1.1	192.168.2.5	0x869e	No error (0)	ingest.quantummetric.com		104.198.247.169	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.783524036 CEST	1.1.1.1	192.168.2.5	0xfc7e	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:31.783912897 CEST	1.1.1.1	192.168.2.5	0x7229	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:31.784030914 CEST	1.1.1.1	192.168.2.5	0xde45	No error (0)	www.glance.net	glance.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:31.784030914 CEST	1.1.1.1	192.168.2.5	0xde45	No error (0)	glance.net		52.5.162.211	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.784030914 CEST	1.1.1.1	192.168.2.5	0xde45	No error (0)	glance.net		3.218.95.137	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.784030914 CEST	1.1.1.1	192.168.2.5	0xde45	No error (0)	glance.net		23.20.127.68	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.784030914 CEST	1.1.1.1	192.168.2.5	0xde45	No error (0)	glance.net		3.230.23.149	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.41.240.3	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.71.201.252	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.134.162.16	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.170.254.238	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		35.202.177.241	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		35.239.153.217	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.135.178.72	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785096884 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	ingest.quantummetric.com		34.134.85.232	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:31.785773039 CEST	1.1.1.1	192.168.2.5	0x274	No error (0)	content.usbank.com	content.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.092324972 CEST	1.1.1.1	192.168.2.5	0x7bb1	No error (0)	api.usbank.com	api.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.094736099 CEST	1.1.1.1	192.168.2.5	0x2cf5	No error (0)	api.usbank.com	api.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.756045103 CEST	1.1.1.1	192.168.2.5	0x68fc	No error (0)	usbank-sync.quantummetric.com		35.226.68.60	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.756045103 CEST	1.1.1.1	192.168.2.5	0x68fc	No error (0)	usbank-sync.quantummetric.com		35.238.24.177	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.756045103 CEST	1.1.1.1	192.168.2.5	0x68fc	No error (0)	usbank-sync.quantummetric.com		34.27.58.117	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.756045103 CEST	1.1.1.1	192.168.2.5	0x68fc	No error (0)	usbank-sync.quantummetric.com		34.135.80.45	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.808540106 CEST	1.1.1.1	192.168.2.5	0xdb7c	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.808540106 CEST	1.1.1.1	192.168.2.5	0xdb7c	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.809833050 CEST	1.1.1.1	192.168.2.5	0xea06	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.809833050 CEST	1.1.1.1	192.168.2.5	0xea06	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.898478985 CEST	1.1.1.1	192.168.2.5	0xa69a	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.899029016 CEST	1.1.1.1	192.168.2.5	0x39e3	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:35.899029016 CEST	1.1.1.1	192.168.2.5	0x39e3	No error (0)	wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com		44.238.162.224	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:35.899029016 CEST	1.1.1.1	192.168.2.5	0x39e3	No error (0)	wdpthird-pr-1c6ba7bb96976191.elb.us-west-2.amazonaws.com		52.42.97.191	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:36.186181068 CEST	1.1.1.1	192.168.2.5	0xd8d	No error (0)	fls.doubleclick.net		142.250.191.166	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:36.320246935 CEST	1.1.1.1	192.168.2.5	0x16d2	No error (0)	api.usbank.com	api.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:36.323446035 CEST	1.1.1.1	192.168.2.5	0xcbad	No error (0)	api.usbank.com	api.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		54.218.88.117	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		44.234.255.10	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		34.209.80.1	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		54.184.3.128	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		35.167.85.242	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		52.25.7.75	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		52.34.249.102	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639313936 CEST	1.1.1.1	192.168.2.5	0x932d	No error (0)	col.eum-appdynamics.com		54.69.9.206	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:38.639328957 CEST	1.1.1.1	192.168.2.5	0xe52f	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:40.582144022 CEST	1.1.1.1	192.168.2.5	0x256e	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		52.26.29.98	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		35.80.208.41	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		35.167.85.242	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		35.163.101.91	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		54.218.88.117	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		34.210.47.243	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		35.165.241.119	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:40.582207918 CEST	1.1.1.1	192.168.2.5	0x3cfb	No error (0)	col.eum-appdynamics.com		34.208.204.230	A (IP address)	IN (0x0001)	false
May 10, 2024 06:53:47.887021065 CEST	1.1.1.1	192.168.2.5	0xb258	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:18.654755116 CEST	1.1.1.1	192.168.2.5	0x144	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.29.92.19	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.72.187.34	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.134.7.162	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.31.195.231	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		35.239.64.48	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.29.182.184	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.30.222.155	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:29.233542919 CEST	1.1.1.1	192.168.2.5	0xaf06	No error (0)	ingest.quantummetric.com		34.132.213.129	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:34.083776951 CEST	1.1.1.1	192.168.2.5	0xa8a	No error (0)	res.cisco.com		52.200.169.160	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:34.083776951 CEST	1.1.1.1	192.168.2.5	0xa8a	No error (0)	res.cisco.com		18.233.198.142	A (IP address)	IN (0x0001)	false
May 10, 2024 06:54:34.083776951 CEST	1.1.1.1	192.168.2.5	0xa8a	No error (0)	res.cisco.com		54.160.50.221	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:07.195519924 CEST	1.1.1.1	192.168.2.5	0xbdcd	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		34.70.212.173	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		23.251.152.185	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		34.70.83.251	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		34.122.199.206	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		34.136.205.139	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		35.193.17.96	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		34.30.67.48	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.808645964 CEST	1.1.1.1	192.168.2.5	0x809	No error (0)	ingest.quantummetric.com		104.198.247.169	A (IP address)	IN (0x0001)	false
May 10, 2024 06:55:29.875065088 CEST	1.1.1.1	192.168.2.5	0xbef7	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

static.cres-aws.com

res.cisco.com

https:

tags.tiqcdn.com

cdn.appdynamics.com

dpm.demdex.net

smetrics.usbank.com

usbank.demdex.net

usbank.tt.omtrdc.net

562-ct.c3tag.com

www.glancecdn.net

connect.facebook.net

di.rlcdn.com

d.agkn.com

storage.glancecdn.net

idsync.rlcdn.com

cdn.quantummetric.com

js.adsrvr.org

cm.g.doubleclick.net

static.ads-twitter.com

img.c3tag.com

siteimproveanalytics.com

analytics.twitter.com

t.co

6219543.fls.doubleclick.net

td.doubleclick.net

ad.doubleclick.net

adobedc.demdex.net

sc-static.net

s.pinimg.com

match.adsrvr.org

5093.global.siteimproveanalytics.io

googleads.g.doubleclick.net

adservice.google.com

tr.snapchat.com

451-rqs-232.mktoresp.com

www.google.com

ct.pinterest.com

mid.rkdms.com

insight.adsrvr.org

www.glance.net

mpsnare.iesnare.com

fls.doubleclick.net

pdx-col.eum-appdynamics.com

fs.microsoft.com

slscr.update.microsoft.com

ingest.quantummetric.com

usbank-sync.quantummetric.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	18.233.198.142	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 10, 2024 06:52:31.590595007 CEST	477	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 10, 2024 06:52:31.718955040 CEST	483	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Fri, 10 May 2024 04:52:31 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
May 10, 2024 06:52:32.276565075 CEST	491	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 10, 2024 06:52:32.404983044 CEST	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
May 10, 2024 06:53:17.406208038 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 10, 2024 06:54:02.537062883 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 10, 2024 06:54:47.678173065 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	18.233.198.142	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 10, 2024 06:52:31.593936920 CEST	12890	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22%2Eusbank%2Ecom%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27dXNiZ2xvYmFsZmVlc2VydmljZXM0MDBAdXNiYW5rLmNvbQ%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27bSJmnRG2P%2BqoVo9UIGhJMQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1715271930433%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,8429%5D,%27Body-1715271930433%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%2714228528%2Epdf%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B8429,8 [TRUNCATED] Data Raw: Data Ascii:
May 10, 2024 06:52:31.724862099 CEST	2578	OUT	Data Raw: 77 79 30 4a 56 71 52 57 6f 68 6b 79 25 32 46 67 7a 30 63 31 47 4f 58 65 71 54 64 6e 55 4e 42 6c 66 75 61 75 25 32 42 70 76 79 37 5a 49 4f 6c 4c 31 54 52 78 62 46 65 64 56 72 51 35 70 65 73 25 32 46 5a 44 4c 30 47 39 61 69 6d 57 5a 41 39 78 31 53 Data Ascii: wy0JVqRWohky%2Fgz0c1GOXeqTdnUNBlfuau%2Bpvy7ZIOlL1TRxbFedVrQ5pes%2FZDL0G9aimWZA9x1S8o9nJGRMKObUvx6FUg87DqQiEIOa6HuXcnreZVzJizuM0iclxYEUotRLDxmajqfsXSiNh%2FJmCYp348kNgv%2FIQKv2E9pJFrJ9ZC9%2BZMClfyfZKtQJmiSt%2FjcXJ2iyOcK3sH0mGgLl6y4SBLstFfRZ%2FaV
May 10, 2024 06:52:31.724900007 CEST	2578	OUT	Data Raw: 54 66 37 6f 68 59 57 25 32 42 74 31 75 58 48 48 63 66 33 71 48 7a 43 4e 6c 47 43 70 49 7a 77 6e 30 70 48 7a 42 43 7a 43 6e 4b 74 64 65 55 4c 6d 43 34 57 65 69 74 38 38 6a 6a 39 67 61 50 6a 41 4e 55 61 39 25 32 46 62 73 38 4f 35 6c 32 63 68 25 32 Data Ascii: Tf7ohYW%2Bt1uXHHcf3qHzCNlGCpIzwn0pHzBCzCnKtdeULmC4Weit88jj9gaPjANUa9%2Fbs8O5l2ch%2BxmcPzEdMcPa0KmHYSqkAR241%2F5HpI1ZOHvZAnkhz3lkkJMXGv8mSRvMxlkkpoU5HvwMGOAFNOuBBcCsHTVr9Nk3WyYpnJ387JXXHInrRObIc%2B2kplaNbd4qfLujEmQBuCWYGE6V5ldFV0jDWQ7Jm9zS4gH3j
May 10, 2024 06:52:31.725001097 CEST	7734	OUT	Data Raw: 65 74 77 57 31 69 51 46 53 61 76 57 62 32 48 76 31 25 32 46 71 75 68 6f 45 6e 68 38 35 67 72 37 6f 78 51 6a 57 53 52 39 37 63 57 47 25 32 46 52 63 57 48 4b 67 44 5a 4c 33 45 61 4f 6e 73 56 36 32 58 37 52 4c 33 6c 42 6e 52 64 76 48 54 42 51 52 64 Data Ascii: etwW1iQFSavWb2Hv1%2FquhoEnh85gr7oxQjWSR97cWG%2FRcWHKgDZL3EaOnsV62X7RL3lBnRdvHTBQRdnQdlA075Nn1mGV1xevLzNsBYda1nuoc4BOt7nsFN1QXkyA7uq6yfrnU4ho38mzNZwm9TZlVti0Qzkw6bm5BQTA6Xt3G7dw57T4sTdDRFqDWvOjYTyRKiTBTxFom%2FRlb4LriS%2FXPc%2BS8Xkrdhmgpyx%2BxTN
May 10, 2024 06:52:31.725054026 CEST	12890	OUT	Data Raw: 56 35 71 7a 6d 66 34 58 72 79 45 30 31 5a 37 6e 59 73 4e 69 78 49 44 33 52 72 43 67 35 36 64 6e 4e 4b 65 42 65 4b 33 61 31 73 65 25 32 46 79 38 72 49 47 66 5a 6c 6c 4b 42 63 52 36 73 6f 64 35 47 44 72 47 25 32 46 4b 57 33 46 48 55 53 44 47 4b 35 Data Ascii: V5qzmf4XryE01Z7nYsNixID3RrCg56dnNKeBeK3a1se%2Fy8rIGfZllKBcR6sod5GDrG%2FKW3FHUSDGK56SeWSFfyYfP7KgbgZIzD0zSJCh13p03Nmn8cnQZ5zq0JRRfvjTm1YWnH40U%2F%2BRM%2FD8nr06z8qklg2rJKEwXCS6IxFP2GkjGkkzrZ6IUxKyj6XVgy%2FF8wJBBIWcmXNQZJDSLWXXfl8HlbM0wtd4A73hRCL
May 10, 2024 06:52:31.855834007 CEST	2578	OUT	Data Raw: 69 74 4c 7a 49 41 46 33 32 25 32 42 72 45 25 32 46 4d 53 4a 72 33 39 51 34 5a 42 41 6d 6b 74 36 79 74 6c 46 33 76 38 5a 4f 43 4f 50 44 4b 38 46 4c 4c 38 37 6d 44 48 57 77 25 32 42 52 50 77 37 57 53 4e 70 68 51 61 68 57 4e 56 55 4c 7a 31 76 76 38 Data Ascii: itLzIAF32%2BrE%2FMSJr39Q4ZBAmkt6ytlF3v8ZOCOPDK8FLL87mDHWw%2BRPw7WSNphQahWNVULz1vv8HIX6NtzJv4Ei9S%2Fgr7VwdtMVd5%2BjT8kIPAkZpkIcyAMz6%2FuDGg2IwO5hyIbritHvWe0ZR0udmnepq65HWJpAWx61xcIBJLzoFKah4v1z7y9ISZeVMQkxImRo7icPkeWt%2BAiFh1nvDl6S2S0FgcCLj9Wz%
May 10, 2024 06:52:31.855940104 CEST	302	IN	HTTP/1.1 414 Request-URI Too Large Server: awselb/2.0 Date: Fri, 10 May 2024 04:52:31 GMT Content-Type: text/html Content-Length: 142 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>414 Request-URI Too Large</title></head><body><center><h1>414 Request-URI Too Large</h1></center></body></html>
May 10, 2024 06:52:31.855993032 CEST	5156	OUT	Data Raw: 54 6b 4a 4b 75 4b 6a 25 32 46 6e 6d 70 4f 4f 65 62 67 47 6d 70 63 4a 44 4d 50 39 76 7a 63 4d 62 37 57 76 32 53 37 43 44 52 7a 4b 4b 42 38 36 38 49 55 44 4e 34 6d 39 53 58 74 70 4f 6f 76 69 54 25 32 46 43 43 57 72 35 50 6c 76 6e 31 35 53 45 74 5a Data Ascii: TkJKuKj%2FnmpOOebgGmpcJDMP9vzcMb7Wv2S7CDRzKKB868IUDN4m9SXtpOoviT%2FCCWr5Plvn15SEtZr5ZjM%2BwQpCoCaErQzIZFS4UtnPVrrc977VoTYaUmpMHLh1%2BSxB%2FyJKyrOSIDh7Ze%2B4S%2Bz8KqJo0GrY1I2f94RPbScgA5BAZzDi13TzniyiR%2B8keJEGsw%2F5dPFDGGUMBlrmI3%2FwoTjWslXQbvo
May 10, 2024 06:52:31.856044054 CEST	10312	OUT	Data Raw: 43 41 63 64 45 71 37 31 69 6d 68 34 59 25 32 42 79 6d 37 65 54 43 4e 35 31 67 69 59 30 66 25 32 42 6a 53 48 62 76 65 66 36 4e 31 42 62 58 79 53 36 46 4c 4e 66 72 69 59 6f 74 37 6b 49 69 46 6c 77 4d 79 6a 56 41 73 62 7a 64 79 6b 52 4e 58 49 42 35 Data Ascii: CAcdEq71imh4Y%2Bym7eTCN51giY0f%2BjSHbvef6N1BbXyS6FLNfriYot7kIiFlwMyjVAsbzdykRNXIB5EVkbTdM8xLaQxkwwVJRrvnPJDVJoGh3qw2WCdQm%2FKVU%2FuLxuV2ouDjZLXvr1SzwfJZQhvnM5T60mOvxVBmdQL1356Kr6Qyp5SIiWvN%2BIQiHFD9sF%2B2oxngh1P739i7dryDp1tgDB2DfyfGPhWXJCMkuEC
May 10, 2024 06:52:31.856067896 CEST	7734	OUT	Data Raw: 33 6f 39 49 37 37 4c 76 74 49 38 6b 53 49 6c 57 47 6e 74 79 6d 61 6e 62 32 36 49 6d 4d 25 32 42 59 41 38 75 39 33 59 42 67 4a 71 4e 4d 70 33 57 6b 44 31 68 4d 7a 5a 7a 6b 65 38 6e 38 35 30 37 43 35 25 32 42 36 25 32 42 62 35 35 4b 4b 6c 25 32 46 Data Ascii: 3o9I77LvtI8kSIlWGntymanb26ImM%2BYA8u93YBgJqNMp3WkD1hMzZzke8n8507C5%2B6%2Bb55KKl%2FEFJZGMmSM6UU%2FeOclBUHkch2crfSgOy%2FRY%2F1ubH2BQA4xGKVfEnlTfC0Gd%2B%2B9SAQuDwqXATohlzbWNFfLlKEZjl%2BhxQshFhYkPlaOJrgkKYJKbdeAAfyfNgn4REUnGDKCftU%2B5oNK3BVxU67eRJ
May 10, 2024 06:52:31.856128931 CEST	5156	OUT	Data Raw: 71 36 68 45 46 75 64 33 36 78 6e 58 41 25 32 42 55 52 70 4e 4c 48 79 69 32 63 73 58 41 61 62 34 31 59 73 73 53 48 59 42 76 6b 79 75 38 77 52 76 25 32 46 32 33 69 34 54 77 70 38 79 73 6d 76 69 67 74 64 65 4a 62 44 49 32 47 7a 37 42 68 71 33 34 25 Data Ascii: q6hEFud36xnXA%2BURpNLHyi2csXAab41YssSHYBvkyu8wRv%2F23i4Twp8ysmvigtdeJbDI2Gz7Bhq34%2FwvKt8lDsKqxTJq6fdo64ktXfdVMAjGntc9JqPsY%2FbEn7EDKWir54NzCsiGZagODoE73UtWF8QuyatbGP6O8xR6Is9DIcrShnXq0XQAiqCqjPPWTx2S7dqRz6nIMQSo4RISdVemeDWZ08OYdMcwfxQ%2F76B%2
May 10, 2024 06:52:31.856256962 CEST	20624	OUT	Data Raw: 6e 7a 78 37 36 50 66 63 49 69 78 42 4e 76 54 6d 55 67 6f 43 7a 34 51 4b 70 51 25 32 46 49 70 52 79 42 52 75 50 34 7a 25 32 46 52 25 32 42 4d 70 57 61 78 5a 35 5a 50 68 54 45 79 38 4a 44 49 43 43 4b 66 64 4d 34 64 7a 78 74 75 52 59 58 45 4b 6d 54 Data Ascii: nzx76PfcIixBNvTmUgoCz4QKpQ%2FIpRyBRuP4z%2FR%2BMpWaxZ5ZPhTEy8JDICCKfdM4dzxtuRYXEKmTqToPRyLsQvXmtXvw6XreCMJ1rEOAPmWKmyQAF1pCiBFDNTngl9BlIoSMlvx6l3qxrRUbAhaRPXAvyBFvdXAYPSEOQCFd20k8bUYnagBTOkU51PP1JZ95Kxb%2FYAoovK0QofRaW%2FkafQfWCqCNiD4NIMAQncMFm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	18.233.198.142	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 10, 2024 06:52:32.276856899 CEST	487	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 10, 2024 06:52:32.407872915 CEST	493	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
May 10, 2024 06:53:17.421160936 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 10, 2024 06:54:02.552371025 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 10, 2024 06:54:47.694217920 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49708	104.17.24.14	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:31 UTC	542	OUT	GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:31 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:31 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-3a76" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 98720 Expires: Wed, 30 Apr 2025 04:52:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2ve%2FE9Iz3QQX9bn93JChUlJ%2BOcB7%2FlEdOhYFGv8GgZf3sdvvUin5hX%2BSg9RJNoLMhb8mDjVI8FxAV1SZ7%2Fd3xLv5uGmD2vckKZFzDDwF3t2bXVkxNuSWnT8tKkxXUJ6ZVL0cro6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 881752031e8b2303-ORD alt-svc: h3=":443"; ma=86400
2024-05-10 04:52:31 UTC	422	IN	Data Raw: 33 61 37 36 0d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: 3a76.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 Data Ascii: :ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-conta
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 2d 2d 61 62 6f 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 62 65 6c 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 73 65 61 72 63 68 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e Data Ascii: dropdown--above{border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-container--open .select2-dropdown--below{border-top:none;border-top-left-radius:0;border-top-right-radius:0}.select2-search--dropdown{display:block;paddin
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c Data Ascii: -weight:bold}.select2-container--default .select2-selection--single .select2-selection__placeholder{color:#999}.select2-container--default .select2-selection--single .select2-selection__arrow{height:26px;position:absolute;top:1px;right:1px;width:20px}.sel
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 Data Ascii: on__rendered{box-sizing:border-box;list-style:none;margin:0;padding:0 5px;width:100%}.select2-container--default .select2-selection--multiple .select2-selection__rendered li{list-style:none}.select2-container--default .select2-selection--multiple .select2
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 2d 2d 66 6f 63 75 73 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e Data Ascii: tainer--focus .select2-selection--multiple{border:solid black 1px;outline:0}.select2-container--default.select2-container--disabled .select2-selection--multiple{background-color:#eee;cursor:default}.select2-container--default.select2-container--disabled .
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e Data Ascii: tainer--default .select2-results__option[aria-selected=true]{background-color:#ddd}.select2-container--default .select2-results__option .select2-results__option{padding-left:1em}.select2-container--default .select2-results__option .select2-results__option
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 67 72 6f 75 70 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 35 30 Data Ascii: efault .select2-results__group{cursor:default;display:block;padding:6px}.select2-container--classic .select2-selection--single{background-color:#f7f7f7;border:1px solid #aaa;border-radius:4px;outline:0;background-image:-webkit-linear-gradient(top, #fff 50
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 43 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f Data Ascii: background-image:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCCC', GradientType=0)}.select2-container--classic .select2-selectio
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b Data Ascii: left-radius:0;border-top-right-radius:0;background-image:-webkit-linear-gradient(top, #fff 0%, #eee 50%);background-image:-o-linear-gradient(top, #fff 0%, #eee 50%);background-image:linear-gradient(to bottom, #fff 0%, #eee 50%);background-repeat:repeat-x;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49707	104.17.24.14	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:31 UTC	526	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:31 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 304340 Expires: Wed, 30 Apr 2025 04:52:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHiGnS%2Fa6265rJn%2F3tC1aymNZnq6%2BWTdzoF3P22NXyGgZFBNwjIXuH1i4IIZtKiZ5P93sRn4AeTexwTBlivsMJP6al0Typ25NtoWlEKbvapmgMinR5YidQVa4CHo72EUfOz9ehTp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 881752031fe961d1-ORD alt-svc: h3=":443"; ma=86400
2024-05-10 04:52:31 UTC	410	IN	Data Raw: 33 39 39 39 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 3999/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d 2e 72 Data Ascii: ar e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].r
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d Data Ascii: rn e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t=m
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: ("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return nul
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 74 Data Ascii: ,n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=[t
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d 2c 69 Data Ascii: >",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)},i
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 24 72 Data Ascii: peMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.$r
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 28 65 Data Ascii: .selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")(e
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c 2e 68 Data Ascii: ppend(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l.h
2024-05-10 04:52:31 UTC	1369	IN	Data Raw: 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d Data Ascii: (n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49712	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:31 UTC	506	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:31 UTC	534	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125526 Connection: close Date: Thu, 09 May 2024 14:18:33 GMT Last-Modified: Fri, 06 Oct 2023 15:16:52 GMT ETag: "1444470212c91839f71d8f970716c08e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 70f841ede092a93ba19fe490030c1712.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: 8seR-55s9PAUsPjfTPdQJgf8RkKLSL6nA6Ynd58ufBW-VhrMpsElSA== Age: 52439 Vary: Origin
2024-05-10 04:52:31 UTC	16384	IN	Data Raw: 0a 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 20 20 7d 0a 20 20 0a 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype"); } @font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inte
2024-05-10 04:52:31 UTC	16384	IN	Data Raw: 67 6e 3a 20 74 6f 70 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2e 6c 69 73 74 44 69 76 69 64 65 72 43 65 6c 6c 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 20 30 70 78 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 4c 69 6e 6b 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e Data Ascii: gn: top; border-left: 1px solid #ffffff;}.listDividerCell { border-bottom: 1px solid #d9d9d9; margin: 1px 0px;}.listCellText { color: #555555; font-size: 8pt;}.listCellLinkText { color: #003366; font-size: 8pt; text-decoration: un
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 6e 67 20 7b 0a 7d 0a 0a 2e 64 65 66 61 75 6c 74 45 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 20 2e 65 72 72 6f 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 65 36 30 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 3b 0a 7d 0a 0a 23 70 61 73 73 77 6f 72 64 43 68 61 6c 6c 65 6e 67 65 54 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 63 68 61 6c 6c 65 6e 67 65 51 75 65 73 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 70 78 20 31 30 70 78 20 35 70 Data Ascii: ng {}.defaultErrorContainer .errorText { color: #e60000; font-size: 9pt;}#passwordChallengeTableContainer { margin-top: 10px;}.challengeQuestionContainer { color: #555555; font-size: 8pt; font-weight: normal; margin: 0px 0px 10px 5p
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 77 6f 72 64 2d 65 72 72 6f 72 2d 62 6f 78 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 36 36 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 38 63 39 36 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 64 39 64 63 3b 0a 7d 0a 23 74 69 63 6b 2d 6d 61 72 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 63 30 34 61 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 76 77 3b 0a 7d 0a 23 63 6c 6f 73 65 2d 6d 61 72 6b 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 65 72 3b 0a 7d 0a 40 6d 65 Data Ascii: word-error-box { box-sizing: border-box; height: 50px; width: 665px; border: 1px solid #ff8c96; border-radius: 3px; background-color: #ffd9dc;}#tick-mark { color: #6cc04a; padding-right: 1vw;}#close-mark { font-weight: lighter;}@me
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 31 34 34 2c 20 32 33 32 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 34 3a 20 72 67 62 61 28 31 37 37 2c 20 31 36 38 2c 20 32 34 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 33 3a 20 72 67 62 61 28 32 30 30 2c 20 31 39 33 2c 20 32 34 35 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 32 3a 20 72 67 62 61 28 32 32 34 2c 20 32 32 30 2c 20 32 35 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 31 3a 20 72 67 62 61 28 32 34 36 2c 20 32 34 35 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 31 30 3a 20 72 67 62 61 28 31 35 38 2c 20 34 34 2c 20 32 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 39 3a 20 72 67 62 61 28 31 37 36 Data Ascii: 144, 232, 1); --color-purple-4: rgba(177, 168, 240, 1); --color-purple-3: rgba(200, 193, 245, 1); --color-purple-2: rgba(224, 220, 250, 1); --color-purple-1: rgba(246, 245, 255, 1); --color-red-10: rgba(158, 44, 27, 1); --color-red-9: rgba(176
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 Data Ascii: s-button-color-border-disabled: var( --color-admin-interact-border-strong-disabled ); --mds-button-color-background: var(--color-admin-interact-background-strong); --mds-button-color-background-hover: var( --color-admin-interact-background-s
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 2d 6d 6f 7a 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 77 69 64 74 68 3a 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 34 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 63 6f 6e 74 61 69 6e 2d 70 61 64 64 69 6e 67 2d 78 73 29 20 76 61 72 28 2d 2d 73 69 7a 65 2d 63 6f 6e 74 61 69 6e 2d 70 61 64 64 69 6e 67 2d 73 6d 29 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 33 78 73 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 68 65 69 67 68 74 2d 6c Data Ascii: osition: absolute; width: -moz-max-content; width: max-content; min-width: 30px; max-width: 240px; padding: var(--size-contain-padding-xs) var(--size-contain-padding-sm); font-size: var(--size-font-3xs); line-height: var(--size-font-height-l
2024-05-10 04:52:32 UTC	4141	IN	Data Raw: 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 29 3b 0a 20 20 2d 2d 6d 64 73 2d 69 6e 70 75 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 39 29 3b 0a 20 20 2d 2d 6d 64 73 2d 69 6e 70 75 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 69 6e 70 75 74 2d 62 6f 72 64 65 72 2d 6d 65 64 69 75 6d 2d 68 6f 76 65 72 29 3b 0a 20 20 2d 2d 6d 64 73 2d 69 6e 70 75 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 66 6f 63 75 73 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 37 29 3b 0a 20 20 2d 2d 6d 64 73 2d 69 6e 70 75 74 2d 66 6f 6e 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 69 6e 70 75 74 2d 74 65 78 74 Data Ascii: : var(--color-neutral-1); --mds-input-border-color: var(--color-neutral-9); --mds-input-border-color-hover: var(--color-input-border-medium-hover); --mds-input-border-color-focus: var(--color-blue-7); --mds-input-font-color: var(--color-input-text
2024-05-10 04:52:32 UTC	6697	IN	Data Raw: 6c 64 2d 74 61 62 6c 65 2d 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 63 6f 6e 74 61 69 6e 2d 70 61 64 64 69 6e 67 2d 78 73 29 3b 0a 7d 0a 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2d 73 69 7a 65 2d 63 6f 6d 66 79 20 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2d 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 63 6f 6e 74 61 69 6e 2d 70 61 64 64 69 6e 67 2d 73 6d 29 3b 0a 7d 0a 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2d 73 69 7a 65 2d 63 6f 6d 66 79 20 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 74 61 62 6c 65 2d 74 64 20 7b 0a 20 20 70 61 64 64 69 Data Ascii: ld-table-td { padding: var(--size-contain-padding-xs);}.mds-rebuild-table.mds-rebuild-table-size-comfy .mds-rebuild-table-th { padding: var(--size-contain-padding-sm);}.mds-rebuild-table.mds-rebuild-table-size-comfy .mds-rebuild-table-td { paddi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	557	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-05-10 04:52:32 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	653	OUT	GET /websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	969	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: image/gif Content-Length: 2878 Connection: close Set-Cookie: AWSALB=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=4AA688B33423B17A9CAC2ABA0C91A643; Path=/websafe; Secure; HttpOnly Last-Modified: Tue, 03 May 2011 00:00:01 GMT ETag: "12fb3277c00-b3e" Server: unknown
2024-05-10 04:52:32 UTC	2878	IN	Data Raw: 47 49 46 38 39 61 f5 00 5a 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 Data Ascii: GIF89aZ3f3333f333ff3fffff3f3f3f3333f33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	560	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Thu, 09 May 2024 19:52:34 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6724fab41ae29c5407f260388efaa9b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: NKUYeepxM5zKjXl_qoHh1hBl-qwQLRnxZntN1J4N1To2tCZ52_fuBA== Age: 32399 Vary: Origin
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 79 36 c8 9a 9d 50 04 ee d0 4b 1a a2 6b 87 06 a0 63 6f 4b dc 8d 53 95 20 d2 7a 98 d5 b4 f6 c8 1b 80 b2 82 40 62 c8 e5 06 40 9a b9 d4 6d 48 c2 10 13 ae 19 35 71 86 53 95 9f bc 2c b7 20 2b 53 1b f1 f5 45 56 dd 0d 00 c3 8e c6 cd f4 30 ba da e4 da af 72 90 2b c0 4d aa a9 61 6b 2a a3 04 9d 9c b0 2d 27 67 2f 43 62 5b 04 e4 06 08 48 6d b0 09 0c 89 c8 24 00 9c 8d 28 04 a3 41 80 09 8c 00 00 00 0c ec 49 56 24 0a a9 44 54 d4 09 60 36 20 00 01 00 c0 50 00 30 10 c0 04 dc 0c cf 95 c2 01 3b f7 31 7c b0 2f a7 7b 67 44 55 78 eb 5d 7d 4c 88 85 bb 93 44 5a e1 4b 36 66 de a7 e0 83 6a 41 52 b1 8a a1 ed 7a d9 c9 40 04 ac 74 1e e6 12 4b b8 0e 43 79 2d e2 4c f7 76 08 d5 d9 90 df 72 72 c7 b4 07 5c bc 03 99 2e b7 49 60 89 c8 57 47 1a 8a 9a 19 f1 fc a6 85 00 00 00 10 cb 25 81 9b 34 Data Ascii: y6PKkcoKS z@b@mH5qS, +SEV0r+Mak*-'g/Cb[Hm$(AIV$DT`6 P0;1\|/{gDUx]}LDZK6fjARz@tKCy-Lvrr\.I`WG%4
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 19 a5 79 18 1c dc c9 c6 03 db 52 ea d3 6e c6 bc af 49 2d 2b 51 3b 3d 20 0f 3b dc 5f d4 ce 3b b3 ab 95 27 99 39 dd 24 cb 6c ea 82 d5 34 88 1e d7 d0 2b 0d 06 94 9b fd 32 be 93 e8 11 c9 10 f2 68 96 0d 1f 1b d0 4a 85 0e b5 92 df 00 d6 0e 9e 37 24 1c dc 74 9c 1d 75 a4 23 55 45 a9 69 40 46 6e 98 0a a6 99 a3 ce 0a aa 2a 3a d1 42 43 34 c8 b6 87 98 ea f7 b7 0c f4 ed a1 c5 3c d3 fb 63 c8 95 a9 5a ac 50 f3 5f 3a 4d c9 e9 4b 55 7d cc 2a ee eb 2e aa 4c d8 b2 bc db 73 d5 19 f1 d9 3b 4f 63 d5 dd c8 bf 65 41 f2 59 7f fa 69 fc 42 69 52 eb e8 95 cc f4 f3 46 95 b4 d6 5d 23 c0 ab 67 3b 64 d4 47 04 ad cb 41 ca f0 0b 72 56 73 c5 6f c0 d2 ab 8e fa 51 af 81 8c 6f 60 70 ea 67 c0 e7 92 3c 18 ee f8 eb 09 ab 7d c5 d1 f1 37 89 4e 3b 1a 9d 31 5d 54 f9 99 e0 fb ea b9 6f c4 f6 f8 12 4d Data Ascii: yRnI-+Q;= ;_;'9$l4+2hJ7$tu#UEi@Fn:BC4<cZP_:MKU}.Ls;OceAYiBiRF]#g;dGArVsoQo`pg<}7N;1]ToM
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 2a 5d 19 d3 7f 94 8b 66 38 c7 c7 84 21 d3 42 0c f8 7f e5 5e 67 af c9 f2 b3 c7 e1 ff 00 95 79 9e c7 27 ca cd 44 7c f7 2f b7 77 bb 72 79 f7 7b 5c 23 d2 e6 e6 db 66 a0 f2 dd 5b 2c 1e 8f 1f b7 56 a6 e9 32 a5 f6 bc 9d 7c 17 55 e2 87 a9 e6 d9 ee b7 81 15 a7 2d d3 66 54 ac e6 60 e8 d9 58 c9 c6 93 6f 05 85 74 d6 fc 95 d2 cc fa ca e8 8f 8e df 65 86 7d 7f 1b 9a a2 c4 68 00 05 40 21 88 08 b1 99 ab 21 90 6a b4 18 96 83 28 00 00 00 4c 62 60 67 62 0b b1 99 04 b1 d5 c3 13 0a ea 07 4c 03 40 98 ca 21 2c 1c bc cb 07 62 47 3f 2b 5d 48 39 38 79 6d 5a f7 07 ee 78 f9 31 78 0a d1 35 e9 39 ed ed ec b5 20 d9 7b 7a af 57 0d 9d 7c b4 fb 8d 57 25 96 2e a7 c5 1c 3f 46 d5 ca c1 4b 9e d5 70 f2 51 d6 f8 e9 7d 1e 4c 79 28 f8 f5 58 0d dc 7c 9a fa 59 a5 5d e9 a3 fa 8b c7 52 0e 5f a9 51 ee Data Ascii: *]f8!B^gy'D\|/wry{\#f[,V2\|U-fT`Xote}h@!!j(Lb`gbL@!,bG?+]H98ymZx1x59 {zW\|W%.?FKpQ}Ly(X\|Y]R_Q
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: b6 75 53 db 4a c9 9b e6 4b 4c fe 05 2f 77 64 a1 24 4e 6b 33 23 da f6 74 55 e3 5e 09 99 2a 6c e2 7f e6 65 7b 5e 58 e0 4e dd bf 36 74 59 7a 6a 8c f9 e3 fe 5a 95 cd c6 9a e3 e3 5d ed 6b 7e 66 3e f2 ae cf 8e bd ee 7a 4a 9e 9a 63 a3 33 e4 49 5d 59 af f8 d3 b7 c7 44 66 df f7 4f 87 97 ce f7 7b 8b dd e9 4f d3 08 e3 bd a5 c9 e9 5f 89 46 de ba db cd 98 72 70 55 60 e9 f6 8d 7c 63 b3 dd 39 7c 56 ff 00 3a fc 51 c7 c9 c2 fe ad bf d4 7a 5c 94 9e 2a db fa 5d 59 5c ae b5 bb 96 94 8d 4f 3c 57 81 6e 3b 26 c9 da d6 a7 af 67 5b 38 4e af e2 43 e1 5a c0 fb 7e 61 c3 ca 19 e8 5b db d6 de 04 7f 69 e2 3e d0 c7 10 ce bf ed 2c 2f ed 2c 5d 8b 8a ff 00 af cd ec fc 3f 53 d6 6e 38 ec fc 0e 2f 63 c0 e8 ec fc 8e fb d1 fd 2b 2e e7 39 77 da 3c df 6f ff 00 25 7c cd 39 1c 53 8d 78 59 fe 21 c3 Data Ascii: uSJKL/wd$Nk3#tU^le{^XN6tYzjZ]k~f>zJc3I]YDfO{O_FrpU`\|c9\|V:Qz\]Y\O<Wn;&g[8NCZ~a[i>,/,]?Sn8/c+.9w<o%\|9SxY!
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 71 90 eb ed 9b 3d 1e 3a d7 8f db 5d 5b a4 9e 43 e6 e4 b3 d5 fc 0f 53 d9 7b 7b f2 71 5e 8d 46 ee af c8 67 e5 35 3e eb 9e f6 e4 8a fa 53 4b 3d 74 3c d5 c5 6b da 2a 9d 99 ee df 8f 8e 29 7b 4d de d8 c6 98 39 b9 79 2d 3b 6b 1c 6b fc ba fd e5 6b 3e d1 cd 5f 65 b3 3c b6 54 f0 59 66 8a f5 e3 ff 00 8a bf f9 5b 5f b8 6b 81 fc d6 f4 af ea b3 fb 36 56 da d2 bb a3 72 fe ab 7a 6b f0 fd cc 2e 49 db 9e d6 77 9b 5d bb 25 f7 7f 03 9e 2c 9e eb 2d 7f 23 b6 2f cc b7 72 56 cb 8b a6 c5 f8 b5 a9 d2 b8 1c 6e a3 5c 95 f0 d5 79 a2 a7 17 f8 79 fc 7c 69 2c 69 a9 d7 2b 6c 78 0f 92 a9 4a 5e 44 3c e0 8e 7e bb 63 ee 35 a2 f1 35 f6 5f bb cc c7 9b e7 4f fa 11 b7 b2 f4 d1 be a1 96 dc 89 51 5a fd f0 bc 4e 6a 38 ac bc 22 f9 6c ee e1 98 d9 ce 3a 01 a7 1e bb 99 1c 9c 82 df 08 e7 73 77 0b 2c 09 Data Ascii: q=:][CS{{q^Fg5>SK=t<k*){M9y-;kkk>_e<TYf[_k6Vrzk.Iw]%,-#/rVn\yy\|i,i+lxJ^D<~c55_OQZNj8"l:sw,
2024-05-10 04:52:32 UTC	14808	IN	Data Raw: bd db 79 1b 5b 5b 55 ae 99 8d 3c a0 95 77 c6 b1 09 da 1c f8 75 af 9f 54 05 ee 74 70 9a 95 76 f6 f8 c7 f2 29 53 6d b7 57 e5 bb 9c bd 27 af f0 0b 59 b7 6b 56 b3 48 69 7d f9 6f c7 b1 34 b5 6c eb bf 45 2a 1a cf f9 7f 0d 40 5c 9c 69 db 63 9a 6d 53 dd 63 b7 e6 db 2a d2 e6 dd 3e 6f 2c 6b 8e ef 08 9e 5b c6 db 39 79 73 1f 97 8e de c5 f0 bb 6e 69 c5 e9 16 ae 3a fe e9 8f 88 11 f5 76 bd d5 98 6a 52 7d 5e 93 e6 8b 76 ba 6b 6f ae 3b ad 5c 67 e3 fa 98 2b 6e b4 7c 8a 5c 77 db 6d 7c 30 6b 5b 25 35 4d ca ca 71 d5 4c a4 ba a6 05 52 8a db b8 af 35 7f a6 b2 42 74 76 b2 6f d0 fe 5c 6b a2 7f e2 55 79 2c ef f5 17 fa 5f 6c fc b0 fc 3a a1 5f 92 9a a7 9e 3c 78 26 ed ea f8 30 3a 1c b4 e5 56 32 dd 5f 5e cf c1 99 dd 52 ff 00 ee da 6c 9b aa 9f ea f0 5e 5d d8 d5 ab 7b b4 a7 2b 73 6b b2 Data Ascii: y[[U<wuTtpv)SmW'YkVHi}o4lE@\icmSc>o,k[9ysni:vjR}^vko;\g+n\|\wm\|0k[%5MqLR5Btvo\kUy,_l:_<x&0:V2_^Rl^]{+sk
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 73 bb c1 7c bf 19 50 ba 19 da af 96 df 4d b8 dc ed 0d f5 6b d5 98 32 bd 1e d4 ac b6 c3 da d7 eb fa 9b 36 ad 31 a2 5f 75 9b cf c1 c4 01 13 bd 27 1e a5 f7 6c 78 d0 da c9 5e 15 77 38 e9 6e 8a bf c7 f8 19 73 35 c7 c8 dc e5 59 34 b5 c3 59 9f d1 05 38 ee ec f7 4c e2 6b a2 6f 54 bc ba 80 d5 6f c9 36 78 5c 99 fb b3 fe 33 aa 22 cd 71 de 6a dc 7a 67 ae 30 e5 78 76 fb 8a a7 13 ad a5 e6 95 b2 c2 ff 00 37 e8 16 bd 9a 6d e1 25 b7 c1 c6 00 dd 37 c8 ac a6 15 a1 a7 e6 f2 a3 b1 ce a1 3c ac bb 4e 14 4a cc fc 0d 54 d9 52 cb f6 da 2d e2 bc 7c 97 e0 5d 9b e4 c3 51 5c be cf 0f 0b ed a8 07 1b e4 dd 37 4b a4 c3 ed fb bf 29 26 de 96 f8 ec f6 ef b4 b4 b5 73 a2 ed e5 e0 d1 cd 59 b4 d9 af 56 e8 7e 1e 3f a4 1d 74 da 96 f5 9c a9 9f ba 25 f8 e9 e4 06 16 6e d4 76 e4 5f 2b c7 f5 3e 91 e3 Data Ascii: s\|PMk261_u'lx^w8ns5Y4Y8LkoTo6x\3"qjzg0xv7m%7<NJTR-\|]Q\7K)&sYV~?t%nv_+>
2024-05-10 04:52:33 UTC	9369	IN	Data Raw: af 97 89 2a 1a 8a 4d 9c 6a fe fd bf cc 55 ab 8d 63 f2 5f e5 5f c7 56 06 8d 6d 49 5b 36 7d 16 7f 1e ff 00 90 59 2a a9 8c ae 8b a7 97 ea 67 5a a9 f4 3c ff 00 53 fd 7f 80 95 ed 6b 47 57 d5 f5 f8 6b 1d 80 ad fb 5e f7 97 fd 3d 9f 82 ec 52 ae d6 e7 36 9e 9f a4 e8 84 ab 18 4b d5 dd e8 9f 65 f6 c1 49 6a ab 1f cc 0c f7 da 8a 2c a7 bf 58 fb 76 43 6d c4 fc cf 18 ed f6 e8 ba 0d b6 bd 34 97 3a e7 ef 5f 1e af ee 1d db dc 95 12 9a e1 cf 49 e9 fc c0 6a 34 d5 be fd 3f 9f e4 15 95 84 d3 bb cf 97 6d 7f 32 1f 1a ab 55 a6 27 2f fc ab ae ba 22 b7 fe d5 ab 5f 33 5a 7c 3f 20 05 47 5b 2f ea d7 1f c1 8d cd 74 53 77 85 fe 55 f1 fc 48 4d ad 13 b3 fb 43 7f c1 04 43 8a a6 de af c3 c6 3f 24 05 4e dc 25 ea 7e 3f 8c 74 f2 21 ac 6d d6 d3 0e 7f 0f e2 3f 56 ed b5 e9 d7 ed f8 02 7b 54 56 25 Data Ascii: MjUc__VmI[6}YgZ<SkGWk^=R6KeIj,XvCm4:_Ij4?m2U'/"_3Z\|? G[/tSwUHMCC?$N%~?t!m?V{TV%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	716	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
2024-05-10 04:52:47 UTC	805	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 May 2024 04:52:47 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=r0GAKfUwPFFo4Igs/MIbvQKJ5be7zVFEmhQTQj7OwmyEhSYLY/fmvbGLY0vLoiN3SmAtPR2CyDtrjurNU5eQivg+2HwDVPfOdwggIUqInSyOgP2RN/B2At4KwW7j; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=r0GAKfUwPFFo4Igs/MIbvQKJ5be7zVFEmhQTQj7OwmyEhSYLY/fmvbGLY0vLoiN3SmAtPR2CyDtrjurNU5eQivg+2HwDVPfOdwggIUqInSyOgP2RN/B2At4KwW7j; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	569	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	552	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Thu, 09 May 2024 17:13:48 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 29f2e2303c49e80d1f51a8ec9095e584.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: EV3WS1vkk_oVNWXbG8OSGjgn8xr7zdXHeH5I1z2bfqAAHswO1DFrHA== Age: 41925 Access-Control-Allow-Origin: *
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-05-10 04:52:32 UTC	10463	IN	Data Raw: 07 30 0a f8 02 26 01 a5 00 00 00 07 08 0c 07 3c 02 38 ff ff 00 f8 ff dc 07 30 0a a0 02 26 01 a5 00 00 00 07 06 7b 06 9c 02 00 ff ff 00 f8 ff dc 07 30 0a 74 02 26 01 a5 00 00 00 07 06 7f 07 66 02 a0 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8d 07 c0 ff e4 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 90 07 74 ff e4 ff ff 00 f8 fd b4 07 30 08 00 02 26 01 a5 00 00 00 07 06 89 07 34 ff e4 ff ff 00 f8 ff dc 07 30 0b a0 02 26 01 a5 00 00 00 07 08 bd 06 00 00 00 ff ff 00 f8 ff dc 07 30 0b 80 02 26 01 a5 00 00 00 07 08 5d 07 3c 02 8c ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8b 07 54 ff e4 ff ff 00 f8 ff dc 07 30 0b 0c 02 26 01 a5 00 00 00 07 06 80 07 44 02 24 ff ff 00 f8 ff dc 08 fc 0a a0 02 26 01 a6 00 00 00 07 06 64 01 Data Ascii: 0&<80&{0t&f0&0&t0&40&0&]<0&T0&D$&d
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 22 06 06 15 11 05 22 26 02 35 35 33 15 14 16 16 33 32 36 12 11 35 33 15 10 02 00 d8 ec 14 36 d9 b5 9d ec 83 ec bd a7 74 b7 69 04 f8 8e e9 89 ec 60 89 3b 7d d7 84 ec c0 fe b8 08 00 fd 10 77 8d 7d fe ff c6 d0 c0 b7 c9 62 bc 86 fc 64 1c 85 01 1a dd a0 a0 b4 b8 40 dc 01 f8 01 a8 d0 d0 fe 20 fd aa fe ea 00 01 00 d8 fe 00 05 a8 06 00 00 16 00 00 01 11 33 11 23 11 23 06 06 23 22 26 02 35 11 33 11 14 16 33 32 36 36 04 bc ec ec 14 36 d8 b6 9d ec 83 ec be a6 75 b6 69 02 64 03 9c f8 00 02 f0 77 8d 7d 01 02 c5 03 d0 fc 40 b7 c9 62 bc 00 01 00 78 fd c0 06 74 06 14 00 24 00 00 13 35 36 36 33 32 1e 02 15 11 14 16 33 32 36 36 35 11 33 11 23 11 23 06 06 23 22 26 02 35 11 34 26 23 22 06 78 1b 49 24 54 91 6e 3d bc a8 74 b7 69 ec ec 14 36 da b4 9e ec 82 80 60 15 28 05 40 c8 Data Ascii: ""&553326536ti`;}w}bd@ 3###"&5332666uidw}@bxt$56632326653###"&54&#"xI$Tn=ti6`(@
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: fd 58 07 b8 08 1c 02 26 03 e2 00 00 00 07 09 89 02 f8 00 00 00 01 00 a8 ff e4 07 b8 08 00 00 2a 00 00 13 10 12 37 35 21 35 21 11 06 06 02 15 14 12 04 33 32 36 36 12 35 34 02 26 27 11 21 15 21 15 16 12 11 14 02 02 04 23 22 24 02 02 a8 e6 c6 fe 54 02 d8 84 de 86 aa 01 2c c2 92 f3 b1 62 86 de 84 02 d8 fe 54 c6 e6 85 f2 fe b5 c6 c6 fe b5 f2 85 03 c8 01 23 01 a8 81 10 dc fe e8 38 e7 fe bf c0 d6 fe a6 cc 75 d1 01 16 a0 c0 01 41 e7 38 01 18 dc 10 7e fe 55 fe dd db fe 93 fe f6 92 92 01 0a 01 6d 00 01 00 80 00 00 06 c8 08 1c 00 20 00 00 21 11 01 26 26 23 22 06 07 27 36 36 33 32 16 17 01 01 36 36 33 32 16 17 07 26 26 23 22 06 07 01 11 03 28 fe 54 17 40 2d 12 29 09 34 30 50 30 63 96 43 01 38 01 3c 38 7f 81 30 50 30 34 09 26 15 2a 3f 17 fe 50 03 1e 03 aa 33 29 06 06 Data Ascii: X&75!5!326654&'!!#"$T,bT#8uA8~Um !&&#"'66326632&&#"(T@-)40P0cC8<80P04&?P3)
2024-05-10 04:52:32 UTC	4938	IN	Data Raw: 42 5a a4 80 4a 72 b2 60 50 46 6e 40 3b 65 40 3e 4e 30 10 40 22 84 aa 5c 80 c9 73 c4 b0 dc dc 01 48 fa 70 64 63 21 09 03 d4 09 13 56 b0 86 00 03 00 8c 00 00 07 b0 08 00 00 03 00 07 00 1f 00 00 01 15 21 35 01 15 21 35 01 21 35 21 32 36 36 35 34 26 26 23 21 11 23 11 21 32 04 12 15 14 02 04 07 b0 f8 dc 07 24 f8 dc 03 ac fe 18 01 e8 a4 c1 53 54 c2 a6 fe 4c f8 02 ac f0 01 30 90 90 fe d2 06 84 dc dc fe b8 dc dc fd a8 dc 73 c7 7e 7e c1 6d f8 dc 08 00 ab fe db b8 b8 fe d5 b1 00 04 00 48 00 00 07 80 08 00 00 03 00 07 00 0e 00 12 00 00 01 15 21 35 01 11 23 11 21 01 07 01 11 33 01 13 01 37 01 07 80 f8 c8 02 34 f8 05 ec fc 20 0c fe c8 48 03 98 18 fd 28 88 03 7c 04 ac dc dc 03 54 f8 00 08 00 fb d4 14 fe a4 01 a4 03 f8 f8 00 03 d0 c0 fb 70 00 03 00 3c 00 00 0a 34 08 00 Data Ascii: BZJr`PFn@;e@>N0@"\sHpdc!V!5!5!5!26654&&#!#!2$STL0s~~mH!5#!374 H(\|Tp<4
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 04 03 1c ca fe dc 9e 6d c1 7e 01 28 57 69 89 6f 4e 77 43 4f 7b 42 03 ac fe e4 fc f8 6c b0 68 7b df 96 9a de 78 92 7e fe 68 8a 62 64 b6 7a 74 dc b3 69 e4 5e 76 24 0c 14 0c 63 fe d2 1c 94 01 02 a6 80 c7 ab 56 dc 39 82 69 4e 92 4f 79 40 48 93 99 50 fb 84 03 a8 82 d4 ce 78 8a d1 75 77 c3 72 93 d8 5d fe d0 66 c0 2a 60 a6 66 63 bc 01 08 a5 cc fe fe 92 24 0f 1e 0f 6f 6d 00 02 00 d4 ff f0 02 3c 08 00 00 03 00 10 00 00 01 03 23 03 13 22 26 35 34 36 33 32 16 15 14 06 06 02 10 14 e8 14 88 4a 6a 6a 4a 4a 6a 31 51 08 00 fa 40 05 c0 f7 f0 6a 4a 4a 6a 6a 4a 31 52 31 ff ff 00 d4 ff f0 05 4c 08 00 00 26 05 31 00 00 00 07 05 31 03 10 00 00 00 02 00 d4 fd f8 02 3c 06 08 00 03 00 10 00 00 01 21 13 33 03 32 16 15 14 06 23 22 26 35 34 36 36 02 10 fe f0 14 e8 74 4a 6a 6a 4a 4a Data Ascii: m~(WioNwCO{Blh{x~hbdzti^v$cV9iNOy@HPxuwr]f*`fc$om<#"&54632JjjJJj1Q@jJJjjJ1R1L&11<!32#"&5466tJjjJJ
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 03 01 33 01 04 e8 5d b3 80 82 b0 5a 5b b1 80 82 b2 5c cc 58 6c 69 57 54 6c 69 5b fb 38 5d b3 80 82 b0 5a 5b b1 80 82 b2 5c cc 58 6c 69 57 54 6c 69 5b 80 05 80 e4 fa 80 01 80 6c 70 bb 71 71 bb 70 6c 70 bb 71 71 bb dc 6c 5d 93 93 5d 6c 5d 93 93 03 cb 6c 70 bb 71 71 bb 70 6c 70 bb 71 71 bb dc 6c 5d 93 93 5d 6c 5d 93 93 f9 23 08 00 f8 00 00 07 00 ec ff e4 0a 94 08 1c 00 11 00 1f 00 31 00 3f 00 51 00 5f 00 63 00 00 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 05 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 Data Ascii: 2#"&&7326554&#"3]Z[\XliWTli[8]Z[\XliWTli[lpqqplpqql]]l]lpqqplpqql]]l]#1?Q_c546632#"&&7326554&#"546632#"&&7326554&#"546632#"&&732655
2024-05-10 04:52:33 UTC	1120	IN	Data Raw: 78 dc 95 57 57 99 fb 08 00 02 00 f4 00 00 05 fc 05 d0 00 03 00 19 00 00 01 21 01 21 01 21 11 21 11 21 32 36 35 34 26 23 21 35 21 32 16 16 15 14 06 04 04 48 fe d8 01 b4 01 28 fd 70 fd 88 01 14 01 64 9c 8c 7f 8d fe 38 01 c8 ac f3 81 86 ff 00 03 04 02 cc fa 30 05 d0 fb 08 9a 5a 54 94 dc 76 ce 84 82 ce 78 00 02 00 88 03 80 04 68 07 cc 00 03 00 19 00 00 01 21 01 21 01 21 11 33 11 33 32 36 35 34 26 23 21 35 21 32 16 16 15 14 06 06 03 44 fe e0 01 24 01 20 fe 0c fe 14 fc c0 75 67 5b 69 fe f4 01 38 80 b5 5f 64 be 05 f4 01 d8 fb b4 04 4c fc 88 5a 42 3f 59 d0 64 a6 62 60 a6 66 00 03 00 2c fd a8 07 c4 08 1e 00 1c 00 20 00 24 00 00 01 21 36 12 36 24 33 20 00 12 11 15 10 02 00 21 11 32 24 12 11 35 10 02 00 23 22 04 02 13 01 17 01 13 01 17 01 01 4c fe e0 17 82 e2 01 49 Data Ascii: xWW!!!!!2654&#!5!2H(pd80ZTvxh!!!332654&#!5!2D$ ug[i8_dLZB?Ydb`f, $!66$3 !2$5#"LI
2024-05-10 04:52:33 UTC	394	IN	Data Raw: 11 02 a4 01 f0 01 34 fd ac a4 fe 8c 01 f8 34 a4 fd ac 03 54 fe f0 02 4c 03 84 fc 10 03 f0 fc 74 64 03 f0 fc f8 fd 38 02 c8 00 05 00 84 00 00 08 70 08 00 00 16 00 1a 00 1f 00 24 00 28 00 00 21 21 11 10 00 21 21 32 1e 02 15 11 21 11 34 26 23 21 22 06 06 15 01 15 21 35 01 01 21 01 23 01 01 07 23 01 01 11 21 11 01 a0 fe e4 01 66 01 3e 02 a0 9f fc b0 5d fe e0 c2 c6 fd 60 82 ae 58 05 08 fb c8 01 b0 02 7e 01 44 fd 26 b4 fe 16 02 86 3c b0 fd 22 03 e6 fe e4 01 fc 01 50 01 18 43 92 eb a8 fe 04 01 fc e1 9f 43 a7 96 06 04 e8 e8 fb a8 04 58 fb 3c 04 c4 fb 9c 60 04 c4 fc 38 fb c8 04 38 00 07 01 08 00 00 0b 8c 08 00 00 03 00 07 00 1e 00 22 00 27 00 2c 00 30 00 00 01 15 21 35 13 11 23 11 01 21 11 10 00 21 21 32 1e 02 15 11 21 11 34 26 23 21 22 06 06 15 01 15 21 35 01 01 Data Ascii: 44TLtd8p$(!!!!2!4&#!"!5!##!f>]`X~D&<"PCCX<`88"',0!5#!!!2!4&#!"!5
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 00 01 01 21 01 33 01 01 37 33 01 01 15 21 35 05 11 21 11 03 c0 fd 98 fe dc 02 d0 b0 01 e8 fd a0 10 b0 02 c4 fe 9c fc 34 02 6c fe ec 07 28 f8 d8 08 00 f8 00 07 34 cc f8 00 03 40 ec ec 48 fd 08 02 f8 00 06 00 a4 00 00 09 2c 08 00 00 03 00 07 00 0c 00 11 00 15 00 19 00 00 01 15 21 35 13 11 23 11 05 01 21 01 33 01 01 37 33 01 01 15 21 35 05 11 21 11 04 44 fd 0c 4c f8 05 88 fd 98 fe dc 02 d0 b0 01 e8 fd a0 10 b0 02 c4 fe 9c fc 34 02 6c fe ec 03 40 e8 e8 04 c0 f8 00 08 00 d8 f8 d8 08 00 f8 00 07 34 cc f8 00 03 40 ec ec 48 fd 08 02 f8 ff ff 00 d0 fd a8 06 3c 08 1c 02 26 04 02 00 00 00 07 06 75 02 0c 00 00 ff ff 00 d0 ff e4 06 3c 0a 40 02 26 04 02 00 00 00 07 06 68 00 48 02 00 ff ff 00 4c 00 00 0a 24 0a 00 02 26 04 00 00 00 00 07 06 6e 02 c0 02 00 ff ff 00 4c 00 Data Ascii: !373!5!4l(4@H,!5#!373!5!DL4l@4@H<&u<@&hHL$&nL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	567	OUT	GET /fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	552	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 304092 Connection: close Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 May 2024 12:28:31 GMT ETag: "60c8f64064078554b6469eeda25944eb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f66d13c48426ab01d72f14e7cb846f66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: 2bRq0fywnZd_cwVUVMyT1GBUMhQFZxYaG-BDO_42XecrpzmFAlZ2MA== Age: 59042 Access-Control-Allow-Origin: *
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: dd 07 20 0a d4 02 26 01 a5 00 00 00 07 08 0c 07 23 02 38 ff ff 01 10 ff dd 07 20 0a 9b 02 26 01 a5 00 00 00 07 06 7b 06 c8 02 00 ff ff 01 10 ff dd 07 20 0a 67 02 26 01 a5 00 00 00 07 06 7f 07 61 02 95 ff ff 01 10 fd f8 07 20 08 00 02 26 01 a5 00 00 00 07 06 8d 07 94 ff e3 ff ff 01 10 fe 11 07 20 08 00 02 26 01 a5 00 00 00 07 06 90 07 37 ff e3 ff ff 01 10 fd b8 07 20 08 00 02 26 01 a5 00 00 00 07 06 89 07 18 ff e3 ff ff 01 10 ff dd 07 20 0b 60 02 26 01 a5 00 00 00 07 08 bd 06 0b 00 00 ff ff 01 10 ff dd 07 20 0b 43 02 26 01 a5 00 00 00 07 08 5d 07 23 02 af ff ff 01 10 fd f8 07 20 08 00 02 26 01 a5 00 00 00 07 06 8b 07 43 ff e3 ff ff 01 10 ff dd 07 20 0b 0d 02 26 01 a5 00 00 00 07 06 80 07 1c 02 2c ff ff 01 10 ff dd 08 c2 0a 9b 02 26 01 a6 00 00 00 07 06 64 Data Ascii: &#8 &{ g&a & &7 & `& C&]# &C &,&d
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: ff 00 9c ff e0 05 e4 09 b2 02 26 03 07 00 00 00 07 08 12 06 8b 00 00 ff ff 00 9c ff e0 05 e4 0a 9b 02 26 03 07 00 00 00 07 08 bc 05 01 00 00 ff ff 00 9c ff e0 05 e4 09 77 02 26 03 07 00 00 00 07 08 bf 06 4d 00 17 ff ff 00 9c ff e0 05 e4 09 93 02 26 03 07 00 00 00 07 08 60 06 3c 00 08 ff ff 00 9c ff e0 05 e4 0a 2b 02 26 03 07 00 00 00 07 08 5c 05 48 00 00 ff ff 00 9c fe 15 05 e4 06 15 02 26 03 07 00 00 00 07 06 8b 06 6b 00 00 ff ff 00 9c ff e0 05 e4 09 0d 02 26 03 07 00 00 00 07 06 80 06 44 00 2c ff ff 00 9c ff e0 06 7f 09 27 02 26 03 07 00 00 00 07 07 f0 01 3a 00 0f ff ff 00 12 ff e0 05 e4 09 38 02 26 03 07 00 00 00 06 07 f1 e0 30 ff ff 00 9c ff e0 06 11 09 5d 02 26 03 07 00 00 00 07 07 f2 00 ec ff ed ff ff 00 9c ff e0 05 e4 09 3d 02 26 03 07 00 00 00 06 Data Ascii: &&w&M&`<+&\H&k&D,'&:8&0]&=&
2024-05-10 04:52:32 UTC	15403	IN	Data Raw: 01 32 1e 02 15 14 06 04 23 22 2e 02 27 33 16 16 33 32 36 37 34 26 26 23 23 35 15 35 33 32 36 35 26 26 23 22 06 07 23 3e 02 33 32 16 16 15 14 0e 02 27 03 28 9f da 84 3a 96 fe f4 b1 85 d9 a0 61 0e b9 21 cf bc be e2 01 61 ad 70 ae ae b1 b5 01 cf ad a2 cb 1e ba 15 97 f7 a2 a8 fd 8d 32 79 d0 9f 03 29 45 72 8f 4b 81 c4 6f 44 7e b0 6b 97 a1 99 7d 56 86 4e 60 40 7d 86 73 7c 96 90 84 8c c4 67 6a c5 89 47 86 69 3e 01 00 02 00 7d ff e4 05 61 06 14 00 1b 00 36 00 00 05 22 26 26 02 35 33 10 12 33 32 36 37 34 26 26 23 23 35 33 32 1e 02 15 14 06 04 03 23 35 33 32 36 35 26 26 23 22 06 02 15 23 34 12 36 36 33 32 04 15 14 0e 02 03 0e a2 f5 a6 54 b3 ed f1 b8 e0 01 5f ac 73 ae af a1 db 82 39 98 fe f3 92 af ae b1 b5 01 cb a9 a5 d9 6c b3 55 a6 f8 a2 fc 01 36 32 79 d0 1c 6c d2 Data Ascii: 2#".'332674&&##553265&&#"#>32'(:a!ap2y)ErKoD~k}VN`@}s\|gjGi>}a6"&&5332674&&##532#53265&&#"#46632T_s9lU62yl
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 06 07 06 04 03 0f bd fe e6 9c 5f b4 80 01 29 6a 6f 9b 7b 56 87 4f 48 7a 4b 03 a8 d8 fc d0 67 a0 5c 7a d7 8b 8e d1 73 8f 88 fe 8c 99 72 70 c7 81 80 e2 b3 6d 09 ad 04 51 68 27 0b 16 0c 64 fe d7 1c 93 fe a0 74 bb a9 5b dd 4c 93 6b 67 a3 56 89 4b 46 8d 9b 5d fb 7c 03 e9 7e c7 b9 6a 83 cd 76 74 c0 74 8b d6 67 fe ea 73 c4 45 6c b6 6e 01 01 65 bc 01 06 a1 02 a5 e5 94 2d 0f 1e 0f 6e 72 00 02 00 f0 ff f1 02 10 08 00 00 03 00 10 00 00 01 03 23 03 13 22 26 35 34 36 33 32 16 15 14 06 06 01 e5 0d b0 0d 65 3b 55 55 3b 3b 55 27 41 08 00 fa 4b 05 b5 f7 f1 55 3b 3c 54 54 3c 27 42 27 ff ff 00 f0 ff f1 05 10 08 00 00 26 05 31 00 00 00 07 05 31 03 00 00 00 00 02 00 f0 fd f8 02 10 06 07 00 03 00 10 00 00 01 23 13 33 03 32 16 15 14 06 23 22 26 35 34 36 36 01 e5 ca 0d b0 58 3b Data Ascii: _)jo{VOHzKg\zsrpmQh'dt[LkgVKF]\|~jvttgsElne-nr#"&54632e;UU;;U'AKU;<TT<'B'&11#32#"&5466X;
2024-05-10 04:52:32 UTC	1514	IN	Data Raw: 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 03 01 33 01 04 f0 5c aa 75 76 a8 5a 5b a8 75 77 a9 5b 9d 6f 6f 6c 6e 6c 6e 6d 71 fb 5b 5c aa 75 76 a8 5a 5b a8 75 77 a9 5b 9d 6f 6f 6c 6e 6c 6e 6d 71 41 05 7f b1 fa 81 01 7c 5d 73 b9 6c 6c b9 73 5d 73 b8 6d 6d b8 d0 5d 71 9f 9f 71 5d 71 9f 9f 03 dd 5d 73 b8 6d 6d b8 73 5d 73 b9 6c 6c b9 d0 5d 71 9f 9f 71 5d 71 9f 9f f9 0b 08 00 f8 00 00 07 00 e8 ff e4 0a 98 08 1c 00 11 00 1f 00 31 00 3f 00 51 00 5f 00 63 00 00 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 05 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 Data Ascii: 46632#"&&7326554&#"3\uvZ[uw[oolnlnmq[\uvZ[uw[oolnlnmqA\|]slls]smm]qq]q]smms]sll]qq]q1?Q_c546632#"&&7326554&#"546632#"&&7326554&#"546632#"&&73
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 37 2a 58 00 01 00 87 08 eb 04 4a 0a 2f 00 17 00 00 01 27 36 36 33 32 1e 02 33 32 36 37 17 06 06 23 22 2e 02 23 22 06 01 17 90 05 a6 78 3d 5c 51 55 36 3d 5b 06 8d 07 a7 75 43 5b 49 53 3b 40 57 08 eb 08 85 a9 2a 37 2b 58 42 10 87 a0 2b 36 2b 59 00 01 00 8c 07 38 03 d1 07 d3 00 03 00 00 01 15 21 35 03 d1 fc bb 07 d3 9b 9b 00 01 01 0b 06 bf 03 c8 08 00 00 0d 00 00 01 33 14 06 23 22 26 35 33 14 16 33 32 36 03 20 a8 bd a3 a1 bc a8 55 60 60 58 08 00 8f b2 b2 8f 4e 6b 6b ff ff 01 07 06 bf 03 c4 08 00 02 06 06 6e fc 00 00 01 00 b0 07 08 01 bb 08 08 00 0b 00 00 01 22 26 35 34 36 33 32 16 15 14 06 01 35 36 4f 4f 36 37 4f 4f 07 08 4b 35 35 4b 4b 35 35 4b 00 02 00 57 06 b3 02 d1 09 18 00 0f 00 1b 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 27 32 36 35 34 26 Data Ascii: 7XJ/'66323267#".#"x=\QU6=[uC[IS;@W7+XB+6+Y8!53#"&53326 U``XNkkn"&5463256OO67OOK55KK55KW"&&546632'2654&
2024-05-10 04:52:33 UTC	15990	IN	Data Raw: 04 00 27 00 00 06 65 08 00 00 04 00 09 00 0d 00 11 00 00 01 01 23 01 33 01 01 37 33 01 01 15 21 37 05 11 23 11 03 7d fd 83 d9 02 ce 80 02 17 fd 90 0b 80 02 be fe b6 fc 54 06 02 30 cd 07 4e f8 b2 08 00 f8 00 07 56 aa f8 00 03 21 b2 b2 30 fd 0f 02 f1 00 06 00 a5 00 00 08 a0 08 00 00 03 00 07 00 0c 00 11 00 15 00 19 00 00 01 07 21 35 13 11 23 11 05 01 23 01 33 01 01 37 33 01 01 15 21 37 05 11 23 11 03 d9 06 fd 49 44 bb 05 12 fd 84 da 02 cf 7f 02 18 fd 90 0a 80 02 bf fe b5 fc 54 07 02 30 cd 03 21 b0 b0 04 df f8 00 08 00 b2 f8 b2 08 00 f8 00 07 56 aa f8 00 03 21 b2 b2 30 fd 0f 02 f1 ff ff 00 e3 fd c4 06 15 08 1c 02 26 04 02 00 00 00 07 06 75 02 21 00 00 ff ff 00 e3 ff e4 06 15 0a 08 02 26 04 02 00 00 00 07 06 68 00 1d 02 00 ff ff 00 33 00 00 09 be 0a 00 02 26 Data Ascii: 'e#373!7#}T0NV!0!5##373!7#IDT0!V!0&u!&h3&
2024-05-10 04:52:33 UTC	394	IN	Data Raw: 0a 9b 00 17 00 1b 00 00 01 27 36 36 33 32 1e 02 33 32 36 37 17 06 06 23 22 2e 02 23 22 06 13 01 33 01 fc ed 90 05 a6 78 3d 5c 51 55 36 3d 5b 06 8d 07 a7 75 43 5b 49 53 3b 40 57 fa 01 00 d3 fe cd 06 d4 08 85 aa 2b 37 2a 58 41 10 86 a1 2b 37 2a 58 01 c0 01 c6 fe 3a 00 02 fc 2b 08 bc ff ee 0b 60 00 03 00 1b 00 00 01 01 33 01 01 27 36 36 33 32 1e 02 33 32 36 37 17 06 06 23 22 2e 02 23 22 06 fd a7 01 12 d6 fe bc fe 70 90 05 a6 78 3d 5c 51 55 36 3d 5b 06 8d 07 a7 75 43 5b 49 53 3b 40 57 0a 40 01 20 fe e0 fe 7c 08 85 aa 2b 37 2a 58 41 10 86 a1 2b 37 2a 58 00 03 fb 4b 06 b6 fe a4 09 11 00 15 00 21 00 2d 00 00 01 17 06 06 23 22 26 26 23 22 06 07 27 36 36 33 32 16 16 33 32 36 01 34 36 33 32 16 15 14 06 23 22 26 25 34 36 33 32 16 15 14 06 23 22 26 fd f7 64 04 76 5c Data Ascii: '66323267#".#"3x=\QU6=[uC[IS;@W+7XA+7X:+`3'66323267#".#"px=\QU6=[uC[IS;@W@ \|+7XA+7XK!-#"&&#"'66323264632#"&%4632#"&dv\
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 41 3c 3f 41 02 46 41 3d 3c 44 44 3c 3d 41 7e 8e 02 47 77 4a 3f 56 45 4b 34 38 4b 03 8b 02 46 77 4b 38 54 49 4e 31 3a 4b 08 e5 33 48 48 33 32 48 4a 2d 33 48 48 32 33 45 45 9e 0d 5a 86 49 01 2b 37 2a 5a 3f 08 59 88 4e 2b 37 2a 59 00 01 fb 40 06 d1 04 fc 08 18 00 1a 00 00 01 27 3e 02 33 32 0c 03 33 32 36 37 17 06 06 23 22 2c 03 23 22 06 fb b8 78 0d 65 af 7a 7b 01 58 01 84 01 80 01 49 6e 6f 94 15 7b 15 d6 aa 83 fe a9 fe 86 fe 8a fe b6 79 79 90 06 d1 1b 4d 82 50 1f 2d 2d 1e 53 51 25 7b 99 1d 2d 2c 1e 53 00 02 fb 4f 06 a9 fe 97 08 df 00 15 00 19 00 00 01 17 06 06 07 22 26 26 23 22 06 07 27 36 36 33 32 16 16 37 32 36 13 15 21 35 fd fe 63 03 76 5c 47 5a 50 3a 2f 3f 03 63 03 77 5b 41 5a 56 38 2e 42 9c fc b8 07 b3 18 5e 89 01 3b 3b 4f 31 18 5c 8e 39 3a 01 47 01 5f Data Ascii: A<?AFA=<DD<=A~GwJ?VEK48KFwK8TIN1:K3HH32HJ-3HH23EEZI+7Z?YN+7Y@'>323267#",#"xez{XIno{yyMP--SQ%{-,SO"&&#"'6632726!5cv\GZP:/?cw[AZV8.B^;;O1\9:G_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	570	OUT	GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	552	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309432 Connection: close Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 May 2024 18:59:26 GMT ETag: "1753a05196abeef95c32f10246bd6473" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5d16f202bc16a938de150ce36778476c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: nSiAVIhRHeWV4ositQwm4RNdv7jDeXsnUgDeHmnun1OnWPRZRAOa7w== Age: 35587 Access-Control-Allow-Origin: *
2024-05-10 04:52:32 UTC	15832	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 59 8b 56 53 b2 5e b3 8e 53 fd 87 06 62 fd 87 fe 90 76 63 3e fe d7 2d 68 b1 84 76 06 c9 01 37 fe c9 f9 37 06 c9 00 02 00 70 fe fc 06 d2 09 04 00 03 00 0b 00 00 01 01 33 01 01 11 21 11 21 11 21 11 01 96 03 5a fa fc a7 fd df 06 62 fd 87 fe 90 fe fc 0a 08 f5 f8 07 cd 01 37 fe c9 f9 37 06 c9 ff ff 00 70 00 00 06 d2 08 00 02 06 01 99 00 00 00 01 00 ca ff e1 07 48 08 00 00 15 00 00 01 21 11 14 02 04 23 22 24 02 35 11 21 11 14 16 16 33 32 36 36 35 05 d5 01 73 cf fe 8a fa fb fe 8a ce 01 73 71 ce 8d 8d cf 70 08 00 fa c6 dc fe b2 bb bb 01 4e dc 05 3a fa e5 80 c8 71 71 c8 80 00 02 00 ca ff e1 09 1e 08 5a 00 09 00 1f 00 00 01 21 14 02 04 23 35 32 36 36 25 21 11 14 02 04 23 22 24 02 35 11 21 Data Ascii: !33#".55!!!YVS^Sbvc>-hv77p3!!!Zb77pH!#"$5!32665ssqpN:qqZ!#5266%!#"$5!
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 23 22 06 06 15 14 16 16 03 22 26 35 34 36 33 32 16 15 14 06 21 22 26 35 34 36 33 32 16 15 14 06 03 58 e1 fe b6 b5 b5 01 4a e1 e1 01 4a b5 b5 fe b6 df 7a a4 51 51 a4 7a 7d a5 51 51 a5 b0 4f 73 73 4f 51 6f 6f 02 07 4f 73 73 4f 51 6f 6f 1e c6 01 64 ee ee 01 66 c6 c6 fe 9a ee ee fe 9c c6 01 22 87 e4 8c 8d e5 88 88 e5 8d 8c e4 87 05 de 70 4c 50 6d 6d 50 4c 70 70 4c 50 6d 6d 50 4c 70 ff ff 00 78 ff e2 06 38 08 47 02 26 03 07 00 00 00 07 06 6b 00 98 00 00 00 03 00 78 ff a2 06 38 06 52 00 03 00 13 00 23 00 00 05 27 01 17 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 01 8f b5 04 45 b7 fd 82 e1 fe b6 b5 b5 01 4a e1 e1 01 4a b5 b5 fe b6 df 7a a4 51 51 a4 7a 7d a5 51 51 a5 5e 7c 06 34 7c fa 0a c6 01 65 ed ee 01 66 c6 Data Ascii: #""&54632!"&54632XJJzQQz}QQOssOQooOssOQoodf"pLPmmPLppLPmmPLpx8G&kx8R#'"$54$3226654&&#"EJJzQQz}QQ^\|4\|ef
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: df 06 a6 08 94 02 26 04 27 00 00 00 07 09 9d 01 4f 00 9c ff ff 00 7b fd 58 06 a6 08 b0 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 88 02 33 00 a8 ff ff 00 7b fd 58 06 a6 08 b0 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 a1 01 a2 00 b0 ff ff 00 7b fd 58 06 a6 08 b0 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 8d 00 b2 00 a8 ff ff 00 7b fd 58 06 a6 08 ae 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 94 00 c9 00 ae ff ff 00 7b fd 58 06 a6 08 b0 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 8f 01 18 00 b0 ff ff 00 7b fd 58 06 a6 08 ae 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 96 00 f7 00 ae ff ff 00 7b fd 58 06 a6 09 c7 02 26 04 27 00 00 00 27 09 89 01 dc 00 00 00 07 09 91 01 6d 00 a8 ff ff 00 7b fd 58 06 a6 09 c7 02 26 Data Ascii: &'O{X&''3{X&''{X&''{X&''{X&''{X&''{X&''m{X&
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 02 08 0e 01 36 fe f4 fd b0 10 0c 68 a2 ca 6f b4 fe ee 9b 90 01 07 00 02 00 91 00 00 06 ca 08 00 00 07 00 0d 00 00 13 11 01 21 01 15 21 11 01 11 37 11 21 11 91 03 0f 01 67 fd 03 04 c0 fd 98 08 01 55 01 7c 01 27 05 5d fa bd 10 fe cf fe 84 01 d3 87 02 a6 fb 00 00 02 00 a1 ff e4 06 2e 08 00 00 15 00 25 00 00 13 3e 02 37 01 21 01 36 36 33 32 04 12 15 14 02 04 23 22 24 02 25 14 16 16 33 32 36 36 35 34 26 26 23 22 06 06 a2 02 37 78 61 01 d6 01 7c fe 01 25 50 2a bb 01 25 a8 b7 fe c1 cb c7 fe bb c0 01 6a 59 9f 68 67 9e 5a 5a 9e 67 68 9f 59 02 93 68 d3 ed 8f 02 b6 fd 14 0a 0d aa fe d4 c3 cb fe cb ae a8 01 34 cb 6f ac 62 61 ab 6f 6f ab 61 60 aa 00 02 00 8f 00 00 06 1c 08 1c 00 15 00 25 00 00 13 34 12 24 33 32 04 12 07 0e 02 07 01 21 01 06 06 23 22 24 02 25 14 16 16 Data Ascii: 6ho!!7!gU\|'].%>7!6632#"$%326654&&#"7xa\|%P*%jYhgZZghYh4obaooa`%4$32!#"$%
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 22 00 00 01 22 26 26 27 33 16 16 33 32 36 35 34 26 23 22 06 07 27 13 21 15 21 07 33 36 36 33 32 16 16 15 14 06 06 02 25 81 c6 72 03 f9 05 73 4b 5a 77 79 5e 34 68 1c e5 3c 02 ec fd e8 20 06 22 83 4d 6e b0 66 74 ce 03 f0 56 96 60 3c 48 62 4d 4e 66 29 23 2b 02 46 d0 fe 2c 37 5c a2 68 6f ae 62 ff ff 00 51 03 f0 04 06 08 54 02 07 06 25 00 00 04 00 00 01 00 42 04 00 03 9e 08 40 00 07 00 00 13 01 35 21 35 21 15 01 96 01 fd fd af 03 5c fe 02 04 00 03 66 0a d0 d3 fc 93 ff ff 00 52 03 f0 04 06 08 50 02 07 06 27 00 00 04 00 ff ff 00 55 03 f0 04 0a 08 54 02 07 06 28 00 00 04 00 00 02 00 93 04 a2 03 da 07 9c 00 03 00 07 00 00 01 11 33 11 01 35 21 15 01 ca d8 fd f1 03 47 04 a2 02 fa fd 06 01 13 d4 d4 00 01 00 93 05 b3 03 da 06 87 00 03 00 00 01 15 21 35 03 da fc b9 06 Data Ascii: ""&&'332654&#"'!!36632%rsKZwy^4h< "MnftV`<HbMNf)#+F,7\hobQT%B@5!5!\fRP'UT(35!G!5
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 76 fd 24 00 02 00 83 00 00 04 ae 05 d0 00 03 00 07 00 00 01 11 21 11 13 11 21 11 04 ae fc d0 7b fe 8a 01 26 fe da 01 26 04 aa fa 30 05 d0 ff ff 00 ca ff e4 0d 88 08 00 00 26 01 2b 00 00 00 07 01 09 08 26 00 00 00 01 00 ba 00 00 05 fe 06 00 00 0b 00 00 01 11 21 01 23 11 21 11 21 01 33 11 05 fe fe aa fd 85 11 fe 9e 01 36 02 94 13 06 00 fa 00 03 8f fc 71 06 00 fc 52 03 ae 00 05 00 bd ff e4 08 ff 05 ec 00 03 00 07 00 0b 00 0f 00 35 00 00 01 11 21 11 13 11 21 11 01 11 21 11 01 11 21 11 01 22 24 02 35 35 34 12 24 33 32 1e 02 33 11 22 26 26 23 22 06 06 15 15 14 16 16 33 32 36 36 33 11 22 0e 02 08 ff fc 97 79 fe 8b 03 ec fd 10 03 69 fc 97 fd f0 e1 fe c1 a9 a8 01 3e df 40 71 76 8f 5e 7f b1 92 52 76 95 45 45 96 79 4f 91 b1 7f 5f 8f 75 6e 01 26 fe da 01 26 04 aa fa Data Ascii: v$!!{&&0&+&!#!!36qR5!!!!"$554$323"&&#"32663"yi>@qv^RvEEyO_un&&
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 47 0e 0d 01 40 07 09 2d 31 0e fe ea 3b 65 3c 01 3c 64 3b 5b 81 01 82 fe 0c 3f db 01 06 7e 6e 70 88 fe fb d3 3c 06 26 3c 64 3c 3d 63 3b 80 5b 5a 82 00 03 00 df fd 72 06 61 06 14 00 16 00 2c 00 3e 00 00 01 21 34 26 26 27 26 26 02 02 11 35 05 15 06 12 16 16 17 1e 03 01 22 26 26 27 2e 02 37 35 34 12 24 33 32 04 12 15 15 14 02 04 01 32 36 36 35 35 34 26 26 23 22 06 06 15 15 14 16 16 05 e2 fe d5 41 84 65 9e fd b3 5f 01 23 0b 34 78 b7 77 83 c6 85 42 fe 04 95 f3 c2 4a 16 36 27 01 a4 01 3b e1 e1 01 3b a5 94 fe e4 fe ef 79 93 42 3f 92 7d 7a 93 41 42 93 fd 72 39 42 2c 15 22 a4 01 13 01 8b 01 08 5c 23 5d c8 fe e4 bb 6d 18 1a 45 69 a1 02 69 6f d1 94 2b 3c 30 1a 1c ee 01 69 ca bd fe af dc 26 c5 fe c8 b5 01 28 6d b4 69 26 7b cd 79 76 cc 7f 26 68 b4 6e 00 01 ff d8 01 b3 Data Ascii: G@-1;e<<d;[?~np<&<d<=c;[Zra,>!4&&'&&5"&&'.754$32266554&&#"Ae_#4xwBJ6';;yB?}zABr9B,"\#]mEiio+<0i&(mi&{yv&hn
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 63 1c 5b 6f 29 2d 71 34 58 63 a8 67 1a 74 b1 63 00 02 fb b5 06 74 fd be 0a c8 00 03 00 13 00 00 01 15 21 35 01 23 11 36 36 33 32 16 17 07 26 26 23 22 06 15 fd 83 fe 32 01 53 d5 01 a2 7e 1b 34 1b 08 0f 1d 12 31 3f 09 74 9e 9e fd 00 03 46 84 8a 07 05 a1 04 04 35 34 00 03 fb 93 06 74 fd ae 0a b2 00 15 00 2b 00 2f 00 00 01 17 14 06 23 22 26 26 23 22 06 17 27 34 36 33 32 16 16 33 32 36 15 17 14 06 23 22 26 26 23 22 06 17 27 34 36 33 32 16 16 33 32 36 01 33 11 23 fd 4a 64 54 41 31 47 41 27 1b 26 01 66 54 43 27 4a 49 25 1b 26 64 54 41 31 47 41 27 1b 26 01 66 54 43 27 4a 49 25 1a 27 fe f0 d1 d1 09 6b 1e 41 61 1f 1e 2e 1e 1c 3d 67 20 1f 2e b6 1e 3f 62 1f 1f 31 1d 1a 40 64 1e 1d 2d 02 3c fb c2 00 03 fa d7 05 63 fe 0e 09 74 00 03 00 12 00 20 00 00 01 13 17 03 25 22 Data Ascii: c[o)-q4Xcgtct!5#6632&&#"2S~41?tF54t+/#"&&#"'4632326#"&&#"'46323263#JdTA1GA'&fTC'JI%&dTA1GA'&fTC'JI%'kAa.=g .?b1@d-<ct %"
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 00 01 10 18 00 01 10 28 00 01 10 5d 00 01 10 91 00 01 10 a9 00 01 10 c1 00 01 10 f4 00 01 11 29 00 01 11 69 00 01 11 a9 00 01 11 d5 00 01 12 12 00 01 12 3d 00 01 12 59 00 01 12 89 00 01 12 e9 00 01 13 24 00 01 13 cf 00 01 14 2a 00 01 14 5d 00 01 14 92 00 01 14 a4 00 01 14 b6 00 01 14 e2 00 01 14 f4 00 01 15 20 00 01 15 3c 00 01 15 6d 00 01 15 cd 00 01 15 df 00 01 15 f1 00 01 16 03 00 01 16 2c 00 01 16 46 00 01 16 72 00 01 16 ae 00 01 16 ea 00 01 17 3b 00 01 17 4d 00 01 18 17 00 01 19 0e 00 01 1a 05 00 01 1a b8 00 01 1b 16 00 01 1b c4 00 01 1c 25 00 01 1c 96 00 01 1d 19 00 01 1d a0 00 01 1e 05 00 01 1e 88 00 01 1e e6 00 01 1f 21 00 01 1f 68 00 01 1f ad 00 01 1f f4 00 01 20 f3 00 01 21 f8 00 01 22 99 00 01 22 e6 00 01 23 0e 00 01 23 6e 00 01 23 b4 00 01 24 Data Ascii: (])i=Y$*] <m,Fr;M%!h !""##n#$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	18.160.225.62	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	566	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	552	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 May 2024 15:30:41 GMT ETag: "d17c0274915408cee0308d5476df9f45" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 748bf2e250893e1ba5433de84d1e52d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: 22x6XqwIoIV4mfnIm8Ivw9g5HqhlzbBL-UzmJv0ULwnhAFZdnX29sQ== Age: 48112 Access-Control-Allow-Origin: *
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 00 00 07 06 76 02 6f 00 02 ff ff 00 b2 ff e3 07 54 0a 7e 02 26 01 a5 00 00 00 07 06 73 00 ee 02 00 ff ff 00 b2 ff e3 07 54 0c 00 02 26 01 a5 00 00 00 07 08 0e 07 70 00 00 ff ff 00 b2 ff e3 07 54 0b e9 02 26 01 a5 00 00 00 07 08 08 06 23 00 00 ff ff 00 b2 ff e3 07 54 0b 78 02 26 01 a5 00 00 00 07 08 0a 07 8e 02 38 ff ff 00 b2 ff e3 07 54 0b 17 02 26 01 a5 00 00 00 07 08 0c 07 84 02 38 ff ff 00 b2 ff e3 07 54 0a 8d 02 26 01 a5 00 00 00 07 06 7b 06 fd 02 00 ff ff 00 b2 ff e3 07 54 0a 96 02 26 01 a5 00 00 00 07 06 7f 07 6a 02 c2 ff ff 00 b2 fd bd 07 54 08 00 02 26 01 a5 00 00 00 07 06 8d 08 42 ff fc ff ff 00 b2 fd d7 07 54 08 00 02 26 01 a5 00 00 00 07 06 90 07 c1 ff fc ff ff 00 b2 fd b6 07 54 08 00 02 26 01 a5 00 00 00 07 06 89 07 70 ff fc ff ff 00 b2 ff Data Ascii: voT~&sT&pT&#Tx&8T&8T&{T&jT&BT&T&p
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 00 02 26 03 07 00 00 00 06 06 6d 45 00 ff ff 00 6c ff e2 06 54 08 18 02 26 03 07 00 00 00 07 06 6e 00 b9 00 00 ff ff 00 6c ff e2 06 54 08 50 02 26 03 07 00 00 00 07 06 65 01 5d 00 10 ff ff 00 6c ff e2 06 54 08 7e 02 26 03 07 00 00 00 06 06 73 4b 00 00 03 00 6c fd c2 06 54 06 14 00 0f 00 1f 00 34 00 00 05 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 13 22 26 27 26 36 36 37 05 06 06 15 14 16 33 32 36 37 17 06 06 03 60 e9 fe ad b8 b8 01 53 e9 e9 01 53 b8 b8 fe ad e7 6a 8e 49 49 8e 6a 6b 91 49 49 91 75 85 b3 16 10 23 6a 57 01 3d 5e 77 31 30 22 33 14 2d 25 73 1e c7 01 65 ec ee 01 65 c7 c7 fe 9b ee ec fe 9b c7 01 4a 79 d2 86 86 d2 7a 7a d2 86 86 d2 79 fc 96 89 7f 52 a6 8a 27 73 2c 66 48 30 34 11 07 dc 15 27 ff ff Data Ascii: &mElT&nlTP&e]lT~&sKlT4"$54$3226654&&#""&'&6673267`SSjIIjkIIu#jW=^w10"3-%seeJyzzyR's,fH04'
2024-05-10 04:52:32 UTC	15404	IN	Data Raw: 04 12 15 14 02 04 23 22 26 27 07 11 14 16 16 33 32 36 36 35 34 26 26 23 23 13 32 1e 02 15 14 02 04 23 23 11 33 32 36 36 35 34 26 23 22 06 06 15 11 21 11 36 12 24 02 f9 c1 d5 01 26 99 a8 fe e2 b1 67 c6 57 0d 4b 8c 62 5f 8b 4c 55 8e 56 83 61 86 f0 bb 6b 90 fe ee c3 98 5a 64 73 30 8b 75 4f 7d 48 fe 64 01 b8 01 38 04 a0 a3 fe f0 a3 b3 fe ee 9a 3b 4a 06 02 18 53 8c 53 4c 82 50 56 7c 42 04 9a 4c 90 cb 7f 8e fe f2 b0 01 0d 4f 75 38 6c 8a 42 7f 5b f8 33 07 e7 c1 01 1a 9a 00 01 00 30 fd c0 05 d4 06 00 00 08 00 00 13 21 01 01 21 01 11 21 11 30 01 af 01 2b 01 1d 01 ad fd f9 fe 6c 06 00 fb da 04 26 fa 0d fd b3 02 4d 00 02 00 c0 ff e4 06 73 08 5d 00 25 00 37 00 00 01 26 24 21 32 16 17 11 26 26 23 22 06 15 14 16 16 17 04 00 11 15 14 02 04 23 22 24 02 35 35 34 36 36 37 Data Ascii: #"&'326654&&##2##326654&#"!6$&gWKb_LUVakZds0uO}Hd8;JSSLPV\|BLOu8lB[30!!!0+l&Ms]%7&$!2&&#"#"$554667
2024-05-10 04:52:32 UTC	16384	IN	Data Raw: 8f 14 0e 21 fd a8 9f f9 8f 90 f9 9e a9 fc 21 0e 14 8f d7 80 a6 fe fa 97 01 3e 4b 85 57 59 89 4f 4f 89 59 57 85 4b 03 93 46 7c 51 50 79 45 45 79 50 51 7c 46 00 02 00 8d ff e4 06 bd 08 1d 00 21 00 32 00 00 01 32 04 16 12 13 10 02 02 04 23 22 24 02 27 21 16 16 33 32 12 13 23 0e 02 23 22 24 02 35 26 12 24 13 22 06 06 17 14 16 16 33 32 3e 02 35 2e 02 03 8b 9e 01 25 e7 87 01 75 da fe cc be cd fe c6 bf 14 01 ab 19 a0 76 c8 d0 01 0e 2e 9c c9 71 b5 fe e4 a4 01 c0 01 59 e8 65 9d 5b 01 59 9b 64 4b 80 5f 36 01 5a 9e 08 1c 6a e8 fe 81 fe ea fe fb fe 67 fe e2 95 9f 01 13 ac 70 7b 01 5d 01 30 5a 81 46 aa 01 2a bf ce 01 42 b7 fe ab 60 a2 64 65 a1 5f 38 63 82 49 61 a2 62 00 03 00 8d ff d6 07 05 08 1e 00 03 00 13 00 21 00 00 01 17 01 27 01 20 24 02 13 10 12 24 21 20 04 12 Data Ascii: !!>KWYOOYWKF\|QPyEEyPQ\|F!22#"$'!32##"$5&$"32>5.%uv.qYe[YdK_6Zjgp{]0ZF*B`de_8cIab!' $$!
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: a2 68 73 b0 64 dc 2b 4b 2f 42 5f 2f 47 26 3d 6d 00 01 fe 3d 00 00 04 c2 08 00 00 03 00 00 21 01 21 01 fe 3d 05 80 01 05 fa 80 08 00 f8 00 ff ff 00 50 fe 97 04 43 02 ff 02 07 06 1f 00 00 fe af ff ff 00 54 fe af 02 75 02 ef 02 07 06 20 00 00 fe af ff ff 00 57 fe af 03 db 02 ff 02 07 06 21 00 00 fe af ff ff 00 52 fe 9f 04 12 02 ff 02 07 06 22 00 00 fe af ff ff 00 4b fe af 04 45 02 ef 02 07 06 23 00 00 fe af ff ff 00 63 fe 9f 03 fe 02 ef 02 07 06 24 00 00 fe af ff ff 00 4b fe 9f 04 1a 03 03 02 07 06 25 00 00 fe af ff ff 00 3e fe af 03 aa 02 ef 02 07 06 26 00 00 fe af ff ff 00 4e fe 9f 04 12 02 ff 02 07 06 27 00 00 fe af ff ff 00 4f fe 9f 04 1e 03 03 02 07 06 28 00 00 fe af ff ff 00 8d ff 4a 03 e2 02 53 02 07 06 43 00 00 fa af ff ff 00 8d 00 5a 03 e2 01 42 02 Data Ascii: hsd+K/B_/G&=m=!!=PCTu W!R"KE#c$K%>&N'O(JSCZB
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: ae 01 52 ff ff 00 43 00 00 08 1f 0a 8d 02 26 04 23 00 00 00 07 06 7b 07 2b 02 00 00 03 00 67 ff e4 07 ca 08 1c 00 05 00 1b 00 32 00 00 01 27 13 01 17 03 01 13 36 36 27 26 26 23 22 06 07 13 36 36 33 32 16 17 16 16 07 03 01 22 26 26 27 26 36 37 13 01 03 06 16 17 16 16 33 32 36 37 03 06 06 01 5e 34 c0 04 f7 29 f4 fb 14 61 03 01 03 08 67 71 1b 1d 0d 15 1e 55 1b e2 e5 13 04 01 04 44 04 8c 97 d3 75 09 02 03 06 3f 01 7f 65 06 01 07 0e 75 65 0d 22 0c 18 1c 4f 01 0a 34 02 0f 03 a1 38 fd b3 fc d5 04 a5 1c 32 16 55 4a 03 03 01 34 05 03 af ba 27 5b 33 fc 6c fd 7a 53 9f 72 2d 66 37 03 6c 01 38 fb 94 36 50 17 48 4a 02 02 fe cf 04 06 00 02 00 a1 fe 14 06 c0 08 1c 00 1b 00 1f 00 00 01 11 22 24 02 35 11 34 12 24 21 32 04 12 15 21 34 26 26 23 22 06 06 15 11 14 16 16 21 11 Data Ascii: RC&#{+g2'66'&&#"6632"&&'&673267^4)agqUDu?eue"O482UJ4'[3lzSr-f7l86PHJ"$54$!2!4&&#"!
2024-05-10 04:52:33 UTC	10463	IN	Data Raw: 00 04 67 07 dc 02 27 08 7c 00 cd 00 00 00 27 07 fe ff c8 01 12 00 07 07 fe ff cb fe 84 00 03 00 81 ff e4 09 ca 06 00 00 03 00 1c 00 36 00 00 01 11 21 11 21 21 06 02 06 15 14 16 33 32 36 35 11 21 15 14 02 06 23 22 24 02 13 36 12 25 21 16 12 17 12 02 04 23 22 26 02 35 35 21 11 14 16 33 32 36 36 35 34 26 02 09 ca f6 b7 01 59 01 8b 50 62 2d 79 6f 61 78 01 37 7b f7 bd bc fe ed 95 02 02 79 05 7e 01 8b 71 7b 01 01 94 fe ec bc bc f8 7a 01 36 78 61 4b 68 36 2d 62 06 00 fe de 01 22 97 fe f8 f2 73 d4 f2 bf b5 01 26 fc e4 fe ae ba b1 01 5f 01 06 d5 01 89 a8 a8 fe 77 d5 fe fa fe a1 b1 ba 01 52 e4 fc fe da b5 bf 6d cc 8d 73 f2 01 08 00 02 00 d2 00 86 03 7c 03 5d 00 03 00 07 00 00 01 11 21 11 07 21 11 21 02 af fe ef cc 02 aa fd 56 03 5d fd 29 02 d7 e9 fe ff ff ff 00 aa Data Ascii: g'\|'6!!!3265!#"$6%!#"&55!326654&YPb-yoax7{y~q{z6xaKh6-b"s&_wRms\|]!!!V])
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 22 06 15 23 34 36 33 32 fc cc df bf fe 11 29 1d 4c 57 48 8c 75 25 08 b5 fd bf 02 f8 02 db 07 0a 4c 50 9e d2 00 02 fb 54 06 69 fd 2d 0a 2c 00 03 00 13 00 00 01 15 21 35 37 33 11 16 16 33 32 36 37 15 06 06 23 22 26 27 fd 26 fe 2e 6e e0 02 22 28 18 1d 0a 16 44 26 73 77 01 09 74 a2 a2 b8 fd 43 29 28 01 03 a6 08 0b 81 82 00 02 fb 14 06 74 fd fa 09 73 00 04 00 09 00 00 01 13 33 01 23 03 13 13 23 01 fc 98 76 ec fe fa 95 61 7a 37 95 fe fa 07 a7 01 cc fd 01 02 ff fe 34 fe cd 02 ff 00 01 fb 26 06 74 fe 0d 09 73 00 0b 00 00 01 17 37 33 03 13 23 27 07 23 13 03 fc 20 79 7a ef d9 e4 f0 85 82 f0 e4 da 09 73 d6 d6 fe 88 fe 79 e4 e4 01 87 01 78 00 02 01 06 00 00 06 65 08 00 00 03 00 07 00 00 01 11 21 11 13 11 21 11 06 65 fb d8 81 fe 48 04 ae fe a4 01 5c 03 52 f8 00 08 00 Data Ascii: "#4632)LWHu%LPTi-,!5733267#"&'&.n"(D&swtC)(ts3##vaz74&ts73#'# yzsyxe!!eH\R
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 21 01 05 80 fc 1d ed 03 9a fe eb 57 fe 91 02 1d 18 02 1f 01 c4 fc f8 fe 34 fc f5 08 cf f5 41 0a 21 5d ee fe 84 fa 1c 05 e4 f8 00 08 00 ff ff 01 4a fd 6c 04 8f 0a 94 00 26 05 4e 06 00 00 07 05 4e 01 b7 00 00 00 01 00 97 fd 1a 01 a1 ff 65 00 03 00 00 05 11 21 11 01 a1 fe f6 9b fd b5 02 4b 00 02 00 90 ff e4 05 c3 06 14 00 0b 00 25 00 00 01 11 22 24 02 37 11 21 11 06 16 16 13 11 32 36 36 35 11 34 26 23 22 06 07 03 36 36 33 32 1e 02 15 11 14 02 04 03 28 c4 fe d4 a8 01 01 a5 01 38 6c 4f 4e 6f 3a 51 4d 17 2b 19 2c 5a a4 4a 6b 93 5a 29 a9 fe d3 01 36 fe ae 7d 01 0d da 03 b8 fc 48 62 79 37 fe ae 01 52 37 79 62 01 b2 5f 61 05 05 01 28 1c 20 42 7b ab 69 fe 05 da fe f3 7d 00 02 00 fe fd c4 06 6c 06 14 00 04 00 22 00 00 01 11 21 11 21 03 07 36 12 36 36 33 32 04 12 15 Data Ascii: !W4A!]Jl&NNe!K%"$7!26654&#"6632(8lONo:QM+,ZJkZ)6}Hby7R7yb_a( B{i}l"!!66632

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	712	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
2024-05-10 04:52:47 UTC	801	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 May 2024 04:52:47 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	563	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:32 UTC	971	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=LxV8gQ/N3AFKLEOIVCvXgg1DgOvV7wHDz/iK0EgYCUmt/JB9R54ADEj4157a2mKoIqEvLXjJQG/mKFXv/1nn9Z/nuuZoFCck0s+PuwsCpdgYN2cDcNOnsoVRSeFa; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=LxV8gQ/N3AFKLEOIVCvXgg1DgOvV7wHDz/iK0EgYCUmt/JB9R54ADEj4157a2mKoIqEvLXjJQG/mKFXv/1nn9Z/nuuZoFCck0s+PuwsCpdgYN2cDcNOnsoVRSeFa; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=AE7B5D7E2CEC0915151AD61B612EB769; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 05 Apr 2024 12:50:46 GMT ETag: "18eae4fbc88-c9be" Server: unknown
2024-05-10 04:52:32 UTC	8459	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-05-10 04:52:33 UTC	9000	IN	Data Raw: 01 0e 16 47 a6 50 d8 27 b0 02 c8 c5 a0 ac c0 16 72 1c ba 10 b2 5e 40 34 0d 47 03 01 43 04 86 4a 7b 01 40 20 01 8a 46 00 20 18 01 31 92 89 97 3e 43 01 88 02 00 94 c7 28 4a a3 e0 80 25 11 39 2f 82 25 55 4c 01 52 82 50 70 42 e0 80 a6 10 27 91 e4 00 03 21 20 4b f2 2b 22 4f 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 Data Ascii: GP'r^@4GCJ{@ F 1>C(J%9/%ULRPpB'! K+"O#` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl
2024-05-10 04:52:33 UTC	9000	IN	Data Raw: a0 1b 10 d8 80 8c f5 1d 75 18 2d 40 b2 4a 24 00 00 00 02 40 00 24 68 91 72 87 00 36 13 00 c8 9c 01 a5 5c 8d 93 42 98 10 f0 2c 0d 92 44 50 d6 a2 1a d4 aa b1 31 83 02 19 2c a6 44 10 5e 35 26 59 49 04 ae a0 4a 43 81 f2 5d 4c dd 98 17 c4 a5 a9 87 26 69 db 72 ca 35 00 04 02 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 Data Ascii: u-@J$@$hr6\B,DP1,D^5&YIJC]L&ir5$H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(
2024-05-10 04:52:33 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-05-10 04:52:33 UTC	9000	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd
2024-05-10 04:52:33 UTC	7187	IN	Data Raw: 95 64 9a 7e 3c 75 12 ca f2 ea 0b 29 27 88 c8 67 0f ca 40 76 5c 52 4b 5d 86 d4 66 72 36 de bd 13 9f 22 54 f2 d3 3d 7c 79 7c 40 2a a7 1b 60 a5 f5 42 78 59 15 57 f9 6d d3 c6 a2 51 10 b3 80 0b 37 ab f6 7b 42 65 43 1b fb 57 89 27 55 a6 20 0b ab 85 3e cc fe 9f a8 57 aa 0f 2e 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a Data Ascii: d~<u)'g@v\RK]fr6"T=\|y\|@*`BxYWmQ7{BeCW'U >W.y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	1226	OUT	GET /keyserver/keyserver?su=usbglobalfeeservices400%40usbank.com&df=&tf=&lp=en&v=2&m=%7c1__0968c5240000018f5e2c923daa87651f578ebe3a%40mailc22.usbank.com&s=1&f=0&d=1715316751535&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF
2024-05-10 04:52:33 UTC	885	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:32 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 1167 Connection: close Set-Cookie: AWSALB=y5T5zlpYlLhUnR7uQnuwTWheZXgC2cGbptd/9boRZzOZzXgs25RpZddEncO9AAF6Qd/zN3jjFDFVQXKsJPfvo5/EVCQUpHCU2LaSBUI0tdoLeIXpPMJMJIngmQX2; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/ Set-Cookie: AWSALBCORS=y5T5zlpYlLhUnR7uQnuwTWheZXgC2cGbptd/9boRZzOZzXgs25RpZddEncO9AAF6Qd/zN3jjFDFVQXKsJPfvo5/EVCQUpHCU2LaSBUI0tdoLeIXpPMJMJIngmQX2; Expires=Fri, 17 May 2024 04:52:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=B4AC08064AEB8B1BEF1BAF63822B671B; Path=/keyserver; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-05-10 04:52:33 UTC	1167	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 32 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 43 61 6e 6e 6f 74 20 69 64 65 6e 74 69 66 79 20 72 65 63 69 70 69 65 6e 74 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 31 35 33 31 36 37 35 31 35 33 35 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 27 3a 74 72 75 65 0d 0a 2c 27 68 61 64 52 Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'action':'open','status':21,'message':'Cannot identify recipient.','state':1,'reqTime':1715316751535,'reqNumber':1,'recipientIdentified':false,'success':true,'cookiesEnabled':true,'hadR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	18.233.198.142	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	598	OUT	GET /websafe/logo/ptZ7YKQ1DE0.hya1GSdimhLUGsxYGG7kkyLOcdYZhHyi05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=AW4clwINkBT1v826vJYn5+nHbqb8muY8rQWWisZ4LxSVZz7tSdZE6wb5YlzraMMrUOWfUpDsJTmp6M0p7tHlyPdaidHqATq8ytmP44BhzoGfOO9sajH5tKufXqYJ
2024-05-10 04:52:33 UTC	969	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:33 GMT Content-Type: image/gif Content-Length: 2878 Connection: close Set-Cookie: AWSALB=1Q4wRB3WAOQtwf9+frV7Fl120ADF2KiSj8lQkrGDMc5vGDr6a9gLGDkfk9FjA0IPKevCsmH7bmw8mb8AkRaFxg9iJi+Zpqjhg9flZLljPXF1oDeN6xEq5ATv4rvN; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/ Set-Cookie: AWSALBCORS=1Q4wRB3WAOQtwf9+frV7Fl120ADF2KiSj8lQkrGDMc5vGDr6a9gLGDkfk9FjA0IPKevCsmH7bmw8mb8AkRaFxg9iJi+Zpqjhg9flZLljPXF1oDeN6xEq5ATv4rvN; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=41DEE207BCB21265142D1EDC8E19F3BA; Path=/websafe; Secure; HttpOnly Last-Modified: Tue, 03 May 2011 00:00:01 GMT ETag: "12fb3277c00-b3e" Server: unknown
2024-05-10 04:52:33 UTC	2878	IN	Data Raw: 47 49 46 38 39 61 f5 00 5a 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 Data Ascii: GIF89aZ3f3333f333ff3fffff3f3f3f3333f33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49728	18.233.198.142	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:32 UTC	632	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2AGQN2+AXtTgB67pEHrmbO+2PS+NjVhDWtpyNJCT0etH7j1RJOHJkuRxuEHsE84hAyr3qZwwCPQ7rRvRBcITQN39VAWj4SWvCy/Q/IL/0LihO3R1yb0/nK3x4UKF
2024-05-10 04:52:33 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:33 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/ Set-Cookie: AWSALBCORS=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-05-10 04:52:33 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49729	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:33 UTC	722	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=y5T5zlpYlLhUnR7uQnuwTWheZXgC2cGbptd/9boRZzOZzXgs25RpZddEncO9AAF6Qd/zN3jjFDFVQXKsJPfvo5/EVCQUpHCU2LaSBUI0tdoLeIXpPMJMJIngmQX2
2024-05-10 04:52:33 UTC	972	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:33 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=Qb/lCmRaUnA+wzJZkVyNz0WDe3imeaOqoMJ/L8Px4jqiR1uodeOtlxxcGGUSVB9to9ig05NV0MlcnvladI8ZZ2h8JdlNkDEP59f/b/gcA6wZrvNU3hcErxr8hMtl; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/ Set-Cookie: AWSALBCORS=Qb/lCmRaUnA+wzJZkVyNz0WDe3imeaOqoMJ/L8Px4jqiR1uodeOtlxxcGGUSVB9to9ig05NV0MlcnvladI8ZZ2h8JdlNkDEP59f/b/gcA6wZrvNU3hcErxr8hMtl; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=0553DFCEE6E07ADC9C515C9F5B3423E5; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 05 Apr 2024 12:50:46 GMT ETag: "18eae4fbc88-183" Server: unknown
2024-05-10 04:52:33 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	18.160.225.113	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:33 UTC	360	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:52:33 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Thu, 09 May 2024 19:52:34 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 02c37caefc19a8c9d8a6cede6f22237a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: nHYd6Nx8s3bcUNNamIriZFuWS0bCzTTOfckDftlbBRwniW_j1yHkdw== Age: 32400 Vary: Origin
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 79 36 c8 9a 9d 50 04 ee d0 4b 1a a2 6b 87 06 a0 63 6f 4b dc 8d 53 95 20 d2 7a 98 d5 b4 f6 c8 1b 80 b2 82 40 62 c8 e5 06 40 9a b9 d4 6d 48 c2 10 13 ae 19 35 71 86 53 95 9f bc 2c b7 20 2b 53 1b f1 f5 45 56 dd 0d 00 c3 8e c6 cd f4 30 ba da e4 da af 72 90 2b c0 4d aa a9 61 6b 2a a3 04 9d 9c b0 2d 27 67 2f 43 62 5b 04 e4 06 08 48 6d b0 09 0c 89 c8 24 00 9c 8d 28 04 a3 41 80 09 8c 00 00 00 0c ec 49 56 24 0a a9 44 54 d4 09 60 36 20 00 01 00 c0 50 00 30 10 c0 04 dc 0c cf 95 c2 01 3b f7 31 7c b0 2f a7 7b 67 44 55 78 eb 5d 7d 4c 88 85 bb 93 44 5a e1 4b 36 66 de a7 e0 83 6a 41 52 b1 8a a1 ed 7a d9 c9 40 04 ac 74 1e e6 12 4b b8 0e 43 79 2d e2 4c f7 76 08 d5 d9 90 df 72 72 c7 b4 07 5c bc 03 99 2e b7 49 60 89 c8 57 47 1a 8a 9a 19 f1 fc a6 85 00 00 00 10 cb 25 81 9b 34 Data Ascii: y6PKkcoKS z@b@mH5qS, +SEV0r+Mak*-'g/Cb[Hm$(AIV$DT`6 P0;1\|/{gDUx]}LDZK6fjARz@tKCy-Lvrr\.I`WG%4
2024-05-10 04:52:33 UTC	14808	IN	Data Raw: 19 a5 79 18 1c dc c9 c6 03 db 52 ea d3 6e c6 bc af 49 2d 2b 51 3b 3d 20 0f 3b dc 5f d4 ce 3b b3 ab 95 27 99 39 dd 24 cb 6c ea 82 d5 34 88 1e d7 d0 2b 0d 06 94 9b fd 32 be 93 e8 11 c9 10 f2 68 96 0d 1f 1b d0 4a 85 0e b5 92 df 00 d6 0e 9e 37 24 1c dc 74 9c 1d 75 a4 23 55 45 a9 69 40 46 6e 98 0a a6 99 a3 ce 0a aa 2a 3a d1 42 43 34 c8 b6 87 98 ea f7 b7 0c f4 ed a1 c5 3c d3 fb 63 c8 95 a9 5a ac 50 f3 5f 3a 4d c9 e9 4b 55 7d cc 2a ee eb 2e aa 4c d8 b2 bc db 73 d5 19 f1 d9 3b 4f 63 d5 dd c8 bf 65 41 f2 59 7f fa 69 fc 42 69 52 eb e8 95 cc f4 f3 46 95 b4 d6 5d 23 c0 ab 67 3b 64 d4 47 04 ad cb 41 ca f0 0b 72 56 73 c5 6f c0 d2 ab 8e fa 51 af 81 8c 6f 60 70 ea 67 c0 e7 92 3c 18 ee f8 eb 09 ab 7d c5 d1 f1 37 89 4e 3b 1a 9d 31 5d 54 f9 99 e0 fb ea b9 6f c4 f6 f8 12 4d Data Ascii: yRnI-+Q;= ;_;'9$l4+2hJ7$tu#UEi@Fn:BC4<cZP_:MKU}.Ls;OceAYiBiRF]#g;dGArVsoQo`pg<}7N;1]ToM
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: e7 93 f0 4b 2d 9c 0b 85 f3 f2 56 79 2b 65 3f 2f 81 d9 6e 1b 3e 5b 5e 57 a6 9b 57 9b 2e 2d ae 5b fb d4 ec de d9 4b c7 b1 ce bd e5 1e b5 7f 78 f9 7d af 25 6b a6 5f 88 70 fb 2b cc de 2a bc 58 c8 dd ad eb cf 5a 2d fb 5c bd 13 66 95 f7 2e d9 75 fc 49 7e da 72 ed 5f bc 9b fb 6e 46 a2 ae b1 e6 5c 8c d5 5b df d1 38 87 f0 1d 79 b8 ed fb a3 fd 48 e3 7e d3 96 ba d7 06 76 4e b8 69 fd c4 be 65 1e a2 da fe 57 5b 1b 71 70 c3 dc d4 3e 87 95 ed f8 3e b5 bb 55 66 cf f4 f8 9e da b2 aa dd d1 68 73 b3 9f ac 34 da 54 50 b5 67 37 d0 dc f5 c9 0f 96 c9 cb 6f c8 d3 ea da 57 1b d5 ad d7 7f d3 5e 8b cd 9b cb 3a 5e 7c 86 b6 fa ab a5 7e 55 e3 d6 df c0 c5 70 3b bc e1 7e e7 d7 cb e2 6a f9 d3 69 46 5e 2a 91 d0 9d 5f a5 68 9f de ff 00 90 b6 c4 dc e3 e5 93 aa d6 c9 42 c2 5d 97 db 53 cf 85 Data Ascii: K-Vy+e?/n>[^WW.-[Kx}%k_p+XZ-\f.uI~r_nF\[8yH~vNieW[qp>>Ufhs4TPg7oW^:^\|~Up;~jiF^_hB]S
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: b6 e3 b7 1f 25 5f 89 ea 4e 6c a3 b3 3c 8e 3f 77 c8 ee a5 a4 a5 68 8f 4b 95 37 7b a9 d6 9f 93 2e 5f cb 36 f2 d1 d1 3c 99 c2 a6 ad 24 79 5c ee 12 c8 f8 fd c5 96 22 51 7e b0 af 45 de 9d e6 3b 22 f8 6e b9 13 aa 58 d7 d4 63 49 b7 ed 67 5f 17 16 d6 dc 74 2e 48 c5 35 48 af a5 27 3a f4 17 1f 1e d9 75 4a 7f 2f 89 a3 a6 ef 9a 0d 52 85 01 18 d3 86 b5 72 b5 1b e2 5a a5 93 5d 08 6e 48 61 7d 34 f2 f5 7e 64 72 71 ee 78 34 4c 6a 16 81 71 16 e3 5d 5b c7 c0 d2 a9 25 83 1e 4e 45 5d 7a e0 de ba 15 0c c3 9b 9a bc 4a 5e bd 12 d5 93 cd ee 3e 9e 16 6f db f8 9c 4a ad bd d6 7b ac fa 81 2d db 95 ee bf c1 74 5f cf c4 d6 a8 69 14 44 52 70 2d e2 6c ca cf 12 06 17 ad 79 2c d2 f4 ba f4 e9 e6 89 74 dd 86 43 7f ef a7 d2 f4 15 9d f4 9d 1f 60 35 75 9c 1c 1c aa 2c d1 d8 ed 68 89 fc 0e 2b b7 Data Ascii: %_Nl<?whK7{._6<$y\"Q~E;"nXcIg_t.H5H':uJ/RrZ]nHa}4~drqx4Ljq][%NE]zJ^>oJ{-t_iDRp-ly,tC`5u,h+
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: fe a1 b5 a8 63 09 01 55 e5 8e b8 ec 5c a7 a2 4c c1 b9 14 94 76 d6 16 89 d5 f7 ab 82 df 25 ff 00 ab 77 fa 91 c4 af 64 56 fb 76 20 e8 7c dd eb f1 ab 1a e6 4f 4b 47 fa 91 cd 87 aa 35 af 1d 2d d4 0e 9a f2 d9 65 65 78 1d 75 f7 5b b0 d1 c9 c1 ec e9 c9 f3 5b 6e 61 74 e9 2c ea 5e cd 63 e8 f2 66 dd 1f ab 4f b6 80 6b b5 6d 93 9b 93 89 34 97 63 4d bc d5 6e b6 49 aa f5 5e 99 fb f0 45 fd c5 53 74 bc d5 f9 15 1c 57 a7 ab 24 fd 3c 4a 3a de db 3c 35 20 f8 e1 e7 42 2b ce 55 68 ee f6 de ee dc 58 79 44 a7 4a fc c4 5f 92 8f e5 4e 40 f6 d5 ab ca a5 10 9f 4e a7 8b 4f 77 7e 37 83 d5 e2 e6 5c f5 dc b5 2a 3b f8 b9 7f 6d b5 ef dc e9 3c 5e 5e 64 ac a8 bb e7 c0 f6 80 60 00 14 00 00 08 86 cb 00 32 b5 9f 44 2a 2e e6 c0 d8 00 18 de d0 8c 65 b0 3b 06 73 d6 4d 90 0c 06 20 00 18 80 00 00 Data Ascii: cU\Lv%wdVv \|OKG5-eexu[[nat,^cfOkm4cMnI^EStW$<J:<5 B+UhXyDJ_N@NOw~7\;m<^^d`2D.e;sM
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: c7 4b 57 49 4d e7 2f 30 b4 9d 5a 5d 93 02 3e 92 95 57 3e ac b8 e8 97 ec 1f 25 d5 ed 09 43 d1 ae c9 7e de d1 e3 d0 b4 e6 bb 2d de 62 67 d5 d5 bf f2 af bd b2 ab 5b 52 af d2 94 25 96 f2 d6 bb 9e ba f6 60 4a 73 78 fc b3 a2 cf 8a 4b f1 15 92 e4 9a ad aa 5a 8e ba 7e eb 47 d9 09 df e9 e5 ad 7e 67 ff 00 d8 df 97 cc c5 44 de 89 3f a8 9e dc 46 27 f5 fd 00 ba bd cd 67 fd 36 8f bd f9 76 5f 12 6d 5a ba b4 93 d9 5d 3f d5 e3 e7 a7 e0 55 da 9f a7 59 77 ba f5 3c 74 fc 92 8f e2 14 b2 a2 85 36 c4 6d fe 1d fb b0 1f 1d 13 97 76 ed 19 7d 9b 5d db d3 c1 76 45 5f fd eb 62 27 0f e0 b5 9f 0f ba 4c 9c 55 3a 53 d5 d5 b7 dd f5 6b c3 a7 6d 4d 6b 84 fa 55 5b d2 eb d5 c6 6d 66 fa 78 bf 80 17 cc b7 ba cb 7b ba 77 49 e9 11 f9 98 d5 3a e1 e7 5f 4a 7a 3e 9d 74 4b 36 f1 0b fa a6 2d 2a d8 5b Data Ascii: KWIM/0Z]>W>%C~-bg[R%`JsxKZ~G~gD?F'g6v_mZ]?UYw<t6mv}]vE_b'LU:SkmMkU[mfx{wI:_Jz>tK6-*[
2024-05-10 04:52:33 UTC	16384	IN	Data Raw: 73 bb c1 7c bf 19 50 ba 19 da af 96 df 4d b8 dc ed 0d f5 6b d5 98 32 bd 1e d4 ac b6 c3 da d7 eb fa 9b 36 ad 31 a2 5f 75 9b cf c1 c4 01 13 bd 27 1e a5 f7 6c 78 d0 da c9 5e 15 77 38 e9 6e 8a bf c7 f8 19 73 35 c7 c8 dc e5 59 34 b5 c3 59 9f d1 05 38 ee ec f7 4c e2 6b a2 6f 54 bc ba 80 d5 6f c9 36 78 5c 99 fb b3 fe 33 aa 22 cd 71 de 6a dc 7a 67 ae 30 e5 78 76 fb 8a a7 13 ad a5 e6 95 b2 c2 ff 00 37 e8 16 bd 9a 6d e1 25 b7 c1 c6 00 dd 37 c8 ac a6 15 a1 a7 e6 f2 a3 b1 ce a1 3c ac bb 4e 14 4a cc fc 0d 54 d9 52 cb f6 da 2d e2 bc 7c 97 e0 5d 9b e4 c3 51 5c be cf 0f 0b ed a8 07 1b e4 dd 37 4b a4 c3 ed fb bf 29 26 de 96 f8 ec f6 ef b4 b4 b5 73 a2 ed e5 e0 d1 cd 59 b4 d9 af 56 e8 7e 1e 3f a4 1d 74 da 96 f5 9c a9 9f ba 25 f8 e9 e4 06 16 6e d4 76 e4 5f 2b c7 f5 3e 91 e3 Data Ascii: s\|PMk261_u'lx^w8ns5Y4Y8LkoTo6x\3"qjzg0xv7m%7<NJTR-\|]Q\7K)&sYV~?t%nv_+>
2024-05-10 04:52:33 UTC	9369	IN	Data Raw: af 97 89 2a 1a 8a 4d 9c 6a fe fd bf cc 55 ab 8d 63 f2 5f e5 5f c7 56 06 8d 6d 49 5b 36 7d 16 7f 1e ff 00 90 59 2a a9 8c ae 8b a7 97 ea 67 5a a9 f4 3c ff 00 53 fd 7f 80 95 ed 6b 47 57 d5 f5 f8 6b 1d 80 ad fb 5e f7 97 fd 3d 9f 82 ec 52 ae d6 e7 36 9e 9f a4 e8 84 ab 18 4b d5 dd e8 9f 65 f6 c1 49 6a ab 1f cc 0c f7 da 8a 2c a7 bf 58 fb 76 43 6d c4 fc cf 18 ed f6 e8 ba 0d b6 bd 34 97 3a e7 ef 5f 1e af ee 1d db dc 95 12 9a e1 cf 49 e9 fc c0 6a 34 d5 be fd 3f 9f e4 15 95 84 d3 bb cf 97 6d 7f 32 1f 1a ab 55 a6 27 2f fc ab ae ba 22 b7 fe d5 ab 5f 33 5a 7c 3f 20 05 47 5b 2f ea d7 1f c1 8d cd 74 53 77 85 fe 55 f1 fc 48 4d ad 13 b3 fb 43 7f c1 04 43 8a a6 de af c3 c6 3f 24 05 4e dc 25 ea 7e 3f 8c 74 f2 21 ac 6d d6 d3 0e 7f 0f e2 3f 56 ed b5 e9 d7 ed f8 02 7b 54 56 25 Data Ascii: MjUc__VmI[6}YgZ<SkGWk^=R6KeIj,XvCm4:_Ij4?m2U'/"_3Z\|? G[/tSwUHMCC?$N%~?t!m?V{TV%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49733	18.233.198.142	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:33 UTC	686	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=41DEE207BCB21265142D1EDC8E19F3BA; AWSALB=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; AWSALBCORS=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR
2024-05-10 04:52:33 UTC	971	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:33 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=SOTIChxJhMq8xB8ZqffzqjYdcwspK44kAWupmerVWGitn0RHm1hz+pFKNzlcRMgByJJ42ZizQR2LZ6ZZymPanVuGFyn9hjzyscC9KB/LL+XaRQGAbQcp6xpqbpPt; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/ Set-Cookie: AWSALBCORS=SOTIChxJhMq8xB8ZqffzqjYdcwspK44kAWupmerVWGitn0RHm1hz+pFKNzlcRMgByJJ42ZizQR2LZ6ZZymPanVuGFyn9hjzyscC9KB/LL+XaRQGAbQcp6xpqbpPt; Expires=Fri, 17 May 2024 04:52:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=30A86E2EFFBE43173A32466EF97B8693; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 05 Apr 2024 12:50:46 GMT ETag: "18eae4fbc88-c9be" Server: unknown
2024-05-10 04:52:33 UTC	8459	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-05-10 04:52:34 UTC	9000	IN	Data Raw: 01 0e 16 47 a6 50 d8 27 b0 02 c8 c5 a0 ac c0 16 72 1c ba 10 b2 5e 40 34 0d 47 03 01 43 04 86 4a 7b 01 40 20 01 8a 46 00 20 18 01 31 92 89 97 3e 43 01 88 02 00 94 c7 28 4a a3 e0 80 25 11 39 2f 82 25 55 4c 01 52 82 50 70 42 e0 80 a6 10 27 91 e4 00 03 21 20 4b f2 2b 22 4f 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 Data Ascii: GP'r^@4GCJ{@ F 1>C(J%9/%ULRPpB'! K+"O#` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl
2024-05-10 04:52:34 UTC	9000	IN	Data Raw: a0 1b 10 d8 80 8c f5 1d 75 18 2d 40 b2 4a 24 00 00 00 02 40 00 24 68 91 72 87 00 36 13 00 c8 9c 01 a5 5c 8d 93 42 98 10 f0 2c 0d 92 44 50 d6 a2 1a d4 aa b1 31 83 02 19 2c a6 44 10 5e 35 26 59 49 04 ae a0 4a 43 81 f2 5d 4c dd 98 17 c4 a5 a9 87 26 69 db 72 ca 35 00 04 02 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 Data Ascii: u-@J$@$hr6\B,DP1,D^5&YIJC]L&ir5$H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(
2024-05-10 04:52:34 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-05-10 04:52:34 UTC	9000	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd
2024-05-10 04:52:34 UTC	7187	IN	Data Raw: 95 64 9a 7e 3c 75 12 ca f2 ea 0b 29 27 88 c8 67 0f ca 40 76 5c 52 4b 5d 86 d4 66 72 36 de bd 13 9f 22 54 f2 d3 3d 7c 79 7c 40 2a a7 1b 60 a5 f5 42 78 59 15 57 f9 6d d3 c6 a2 51 10 b3 80 0b 37 ab f6 7b 42 65 43 1b fb 57 89 27 55 a6 20 0b ab 85 3e cc fe 9f a8 57 aa 0f 2e 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a Data Ascii: d~<u)'g@v\RK]fr6"T=\|y\|@*`BxYWmQ7{BeCW'U >W.y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49734	18.233.198.142	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:33 UTC	700	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=41DEE207BCB21265142D1EDC8E19F3BA; AWSALB=qNutXJebUXqU2QH9YOngSITT/MF5V1ISv0iUPp56USwJi9XO3OuiYfB6Ey5Maurg1fUNny3jbEiQoEK8P0jWhNoTWyn16Y5QFNF06w6iaI/9CSJSCdEwJXzOUcoR; AWSALBCORS=Qb/lCmRaUnA+wzJZkVyNz0WDe3imeaOqoMJ/L8Px4jqiR1uodeOtlxxcGGUSVB9to9ig05NV0MlcnvladI8ZZ2h8JdlNkDEP59f/b/gcA6wZrvNU3hcErxr8hMtl
2024-05-10 04:52:34 UTC	972	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:52:34 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; Expires=Fri, 17 May 2024 04:52:34 GMT; Path=/ Set-Cookie: AWSALBCORS=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; Expires=Fri, 17 May 2024 04:52:34 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=7F4CB56B27B61182F3F3B94F5C5AB7F0; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 05 Apr 2024 12:50:46 GMT ETag: "18eae4fbc88-183" Server: unknown
2024-05-10 04:52:34 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49739	23.221.246.93	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-10 04:52:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=180671 Date: Fri, 10 May 2024 04:52:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	23.221.246.93	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-10 04:52:38 UTC	870	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=180654 Date: Fri, 10 May 2024 04:52:38 GMT Content-Range: bytes 0-54/55 Content-Length: 55 Connection: close X-CID: 2
2024-05-10 04:52:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:39 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oMCbAYnCHtLXoCA&MD=eyUruT96 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-10 04:52:40 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b753863e-fd74-40fa-8d45-837b32093ed9 MS-RequestId: 8f21240c-0466-4708-865f-85a020a635df MS-CV: g1QisIzWIUGlVC3k.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 10 May 2024 04:52:39 GMT Connection: close Content-Length: 24490
2024-05-10 04:52:40 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-10 04:52:40 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49754	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:48 UTC	722	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7
2024-05-10 04:54:33 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:54:33 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=gV0hn6npRJMtqtUOvxouAULcEfbsgzOWcv0zbRDSlvIp+VHJcTMXpnz4h8cFHBNsmkI2BFpajRhEnm4H21uPr4cCnTYu4d8/1YrKMv4lpt15HLWMzTcNuqF2QM1R; Expires=Fri, 17 May 2024 04:52:48 GMT; Path=/ Set-Cookie: AWSALBCORS=gV0hn6npRJMtqtUOvxouAULcEfbsgzOWcv0zbRDSlvIp+VHJcTMXpnz4h8cFHBNsmkI2BFpajRhEnm4H21uPr4cCnTYu4d8/1YrKMv4lpt15HLWMzTcNuqF2QM1R; Expires=Fri, 17 May 2024 04:52:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-05-10 04:54:33 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-05-10 04:54:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49755	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:52:48 UTC	718	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=mvak1wQ/SzO4QVPwr9nZU80/j/CbVrIIVO6nhI3DNG3ZBe8wCCb118FaqqmID8h3RYx0DBeR3qigDp2/oLps2BdoW0JtX/qMPMD4VIhIbRc2mqATen2ZJITvpCT7
2024-05-10 04:54:33 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:54:33 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk; Expires=Fri, 17 May 2024 04:52:48 GMT; Path=/ Set-Cookie: AWSALBCORS=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk; Expires=Fri, 17 May 2024 04:52:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-05-10 04:54:33 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-05-10 04:54:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49762	52.84.52.50	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:17 UTC	564	OUT	GET /utag/usbank/global-sync/prod/utag.sync.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:17 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 154317 Connection: close Date: Fri, 10 May 2024 04:53:18 GMT Last-Modified: Thu, 09 May 2024 21:39:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: pWjKKuOm9qlmcWmJCcxmQTqZBT9AY4UT Accept-Ranges: bytes Server: AmazonS3 ETag: "075a3288cf00d4be548b281f564dc18a" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1a02ed973fa197a1dacf9e97520c66fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C3 X-Amz-Cf-Id: 0Vvzwy5jJQ_ZUlhH2ZN7oHVMok6zwgtw5YRlR7MdxLIa_ezu1JWDog== Cache-Control: max-age=300
2024-05-10 04:53:17 UTC	15781	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 73 79 6e 63 20 75 74 34 2e 30 2e 32 30 32 34 30 35 30 39 32 31 33 38 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 28 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 Data Ascii: //tealium universal tag - utag.sync ut4.0.202405092138, Copyright 2024 Tealium.com Inc. All Rights Reserved.var e=function(){"use strict";function e(t){return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:func
2024-05-10 04:53:17 UTC	209	IN	Data Raw: 65 3f 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 3a 5f 5b 65 3f 22 61 74 74 61 63 68 45 76 65 6e 74 22 3a 22 64 65 74 61 63 68 45 76 65 6e 74 22 5d 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 3d 22 30 31 32 33 34 35 36 37 38 39 22 2c 72 3d 22 22 2c 61 3d 22 22 2c 6f 3d 38 2c 73 3d 31 30 2c 6c 3d 31 30 3b 69 66 28 31 3d 3d 65 29 7b 66 6f 72 28 69 2b 3d 22 41 42 43 44 45 46 22 2c 74 3d 30 Data Ascii: e?"addEventListener":"removeEventListener"]("message",n):_[e?"attachEvent":"detachEvent"]("onmessage",n))}catch(e){}}},ne=function(e){var t,n,i="0123456789",r="",a="",o=8,s=10,l=10;if(1==e){for(i+="ABCDEF",t=0
2024-05-10 04:53:17 UTC	956	IN	Data Raw: 3b 31 36 3e 74 3b 74 2b 2b 29 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6f 29 2c 72 2b 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 6e 2b 31 29 2c 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6f 29 2c 61 2b 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 6e 2b 31 29 2c 6f 3d 31 36 3b 72 65 74 75 72 6e 20 72 2b 22 2d 22 2b 61 7d 66 6f 72 28 74 3d 30 3b 31 39 3e 74 3b 74 2b 2b 29 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 73 29 2c 72 2b 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 6e 2b 31 29 2c 30 3d 3d 3d 74 26 26 39 3d 3d 6e 3f 73 3d 33 3a 28 31 3d 3d 74 7c 7c 32 3d 3d 74 29 26 26 31 30 21 3d 73 26 26 32 3e 6e 3f 73 3d 31 30 3a 32 3c 74 26 26 28 Data Ascii: ;16>t;t++)n=Math.floor(Math.random()o),r+=i.substring(n,n+1),n=Math.floor(Math.random()o),a+=i.substring(n,n+1),o=16;return r+"-"+a}for(t=0;19>t;t++)n=Math.floor(Math.random()*s),r+=i.substring(n,n+1),0===t&&9==n?s=3:(1==t\|\|2==t)&&10!=s&&2>n?s=10:2<t&&(
2024-05-10 04:53:17 UTC	12792	IN	Data Raw: 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 29 21 3d 3d 4f 62 6a 65 63 74 28 6e 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 68 61 6e 64 6c 65 43 4f 52 53 45 72 72 6f 72 28 74 2c 6e 75 6c 6c 2c 22 52 65 73 70 6f 6e 73 65 20 69 73 20 6e 6f 74 20 4a 53 4f 4e 22 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 68 61 6e 64 6c 65 43 4f 52 53 45 72 72 6f 72 28 74 2c 65 2c 22 45 72 72 6f 72 20 70 61 72 73 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 61 73 20 4a 53 4f 4e 22 29 7d 74 72 79 7b 66 6f 72 28 76 61 72 20 69 3d 74 2e 63 61 6c 6c 62 61 63 6b 2c 72 3d 5f 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 3d 72 5b 69 5b 6f 5d 5d 3b 72 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 61 2e 68 61 6e 64 6c 65 43 4f 52 53 45 72 72 6f 72 28 Data Ascii: JSON.parse(e))!==Object(n))return void a.handleCORSError(t,null,"Response is not JSON")}catch(e){return void a.handleCORSError(t,e,"Error parsing response as JSON")}try{for(var i=t.callback,r=_,o=0;o<i.length;o++)r=r[i[o]];r(n)}catch(e){a.handleCORSError(
2024-05-10 04:53:17 UTC	12792	IN	Data Raw: 69 29 29 7d 7d 3a 6d 65 7d 2c 43 65 3d 75 2c 49 65 3d 6e 65 77 20 43 65 28 22 5b 41 44 4f 42 45 20 4f 50 54 2d 49 4e 5d 22 29 2c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 29 3d 3d 3d 6e 7d 2c 53 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 76 65 28 65 2c 22 73 74 72 69 6e 67 22 29 3f 5b 65 5d 3a 74 7c 7c 5b 5d 7d 2c 44 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 72 65 74 75 72 6e 21 21 74 2e 6c 65 6e 67 74 68 26 26 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 5b 74 5d 7d 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: i))}}:me},Ce=u,Ie=new Ce("[ADOBE OPT-IN]"),ve=function(t,n){return e(t)===n},Se=function(e,t){return e instanceof Array?e:ve(e,"string")?[e]:t\|\|[]},De=function(e){var t=Object.keys(e);return!!t.length&&t.every(function(t){return!0===e[t]})},Ae=function(e)
2024-05-10 04:53:17 UTC	9232	IN	Data Raw: 74 4f 70 74 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 67 2e 5f 67 65 74 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 55 52 4c 44 61 74 61 28 22 5f 73 65 74 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 46 69 65 6c 64 73 22 29 2c 69 3d 6e 2e 75 72 6c 3b 69 66 28 75 28 29 29 72 65 74 75 72 6e 20 67 2e 5f 67 65 74 52 65 6d 6f 74 65 46 69 65 6c 64 28 22 4d 43 4f 50 54 4f 55 54 22 2c 69 2c 65 2c 74 2c 6e 29 3b 69 66 28 67 2e 5f 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 22 6c 69 62 65 72 61 74 65 64 4f 70 74 4f 75 74 22 2c 65 29 2c 6e 75 6c 6c 21 3d 3d 67 2e 5f 6c 69 62 65 72 61 74 65 64 4f 70 74 4f 75 74 29 72 65 74 75 72 6e 20 67 2e 5f 63 61 6c 6c 41 6c 6c 43 61 6c 6c 62 61 63 6b 73 28 22 6c 69 62 65 72 61 74 65 64 4f 70 74 Data Ascii: tOptOut=function(e,t){var n=g._getAudienceManagerURLData("_setMarketingCloudFields"),i=n.url;if(u())return g._getRemoteField("MCOPTOUT",i,e,t,n);if(g._registerCallback("liberatedOptOut",e),null!==g._liberatedOptOut)return g._callAllCallbacks("liberatedOpt
2024-05-10 04:53:17 UTC	8949	IN	Data Raw: 69 65 6e 63 65 4d 61 6e 61 67 65 72 53 65 72 76 65 72 2c 6e 3d 22 22 2c 69 3d 67 2e 5f 67 65 74 46 69 65 6c 64 28 41 29 2c 72 3d 67 2e 5f 67 65 74 46 69 65 6c 64 28 6b 2c 21 30 29 2c 61 3d 67 2e 5f 67 65 74 46 69 65 6c 64 28 4f 29 2c 6f 3d 61 26 26 61 21 3d 3d 54 3f 22 26 64 5f 63 69 64 5f 69 63 3d 41 56 49 44 25 30 31 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 3a 22 22 3b 69 66 28 67 2e 6c 6f 61 64 53 53 4c 26 26 67 2e 61 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 53 65 72 76 65 72 53 65 63 75 72 65 26 26 28 74 3d 67 2e 61 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 53 65 72 76 65 72 53 65 63 75 72 65 29 2c 74 29 7b 76 61 72 20 73 2c 6c 2c 63 3d 67 2e 67 65 74 43 75 73 74 6f 6d 65 72 49 44 73 28 29 3b 69 66 28 63 29 66 6f 72 28 73 Data Ascii: ienceManagerServer,n="",i=g._getField(A),r=g._getField(k,!0),a=g._getField(O),o=a&&a!==T?"&d_cid_ic=AVID%01"+encodeURIComponent(a):"";if(g.loadSSL&&g.audienceManagerServerSecure&&(t=g.audienceManagerServerSecure),t){var s,l,c=g.getCustomerIDs();if(c)for(s
2024-05-10 04:53:17 UTC	12792	IN	Data Raw: 6f 73 74 6e 61 6d 65 3d 3d 27 65 78 70 65 72 69 65 6e 63 65 2e 61 64 6f 62 65 2e 63 6f 6d 27 29 7b 77 69 6e 64 6f 77 2e 61 64 6f 62 65 3d 77 69 6e 64 6f 77 2e 61 64 6f 62 65 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 61 64 6f 62 65 2e 74 61 72 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2c 65 3d 21 6e 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 7c 7c 6e 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3e 3d 31 30 2c 72 3d 6e 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 65 2c 6f 3d 74 2e 74 61 72 67 65 74 47 6c 6f 62 61 6c 53 65 74 74 69 6e 67 73 3b 69 66 28 21 72 7c 7c 6f 26 26 21 31 3d 3d Data Ascii: ostname=='experience.adobe.com'){window.adobe=window.adobe\|\|{},window.adobe.target=function(){"use strict";var t=window,n=document,e=!n.documentMode\|\|n.documentMode>=10,r=n.compatMode&&"CSS1Compat"===n.compatMode&&e,o=t.targetGlobalSettings;if(!r\|\|o&&!1==
2024-05-10 04:53:17 UTC	3592	IN	Data Raw: 3f 3a 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 2e 2a 29 29 3f 29 2f 2c 6c 6f 6f 73 65 3a 2f 5e 28 3f 3a 28 3f 21 5b 5e 3a 40 5d 2b 3a 5b 5e 3a 40 5c 2f 5d 2a 40 29 28 5b 5e 3a 5c 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 5c 2f 5c 2f 29 3f 28 28 3f 3a 28 28 5b 5e 3a 40 5d 2a 29 28 3f 3a 3a 28 5b 5e 3a 40 5d 2a 29 29 3f 29 3f 40 29 3f 28 5b 5e 3a 5c 2f 3f 23 5d 2a 29 28 3f 3a 3a 28 5c 64 2a 29 29 3f 29 28 28 28 5c 2f 28 3f 3a 5b 5e 3f 23 5d 28 3f 21 5b 5e 3f 23 5c 2f 5d 2a 5c 2e 5b 5e 3f 23 5c 2f 2e 5d 2b 28 3f 3a 5b 3f 23 5d 7c 24 29 29 29 2a 5c 2f 3f 29 3f 28 5b 5e 3f 23 5c 2f 5d 2a 29 29 28 3f 3a 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 2e 2a 29 29 3f 29 2f 7d 7d 2c 72 3d 65 2e 70 61 72 73 65 72 5b 6e 2e 73 74 72 69 63 74 4d 6f 64 65 3f 22 73 Data Ascii: ?:\?([^#]))?(?:#(.))?)/,loose:/^(?:(?![^:@]+:[^:@\/]@)([^:\/?#.]+):)?(?:\/\/)?((?:(([^:@])(?::([^:@]))?)?@)?([^:\/?#])(?::(\d))?)(((\/(?:[^?#](?![^?#\/]\.[^?#\/.]+(?:[?#]\|$)))\/?)?([^?#\/]))(?:\?([^#]))?(?:#(.))?)/}},r=e.parser[n.strictMode?"s
2024-05-10 04:53:17 UTC	1514	IN	Data Raw: 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 6e 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 29 7b 76 61 72 20 65 3d 6e 2e 74 68 65 6e 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 6e 2c 76 6f 69 64 20 61 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 72 3d 65 2c 69 3d 6e 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 Data Ascii: nnot be resolved with itself.");if(n&&("object"==typeof n\|\|"function"==typeof n)){var e=n.then;if(n instanceof o)return t._state=3,t._value=n,void a(t);if("function"==typeof e)return void f((r=e,i=n,function(){r.apply(i,arguments)}),t)}t._state=1,t._value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49763	52.84.125.87	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:17 UTC	548	OUT	GET /adrum/adrum-latest.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:17 UTC	781	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 121474 Connection: close Date: Sat, 27 Apr 2024 09:22:32 GMT Server: nginx/1.16.1 Last-Modified: Wed, 17 Apr 2024 09:59:49 GMT ETag: "661f9d95-1da82" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ba886063c801beea10f1826f4374a56e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C1 X-Amz-Cf-Id: ag27_NCruui1W64oSdPIiof0NCQx8Ic4B5qv0jSj19icb7RK5ZS1TA== Age: 1107045
2024-05-10 04:53:17 UTC	15603	IN	Data Raw: 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 32 31 20 47 6f 6f 67 6c 65 20 4c 4c 43 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 Data Ascii: ;/* Copyright (c) 2010-2021 Google LLC. http://angular.io/license Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restricti
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 61 72 20 6e 3d 22 22 2c 6e 3d 22 22 2c 68 3d 28 6e 65 77 20 77 69 6e 64 6f 77 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 65 2c 68 3d 61 2e 75 74 69 6c 73 2e 69 73 53 74 72 69 6e 67 28 68 29 3f 68 2e 73 75 62 73 74 72 69 6e 67 28 35 29 3a 68 2b 22 22 3b 73 28 65 29 7c 7c 28 65 3d 61 2e 75 74 69 6c 73 2e 6d 61 70 28 67 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 22 6e 75 6c 6c 22 3a 76 6f 69 64 20 30 3d 3d 61 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 22 22 3d 3d 3d 61 3f 22 27 27 22 3a 61 7d 29 29 3b 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 20 6d 2e 78 61 3a 63 61 73 65 20 6d 2e 73 70 3a 6e 3d 61 2e 24 62 5b 62 5d 3b 6e 3d 73 28 6c 29 3f 22 22 2b 6e 2b 64 2b 22 5c 6e 20 69 6e 20 22 2b 6c 2b 22 28 22 2b 65 2e 6a 6f Data Ascii: ar n="",n="",h=(new window.Error).stack,e,h=a.utils.isString(h)?h.substring(5):h+"";s(e)\|\|(e=a.utils.map(g,function(a){return null===a?"null":void 0==a?"undefined":""===a?"''":a}));switch(b){case m.xa:case m.sp:n=a.$b[b];n=s(l)?""+n+d+"\n in "+l+"("+e.jo
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 30 22 29 3a 64 26 26 61 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 2e 73 65 74 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 42 75 66 66 65 72 53 69 7a 65 29 3f 0a 64 2e 73 65 74 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 42 75 66 66 65 72 53 69 7a 65 28 67 29 3a 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 33 31 22 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 4a 62 28 29 3b 69 66 28 74 68 69 73 2e 72 65 73 6f 75 72 63 65 42 75 66 66 65 72 2e 6c 65 6e 67 74 68 2b 62 2e 6c 65 6e 67 74 68 3e 74 68 69 73 2e 6e 66 29 72 65 74 75 72 6e 20 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 33 32 22 29 2c 74 68 69 73 2e 72 65 73 6f 75 72 63 65 42 75 66 66 65 72 2e 63 6f 6e 63 61 74 28 62 2e 73 6c 69 63 Data Ascii: 0"):d&&a.utils.isFunction(d.setResourceTimingBufferSize)?d.setResourceTimingBufferSize(g):a.logInfo("M31")};e.prototype.kg=function(){var b=this.Jb();if(this.resourceBuffer.length+b.length>this.nf)return a.logInfo("M32"),this.resourceBuffer.concat(b.slic
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 2c 6c 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 41 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 67 2c 6c 2c 6e 29 7b 69 66 28 61 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 6c 29 26 26 6c 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 26 26 0a 61 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 6c 2e 73 65 74 29 26 26 21 61 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 6c 2e 4c 29 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 62 2c 67 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 74 72 79 7b 62 3d 6c 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 64 3b 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 63 61 Data Ascii: ,l)};k.prototype.An=function(b,g,l,n){if(a.utils.isDefined(l)&&l.configurable&&a.utils.isDefined(l.set)&&!a.utils.isDefined(l.L)){var h=this;Object.defineProperty(b,g,{set:function(a){var b;try{b=l.set.apply(this,arguments)}catch(d){throw d;}finally{n.ca
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 20 62 3d 6e 75 6c 6c 3b 74 72 79 7b 62 3d 6e 75 6c 6c 3d 3d 3d 77 69 6e 64 6f 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 6e 29 7b 7d 6e 75 6c 6c 21 3d 62 26 26 62 2e 64 6f 53 63 72 6f 6c 6c 26 26 0a 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 69 66 28 21 64 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 62 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 6e 29 7b 61 2e 75 74 69 6c 73 2e 6f 53 54 4f 28 72 2c 31 30 29 3b 72 65 74 75 72 6e 7d 64 2e 52 62 28 29 7d 7d 28 29 7d 65 6c 73 65 20 61 2e 65 72 72 6f 72 28 22 4d 31 31 30 22 29 3b 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 31 31 31 22 29 7d 3b 64 2e 52 62 3d 66 75 6e 63 74 69 6f 6e 28 62 Data Ascii: b=null;try{b=null===window.frameElement?document.documentElement:null}catch(n){}null!=b&&b.doScroll&&function r(){if(!d.isReady){try{b.doScroll("left")}catch(n){a.utils.oSTO(r,10);return}d.Rb()}}()}else a.error("M110");a.logInfo("M111")};d.Rb=function(b
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 29 26 26 28 64 2e 4c 3d 21 30 2c 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 26 26 2f 5e 28 6c 6f 61 64 7c 65 72 72 6f 72 7c 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 29 24 2f 2e 74 65 73 74 28 62 29 26 26 64 29 29 7b 76 61 72 20 6e 3d 71 2e 4e 6f 28 64 29 3b 69 66 28 6e 29 7b 76 61 72 20 68 3d 72 28 61 72 67 75 6d 65 6e 74 73 29 3b 68 5b 31 5d 3d 6e 3b 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 31 36 30 22 29 3b 0a 72 65 74 75 72 6e 20 68 7d 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 31 36 31 22 2c 62 2c 64 29 7d 7d 2c 6e 75 6c 6c 2c 22 58 48 52 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 3b 67 3d 61 2e 75 74 69 6c 73 2e 6c 67 28 74 68 69 73 2e 48 2c 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: )&&(d.L=!0,this instanceof XMLHttpRequest&&/^(load\|error\|readystatechange)$/.test(b)&&d)){var n=q.No(d);if(n){var h=r(arguments);h[1]=n;a.logInfo("M160");return h}a.logInfo("M161",b,d)}},null,"XHR.addEventListener");g=a.utils.lg(this.H,"removeEventListen
2024-05-10 04:53:17 UTC	16384	IN	Data Raw: 63 68 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 64 3d 64 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 77 69 6e 64 6f 77 2c 22 50 72 6f 6d 69 73 65 22 29 3b 76 61 72 20 6e 3d 64 2e 73 65 74 2c 6c 3d 64 2e 67 65 74 3b 70 28 6e 29 26 26 28 64 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 21 30 3d 3d 3d 64 2e 61 67 65 6e 74 50 72 6f 6d 69 73 65 3f 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 32 31 32 22 29 3a 28 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 62 28 61 2e 6a 63 29 3f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 32 31 33 22 29 2c 68 2e 73 65 74 55 70 28 29 29 29 7d 29 3b 70 28 6c 29 26 26 28 64 Data Ascii: ched=function(){});d=d\|\|Object.getOwnPropertyDescriptor(window,"Promise");var n=d.set,l=d.get;p(n)&&(d.set=function(d){!0===d.agentPromise?a.logInfo("M212"):(n.apply(this,arguments),b(a.jc)?n.apply(this,arguments):(a.logInfo("M213"),h.setUp()))});p(l)&&(d
2024-05-10 04:53:17 UTC	7567	IN	Data Raw: 2c 74 68 69 73 2e 74 62 29 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 65 72 66 2e 67 65 74 45 6e 74 72 79 42 79 4e 61 6d 65 28 61 2e 65 76 65 6e 74 73 2e 67 2e 78 69 29 3b 61 2e 6c 6f 67 49 6e 66 6f 28 22 4d 32 35 34 22 2c 74 68 69 73 2e 74 62 2c 62 29 3b 72 65 74 75 72 6e 20 30 3c 74 68 69 73 2e 74 62 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 41 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 57 63 3a 30 7d 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6e 67 2d 76 69 65 77 2c 20 5b 6e 67 2d 76 69 65 77 5d 2c 20 2e 6e 67 2d 76 69 65 77 2c 20 5b 75 69 2d 76 69 65 77 5d 22 29 2c 62 3d 6b 28 62 2c 61 6e 67 75 6c 61 72 2e 65 6c Data Ascii: ,this.tb)};n.prototype.Zl=function(){var b=this.perf.getEntryByName(a.events.g.xi);a.logInfo("M254",this.tb,b);return 0<this.tb};n.prototype.Ak=function(){var a={Wc:0},b=document.querySelectorAll("ng-view, [ng-view], .ng-view, [ui-view]"),b=k(b,angular.el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49768	107.20.120.138	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:19 UTC	736	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:19 UTC	947	IN	HTTP/1.1 302 Found Date: Fri, 10 May 2024 04:53:19 GMT Content-Length: 0 Connection: close X-TID: X/HSKAKTRps= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.usbank.com Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 DCS: dcs-prod-va6-2-v060-0ed231ca9.edge-va6.demdex.com 0 ms set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49773	52.84.52.50	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:19 UTC	563	OUT	GET /utag/usbank/dotcom-homepage/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:19 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 341457 Connection: close Last-Modified: Thu, 02 May 2024 16:42:44 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: qm_TqBnMoibl8RYY21O01guuqI_j6BYf Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 May 2024 04:53:20 GMT ETag: "6e934b5a78b3088a03b53b6d0b6e7aef" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2e562a075bb04f6a4549186f5766f046.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C3 X-Amz-Cf-Id: XlT-S2Ur89f5k15LIkEwi5QXcx_BZtJMpxkx3hO1X1e6jlEfG_OQBQ== Cache-Control: max-age=300
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 35 30 32 31 36 34 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 74 72 79 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 64 61 65 50 72 69 76 61 63 79 3d 77 69 6e 64 6f 77 2e 64 61 65 50 72 69 76 61 63 79 7c 7c 7b 61 64 6f 62 65 3a 7b 6f 70 74 4f 75 74 45 76 65 6e 74 3a 27 65 76 65 6e 74 38 33 38 27 2c 6f 70 74 4f 75 74 Data Ascii: //tealium universal tag - utag.loader ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{try{try{window.daePrivacy=window.daePrivacy\|\|{adobe:{optOutEvent:'event838',optOut
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 21 31 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 7b 69 66 28 21 74 68 69 73 2e 5f 5f 64 61 74 61 4d 61 74 63 68 65 73 28 61 2c 73 2c 21 31 29 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 61 21 3d 3d 73 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 28 21 6e 26 26 21 74 68 69 73 2e 5f 5f 64 61 74 61 4d 61 74 63 68 65 73 28 69 2c 74 2c 21 30 29 29 7d 2c 5f 5f 76 61 6c 69 64 61 74 65 54 68 72 6f 74 74 6c 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 5f 76 61 6c 69 64 61 74 69 6f 6e 43 6f 6e 66 69 67 2e 54 68 72 6f 74 74 6c 69 6e 67 3b 76 6f 69 64 20 30 21 3d 3d 69 2e 65 76 65 6e 74 54 69 6d 65 73 5b 65 5d 26 26 6e 65 77 20 44 61 74 65 2d 69 2e 65 76 65 6e 74 54 69 6d 65 73 5b Data Ascii: !1;if("object"==typeof a){if(!this.__dataMatches(a,s,!1))return!1}else if(a!==s)return!1}return!(!n&&!this.__dataMatches(i,t,!0))},__validateThrottling:function(e,t){var i=this.__validationConfig.Throttling;void 0!==i.eventTimes[e]&&new Date-i.eventTimes[
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 29 7b 52 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 52 48 2c 66 61 6c 73 65 29 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 72 75 6e 5f 72 65 61 64 79 5f 71 28 29 7d 3b 69 66 28 21 75 74 61 67 2e 63 66 67 2e 64 6f 6d 5f 63 6f 6d 70 6c 65 74 65 29 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 52 48 2c 66 61 6c 73 65 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 75 74 61 67 2e 6c 6f 61 64 65 72 2e 72 75 6e 5f 72 65 61 64 79 5f 71 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 20 69 66 28 64 6f Data Ascii: ){RH=function(){document.removeEventListener("DOMContentLoaded",RH,false);utag.loader.run_ready_q()};if(!utag.cfg.dom_complete)document.addEventListener("DOMContentLoaded",RH,false);window.addEventListener("load",utag.loader.run_ready_q,false);}else if(do
2024-05-10 04:53:19 UTC	15244	IN	Data Raw: 65 53 63 72 69 70 74 73 28 29 7b 77 69 6e 64 6f 77 2e 43 6f 62 72 6f 77 73 65 3d 7b 7d 3b 63 6f 6e 73 74 20 43 4f 42 52 4f 57 53 45 5f 41 53 53 49 53 54 5f 43 53 53 5f 53 45 4c 45 43 54 4f 52 53 3d 5b 22 5b 64 61 74 61 2d 63 6f 62 72 6f 77 73 65 2d 66 75 6e 63 74 69 6f 6e 3d 27 63 6f 6e 74 72 6f 6c 6c 61 62 6c 65 27 5d 22 2c 22 2e 63 6f 62 72 6f 77 73 65 2d 61 73 73 69 73 74 20 69 6e 70 75 74 22 2c 22 2e 63 6f 62 72 6f 77 73 65 2d 61 73 73 69 73 74 20 73 65 6c 65 63 74 22 2c 22 2e 63 6f 62 72 6f 77 73 65 2d 61 73 73 69 73 74 20 2e 73 65 61 72 63 68 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 62 74 6e 22 2c 22 2e 63 6f 62 72 6f 77 73 65 2d 61 73 73 69 73 74 20 2e 73 65 61 72 63 68 5f 5f 6c 69 73 74 2d 2d 76 69 65 77 2d 6d 6f 72 65 22 2c 22 2e 63 6f 62 72 6f 77 73 Data Ascii: eScripts(){window.Cobrowse={};const COBROWSE_ASSIST_CSS_SELECTORS=["[data-cobrowse-function='controllable']",".cobrowse-assist input",".cobrowse-assist select",".cobrowse-assist .search__list-item-btn",".cobrowse-assist .search__list--view-more",".cobrows
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 28 29 3b 7d 29 3b 7d 0a 69 66 28 54 45 41 4c 49 55 4d 5f 50 52 4f 46 49 4c 45 53 5f 53 49 54 45 43 41 54 2e 69 6e 63 6c 75 64 65 73 28 43 55 52 52 45 4e 54 5f 54 45 41 4c 49 55 4d 5f 50 52 4f 46 49 4c 45 29 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5f 53 43 28 29 3b 7d 0a 76 69 73 69 74 6f 72 49 64 5f 66 61 69 6c 53 61 66 65 5f 43 42 28 29 7d 7d 0a 76 61 72 20 63 6f 62 72 6f 77 73 65 53 63 72 69 70 74 54 61 67 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 62 72 6f 77 73 65 73 63 72 69 70 74 27 29 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 47 4c 41 4e 43 45 26 26 21 28 74 79 70 65 6f 66 28 63 6f 62 72 6f 77 73 65 53 63 72 69 70 74 54 61 67 29 21 3d 27 75 6e 64 65 66 69 6e 65 64 Data Ascii: ();});}if(TEALIUM_PROFILES_SITECAT.includes(CURRENT_TEALIUM_PROFILE)){addEventListener_SC();}visitorId_failSafe_CB()}}var cobrowseScriptTag=document.getElementById('cobrowsescript')if("undefined"==typeof GLANCE&&!(typeof(cobrowseScriptTag)!='undefined
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 32 29 29 7b 6f 76 65 72 6c 61 79 28 27 75 73 62 3a 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 63 6f 6e 73 75 6d 65 72 20 70 72 69 76 61 63 79 3a 63 61 6c 69 66 6f 72 6e 69 61 20 70 72 69 76 61 63 79 20 63 68 6f 69 63 65 73 27 29 3b 24 28 27 62 75 74 74 6f 6e 2e 70 72 69 6d 61 72 79 27 29 2e 6f 6e 28 27 6d 6f 75 73 65 64 6f 77 6e 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 73 56 69 73 69 62 6c 65 28 6d 6f 64 61 6c 4f 70 74 4f 75 74 53 75 63 63 65 73 73 53 65 6c 65 63 74 6f 72 31 29 7c 7c 69 73 56 69 73 69 62 6c 65 28 6d 6f 64 61 6c 4f 70 74 4f 75 74 53 75 63 63 65 73 73 53 65 6c 65 63 74 6f 72 32 29 29 7b 6f 76 65 72 6c 61 79 28 27 75 73 62 3a 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 63 6f 6e 73 Data Ascii: 2)){overlay('usb:information:consumer privacy:california privacy choices');$('button.primary').on('mousedown',function(){setTimeout(function(){if(isVisible(modalOptOutSuccessSelector1)\|\|isVisible(modalOptOutSuccessSelector2)){overlay('usb:information:cons
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 61 28 64 29 29 7b 63 3d 68 28 62 29 2b 22 24 22 2b 68 28 64 29 3b 69 66 28 21 30 3d 3d 3d 74 68 69 73 2e 64 65 63 6c 61 72 65 64 49 64 43 6f 6d 62 6f 73 5b 63 5d 29 72 65 74 75 72 6e 22 73 65 74 44 65 63 6c 61 72 65 64 49 64 3a 20 63 6f 6d 62 6f 20 65 78 69 73 74 73 20 66 6f 72 20 74 79 70 65 20 27 22 2b 74 2b 22 27 22 3b 74 68 69 73 2e 64 65 63 6c 61 72 65 64 49 64 43 6f 6d 62 6f 73 5b 63 5d 3d 21 30 3b 74 68 69 73 2e 64 65 63 6c 61 72 65 64 49 64 5b 74 5d 3d 7b 64 70 69 64 3a 62 2c 64 70 75 75 69 64 3a 64 7d 3b 72 65 74 75 72 6e 22 73 65 74 44 65 63 6c 61 72 65 64 49 64 3a 20 73 75 63 63 65 65 64 65 64 20 66 6f 72 20 74 79 70 65 20 27 22 2b 74 2b 22 27 22 7d 7d 0a 72 65 74 75 72 6e 22 73 65 74 44 65 63 6c 61 72 65 64 49 64 3a 20 66 61 69 6c 65 64 20 66 Data Ascii: a(d)){c=h(b)+"$"+h(d);if(!0===this.declaredIdCombos[c])return"setDeclaredId: combo exists for type '"+t+"'";this.declaredIdCombos[c]=!0;this.declaredId[t]={dpid:b,dpuuid:d};return"setDeclaredId: succeeded for type '"+t+"'"}}return"setDeclaredId: failed f
2024-05-10 04:53:19 UTC	14808	IN	Data Raw: 3d 36 45 34 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 61 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2b 28 63 3f 22 3b 65 78 70 69 72 65 73 3d 22 2b 28 6e 65 77 20 44 61 74 65 28 6b 2e 67 65 74 54 69 6d 65 28 29 2b 63 29 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 22 22 29 2b 28 64 3f 22 3b 70 61 74 68 3d 22 2b 64 3a 22 22 29 2b 28 66 3f 22 3b 64 6f 6d 61 69 6e 3d 22 2b 66 3a 22 22 29 2b 28 67 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 29 7d 2c 65 78 74 65 6e 64 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 Data Ascii: =6E4);document.cookie=a+"="+encodeURIComponent(b)+(c?";expires="+(new Date(k.getTime()+c)).toUTCString():"")+(d?";path="+d:"")+(f?";domain="+f:"")+(g?";secure":"")},extendArray:function(a,b){return a instanceof Array&&b instanceof Array?(Array.prototype.p
2024-05-10 04:53:19 UTC	1576	IN	Data Raw: 67 6e 61 6c 73 28 62 2e 73 69 67 6e 61 6c 73 29 2e 73 75 62 6d 69 74 28 29 7d 63 61 74 63 68 28 63 29 7b 7d 66 69 6e 61 6c 6c 79 7b 61 2e 63 61 6c 6c 65 64 42 61 63 6b 3d 21 30 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 70 74 69 6f 6e 61 6c 73 2e 61 66 74 65 72 52 65 73 75 6c 74 26 26 61 2e 6f 70 74 69 6f 6e 61 6c 73 2e 61 66 74 65 72 52 65 73 75 6c 74 28 29 7d 7d 3b 64 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 64 29 3b 74 68 69 73 2e 73 63 72 69 70 74 73 53 65 6e 74 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 22 52 65 71 75 65 73 74 20 73 65 6e 74 20 74 6f 20 50 65 65 72 33 39 22 7d 2c 70 72 6f 63 65 73 73 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 2c 64 2c 62 2c Data Ascii: gnals(b.signals).submit()}catch(c){}finally{a.calledBack=!0,"function"===typeof a.optionals.afterResult&&a.optionals.afterResult()}};d.parentNode.insertBefore(c,d);this.scriptsSent.push(c);return"Request sent to Peer39"},processData:function(a){var c,d,b,
2024-05-10 04:53:19 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 74 68 69 73 3b 61 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 31 38 2e 30 22 3b 76 61 72 20 68 3d 77 69 6e 64 6f 77 3b 68 2e 73 5f 63 5f 69 6e 7c 7c 28 68 2e 73 5f 63 5f 69 6c 3d 5b 5d 2c 68 2e 73 5f 63 5f 69 6e 3d 30 29 3b 61 2e 5f 69 6c 3d 68 2e 73 5f 63 5f 69 6c 3b 61 2e 5f 69 6e 3d 68 2e 73 5f 63 5f 69 6e 3b 61 2e 5f 69 6c 5b 61 2e 5f 69 6e 5d 3d 61 3b 68 2e 73 5f 63 5f 69 6e 2b 2b 3b 61 2e 5f 63 3d 22 73 5f 63 22 3b 76 61 72 20 71 3d 68 2e 41 70 70 4d 65 61 73 75 72 65 6d 65 6e 74 2e 67 63 3b 71 7c 7c 28 71 3d 6e 75 6c 6c 29 3b 76 61 72 20 70 3d 68 2c 6d 2c 73 3b 74 72 79 7b 66 6f 72 28 6d 3d 70 2e 70 61 72 65 6e 74 2c 73 3d 70 2e 6c 6f 63 61 74 69 6f 6e 3b 6d 26 26 6d 2e 6c 6f 63 61 74 69 6f 6e 26 26 73 26 26 22 22 2b 6d 2e 6c 6f 63 61 74 Data Ascii: var a=this;a.version="2.18.0";var h=window;h.s_c_in\|\|(h.s_c_il=[],h.s_c_in=0);a._il=h.s_c_il;a._in=h.s_c_in;a._il[a._in]=a;h.s_c_in++;a._c="s_c";var q=h.AppMeasurement.gc;q\|\|(q=null);var p=h,m,s;try{for(m=p.parent,s=p.location;m&&m.location&&s&&""+m.locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49775	107.20.120.138	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:19 UTC	794	OUT	GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058
2024-05-10 04:53:19 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:19 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1337 Connection: close X-TID: c9VAlNk3TI4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.usbank.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v060-0584558f0.edge-va6.demdex.com 2 ms set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:19 UTC	1337	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"21375164595563744931909202357212933986","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49784	63.140.39.248	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	1994	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=675616D751E567410A490D4C%40AdobeOrg&mid=21375164595563744931909202357212933986&ts=1715316799067 HTTP/1.1 Host: smetrics.usbank.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=A39A513F9A6783D53943FD7E26119BED~-1~YAAQkBwhF0EfK1OPAQAAUyrZYAt5skM26421sa07v1OAfBLq/pwpKMMgYf57kfPtZAhJoD7WmLquPmcYD3hZ8iZVKAOBrc6enrKYVE2zlM8ze9sTtSc4LZJaS26Ld6GE9CzL2gUoyg4zmrYE9MPNQzqY3Akmwr+oaR8s1PaJB6IjroY1lX7Ev/qKEbHjcU7rCw+qZpqDNWD8aAtWzDwGbPjWEzXYu5a0p9u7B8Oxg/dI8ReuVAOtPZbh3+ZGuz0i+AKDzQq714rZgXgU00rsiPK1TJwh1gGTe3SgYEsQC3aZhlXcR998y9PkjCRy7zClQOeFotUbFZVjdqRrpIe9bep9/wGsDGE=~-1~-1~-1; bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; AMCV_675616D751E567410A490D4C%40AdobeOrg [TRUNCATED]
2024-05-10 04:53:21 UTC	670	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:21 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C21375164595563744931909202357212933986; Path=/; Domain=usbank.com; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:53 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-10 04:53:21 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 7d Data Ascii: {"mid":"21375164595563744931909202357212933986"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49785	18.210.94.219	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	762	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: usbank.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058
2024-05-10 04:53:21 UTC	604	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:21 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: JhFrtn0rSXk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Thu, 9 May 2024 11:55:48 GMT DCS: dcs-prod-va6-1-v060-0d9e95ee1.edge-va6.demdex.com 0 ms
2024-05-10 04:53:21 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49783	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oMCbAYnCHtLXoCA&MD=eyUruT96 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-10 04:53:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 28869c43-6280-4d1d-a125-6858d1842103 MS-RequestId: bd681e9e-ccba-4fe7-a762-6a71682053cd MS-CV: VFkv1qiqa0SRPb0q.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 10 May 2024 04:53:20 GMT Connection: close Content-Length: 25457
2024-05-10 04:53:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-10 04:53:21 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49792	54.145.109.191	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	533	OUT	GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=675616D751E567410A490D4C%40AdobeOrg&d_nsid=0&ts=1715316797084 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058
2024-05-10 04:53:21 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:21 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1323 Connection: close X-TID: JridMFp6TjE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v060-0204948b9.edge-va6.demdex.com 1 ms set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:21 UTC	1323	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"21375164595563744931909202357212933986","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49791	63.140.39.35	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	691	OUT	POST /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1 Host: usbank.tt.omtrdc.net Connection: keep-alive Content-Length: 829 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	829	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 34 61 62 62 61 30 30 66 36 31 32 34 33 33 62 62 61 34 31 34 37 33 37 36 34 34 64 61 65 33 66 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 31 32 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 Data Ascii: {"requestId":"94abba00f612433bba414737644dae3f","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":120,"channel":"web","screen":{"width":1280,"heig
2024-05-10 04:53:21 UTC	840	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:21 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true x-request-id: 64172a78-1f39-43da-a05d-aba8dc8cf93b timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:21 UTC	13429	IN	Data Raw: 33 34 36 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 34 61 62 62 61 30 30 66 36 31 32 34 33 33 62 62 61 34 31 34 37 33 37 36 34 34 64 61 65 33 66 22 2c 22 63 6c 69 65 6e 74 22 3a 22 75 73 62 61 6e 6b 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 66 62 31 66 36 66 30 62 33 32 32 34 34 30 32 62 62 33 37 64 62 35 64 35 66 33 32 66 39 33 64 35 2e 33 34 5f 30 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 6c 65 6d 65 74 72 79 53 65 72 76 65 72 54 6f 6b 65 6e 22 3a 22 6d 38 6a 53 34 54 73 66 4f 4d 31 79 39 55 43 43 4d 50 61 56 6a 66 74 4d 51 33 7a 6f 61 67 2f 6a 2f 71 56 46 49 37 71 Data Ascii: 346d{"status":200,"requestId":"94abba00f612433bba414737644dae3f","client":"usbank","id":{"tntId":"fb1f6f0b3224402bb37db5d5f32f93d5.34_0"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"telemetryServerToken":"m8jS4TsfOM1y9UCCMPaVjftMQ3zoag/j/qVFI7q
2024-05-10 04:53:21 UTC	5191	IN	Data Raw: 31 34 33 61 0d 0a 50 72 6f 66 69 6c 65 56 61 6c 75 65 29 20 7c 7c 20 27 27 3b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 72 65 63 69 70 65 46 72 65 71 20 3d 20 52 45 43 5f 53 45 54 55 50 2e 72 65 63 69 70 65 46 72 65 71 75 65 6e 63 79 3b 5c 6e 20 20 20 20 6c 65 74 20 63 68 61 6e 67 65 64 46 72 65 71 3b 5c 6e 20 20 20 20 6c 65 74 20 64 61 74 61 20 3d 20 52 45 43 5f 53 45 54 55 50 2e 61 63 74 69 76 69 74 79 4e 61 6d 65 20 2b 20 27 3a 27 20 2b 20 52 45 43 5f 53 45 54 55 50 2e 72 65 63 69 70 65 4e 61 6d 65 3b 5c 6e 5c 6e 20 20 20 20 5f 46 51 2e 75 74 69 6c 73 2e 70 72 69 6e 74 4c 6f 67 28 27 46 51 2d 4c 61 73 74 53 65 6e 74 50 72 6f 66 69 6c 65 56 61 6c 75 65 3d 20 27 20 2b 20 6c 61 73 74 50 72 6f 66 69 6c 65 56 61 6c 75 65 29 3b 5c 6e 20 20 20 20 5f 46 51 2e 75 74 Data Ascii: 143aProfileValue) \|\| '';\n const recipeFreq = REC_SETUP.recipeFrequency;\n let changedFreq;\n let data = REC_SETUP.activityName + ':' + REC_SETUP.recipeName;\n\n _FQ.utils.printLog('FQ-LastSentProfileValue= ' + lastProfileValue);\n _FQ.ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49788	192.65.229.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	540	OUT	GET /c3metrics-562.js HTTP/1.1 Host: 562-ct.c3tag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	694	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:21 GMT server: Apache p3p: policyref="/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" cache-control: max-age=0, no-cache expires: -1 pragma: no-cache set-cookie: C3UID=14648161541715316801; expires=Fri, 09-May-2031 04:53:21 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none set-cookie: C3UID-562=14648161541715316801; expires=Fri, 09-May-2031 04:53:21 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none transfer-encoding: chunked content-type: text/javascript; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close
2024-05-10 04:53:21 UTC	3743	IN	Data Raw: 45 39 38 0d 0a 2f 2a 21 0a 20 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 0a 20 2a 20 43 33 20 4d 65 74 72 69 63 73 0a 20 2a 20 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 6d 65 74 72 69 63 73 2e 63 6f 6d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 74 61 67 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 20 2d 20 32 30 31 37 20 43 33 20 4d 65 74 72 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 20 2a 20 50 61 74 65 6e 74 20 50 65 6e 64 69 6e 67 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 64 39 31 65 64 29 7b 76 61 72 20 5f 30 78 34 62 32 63 32 31 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 32 63 32 61 62 30 3d 21 21 5b 5d 3b 72 65 Data Ascii: E98/! @preserve * * C3 Metrics * * http://www.c3metrics.com * http://www.c3tag.com * * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved * Patent Pending */!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];re
2024-05-10 04:53:21 UTC	10144	IN	Data Raw: 32 37 39 38 0d 0a 27 73 74 61 74 75 73 27 5d 2c 27 73 74 61 74 75 73 54 65 78 74 27 3a 5f 30 78 62 37 66 30 36 37 5b 27 73 74 61 74 75 73 54 65 78 74 27 5d 2c 27 75 72 6c 27 3a 5f 30 78 62 37 66 30 36 37 5b 27 72 65 73 70 6f 6e 73 65 55 52 4c 27 5d 2c 27 63 6c 6f 6e 65 27 3a 5f 30 78 32 39 31 33 31 30 2c 27 74 65 78 74 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 5b 27 72 65 73 6f 6c 76 65 27 5d 28 5f 30 78 62 37 66 30 36 37 5b 27 72 65 73 70 6f 6e 73 65 54 65 78 74 27 5d 29 3b 7d 2c 27 6a 73 6f 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 5b 27 72 65 73 6f 6c 76 65 27 5d 28 5f 30 78 62 37 66 30 36 37 5b 27 72 65 73 70 6f 6e 73 65 54 65 78 74 27 5d 29 5b 27 74 68 65 6e 27 5d 28 4a Data Ascii: 2798'status'],'statusText':_0xb7f067['statusText'],'url':_0xb7f067['responseURL'],'clone':_0x291310,'text':function(){return Promise['resolve'](_0xb7f067['responseText']);},'json':function(){return Promise['resolve'](_0xb7f067['responseText'])['then'](J
2024-05-10 04:53:21 UTC	8696	IN	Data Raw: 32 31 46 30 0d 0a 65 6e 67 74 68 27 5d 29 29 3b 7d 2c 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 3f 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 28 27 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 2c 21 30 78 31 29 3a 5f 30 78 34 37 33 30 39 66 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 28 27 6f 6e 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 29 2c 5f 30 78 33 35 30 33 63 31 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 30 36 61 36 62 29 7b 5f 30 78 34 37 33 30 39 66 5b 27 70 6f 73 74 4d 65 73 73 61 67 65 27 5d 28 5f 30 78 34 37 66 65 65 37 2b 5f 30 78 33 30 36 61 36 62 2c 27 2a 27 29 3b 7d 29 2c 5f 30 78 34 34 36 62 30 30 5b 27 73 65 74 49 6d 6d 65 64 69 Data Ascii: 21F0ength']));},_0x47309f['addEventListener']?_0x47309f['addEventListener']('message',_0x21dd05,!0x1):_0x47309f['attachEvent']('onmessage',_0x21dd05),_0x3503c1=function(_0x306a6b){_0x47309f['postMessage'](_0x47fee7+_0x306a6b,'*');}),_0x446b00['setImmedi
2024-05-10 04:53:21 UTC	4352	IN	Data Raw: 31 30 46 38 0d 0a 79 70 65 27 5d 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 2c 5f 30 78 31 65 36 65 61 39 5b 27 69 64 27 5d 3d 4d 61 74 68 5b 27 66 6c 6f 6f 72 27 5d 28 30 78 32 37 31 30 2a 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 2b 30 78 31 29 2c 43 33 4f 72 64 65 72 53 72 63 3d 5f 30 78 33 33 65 65 31 65 2b 27 3f 63 33 3d 31 27 2c 43 33 52 65 61 64 79 4f 72 64 65 72 3d 30 78 30 2c 5f 30 78 32 64 39 37 39 33 26 26 27 27 21 3d 5f 30 78 32 64 39 37 39 33 26 26 28 43 33 4f 72 64 65 72 53 72 63 3d 43 33 4f 72 64 65 72 53 72 63 2b 27 26 63 33 5f 74 72 61 6e 73 61 63 74 69 6f 6e 3d 27 2b 5f 30 78 32 64 39 37 39 33 2c 43 33 52 65 61 64 79 4f 72 64 65 72 3d 30 78 31 29 2c 5f 30 78 34 32 38 34 34 39 26 26 27 27 21 3d 5f 30 78 34 32 38 34 34 39 Data Ascii: 10F8ype']='text/javascript',_0x1e6ea9['id']=Math['floor'](0x2710*Math['random']()+0x1),C3OrderSrc=_0x33ee1e+'?c3=1',C3ReadyOrder=0x0,_0x2d9793&&''!=_0x2d9793&&(C3OrderSrc=C3OrderSrc+'&c3_transaction='+_0x2d9793,C3ReadyOrder=0x1),_0x428449&&''!=_0x428449
2024-05-10 04:53:21 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 33 5f 6c 61 62 65 6c 27 5d 5b 27 6e 69 64 27 5d 5b 27 6c 65 6e 67 74 68 27 5d 3e 30 78 30 26 26 28 5f 30 78 34 32 36 38 30 62 5b 27 63 33 5f 6c 61 62 65 6c 27 5d 5b 27 6e 69 64 27 5d 2b 3d 5f 30 78 35 34 32 35 35 33 5b 27 67 6c 75 65 27 5d 3f 5f 30 78 35 34 32 35 35 33 5b 27 67 6c 75 65 27 5d 3a 27 2c 27 29 2c 5f 30 78 34 32 36 38 30 62 5b 27 63 33 5f 6c 61 62 65 6c 27 5d 5b 27 6e 69 64 27 5d 2b 3d 5f 30 78 35 62 39 31 63 66 5b 5f 30 78 35 35 31 31 61 32 5d 3b 7d 7d 7d 5f 30 78 33 34 31 36 62 34 5b 27 6c 65 6e 67 74 68 27 5d 26 26 2d 30 78 31 21 3d 3d 5f 30 78 33 37 63 38 30 32 28 27 5c 78 32 37 27 2b 5f 30 78 32 36 30 65 38 64 2b 27 5c 78 32 37 27 2c 5f 30 78 33 34 31 36 62 34 29 26 26 28 5f 30 78 31 39 61 62 37 34 5b 27 5c 78 32 37 27 Data Ascii: 3FC03_label']['nid']['length']>0x0&&(_0x42680b['c3_label']['nid']+=_0x542553['glue']?_0x542553['glue']:','),_0x42680b['c3_label']['nid']+=_0x5b91cf[_0x5511a2];}}}_0x3416b4['length']&&-0x1!==_0x37c802('\x27'+_0x260e8d+'\x27',_0x3416b4)&&(_0x19ab74['\x27'
2024-05-10 04:53:21 UTC	1670	IN	Data Raw: 36 37 41 0d 0a 65 2c 5f 30 78 35 35 61 31 36 65 2c 5f 30 78 35 38 61 38 36 35 3d 5f 30 78 34 33 35 34 34 34 5b 27 73 70 6c 69 74 27 5d 28 27 63 33 43 54 4a 53 63 61 6c 6c 28 27 29 2c 5f 30 78 33 39 63 66 65 34 3d 5f 30 78 35 38 61 38 36 35 5b 5f 30 78 35 38 61 38 36 35 5b 27 6c 65 6e 67 74 68 27 5d 2d 30 78 32 5d 5b 27 73 70 6c 69 74 27 5d 28 27 76 61 72 5c 78 32 30 6c 61 62 65 6c 50 72 69 6f 72 69 74 79 5c 78 32 30 3d 5c 78 32 30 5b 5d 3b 27 29 5b 30 78 31 5d 2c 5f 30 78 34 62 32 30 62 31 3d 5f 30 78 35 38 61 38 36 35 5b 5f 30 78 35 38 61 38 36 35 5b 27 6c 65 6e 67 74 68 27 5d 2d 30 78 31 5d 5b 27 73 70 6c 69 74 27 5d 28 27 2c 5c 78 30 61 27 29 2c 5f 30 78 39 31 62 65 35 32 3d 5f 30 78 34 62 32 30 62 31 5b 30 78 31 38 5d 5b 27 73 70 6c 69 74 27 5d 28 27 Data Ascii: 67Ae,_0x55a16e,_0x58a865=_0x435444['split']('c3CTJScall('),_0x39cfe4=_0x58a865[_0x58a865['length']-0x2]['split']('var\x20labelPriority\x20=\x20[];')[0x1],_0x4b20b1=_0x58a865[_0x58a865['length']-0x1]['split'](',\x0a'),_0x91be52=_0x4b20b1[0x18]['split']('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49790	18.235.19.155	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	577	OUT	GET /cobrowse/CobrowseJS.ashx?group=19921&site=production HTTP/1.1 Host: www.glancecdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	336	IN	HTTP/1.1 302 Found Date: Fri, 10 May 2024 04:53:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 190 Connection: close Cache-Control: max-age=3600 Location: https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.17.0M.js Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Access-Control-Allow-Origin: *
2024-05-10 04:53:21 UTC	190	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6c 61 6e 63 65 63 64 6e 2e 6e 65 74 2f 63 6f 62 72 6f 77 73 65 2f 6a 73 2f 47 6c 61 6e 63 65 43 6f 62 72 6f 77 73 65 4c 6f 61 64 65 72 5f 36 2e 31 37 2e 30 4d 2e 6a 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.17.0M.js">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49796	157.240.254.7	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	545	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	1303	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3Fregion%3DEU reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-10 04:53:21 UTC	1722	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49795	34.49.212.111	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	649	OUT	GET /452709.gif?pdata=adobeid_new%3D21375164595563744931909202357212933986 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	748	IN	HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: Location: https://di.rlcdn.com/api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=pmXIBHnX+jtup+POSRWADomJXMrbyV/sFxrxInHOfyk=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 May 2025 04:53:21 GMT; Secure; SameSite=None Date: Fri, 10 May 2024 04:53:21 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49797	3.162.163.99	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	658	OUT	GET /pixel/12563/?che=5712298564241596&MCVISID=21375164595563744931909202357212933986 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	713	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Fri, 10 May 2024 04:53:21 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3ARHaJ2qpo7dOrFg1f7DFxFfNKvEEDVI1Y;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAt0GTBLdBkwQAAAAAAAUXjAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 48a3516657fbe296329cc3974dc11950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P8 X-Amz-Cf-Id: dmp4Hj2Su8oVcJGBAfYtSDXjDXR5YVaygf9SGqXIUlR7LQpHn2WQLA==
2024-05-10 04:53:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49800	63.140.39.35	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	692	OUT	POST /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1 Host: usbank.tt.omtrdc.net Connection: keep-alive Content-Length: 1010 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:21 UTC	1010	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 38 61 31 37 36 31 33 32 61 66 32 34 34 62 30 63 61 35 62 30 61 64 35 62 61 64 62 31 36 35 39 31 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 31 32 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 Data Ascii: {"requestId":"8a176132af244b0ca5b0ad5badb16591","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":120,"channel":"web","screen":{"width":1280,"heig
2024-05-10 04:53:21 UTC	840	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:21 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true x-request-id: 78d31811-94f0-4731-a6f1-3e504a98f948 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:21 UTC	376	IN	Data Raw: 31 37 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 38 61 31 37 36 31 33 32 61 66 32 34 34 62 30 63 61 35 62 30 61 64 35 62 61 64 62 31 36 35 39 31 22 2c 22 63 6c 69 65 6e 74 22 3a 22 75 73 62 61 6e 6b 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 66 62 31 66 36 66 30 62 33 32 32 34 34 30 32 62 62 33 37 64 62 35 64 35 66 33 32 66 39 33 64 35 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 74 65 6c 65 6d 65 74 72 79 53 Data Ascii: 171{"status":200,"requestId":"8a176132af244b0ca5b0ad5badb16591","client":"usbank","id":{"tntId":"fb1f6f0b3224402bb37db5d5f32f93d5.34_0","marketingCloudVisitorId":"21375164595563744931909202357212933986"},"edgeHost":"mboxedge34.tt.omtrdc.net","telemetryS
2024-05-10 04:53:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49811	34.49.212.111	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	732	OUT	GET /api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=pmXIBHnX+jtup+POSRWADomJXMrbyV/sFxrxInHOfyk=
2024-05-10 04:53:22 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Fri, 10 May 2024 04:53:22 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49810	99.84.160.111	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	572	OUT	GET /cobrowse/js/GlanceCobrowseLoader_6.17.0M.js HTTP/1.1 Host: storage.glancecdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:22 UTC	730	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12988 Connection: close Date: Thu, 09 May 2024 20:02:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Thu, 08 Feb 2024 15:19:13 GMT ETag: "4d0e72a0976ebcbfeef4c2808b68b9a4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31556926 x-amz-version-id: 5MPHBkGdocNgKiu0OFIqc6hyI0dqYrI_ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6d5eb10703fb0c500533591581396cb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD52-C2 X-Amz-Cf-Id: p2mLJi8nlFn5YaJN12I5H_ivfSyBvjqatAWvCn_P73LjxBH0ywb1gg== Age: 31826
2024-05-10 04:53:22 UTC	12988	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 47 6c 61 6e 63 65 20 4e 65 74 77 6f 72 6b 73 2c 20 49 6e 63 2e 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 2e 2e 2e 63 29 7b 21 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 7c 7c 21 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 5b 61 5d 7c 7c 77 69 6e 64 6f 77 2e 47 4c 41 4e 43 45 5f 43 4f 42 52 4f 57 53 45 26 26 77 69 6e 64 6f 77 2e 47 4c 41 4e 43 45 5f 43 4f 42 52 4f 57 53 45 2e 64 69 73 61 62 6c 65 4c 6f 67 67 69 6e 67 7c 7c 28 63 3d 63 2e 6d 61 70 28 62 3d 3e 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 62 29 74 72 79 7b 62 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 63 61 74 63 68 28 66 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 Data Ascii: (function() {/* Copyright 2022 Glance Networks, Inc.*/function k(a,...c){!window.console\|\|!window.console[a]\|\|window.GLANCE_COBROWSE&&window.GLANCE_COBROWSE.disableLogging\|\|(c=c.map(b=>{if("object"===typeof b)try{b=JSON.stringify(b)}catch(f){console.er

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49808	63.140.38.112	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	1957	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=675616D751E567410A490D4C%40AdobeOrg&mid=21375164595563744931909202357212933986&ts=1715316799067 HTTP/1.1 Host: smetrics.usbank.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=A39A513F9A6783D53943FD7E26119BED~-1~YAAQkBwhF0EfK1OPAQAAUyrZYAt5skM26421sa07v1OAfBLq/pwpKMMgYf57kfPtZAhJoD7WmLquPmcYD3hZ8iZVKAOBrc6enrKYVE2zlM8ze9sTtSc4LZJaS26Ld6GE9CzL2gUoyg4zmrYE9MPNQzqY3Akmwr+oaR8s1PaJB6IjroY1lX7Ev/qKEbHjcU7rCw+qZpqDNWD8aAtWzDwGbPjWEzXYu5a0p9u7B8Oxg/dI8ReuVAOtPZbh3+ZGuz0i+AKDzQq714rZgXgU00rsiPK1TJwh1gGTe3SgYEsQC3aZhlXcR998y9PkjCRy7zClQOeFotUbFZVjdqRrpIe9bep9/wGsDGE=~-1~-1~-1; bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; utag_main=v_id:018f60d9369b0021de52fa600 [TRUNCATED]
2024-05-10 04:53:22 UTC	609	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 10 May 2024 04:53:22 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C21375164595563744931909202357212933986; Path=/; Domain=usbank.com; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:53 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-10 04:53:22 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 7d Data Ascii: {"mid":"21375164595563744931909202357212933986"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49809	35.244.154.8	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:21 UTC	638	OUT	GET /365868.gif?partner_uid=21449694286267189811878938773483760058 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:22 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomMjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTgQABoNCMLQ9rEGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 May 2025 04:53:22 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 09 Jul 2024 04:53:22 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 10 May 2024 04:53:22 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49813	3.162.163.110	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	503	OUT	GET /pixel/12563/?che=5712298564241596&MCVISID=21375164595563744931909202357212933986 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3ARHaJ2qpo7dOrFg1f7DFxFfNKvEEDVI1Y; u=C\|0CAAt0GTBLdBkwQAAAAAAAUXjAAAAAA
2024-05-10 04:53:22 UTC	713	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Fri, 10 May 2024 04:53:21 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3ARHaJ2qpo7dOrFg1f7DFxFfNKvEEDVI1Y;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAt0GTBLdBkwgAAAAABAUXjAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 1ea89e6cb9f4cc3c2c65b0f3e45ee422.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P8 X-Amz-Cf-Id: gd_JGaYnjqqoFHhW0zhBWdkvGgVRNy4AgR68sxEpDb1H9THeviZFSw==
2024-05-10 04:53:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49814	66.180.64.123	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	505	OUT	OPTIONS /x.gif HTTP/1.1 Host: img.c3tag.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: c,c3uid Origin: https://www.usbank.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:22 UTC	405	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:22 GMT server: Apache access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: c,c3uid content-length: 0 content-type: text/html; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49819	35.244.154.8	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	761	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTgQABoNCMLQ9rEGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; pxrc=CAA=
2024-05-10 04:53:22 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 May 2025 04:53:22 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMLQ9rEGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Tue, 09 Jul 2024 04:53:22 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 10 May 2024 04:53:22 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49817	63.140.39.130	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	431	OUT	GET /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1 Host: usbank.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:22 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 10 May 2024 04:53:22 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:22 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-05-10 04:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49825	34.49.212.111	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	499	OUT	GET /api/segment?pdata=adobeid_new%3D21375164595563744931909202357212933986&pid=452709&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=bZ3GuD/atHVIP3WMdBSsv/TomUTibjDlEpB0x9FvpvM=; pxrc=CAA=
2024-05-10 04:53:22 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Fri, 10 May 2024 04:53:22 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49827	104.22.52.252	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	555	OUT	GET /qscripts/quantum-usbank.js HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding etag: W/"171529356367417153020755911715241602186" Cache-Control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept x-content-type-options: no-sniff strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 233 Server: cloudflare CF-RAY: 88175342a8ae29b1-ORD alt-svc: h3=":443"; ma=86400
2024-05-10 04:53:23 UTC	749	IN	Data Raw: 37 64 34 36 0d 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 34 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 31 2e 33 35 2e 35 20 34 37 66 37 64 38 34 64 66 65 62 61 34 39 35 61 36 33 64 38 38 64 64 33 34 31 63 31 35 37 34 37 31 61 61 39 33 66 31 31 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a Data Ascii: 7d46/* Copyright 2015-2024 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula 1.35.5 47f7d84dfeba495a63d88dd341c157471aa93f11 */(function() {
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 69 63 72 6f 74 61 73 6b 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3b 0a 76 61 72 20 50 72 6f 6d 69 73 65 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 5f 7a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 5f 50 72 6f 6d 69 73 65 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 3b 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 Data Ascii: icrotask'] \|\| window.queueMicrotask;var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){a=["object"==typeof globalThis&
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 4d 65 74 72 69 63 53 79 6d 62 6f 6c 28 22 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 29 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 64 61 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 3b 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 6b 61 28 29 3b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 63 61 2e 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 Data Ascii: MetricSymbol("_QuantumMetricSymbol.iterator"));"function"!=typeof Array.prototype[a]&&da(Array.prototype,a,{configurable:!0,writable:!0,value:function(){return la(aa(this))}});ka=function(){}}function la(a){ka();a={next:a};a[ca._QuantumMetricSymbol.iterat
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 3d 62 5b 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 64 3d 62 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 62 2e 6e 65 78 74 28 29 29 7b 64 3d 64 2e 76 61 6c 75 65 3b 69 66 28 4f 62 6a 65 63 74 28 64 29 21 3d 3d 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 69 74 65 72 61 62 6c 65 20 66 6f 72 20 66 72 6f 6d 45 6e 74 72 69 65 73 20 73 68 6f 75 6c 64 20 79 69 65 6c 64 20 6f 62 6a 65 63 74 73 22 29 3b 63 5b 64 5b 30 5d 5d 3d 64 5b 31 5d 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 65 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 61 74 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: =b[_QuantumMetricSymbol.iterator].call(b);for(var d=b.next();!d.done;d=b.next()){d=d.value;if(Object(d)!==d)throw new TypeError("iterable for fromEntries should yield objects");c[d[0]]=d[1]}return c}});ea("Array.prototype.flatMap",function(a){return a?a:
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 65 72 7c 61 63 63 74 2e 2a 6e 75 6d 7c 63 61 72 64 2e 2a 6e 75 6d 7c 63 61 72 64 2e 2a 23 7c 63 61 72 64 2e 2a 6e 6f 7c 63 63 2e 2a 6e 75 6d 7c 6e 75 6d 6d 65 72 7c 6e 2e 6d 2e 72 6f 7c 63 72 65 64 69 74 6f 7c 5c 75 34 66 65 31 5c 75 37 35 32 38 5c 75 35 33 36 31 7c 5c 75 63 65 37 34 5c 75 62 34 64 63 7c 5c 75 33 30 61 62 5c 75 33 30 66 63 5c 75 33 30 63 39 5c 75 37 35 36 61 7c 5c 75 30 34 31 64 5c 75 30 34 33 65 5c 75 30 34 33 63 5c 75 30 34 33 35 5c 75 30 34 34 30 2e 2a 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5c 75 30 34 34 62 2f 69 2c 78 61 3d 5b 7b 72 65 3a 7b 70 3a 22 2f 62 2f 73 73 2f 28 5b 5e 2f 5d 2b 29 2f 28 5c 5c 64 2b 29 2f 28 5b 5e 2f 5d 2b 29 2f 2e 2b 22 2c 0a 66 3a 22 22 7d 2c 72 65 70 3a 22 2f 62 2f 73 73 2f Data Ascii: er\|acct.num\|card.num\|card.#\|card.no\|cc.num\|nummer\|n.m.ro\|credito\|\u4fe1\u7528\u5361\|\uce74\ub4dc\|\u30ab\u30fc\u30c9\u756a\|\u041d\u043e\u043c\u0435\u0440.\u043a\u0430\u0440\u0442\u044b/i,xa=[{re:{p:"/b/ss/([^/]+)/(\\d+)/([^/]+)/.+",f:""},rep:"/b/ss/
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 3f 61 3a 61 3f 45 61 28 61 5b 62 5b 30 5d 5d 2c 62 2e 73 6c 69 63 65 28 31 29 2c 63 29 3a 63 3a 63 7d 0a 63 6f 6e 73 74 20 46 61 3d 61 3d 3e 61 2e 6d 61 70 28 62 3d 3e 28 7b 72 65 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 5b 30 5d 3f 7b 70 3a 62 5b 30 5d 2c 66 3a 22 22 7d 3a 7b 70 3a 62 5b 30 5d 5b 30 5d 2c 66 3a 62 5b 30 5d 5b 31 5d 7d 2c 72 65 70 3a 62 5b 31 5d 7d 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 61 2e 73 74 72 69 70 53 65 6c 65 63 74 73 26 26 61 2e 65 6e 63 72 79 70 74 53 63 72 75 62 4c 69 73 74 26 26 61 2e 65 6e 63 72 79 70 74 53 63 72 75 62 4c 69 73 74 2e 70 75 73 68 28 22 73 65 6c 65 63 74 22 29 3b 61 2e 73 74 72 69 70 53 65 6c 65 63 74 73 26 26 21 61 2e 65 6e 63 72 79 70 74 53 63 72 75 62 4c 69 73 74 26 26 Data Ascii: ?a:a?Ea(a[b[0]],b.slice(1),c):c:c}const Fa=a=>a.map(b=>({re:"string"===typeof b[0]?{p:b[0],f:""}:{p:b[0][0],f:b[0][1]},rep:b[1]}));function Ga(a){a.stripSelects&&a.encryptScrubList&&a.encryptScrubList.push("select");a.stripSelects&&!a.encryptScrubList&&
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 3e 28 7b 70 3a 66 2c 66 3a 65 7d 29 3b 62 3d 63 28 22 22 29 3b 63 3d 63 28 22 67 22 29 3b 61 2e 64 61 74 61 53 63 72 75 62 52 45 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 2e 64 61 74 61 53 63 72 75 62 52 45 29 26 26 30 3c 61 2e 64 61 74 61 53 63 72 75 62 52 45 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 64 61 74 61 53 63 72 75 62 52 45 5b 30 5d 26 26 28 61 2e 64 61 74 61 53 63 72 75 62 52 45 3d 5b 7b 70 3a 61 2e 64 61 74 61 53 63 72 75 62 52 45 2e 6a 6f 69 6e 28 22 7c 22 29 2c 66 3a 22 69 22 7d 5d 29 3b 61 2e 73 63 72 75 62 44 6f 63 75 6d 65 6e 74 54 69 74 6c 65 50 61 74 74 65 72 6e 73 26 26 61 2e 73 63 72 75 62 44 6f 63 75 6d 65 6e 74 54 69 74 6c 65 50 61 74 74 65 72 6e 73 2e 6c 65 6e 67 74 68 26 26 22 Data Ascii: >({p:f,f:e});b=c("");c=c("g");a.dataScrubRE&&Array.isArray(a.dataScrubRE)&&0<a.dataScrubRE.length&&"string"===typeof a.dataScrubRE[0]&&(a.dataScrubRE=[{p:a.dataScrubRE.join("\|"),f:"i"}]);a.scrubDocumentTitlePatterns&&a.scrubDocumentTitlePatterns.length&&"
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 78 68 72 48 6f 6f 6b 42 6c 61 63 6b 4c 69 73 74 44 65 74 61 69 6c 73 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 78 68 72 48 6f 6f 6b 42 6c 61 63 6b 4c 69 73 74 44 65 74 61 69 6c 73 5b 30 5d 26 26 28 61 2e 78 68 72 48 6f 6f 6b 42 6c 61 63 6b 4c 69 73 74 44 65 74 61 69 6c 73 3d 61 2e 78 68 72 48 6f 6f 6b 42 6c 61 63 6b 4c 69 73 74 44 65 74 61 69 6c 73 2e 6d 61 70 28 62 29 29 3b 61 2e 78 68 72 48 6f 6f 6b 57 68 69 74 65 4c 69 73 74 26 26 61 2e 78 68 72 48 6f 6f 6b 57 68 69 74 65 4c 69 73 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 78 68 72 48 6f 6f 6b 57 68 69 74 65 4c 69 73 74 5b 30 5d 26 26 28 61 2e 78 68 72 48 6f 6f 6b 57 68 69 74 65 4c 69 73 74 3d 61 2e 78 68 72 48 Data Ascii: xhrHookBlackListDetails.length&&"string"===typeof a.xhrHookBlackListDetails[0]&&(a.xhrHookBlackListDetails=a.xhrHookBlackListDetails.map(b));a.xhrHookWhiteList&&a.xhrHookWhiteList.length&&"string"===typeof a.xhrHookWhiteList[0]&&(a.xhrHookWhiteList=a.xhrH
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 6c 75 64 65 52 61 67 65 52 45 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 2e 65 78 63 6c 75 64 65 52 61 67 65 52 45 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 65 78 63 6c 75 64 65 52 61 67 65 52 45 5b 30 5d 26 26 28 61 2e 65 78 63 6c 75 64 65 52 61 67 65 52 45 3d 5b 7b 70 3a 61 2e 65 78 63 6c 75 64 65 52 61 67 65 52 45 2e 6a 6f 69 6e 28 22 7c 22 29 2c 66 3a 22 69 22 7d 5d 29 3b 0a 22 65 78 63 6c 75 64 65 58 48 52 48 65 61 64 65 72 52 65 67 45 78 22 69 6e 20 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 65 78 63 6c 75 64 65 58 48 52 48 65 61 64 65 72 52 65 67 45 78 26 26 28 61 2e 65 78 63 6c 75 64 65 58 48 52 48 65 61 64 65 72 52 65 67 45 78 3d 5b 61 2e 65 78 63 6c 75 64 65 58 48 52 48 65 61 64 65 72 Data Ascii: ludeRageRE&&Array.isArray(a.excludeRageRE)&&"string"===typeof a.excludeRageRE[0]&&(a.excludeRageRE=[{p:a.excludeRageRE.join("\|"),f:"i"}]);"excludeXHRHeaderRegEx"in a&&"string"===typeof a.excludeXHRHeaderRegEx&&(a.excludeXHRHeaderRegEx=[a.excludeXHRHeader
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 65 6f 66 20 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 65 72 57 68 69 74 65 6c 69 73 74 5b 30 5d 26 26 28 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 65 72 57 68 69 74 65 6c 69 73 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 65 72 57 68 69 74 65 6c 69 73 74 2e 6d 61 70 28 62 29 29 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 65 61 73 75 72 65 57 68 69 74 65 6c 69 73 74 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 65 61 73 75 72 65 57 68 69 74 65 6c 69 73 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 65 61 73 75 72 65 57 68 69 74 65 6c 69 73 74 5b 30 5d 26 26 28 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 65 61 73 75 72 65 57 68 69 74 65 6c 69 73 74 Data Ascii: eof a.performanceMarkerWhitelist[0]&&(a.performanceMarkerWhitelist=a.performanceMarkerWhitelist.map(b));a.performanceMeasureWhitelist&&a.performanceMeasureWhitelist.length&&"string"===typeof a.performanceMeasureWhitelist[0]&&(a.performanceMeasureWhitelist

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49831	18.172.135.121	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	539	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10159 Connection: close Last-Modified: Tue, 30 Apr 2024 23:20:15 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 May 2024 10:12:30 GMT ETag: "d6f0435164aefe6cf324147b77c7b6bb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4e57852c986c2252d34e70e1ba3c2142.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P7 X-Amz-Cf-Id: VUx_77E3m-EoNixydPfuoUJXSvYeX9uN--L6ff0VmIJE5Qp8Vzagiw== Age: 69171
2024-05-10 04:53:23 UTC	10159	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49833	142.250.190.98	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	798	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg=&google_tc= Date: Fri, 10 May 2024 04:53:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2024 05:08:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:23 UTC	375	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g
2024-05-10 04:53:23 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49828	146.75.80.157	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	536	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 10 May 2024 04:53:22 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-chi-klot8100098-CHI X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-05-10 04:53:23 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49832	66.180.64.123	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	671	OUT	GET /x.gif HTTP/1.1 Host: img.c3tag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" c: 6836432664740355 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 c3uid: 1922498971715316800 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
2024-05-10 04:53:23 UTC	435	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:23 GMT server: Apache access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true access-control-expose-headers: ETag, f, c3uid f: 1 c3uid: 1922498971715316800 etag: 1922498971715316800 cache-control: no-cache content-length: 43 content-type: image/gif strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close
2024-05-10 04:53:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49835	63.140.39.130	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	431	OUT	GET /rest/v1/delivery?client=usbank&sessionId=fb1f6f0b3224402bb37db5d5f32f93d5&version=2.3.2 HTTP/1.1 Host: usbank.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 10 May 2024 04:53:23 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:23 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49840	104.21.50.150	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	554	OUT	GET /js/siteanalyze_5093.js HTTP/1.1 Host: siteimproveanalytics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	870	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: +Ak+9ZdcXG8cd4A5UEdUKXhpk8ZxRkOnNWOQJqB5gp0IPcDGqBHiIvXQuoft4SGhrA88CRH0Y1k= x-amz-request-id: 40P2Z9ZED1CVY0AZ Cache-Control: max-age=86400, no-transform Last-Modified: Wed, 08 May 2024 16:54:05 GMT ETag: W/"e925a31b1cfb64a933e5c7fdca921cca" CF-Cache-Status: HIT Age: 7006 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2B8vyalXU6LizTsofGv%2BSGT2aPiW34W6EPtxspDD3uBGJNM7wt6pE%2FlUtrWKuzXlmIP8US5IabIjpKwz64XcByzyN6kJi6h1eaeq6oU%2BYNp%2BrZntKMhRGAeCeuynE5xKnTQgqlnHmA9C48g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88175343d9be2330-ORD alt-svc: h3=":443"; ma=86400
2024-05-10 04:53:23 UTC	499	IN	Data Raw: 37 63 34 64 0d 0a 76 61 72 20 5f 73 7a 3b 5f 73 7a 26 26 5f 73 7a 2e 63 6f 72 65 26 26 5f 73 7a 2e 63 6f 72 65 2e 5f 69 73 6c 6f 61 64 65 64 21 3d 6e 75 6c 6c 3f 5f 73 7a 2e 63 6f 72 65 2e 77 61 72 6e 26 26 5f 73 7a 2e 63 6f 72 65 2e 77 61 72 6e 28 22 53 63 72 69 70 74 20 72 65 71 75 65 73 74 65 64 20 74 6f 20 6c 6f 61 64 20 61 6e 64 20 65 78 65 63 75 74 65 20 61 67 61 69 6e 2c 20 74 68 69 73 20 69 73 20 6e 6f 74 20 64 65 73 69 72 61 62 6c 65 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 22 29 3a 28 5f 73 7a 3d 5f 73 7a 7c 7c 5b 5d 2c 5f 73 7a 2e 70 75 73 68 28 5b 22 61 63 63 6f 75 6e 74 69 64 22 2c 35 30 39 33 5d 29 2c 5f 73 7a 2e 70 75 73 68 28 5b 22 72 65 67 69 6f 6e 22 2c 22 72 31 22 5d 29 2c 5f 73 7a 2e 70 75 73 68 28 5b 22 65 6e 64 70 Data Ascii: 7c4dvar _sz;_sz&&_sz.core&&_sz.core._isloaded!=null?_sz.core.warn&&_sz.core.warn("Script requested to load and execute again, this is not desirable and will be blocked"):(_sz=_sz\|\|[],_sz.push(["accountid",5093]),_sz.push(["region","r1"]),_sz.push(["endp
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 74 73 2f 63 68 65 63 6b 69 6e 67 2d 61 63 63 6f 75 6e 74 73 2f 63 68 65 63 6b 69 6e 67 2d 63 75 73 74 6f 6d 65 72 2d 72 65 73 6f 75 72 63 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2f 64 65 6c 6f 69 74 74 65 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 62 61 6e 6b 2d 61 63 63 6f 75 6e 74 73 2f 63 68 65 63 6b 69 6e 67 2d 61 63 63 6f 75 6e 74 73 2f 63 68 65 63 6b 69 6e 67 2d 63 75 73 74 6f 6d 65 72 2d 72 65 73 6f 75 72 63 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 63 6f 72 70 6f 72 61 74 65 2d 61 6e 64 2d 63 6f 6d 6d 65 72 63 69 61 6c 2d 62 61 6e 6b 69 6e 67 2f 61 63 63 65 73 73 2d 61 63 63 6f 75 6e 74 73 2e 68 74 6d 6c 22 2c 22 68 Data Ascii: ts/checking-accounts/checking-customer-resources/workplace/deloitte.html","https://www.usbank.com/bank-accounts/checking-accounts/checking-customer-resources/workplace.html","https://www.usbank.com/corporate-and-commercial-banking/access-accounts.html","h
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 2f 74 72 65 61 73 75 72 79 2d 70 61 79 6d 65 6e 74 2d 73 6f 6c 75 74 69 6f 6e 73 2f 63 6f 72 70 6f 72 61 74 65 2d 70 61 79 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 2f 63 6f 72 70 6f 72 61 74 65 2d 63 72 65 64 69 74 2d 63 61 72 64 73 2f 63 6f 72 70 6f 72 61 74 65 2d 74 72 61 76 65 6c 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 63 61 72 64 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 63 6f 72 70 6f 72 61 74 65 2d 61 6e 64 2d 63 6f 6d 6d 65 72 63 69 61 6c 2d 62 61 6e 6b 69 6e 67 2f 74 72 65 61 73 75 72 79 2d 70 61 79 6d 65 6e 74 2d 73 6f 6c 75 74 69 6f 6e 73 2f 63 6f 72 70 6f 72 61 74 65 2d 70 61 79 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 2f 63 6f 72 70 6f 72 61 74 65 2d 63 72 65 64 69 74 2d 63 61 72 64 73 2e 68 74 6d 6c Data Ascii: /treasury-payment-solutions/corporate-payment-services/corporate-credit-cards/corporate-travel-management-card.html","https://www.usbank.com/corporate-and-commercial-banking/treasury-payment-solutions/corporate-payment-services/corporate-credit-cards.html
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 6e 73 2f 74 72 65 61 73 75 72 79 2d 6d 61 6e 61 67 65 6d 65 6e 74 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 63 6f 72 70 6f 72 61 74 65 2d 61 6e 64 2d 63 6f 6d 6d 65 72 63 69 61 6c 2d 62 61 6e 6b 69 6e 67 2f 77 68 79 2d 63 68 6f 6f 73 65 2d 75 73 2f 64 69 67 69 74 61 6c 2d 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 63 6f 72 70 6f 72 61 74 65 2d 61 6e 64 2d 63 6f 6d 6d 65 72 63 69 61 6c 2d 62 61 6e 6b 69 6e 67 2f 77 68 79 2d 63 68 6f 6f 73 65 2d 75 73 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 63 6f 72 70 6f 72 61 74 65 2d 61 6e 64 2d 63 6f 6d 6d 65 72 63 69 61 6c 2d Data Ascii: ns/treasury-management.html","https://www.usbank.com/corporate-and-commercial-banking/why-choose-us/digital-transformation.html","https://www.usbank.com/corporate-and-commercial-banking/why-choose-us.html","https://www.usbank.com/corporate-and-commercial-
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 79 2d 73 6f 6c 75 74 69 6f 6e 73 2d 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 69 6e 76 65 73 74 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 2f 63 6f 6e 74 61 63 74 2d 75 73 2f 67 6c 6f 62 61 6c 2d 63 6f 72 70 6f 72 61 74 65 2d 74 72 75 73 74 2d 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 69 6e 76 65 73 74 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 2f 63 6f 6e 74 61 63 74 2d 75 73 2f 67 6c 6f 62 61 6c 2d 66 75 6e 64 2d 73 65 72 76 69 63 65 73 2d 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 69 6e 76 65 73 74 6d 65 Data Ascii: y-solutions-contact-form.html","https://www.usbank.com/investment-services/contact-us/global-corporate-trust-contact-form.html","https://www.usbank.com/investment-services/contact-us/global-fund-services-contact-form.html","https://www.usbank.com/investme
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 6e 6b 2e 63 6f 6d 2f 6f 6e 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 62 61 6e 6b 69 6e 67 2f 6d 6f 62 69 6c 65 2d 62 61 6e 6b 69 6e 67 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 6f 6e 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 62 61 6e 6b 69 6e 67 2f 6f 6e 6c 69 6e 65 2d 61 63 63 6f 75 6e 74 2d 6c 6f 67 69 6e 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 2f 77 65 61 6c 74 68 2d 6d 61 6e 61 67 65 6d 65 6e 74 2e 68 74 6d 6c 22 5d 2c 69 6e 63 6c 75 64 65 3a 5b 5d 2c 65 78 63 6c 75 64 65 3a 5b 5d 7d 7d 5d 29 2c 5f 73 7a 3d 5f 73 7a 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 7a 2c 75 6e 64 65 66 69 6e 65 64 29 7b 66 75 6e 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 28 61 Data Ascii: nk.com/online-mobile-banking/mobile-banking.html","https://www.usbank.com/online-mobile-banking/online-account-login.html","https://www.usbank.com/wealth-management.html"],include:[],exclude:[]}}]),_sz=_sz\|\|[],function(w,d,sz,undefined){function process(a
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 2b 22 2d 22 2b 53 34 28 29 2b 22 2d 22 2b 53 34 28 29 2b 22 2d 22 2b 53 34 28 29 2b 53 34 28 29 2b 53 34 28 29 7d 2c 6e 61 76 74 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 65 72 66 3d 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 77 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 77 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 77 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 21 70 65 72 66 7c 7c 21 70 65 72 66 2e 74 69 6d 69 6e 67 7c 7c 70 65 72 66 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3c 31 3f 6e 75 6c 6c 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 70 65 72 66 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7d 2c 5f 69 73 72 65 61 Data Ascii: +"-"+S4()+"-"+S4()+"-"+S4()+S4()+S4()},navtime:function(){var perf=w.performance\|\|w.webkitPerformance\|\|w.mozPerformance\|\|w.msPerformance;return!perf\|\|!perf.timing\|\|perf.timing.navigationStart<1?null:(new Date).getTime()-perf.timing.navigationStart},_isrea
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 65 66 69 6e 65 64 26 26 77 5b 6e 5d 21 3d 3d 6e 75 6c 6c 3f 77 5b 6e 5d 3a 6e 75 6c 6c 7d 2c 5f 69 6d 61 67 65 73 3a 5b 5d 2c 5f 69 64 78 3a 30 2c 72 65 71 75 65 73 74 75 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 70 2c 6f 29 7b 76 61 72 20 70 61 72 61 6d 73 3d 5b 5d 2c 76 61 6c 2c 73 65 65 6e 56 61 6c 75 65 73 2c 61 2c 70 61 72 61 6d 56 61 6c 75 65 2c 69 2c 75 72 6c 3b 6f 2e 72 6e 64 3d 73 7a 2e 63 6f 72 65 2e 72 6e 64 28 29 3b 66 6f 72 28 69 20 69 6e 20 6f 29 69 66 28 76 61 6c 3d 6f 5b 69 5d 2c 21 74 68 69 73 2e 65 6d 70 74 79 28 76 61 6c 29 29 69 66 28 74 68 69 73 2e 69 73 61 72 72 61 79 28 76 61 6c 29 29 66 6f 72 28 73 65 65 6e 56 61 6c 75 65 73 3d 7b 7d 2c 61 3d 30 3b 61 3c 76 61 6c 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 74 68 69 73 2e 65 6d 70 74 79 28 76 61 Data Ascii: efined&&w[n]!==null?w[n]:null},_images:[],_idx:0,requesturl:function(p,o){var params=[],val,seenValues,a,paramValue,i,url;o.rnd=sz.core.rnd();for(i in o)if(val=o[i],!this.empty(val))if(this.isarray(val))for(seenValues={},a=0;a<val.length;a++)this.empty(va
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 22 61 22 29 3b 5f 63 2e 68 72 65 66 3d 22 23 22 3b 5f 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 c3 97 20 43 6c 6f 73 65 22 3b 5f 63 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 22 3b 5f 63 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 5f 65 29 2c 63 6f 72 65 2e 5f 6c 6f 67 73 68 6f 77 6e 3d 21 31 2c 21 31 7d 3b 5f 65 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 5f 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 Data Ascii: lement("a");_c.href="#";_c.innerHTML=" Close";_c.style.cssText="display:block;float:right;color:black;text-decoration:none;";_c.onclick=function(){return _e.parentNode.removeChild(_e),core._logshown=!1,!1};_e=d.createElement("div");_e.style.cssText="pos
2024-05-10 04:53:23 UTC	1369	IN	Data Raw: 65 76 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 6f 6f 6b 69 65 2e 73 75 62 73 74 72 69 6e 67 28 6e 2e 6c 65 6e 67 74 68 2b 31 29 29 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 63 6f 6f 6b 69 65 76 7d 7d 7d 2c 64 61 74 61 2c 6f 72 69 67 2c 69 3b 66 6f 72 28 63 6f 72 65 2e 72 65 67 69 73 74 65 72 28 22 73 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 76 61 6c 29 7b 66 6f 72 28 76 61 72 20 70 61 72 74 73 3d 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 70 72 6f 70 3d 73 7a 2c 6b 65 79 3b 70 61 72 74 73 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 69 66 28 6b 65 79 3d 70 61 72 74 73 2e 73 68 69 66 74 28 29 2c 70 72 6f 70 5b 6b 65 79 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 70 72 6f 70 3d 30 3b 62 72 65 61 6b 7d 69 66 28 70 61 72 74 73 Data Ascii: ev=decodeURIComponent(cookie.substring(n.length+1));break}return cookiev}}},data,orig,i;for(core.register("set",function(name,val){for(var parts=name.split("."),prop=sz,key;parts.length>0;){if(key=parts.shift(),prop[key]===undefined){prop=0;break}if(parts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49837	44.221.183.201	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:22 UTC	776	OUT	GET /ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564
2024-05-10 04:53:23 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: LeXOmzDCSoY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v060-09e47bfb0.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:23 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:23 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49842	52.84.52.50	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:23 UTC	591	OUT	GET /utag/usbank/dotcom-homepage/prod/utag.100.js?utv=ut4.46.202304182242 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3059 Connection: close Last-Modified: Thu, 02 May 2024 16:42:43 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: stiI6HbY9rAMKtXwwUI9RB19zmNPTGdX Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 May 2024 04:53:24 GMT ETag: "1c92bbe4d6f99172b120f62cdf90e3c5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 816598f181436605d73955dd5c13ae78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C3 X-Amz-Cf-Id: WNr4txdAAWCYUc2J_VKAFa0BMQyFopi45fRJ96BideTJdffkvVE76Q== Cache-Control: max-age=1296000
2024-05-10 04:53:23 UTC	3059	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 30 20 75 74 34 2e 30 2e 32 30 32 34 30 35 30 32 31 36 34 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.100 ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49845	52.84.52.50	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:23 UTC	591	OUT	GET /utag/usbank/dotcom-homepage/prod/utag.105.js?utv=ut4.46.202403072057 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:23 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26289 Connection: close Last-Modified: Thu, 02 May 2024 16:42:44 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ufjoNq77CMhmQ2jtgK_wfWAg4b9nNuww Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 May 2024 04:53:24 GMT ETag: "01cbe649be06ccd44938192420ad5569" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6f118d3c15df75b5c24f41588d371920.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C3 X-Amz-Cf-Id: DTWjpyVK2NbbSSeiOGC2H0scoDTw8qtLQEUeXLuL-5dJbunM6u2LMg== Cache-Control: max-age=1296000
2024-05-10 04:53:23 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 35 20 75 74 34 2e 30 2e 32 30 32 34 30 35 30 32 31 36 34 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c Data Ascii: //tealium universal tag - utag.105 ut4.0.202405021642, Copyright 2024 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d*)\
2024-05-10 04:53:23 UTC	9905	IN	Data Raw: 28 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 26 26 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 61 67 65 74 79 70 65 29 7b 72 65 74 75 72 6e 20 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 61 67 65 74 79 70 65 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 75 2e 64 61 74 61 2e 68 63 74 5f 70 61 67 65 74 79 70 65 3b 7d 7d 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 6c 6f 61 64 65 72 5f 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 31 30 35 3a 43 41 4c 4c 42 41 43 4b 22 29 3b 69 66 28 21 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 7b 76 61 72 20 6f 3d 7b 74 69 3a 75 2e 64 61 74 61 2e 74 61 67 69 64 2c 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 Data Ascii: (u.data[_event]&&u.data[_event].hct_pagetype){return u.data[_event].hct_pagetype;}else{return u.data.hct_pagetype;}}};u.map={};u.extend=[];u.loader_cb=function(a,b,c){utag.DB("send:105:CALLBACK");if(!u.initialized){var o={ti:u.data.tagid,enableAutoSpaTrac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49848	192.65.229.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	687	OUT	GET /c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800 HTTP/1.1 Host: 562-ct.c3tag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
2024-05-10 04:53:24 UTC	785	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT server: Apache access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true p3p: policyref="/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" cache-control: max-age=0, no-cache expires: -1 pragma: no-cache set-cookie: C3UID=1922498971715316800; expires=Fri, 09-May-2031 04:53:24 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none set-cookie: C3UID-562=1922498971715316800; expires=Fri, 09-May-2031 04:53:24 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none transfer-encoding: chunked content-type: text/javascript; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close
2024-05-10 04:53:24 UTC	13789	IN	Data Raw: 33 35 44 35 0d 0a 2f 2a 21 0a 20 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 0a 20 2a 20 43 33 20 4d 65 74 72 69 63 73 0a 20 2a 20 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 6d 65 74 72 69 63 73 2e 63 6f 6d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 74 61 67 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 20 2d 20 32 30 31 37 20 43 33 20 4d 65 74 72 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 20 2a 20 50 61 74 65 6e 74 20 50 65 6e 64 69 6e 67 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 64 39 31 65 64 29 7b 76 61 72 20 5f 30 78 34 62 32 63 32 31 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 32 63 32 61 62 30 3d 21 21 5b 5d 3b 72 Data Ascii: 35D5/! @preserve * * C3 Metrics * * http://www.c3metrics.com * http://www.c3tag.com * * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved * Patent Pending */!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];r
2024-05-10 04:53:24 UTC	8696	IN	Data Raw: 32 31 46 30 0d 0a 5f 30 78 31 36 31 65 61 36 5b 27 64 61 74 61 27 5d 5b 27 69 6e 64 65 78 4f 66 27 5d 28 5f 30 78 34 37 66 65 65 37 29 26 26 5f 30 78 34 36 37 33 37 34 28 2b 5f 30 78 31 36 31 65 61 36 5b 27 64 61 74 61 27 5d 5b 27 73 6c 69 63 65 27 5d 28 5f 30 78 34 37 66 65 65 37 5b 27 6c 65 6e 67 74 68 27 5d 29 29 3b 7d 2c 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 3f 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 28 27 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 2c 21 30 78 31 29 3a 5f 30 78 34 37 33 30 39 66 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 28 27 6f 6e 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 29 2c 5f 30 78 33 35 30 33 63 31 3d 66 75 Data Ascii: 21F0_0x161ea6['data']['indexOf'](_0x47fee7)&&_0x467374(+_0x161ea6['data']['slice'](_0x47fee7['length']));},_0x47309f['addEventListener']?_0x47309f['addEventListener']('message',_0x21dd05,!0x1):_0x47309f['attachEvent']('onmessage',_0x21dd05),_0x3503c1=fu
2024-05-10 04:53:24 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 21 3d 5f 30 78 32 33 33 34 61 65 7c 7c 27 27 21 3d 5f 30 78 34 38 33 37 61 38 29 29 7b 76 61 72 20 5f 30 78 31 65 36 65 61 39 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 27 5d 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 31 65 36 65 61 39 5b 27 74 79 70 65 27 5d 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 2c 5f 30 78 31 65 36 65 61 39 5b 27 69 64 27 5d 3d 4d 61 74 68 5b 27 66 6c 6f 6f 72 27 5d 28 30 78 32 37 31 30 2a 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 2b 30 78 31 29 2c 43 33 4f 72 64 65 72 53 72 63 3d 5f 30 78 33 33 65 65 31 65 2b 27 3f 63 33 3d 31 27 2c 43 33 52 65 61 64 79 4f 72 64 65 72 3d 30 78 30 2c 5f 30 78 32 64 39 37 39 33 26 26 27 27 21 3d 5f 30 78 32 64 39 37 39 33 26 26 28 43 33 Data Ascii: 3FC0!=_0x2334ae\|\|''!=_0x4837a8)){var _0x1e6ea9=document['createElement']('script');_0x1e6ea9['type']='text/javascript',_0x1e6ea9['id']=Math['floor'](0x2710*Math['random']()+0x1),C3OrderSrc=_0x33ee1e+'?c3=1',C3ReadyOrder=0x0,_0x2d9793&&''!=_0x2d9793&&(C3
2024-05-10 04:53:24 UTC	3959	IN	Data Raw: 46 37 30 0d 0a 30 61 27 29 5b 30 78 30 5d 5b 27 74 72 69 6d 27 5d 28 29 2c 5f 30 78 35 63 34 35 64 63 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 61 63 34 66 32 5b 30 78 32 5d 5b 27 74 72 69 6d 27 5d 28 29 29 2c 5f 30 78 35 62 38 39 36 64 3d 5f 30 78 31 61 63 34 66 32 5b 30 78 30 5d 5b 27 73 70 6c 69 74 27 5d 28 27 5c 78 30 61 27 29 3b 5f 30 78 34 37 33 62 64 36 3d 28 5f 30 78 32 32 39 31 37 63 3d 5f 30 78 32 32 39 31 37 63 5b 27 73 70 6c 69 74 27 5d 28 27 3b 27 29 29 5b 30 78 30 5d 5b 27 73 70 6c 69 74 27 5d 28 27 78 6e 69 64 4c 61 62 65 6c 73 5c 78 32 30 3d 5c 78 32 30 27 29 5b 30 78 31 5d 2c 5f 30 78 34 35 65 33 32 64 3d 5f 30 78 32 32 39 31 37 63 5b 30 78 31 5d 5b 27 73 70 6c 69 74 27 5d 28 27 72 65 73 65 72 76 65 64 4e 69 64 73 5c 78 32 30 3d 5c 78 32 Data Ascii: F700a')[0x0]['trim'](),_0x5c45dc=parseInt(_0x1ac4f2[0x2]['trim']()),_0x5b896d=_0x1ac4f2[0x0]['split']('\x0a');_0x473bd6=(_0x22917c=_0x22917c['split'](';'))[0x0]['split']('xnidLabels\x20=\x20')[0x1],_0x45e32d=_0x22917c[0x1]['split']('reservedNids\x20=\x2
2024-05-10 04:53:24 UTC	2892	IN	Data Raw: 42 34 30 0d 0a 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 62 61 37 33 37 61 5b 30 78 31 35 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 62 61 37 33 37 61 5b 30 78 31 36 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 62 61 37 33 37 61 5b 30 78 31 37 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 31 32 38 63 33 66 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 29 3b 7d 29 3b 7d 29 3b 7d 65 6c 73 65 20 77 69 6e 64 6f 77 5b 27 6e 65 77 50 61 72 61 6d 73 27 5d 5b 27 63 33 75 69 64 27 5d 3d 77 69 6e 64 6f 77 5b 27 74 27 5d 2c 77 69 6e 64 6f 77 5b 27 6e 65 77 50 61 72 61 6d 73 27 5d 5b 27 72 Data Ascii: B400x1,-0x1),_0xba737a[0x15]['trim']()['slice'](0x1,-0x1),_0xba737a[0x16]['trim']()['slice'](0x1,-0x1),_0xba737a[0x17]['trim']()['slice'](0x1,-0x1),_0x128c3f['slice'](0x1,-0x1));});});}else window['newParams']['c3uid']=window['t'],window['newParams']['r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49847	18.235.19.155	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	569	OUT	GET /cobrowse/js/GlancePresenceVisitor_6.17.0M.js HTTP/1.1 Host: www.glancecdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	320	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 10 May 2024 04:53:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 197 Connection: close Location: https://storage.glancecdn.net/cobrowse/js/GlancePresenceVisitor_6.17.0M.js Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Access-Control-Allow-Origin: *
2024-05-10 04:53:24 UTC	197	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6c 61 6e 63 65 63 64 6e 2e 6e 65 74 2f 63 6f 62 72 6f 77 73 65 2f 6a 73 2f 47 6c 61 6e 63 65 50 72 65 73 65 6e 63 65 56 69 73 69 74 6f 72 5f 36 2e 31 37 2e 30 4d 2e 6a 73 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://storage.glancecdn.net/cobrowse/js/GlancePresenceVisitor_6.17.0M.js">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49850	63.140.39.248	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	4511	OUT	GET /b/ss/usbankcom/10/JS-2.18.0/s56969242534095?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F4%2F2024%206%3A53%3A21%205%20-120&d.&nsid=0&jsonv=1&.d&sdid=250B7C9AC2EAFFD5-551DCDD535CD5A02&mid=21375164595563744931909202357212933986&aamlh=7&ce=UTF-8&pageName=Personal%20Home%20Page&g=https%3A%2F%2Fwww.usbank.com%2Findex.html&c.&vidAPICheck=VisitorAPI%20Present&et_dimensions=1263x907&et_width=1263&et_orientation=landscape&EVENTS=event17%2Cevent15%2C&.c&cc=USD&events=event17%2Cevent15&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=home%20pg&c2=home%20page%20rebranded%20ghp&l2=Experience%20Fragment%3AGlobal%3AAEM%3Alatest%2CNavigation%3A%20Primary%20and%20Utility%3AGlobal%3AAEM%3Alatest%2CBanner%3AGlobal%3AAEM%3Alatest%2CAdvanced%20Layout%20Tool%20%28ALT%29%3AGlobal%3AAEM%3Alatest%2CProduct%20Category%20Cards%3AGlobal%3AAEM%3Alatest%2CFull%20Span%20Content%20Block%3AGlobal%3AAEM%3Alatest%2COmni%3AGlobal%3AAEM%3Alatest%2CStyled%20Content%20Block%3AGlobal%3AAEM%3Alatest%2CStyled%20Content [TRUNCATED] Host: smetrics.usbank.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32 [TRUNCATED]
2024-05-10 04:53:24 UTC	829	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 10 May 2024 04:53:24 GMT expires: Thu, 09 May 2024 04:53:24 GMT last-modified: Sat, 11 May 2024 04:53:24 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C21375164595563744931909202357212933986; Path=/; Domain=usbank.com; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:53 GMT; etag: 3683614789114789888-4618410689331632160 vary: * x-aam-tid: 71LtJRVnR/o= dcs: dcs-prod-va6-1-v060-0e7c31e73.edge-va6.demdex.com 3 ms content-type: application/x-javascript;charset=utf-8 content-length: 1375 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-10 04:53:24 UTC	1375	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 74 5f 75 73 62 61 6e 6b 22 2c 22 63 76 22 3a 22 73 65 67 6d 65 6e 74 73 3d 50 65 72 73 6f 6e 61 6c 20 48 6f 6d 65 20 70 61 67 65 22 2c 22 74 74 6c 22 3a 33 36 30 2c 22 64 6d 6e 22 3a 22 61 70 69 2d 61 64 6f 62 65 2e 63 6f 6d 22 7d 5d 2c 22 75 75 69 64 22 3a 22 32 31 34 34 39 36 39 34 32 38 36 32 36 37 31 38 39 38 31 31 38 37 38 39 33 38 37 37 33 34 38 33 37 36 30 30 35 38 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 37 31 4c 74 4a 52 56 6e 52 2f 6f 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"at_usbank","cv":"segments=Personal Home page","ttl":360,"dmn":"api-adobe.com"}],"uuid":"21449694286267189811878938773483760058","dcs_region":7,"tid":"71LtJRVnR/o=","ibs":[{"id":"60","ttl":144

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49853	104.244.42.131	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	947	OUT	GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	572	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_oDYoiA0Ce39h70SHIHPLlQ=="; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:24 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 8460459c22fc428e strict-transport-security: max-age=631138519 x-response-time: 75 x-connection-hash: 049dfbf96265e950d216c53fc5251597fb80e047193130ce02818c89d6df743f connection: close
2024-05-10 04:53:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49854	104.244.42.197	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	930	OUT	GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	552	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=aee1dd73-66f3-4faa-8a86-c84271522b96; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:24 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d2ddf159e34893b1 strict-transport-security: max-age=0 x-response-time: 71 x-connection-hash: 71e67e24cf81ff6825d7dd95fb75f32597304af4425355c7c78a1238e87b1eba connection: close
2024-05-10 04:53:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49856	172.217.4.70	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	1068	OUT	GET /activityi;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1 Host: 6219543.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-10 04:53:24 UTC	990	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6219543.fls.doubleclick.net/activityi;dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49857	142.250.190.66	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	1079	OUT	GET /td/fls/rul/activityi;fledge=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-10 04:53:24 UTC	967	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnrKk6WuPPW71x88q11UyYf2HKNC0ZOHarv0LeTfC7j137yp4i1ELJWvjfIIKE; expires=Sun, 10-May-2026 04:53:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 04:53:24 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-10 04:53:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49858	172.217.4.38	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	1055	OUT	GET /activity;register_conversion=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-10 04:53:24 UTC	2530	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1247574195680607968"}],"aggregatable_trigger_data":[{"filters":[{"14":["9764723"]}],"key_piece":"0xebfd8a2708dfb49a","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xba54dac645f96dfa","not_filters":{"14":["9764723"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9764723"]}],"key_piece":"0x8ee9d803f415d224","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x4361bbd88e9dec35","not_filters":{"14":["9764723"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15108989742080326042","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1247574195680607968","filters":[{"14":["9764723"],"source_ty [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Jun-2024 04:53:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec; expires=Sun, 10-May-2026 04:53:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49861	142.250.190.98	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	850	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjE0NDk2OTQyODYyNjcxODk4MTE4Nzg5Mzg3NzM0ODM3NjAwNTg=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-10 04:53:24 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent= Date: Fri, 10 May 2024 04:53:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlxCQUaV_rPLFOl51dD1q_u-kI58lBHWj5cME8rYfgZigWaE0r_oTEvxuayDbU; expires=Sun, 10-May-2026 04:53:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:24 UTC	259	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 49 61 43 70 66 7a 46 65 69 76 74 67 70 36 57 53 2d 6d 48 62 52 41 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_c
2024-05-10 04:53:24 UTC	55	IN	Data Raw: 31 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: 1?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49859	54.145.109.191	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	583	OUT	GET /ibs:dpid=477&dpuuid=9fde6b92561d07bdfdc87534b9058d325b339af774faf0b9efdf7b8b52dbd466b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564; dpm=21449694286267189811878938773483760058
2024-05-10 04:53:24 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:24 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +DW8wn1MRAk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v060-077c27837.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:24 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49860	63.140.39.130	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	863	OUT	POST /ee/t34/v1/identity/acquire?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=e99511ec-b802-4316-9bee-942584c07efd HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 206 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564
2024-05-10 04:53:24 UTC	206	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 75 73 62 61 6e 6b 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 78 64 6d 22 3a 7b 22 69 64 65 6e 74 69 74 79 4d 61 70 22 3a 7b 22 45 43 49 44 22 3a 5b 7b 22 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 7d 5d 7d 7d 7d Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"configOverrides":{},"state":{"domain":"usbank.com","cookiesEnabled":true}},"xdm":{"identityMap":{"ECID":[{"id":"21375164595563744931909202357212933986"}]}}}
2024-05-10 04:53:24 UTC	779	IN	HTTP/1.1 200 OK x-request-id: e99511ec-b802-4316-9bee-942584c07efd vary: Origin access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 10 May 2024 04:53:24 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:24 UTC	732	IN	Data Raw: 32 64 35 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 39 39 35 31 31 65 63 2d 62 38 30 32 2d 34 33 31 36 2d 39 62 65 65 2d 39 34 32 35 38 34 63 30 37 65 66 64 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 2d5{"requestId":"e99511ec-b802-4316-9bee-942584c07efd","handle":[{"payload":[{"id":"21375164595563744931909202357212933986","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-05-10 04:53:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49863	192.65.229.43	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	410	OUT	GET /x.gif HTTP/1.1 Host: img.c3tag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: C3UID=14648161541715316801; C3UID-562=14648161541715316801
2024-05-10 04:53:24 UTC	480	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT server: Apache access-control-expose-headers: ETag, f, c3uid set-cookie: PHPSESSID=epctga7j0hgfmh9aj69v5jcff6; path=/; domain=.c3tag.com; secure; SameSite=none expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-length: 0 content-type: text/html; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49864	104.244.42.195	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	649	OUT	GET /i/adsct?p_user_id=21449694286267189811878938773483760058&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	572	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:23 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_4UCtcSrM/gEBaObNm3VdmQ=="; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:24 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 70395cecd261eb3b strict-transport-security: max-age=631138519 x-response-time: 68 x-connection-hash: 50b21db01960377e64f123ce942ee2d05002a97ac918ac6760d4b15f20749830 connection: close
2024-05-10 04:53:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49866	99.84.160.111	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	573	OUT	GET /cobrowse/js/GlancePresenceVisitor_6.17.0M.js HTTP/1.1 Host: storage.glancecdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	730	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19098 Connection: close Date: Thu, 09 May 2024 20:32:32 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Thu, 08 Feb 2024 15:19:13 GMT ETag: "396c1742ecabff1bdcaeeab9fa027890" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31556926 x-amz-version-id: nhL2BXhjNK29B2gwSn3.jOReN3ttYSPI Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 528370c15fe8a3265e7e914f16e953c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD52-C2 X-Amz-Cf-Id: JuYHd5gLaLQH5w44pV_ERKXCZRSQnPm757ekzS5XB3Zc430sK5oFIg== Age: 30053
2024-05-10 04:53:24 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 47 6c 61 6e 63 65 20 4e 65 74 77 6f 72 6b 73 2c 20 49 6e 63 2e 0a 2a 2f 0a 76 61 72 20 68 3d 5b 22 36 22 2c 22 31 37 22 2c 22 30 22 2c 22 31 31 36 36 33 33 37 33 35 39 22 5d 2e 73 6c 69 63 65 28 30 2c 33 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 7c 7c 28 55 69 6e 74 38 41 72 72 61 79 2e 70 Data Ascii: (function() {/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var aa=this\|\|self;/ Copyright 2022 Glance Networks, Inc.*/var h=["6","17","0","1166337359"].slice(0,3).join(".");Uint8Array.prototype.slice\|\|(Uint8Array.p
2024-05-10 04:53:24 UTC	2714	IN	Data Raw: 63 74 2e 20 20 63 6f 75 6e 74 3a 20 24 7b 61 2e 76 7c 7c 30 7d 20 63 6f 6e 6e 73 74 61 74 65 3a 20 24 7b 61 2e 6a 7d 60 29 3b 61 2e 48 7c 7c 28 61 2e 76 3d 61 2e 76 7c 7c 30 2c 61 2e 76 2b 2b 2c 61 2e 48 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 65 6c 65 74 65 20 61 2e 48 3b 61 2e 63 6f 6e 6e 65 63 74 28 29 7d 2c 33 3e 3d 61 2e 76 3f 35 45 33 3a 36 45 34 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 29 7b 6e 28 22 45 72 72 6f 72 3a 20 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 29 3b 61 2e 4a 26 26 61 2e 4a 28 62 29 3b 69 66 28 61 2e 6f 6e 65 72 72 6f 72 29 61 2e 6f 6e 65 72 72 6f 72 28 62 29 7d 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 53 28 74 68 69 73 2c 7b Data Ascii: ct. count: ${a.v\|\|0} connstate: ${a.j}`);a.H\|\|(a.v=a.v\|\|0,a.v++,a.H=window.setTimeout(()=>{delete a.H;a.connect()},3>=a.v?5E3:6E4))}function Q(a,b){n("Error: ",JSON.stringify(b));a.J&&a.J(b);if(a.onerror)a.onerror(b)}L.prototype.U=function(a,b){S(this,{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49868	52.84.52.50	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	599	OUT	GET /utag/tiqapp/utag.v.js?a=usbank/dotcom-homepage/202405021642&cb=1715316803058 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 May 2024 04:51:12 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 92d95cda7eaeed8a1f0f8b1603cfc362.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C3 X-Amz-Cf-Id: lUMyPRQcmGoV50NaugHKR9IDXRGv9c154fph_KnVt0nZkje-yJGa3A== Age: 242 Cache-Control: max-age=300
2024-05-10 04:53:24 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49870	172.217.4.70	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	1143	OUT	GET /activityi;dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1 Host: 6219543.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnrKk6WuPPW71x88q11UyYf2HKNC0ZOHarv0LeTfC7j137yp4i1ELJWvjfIIKE
2024-05-10 04:53:25 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:25 GMT Expires: Fri, 10 May 2024 04:53:25 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 04:53:25 UTC	490	IN	Data Raw: 31 65 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 50 62 68 76 49 61 6c 67 6f 59 44 46 65 Data Ascii: 1e3<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CPbhvIalgoYDFe
2024-05-10 04:53:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49871	44.221.183.201	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	843	OUT	GET /ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601
2024-05-10 04:53:25 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: h8RybM8hSUI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v060-0afa65e93.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:25 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:25 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49874	3.160.6.245	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	535	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:25 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45510 Connection: close Server: CloudFront Date: Fri, 10 May 2024 04:53:25 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=c2d9fee9ffee40beb17fb874dab0d72a;max-age=86400;expires=Sat, 11 May 2024 04:53:25 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 cda1913a649dc75ebe085933b079c996.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 X-Amz-Cf-Id: rZJ_vJqiDBzLDHXO4wZ6lOF1nX0xRCBZpsdNAy9J9_WSy8u7OmKmDQ==
2024-05-10 04:53:25 UTC	16384	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-05-10 04:53:25 UTC	16384	IN	Data Raw: 2b 27 22 3a 27 2b 73 2c 69 2b 2b 29 7d 72 65 74 75 72 6e 22 7b 22 2b 72 2b 22 7d 22 7d 69 66 28 61 28 74 29 29 7b 52 72 3d 52 72 7c 7c 5b 2f 5b 5c 5c 5d 2f 67 2c 2f 5b 5c 22 5d 2f 67 2c 2f 5b 5c 6e 5d 2f 67 2c 2f 5b 5c 72 5d 2f 67 2c 2f 5b 5c 74 5d 2f 67 2c 2f 5b 5c 62 5d 2f 67 2c 2f 5b 5c 66 5d 2f 67 5d 3b 66 6f 72 28 69 3d 30 3b 69 3c 37 3b 69 2b 2b 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 52 72 5b 69 5d 2c 22 5c 5c 22 2b 4f 72 5b 69 5d 29 3b 72 65 74 75 72 6e 27 22 27 2b 74 2b 27 22 27 7d 69 66 28 78 72 28 74 29 29 72 65 74 75 72 6e 22 22 2b 74 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 4a 53 53 22 2c 74 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 72 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 3f 5f 28 74 29 3a 63 28 74 29 3f 4c 72 28 Data Ascii: +'":'+s,i++)}return"{"+r+"}"}if(a(t)){Rr=Rr\|\|[/[\\]/g,/[\"]/g,/[\n]/g,/[\r]/g,/[\t]/g,/[\b]/g,/[\f]/g];for(i=0;i<7;i++)t=t.replace(Rr[i],"\\"+Or[i]);return'"'+t+'"'}if(xr(t))return""+t}catch(t){Dt("JSS",t)}return""}function Mr(t){return o(t)?_(t):c(t)?Lr(
2024-05-10 04:53:25 UTC	1120	IN	Data Raw: 41 4d 41 4c 22 2c 6e 2c 74 2e 77 61 74 63 68 5f 65 6c 29 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4f 69 28 74 29 7b 74 72 79 7b 69 66 28 21 4e 69 28 74 29 29 76 61 72 20 6e 3d 45 69 28 4c 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4e 69 28 74 29 26 26 6e 28 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 41 53 43 57 46 4d 22 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 69 28 74 29 7b 74 72 79 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 71 28 74 2e 6e 6f 64 65 4e 61 6d 65 29 2c 72 3d 71 28 74 2e 74 79 70 65 29 3b 69 66 28 22 61 22 3d 3d 3d 6e 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 6e 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 6e 26 26 28 22 62 75 74 74 6f 6e Data Ascii: AMAL",n,t.watch_el)}return!0}function Oi(t){try{if(!Ni(t))var n=Ei(L.body,{childList:!0,subtree:!0},(function(){Ni(t)&&n()}))}catch(t){Dt("ASCWFM",t)}}function Li(t){try{if(t){var n=q(t.nodeName),r=q(t.type);if("a"===n\|\|"button"===n\|\|"input"===n&&("button
2024-05-10 04:53:25 UTC	394	IN	Data Raw: 2b 29 74 72 79 7b 28 76 3d 79 28 28 6c 3d 73 5b 61 5d 29 26 26 6c 2e 76 61 6c 75 65 29 29 26 26 21 6b 69 28 6c 29 26 26 28 46 65 28 76 29 26 26 69 74 28 6e 2c 65 65 28 6b 65 28 76 29 29 29 2c 48 65 28 76 29 26 26 50 69 28 72 2c 55 65 28 76 29 29 29 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 41 53 43 56 33 22 2c 74 29 7d 65 6c 73 65 7b 76 61 72 20 63 3d 65 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 63 29 7b 76 61 72 20 73 3b 66 6f 72 28 6f 3d 44 28 73 3d 75 28 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6e 70 75 74 22 29 29 29 2c 61 3d 30 3b 61 3c 6f 3b 61 2b 2b 29 74 72 79 7b 76 61 72 20 6c 2c 76 3b 28 76 3d 79 28 28 6c 3d 73 5b 61 5d 29 26 26 6c 2e 76 61 6c 75 65 29 29 26 26 21 6b 69 28 6c 29 26 26 28 46 65 Data Ascii: +)try{(v=y((l=s[a])&&l.value))&&!ki(l)&&(Fe(v)&&it(n,ee(ke(v))),He(v)&&Pi(r,Ue(v)))}catch(t){Dt("ASCV3",t)}else{var c=e.closest("form");if(c){var s;for(o=D(s=u(c.getElementsByTagName("input"))),a=0;a<o;a++)try{var l,v;(v=y((l=s[a])&&l.value))&&!ki(l)&&(Fe
2024-05-10 04:53:25 UTC	11228	IN	Data Raw: 56 33 22 29 2c 75 5f 68 65 6d 73 3a 70 2c 75 5f 68 70 6e 73 3a 64 7d 7d 29 7d 7d 7d 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 53 43 43 42 54 22 2c 74 29 7d 7d 29 29 7d 29 29 2c 54 69 28 22 42 54 43 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 74 28 4c 2c 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 4c 69 28 74 2e 74 61 72 67 65 74 29 3b 6e 26 26 28 74 2e 74 61 72 67 65 74 2c 49 74 28 7b 6d 64 3a 7b 62 74 78 3a 6e 2c 70 69 64 73 3a 43 74 3f 5b 43 74 5d 3a 75 74 28 22 42 54 43 22 29 7d 7d 29 29 7d 29 29 7d 29 29 7d 29 29 2c 5f 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 22 73 6e 61 70 2d 70 69 78 65 6c 2d 68 65 6c 70 65 72 22 3d 3d 3d 74 2e 73 70 6c 69 74 28 22 23 22 Data Ascii: V3"),u_hems:p,u_hpns:d}})}}}}catch(t){Dt("SCCBT",t)}}))})),Ti("BTC",(function(){de((function(){Ot(L,"click",(function(t){var n=Li(t.target);n&&(t.target,It({md:{btx:n,pids:Ct?[Ct]:ut("BTC")}}))}))}))})),_e((function(t){t&&"snap-pixel-helper"===t.split("#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49876	172.217.4.38	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 138 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:24 UTC	138	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 62 61 6e 6b 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 35 31 30 38 39 38 39 37 34 32 30 38 30 33 32 36 30 34 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usbank.com","trigger_debug_key":"15108989742080326042"},"type":"trigger-no-matching-source"}]
2024-05-10 04:53:25 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 10 May 2024 04:53:25 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49877	146.75.80.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:24 UTC	530	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:25 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4779 ETag: "f1bba52ab91fdab0938377d8e6d7b533" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Fri, 10 May 2024 04:53:25 GMT
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 6f 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 Data Ascii: om()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function c(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.one
2024-05-10 04:53:25 UTC	645	IN	Data Raw: 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 32 62 64 63 33 30 34 30 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f Data Ascii: on(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.2bdc3040.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Dispositio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49875	192.65.229.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	829	OUT	GET /ctv4/ctcall.php?iN=2753&nid=1&cid=562&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&tld=usbank.com&c3uid=1922498971715316800&r=108908072115316802&ct_account_id=&w=1280&h=1024&os=Desktop%3AWin10%3A10.0%3AChrome%3A0 HTTP/1.1 Host: 562-ct.c3tag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: C3UID=1922498971715316800; C3UID-562=1922498971715316800
2024-05-10 04:53:25 UTC	385	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:25 GMT server: Apache p3p: policyref="/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" cache-control: max-age=0, no-cache expires: -1 pragma: no-cache content-length: 0 content-type: text/javascript; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49879	172.217.4.38	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	783	OUT	GET /activity;register_conversion=1;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=706303381.1715316803;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
2024-05-10 04:53:25 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1247574195680607968"}],"aggregatable_trigger_data":[{"filters":[{"14":["9764723"]}],"key_piece":"0xebfd8a2708dfb49a","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xba54dac645f96dfa","not_filters":{"14":["9764723"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9764723"]}],"key_piece":"0x8ee9d803f415d224","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x4361bbd88e9dec35","not_filters":{"14":["9764723"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15108989742080326042","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1247574195680607968","filters":[{"14":["9764723"],"source_ty [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Jun-2024 04:53:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49878	192.65.229.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	473	OUT	GET /c3metrics.js?cid=562&r=108908072115316802&c3uid=1922498971715316800 HTTP/1.1 Host: 562-ct.c3tag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: C3UID=1922498971715316800; C3UID-562=1922498971715316800
2024-05-10 04:53:25 UTC	692	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:25 GMT server: Apache p3p: policyref="/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" cache-control: max-age=0, no-cache expires: -1 pragma: no-cache set-cookie: C3UID=1922498971715316800; expires=Fri, 09-May-2031 04:53:25 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none set-cookie: C3UID-562=1922498971715316800; expires=Fri, 09-May-2031 04:53:25 GMT; Max-Age=220752000; path=/; domain=.c3tag.com; secure; SameSite=none transfer-encoding: chunked content-type: text/javascript; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload connection: close
2024-05-10 04:53:25 UTC	849	IN	Data Raw: 33 34 41 0d 0a 2f 2a 21 0a 20 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 0a 20 2a 20 43 33 20 4d 65 74 72 69 63 73 0a 20 2a 20 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 6d 65 74 72 69 63 73 2e 63 6f 6d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 33 74 61 67 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 20 2d 20 32 30 31 37 20 43 33 20 4d 65 74 72 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 20 2a 20 50 61 74 65 6e 74 20 50 65 6e 64 69 6e 67 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 64 39 31 65 64 29 7b 76 61 72 20 5f 30 78 34 62 32 63 32 31 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 32 63 32 61 62 30 3d 21 21 5b 5d 3b 72 65 Data Ascii: 34A/! @preserve * * C3 Metrics * * http://www.c3metrics.com * http://www.c3tag.com * * Copyright (c) 2008 - 2017 C3 Metrics, Inc. All Rights Reserved * Patent Pending */!function(_0x5d91ed){var _0x4b2c21=function(){var _0x2c2ab0=!![];re
2024-05-10 04:53:25 UTC	13040	IN	Data Raw: 33 32 45 38 0d 0a 39 31 35 5d 5b 27 65 78 70 6f 72 74 73 27 5d 3b 76 61 72 20 5f 30 78 33 37 34 35 65 66 3d 5f 30 78 31 65 63 31 63 65 5b 5f 30 78 34 37 31 39 31 35 5d 3d 7b 27 69 27 3a 5f 30 78 34 37 31 39 31 35 2c 27 6c 27 3a 21 30 78 31 2c 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 5f 30 78 35 64 39 31 65 64 5b 5f 30 78 34 37 31 39 31 35 5d 5b 27 63 61 6c 6c 27 5d 28 5f 30 78 33 37 34 35 65 66 5b 27 65 78 70 6f 72 74 73 27 5d 2c 5f 30 78 33 37 34 35 65 66 2c 5f 30 78 33 37 34 35 65 66 5b 27 65 78 70 6f 72 74 73 27 5d 2c 5f 30 78 66 34 32 36 35 36 29 2c 5f 30 78 33 37 34 35 65 66 5b 27 6c 27 5d 3d 21 30 78 30 2c 5f 30 78 33 37 34 35 65 66 5b 27 65 78 70 6f 72 74 73 27 5d 3b 7d 5f 30 78 66 34 32 36 35 36 5b 27 6d 27 5d 3d 5f 30 78 35 Data Ascii: 32E8915]['exports'];var _0x3745ef=_0x1ec1ce[_0x471915]={'i':_0x471915,'l':!0x1,'exports':{}};return _0x5d91ed[_0x471915]['call'](_0x3745ef['exports'],_0x3745ef,_0x3745ef['exports'],_0xf42656),_0x3745ef['l']=!0x0,_0x3745ef['exports'];}_0xf42656['m']=_0x5
2024-05-10 04:53:25 UTC	1455	IN	Data Raw: 35 41 38 0d 0a 67 74 68 27 5d 29 29 3b 7d 2c 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 3f 5f 30 78 34 37 33 30 39 66 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 28 27 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 2c 21 30 78 31 29 3a 5f 30 78 34 37 33 30 39 66 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 28 27 6f 6e 6d 65 73 73 61 67 65 27 2c 5f 30 78 32 31 64 64 30 35 29 2c 5f 30 78 33 35 30 33 63 31 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 30 36 61 36 62 29 7b 5f 30 78 34 37 33 30 39 66 5b 27 70 6f 73 74 4d 65 73 73 61 67 65 27 5d 28 5f 30 78 34 37 66 65 65 37 2b 5f 30 78 33 30 36 61 36 62 2c 27 2a 27 29 3b 7d 29 2c 5f 30 78 34 34 36 62 30 30 5b 27 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: 5A8gth']));},_0x47309f['addEventListener']?_0x47309f['addEventListener']('message',_0x21dd05,!0x1):_0x47309f['attachEvent']('onmessage',_0x21dd05),_0x3503c1=function(_0x306a6b){_0x47309f['postMessage'](_0x47fee7+_0x306a6b,'*');}),_0x446b00['setImmediate
2024-05-10 04:53:25 UTC	2903	IN	Data Raw: 42 35 30 0d 0a 33 65 64 65 33 2c 5f 30 78 32 31 34 35 64 32 2c 5f 30 78 33 30 61 34 32 32 3d 5f 30 78 31 34 39 31 66 30 5b 27 65 78 70 6f 72 74 73 27 5d 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 32 62 61 31 36 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 73 65 74 54 69 6d 65 6f 75 74 5c 78 32 30 68 61 73 5c 78 32 30 6e 6f 74 5c 78 32 30 62 65 65 6e 5c 78 32 30 64 65 66 69 6e 65 64 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 33 39 39 62 35 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 63 6c 65 61 72 54 69 6d 65 6f 75 74 5c 78 32 30 68 61 73 5c 78 32 30 6e 6f 74 5c 78 32 30 62 65 65 6e 5c 78 32 30 64 65 66 69 6e 65 64 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 65 31 30 39 32 28 5f 30 78 63 64 30 64 33 33 Data Ascii: B503ede3,_0x2145d2,_0x30a422=_0x1491f0['exports']={};function _0x32ba16(){throw new Error('setTimeout\x20has\x20not\x20been\x20defined');}function _0x4399b5(){throw new Error('clearTimeout\x20has\x20not\x20been\x20defined');}function _0x5e1092(_0xcd0d33
2024-05-10 04:53:25 UTC	1455	IN	Data Raw: 35 41 38 0d 0a 27 63 68 64 69 72 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 61 64 65 30 32 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 70 72 6f 63 65 73 73 2e 63 68 64 69 72 5c 78 32 30 69 73 5c 78 32 30 6e 6f 74 5c 78 32 30 73 75 70 70 6f 72 74 65 64 27 29 3b 7d 2c 5f 30 78 33 30 61 34 32 32 5b 27 75 6d 61 73 6b 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 78 30 3b 7d 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 66 63 32 61 2c 5f 30 78 32 32 39 63 65 34 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 39 65 61 64 31 28 5f 30 78 32 66 32 37 62 32 2c 5f 30 78 37 33 37 35 33 37 2c 5f 30 78 31 38 61 38 37 30 29 7b 72 65 74 75 72 6e 20 72 61 6e 67 65 53 74 61 72 74 3d 5f 30 78 32 66 32 37 62 32 5b 27 74 6f 4c 6f 77 65 Data Ascii: 5A8'chdir']=function(_0x4ade02){throw new Error('process.chdir\x20is\x20not\x20supported');},_0x30a422['umask']=function(){return 0x0;};},function(_0x2ffc2a,_0x229ce4){function _0x59ead1(_0x2f27b2,_0x737537,_0x18a870){return rangeStart=_0x2f27b2['toLowe
2024-05-10 04:53:25 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 30 78 32 64 35 36 62 39 5b 27 73 74 79 6c 65 27 5d 5b 27 64 69 73 70 6c 61 79 27 5d 3d 27 6e 6f 6e 65 27 2c 5f 30 78 32 64 35 36 62 39 5b 27 73 72 63 27 5d 3d 5f 30 78 33 66 38 62 37 33 2c 64 6f 63 75 6d 65 6e 74 5b 27 62 6f 64 79 27 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 5f 30 78 32 64 35 36 62 39 29 3b 7d 2c 77 69 6e 64 6f 77 5b 27 69 6e 73 65 72 74 5f 63 33 5f 73 65 73 73 69 6f 6e 5f 74 61 67 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 34 65 39 36 63 2c 5f 30 78 32 34 63 32 64 38 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 5b 27 63 6f 6f 6b 69 65 27 5d 5b 27 6d 61 74 63 68 27 5d 28 27 28 5e 7c 3b 29 5c 78 32 30 3f 43 33 53 2d 27 2b 5f 30 78 32 34 63 32 64 38 2b 27 3d 28 5b 5e 3b 5d 2a 29 28 3b 7c 29 27 29 29 7b 76 61 72 Data Ascii: 3FC00x2d56b9['style']['display']='none',_0x2d56b9['src']=_0x3f8b73,document['body']['appendChild'](_0x2d56b9);},window['insert_c3_session_tag']=function(_0x24e96c,_0x24c2d8){if(!document['cookie']['match']('(^\|;)\x20?C3S-'+_0x24c2d8+'=([^;]*)(;\|)')){var
2024-05-10 04:53:25 UTC	9647	IN	Data Raw: 32 35 41 32 0d 0a 31 34 66 30 66 66 2c 5f 30 78 34 35 65 63 36 39 5b 30 78 66 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 34 35 65 63 36 39 5b 30 78 31 30 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 33 61 33 36 35 30 2c 5f 30 78 38 33 36 61 33 33 2c 5f 30 78 34 35 65 63 36 39 5b 30 78 31 33 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 34 35 65 63 36 39 5b 30 78 31 34 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 29 2c 5f 30 78 34 35 65 63 36 39 5b 30 78 31 35 5d 5b 27 74 72 69 6d 27 5d 28 29 5b 27 73 6c 69 63 65 27 5d 28 30 78 31 2c 2d 30 78 31 Data Ascii: 25A214f0ff,_0x45ec69[0xf]['trim']()['slice'](0x1,-0x1),_0x45ec69[0x10]['trim']()['slice'](0x1,-0x1),_0x3a3650,_0x836a33,_0x45ec69[0x13]['trim']()['slice'](0x1,-0x1),_0x45ec69[0x14]['trim']()['slice'](0x1,-0x1),_0x45ec69[0x15]['trim']()['slice'](0x1,-0x1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49880	104.244.42.5	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	740	OUT	GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=aee1dd73-66f3-4faa-8a86-c84271522b96
2024-05-10 04:53:25 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: c65d93b096123a3c strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: a5503698f941023fbabc24395065897f3d8b753371e60fb3587ae9d944ea4c6e connection: close
2024-05-10 04:53:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49883	63.140.39.248	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	3261	OUT	POST /ee/va6/v1/interact?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=c668bd2c-46b7-4bc2-be55-3e386b87e8ad HTTP/1.1 Host: smetrics.usbank.com Connection: keep-alive Content-Length: 1972 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32 [TRUNCATED]
2024-05-10 04:53:25 UTC	1972	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 75 73 62 61 6e 6b 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 Data Ascii: {"meta":{"configOverrides":{},"state":{"domain":"usbank.com","cookiesEnabled":true}},"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","ht
2024-05-10 04:53:25 UTC	782	IN	HTTP/1.1 200 OK x-request-id: c668bd2c-46b7-4bc2-be55-3e386b87e8ad vary: Origin access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 10 May 2024 04:53:25 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag set-cookie: kndctr_675616D751E567410A490D4C_AdobeOrg_cluster=va6; Max-Age=1800; Domain=usbank.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-10 04:53:25 UTC	12285	IN	Data Raw: 66 66 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 63 36 36 38 62 64 32 63 2d 34 36 62 37 2d 34 62 63 32 2d 62 65 35 35 2d 33 65 33 38 36 62 38 37 65 38 61 64 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 32 31 33 37 35 31 36 34 35 39 35 35 36 33 37 34 34 39 33 31 39 30 39 32 30 32 33 35 37 32 31 32 39 33 33 39 38 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 65 22 3a 22 61 63 74 69 76 61 74 69 6f 6e 3a 70 75 6c 6c 22 2c 22 65 76 65 6e 74 49 6e 64 65 78 22 3a 30 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a Data Ascii: ff8{"requestId":"c668bd2c-46b7-4bc2-be55-3e386b87e8ad","handle":[{"payload":[{"id":"21375164595563744931909202357212933986","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[],"type":"activation:pull","eventIndex":0},{"payload":[{"id":
2024-05-10 04:53:25 UTC	7694	IN	Data Raw: 31 65 30 31 0d 0a 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 5c 6e 20 20 7d 3b 5c 6e 5c 6e 20 20 5f 46 51 2e 68 65 6c 70 65 72 73 2e 73 68 72 69 6e 6b 50 72 6f 66 69 6c 65 56 61 6c 75 65 20 3d 20 28 64 61 74 61 2c 20 61 63 74 69 76 69 74 79 4e 61 6d 65 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 52 78 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 5c 5c 5c 5c 62 28 5c 5c 5c 5c 7c 2a 29 27 20 2b 20 61 63 74 69 76 69 74 79 4e 61 6d 65 20 2b 20 27 3a 2e 2b 3f 3a 28 54 7c 46 29 3a 28 5c 5c 5c 5c 64 2b 29 5c 5c 5c 5c 62 27 2c 20 27 67 69 27 29 3b 5c 6e 20 20 20 20 69 66 20 28 64 61 74 61 2e 69 6e 64 65 78 4f 66 28 61 63 74 69 76 69 74 79 4e 61 6d 65 20 2b 20 5f 46 51 2e 43 4f 4e 46 49 47 2e 46 4c 41 47 5f 46 Data Ascii: 1e01\n }\n return true;\n };\n\n _FQ.helpers.shrinkProfileValue = (data, activityName) => {\n const dataRx = new RegExp('\\\\b(\\\\\|*)' + activityName + ':.+?:(T\|F):(\\\\d+)\\\\b', 'gi');\n if (data.indexOf(activityName + _FQ.CONFIG.FLAG_F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49881	104.244.42.195	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	761	OUT	GET /i/adsct?bci=3&eci=2&event_id=e02ef85c-2ae5-4ad9-8fab-e526d5a786fc&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bad56627-766a-4ab2-8c7a-51adf98f1562&tw_document_href=https%3A%2F%2Fwww.usbank.com%2Findex.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuq5d&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_oDYoiA0Ce39h70SHIHPLlQ=="
2024-05-10 04:53:25 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:24 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9fdfba538618e15b strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 51bf162da1fb636883b5f77ff356ad6b11e429999a5af896b9bf8ca937a0505d connection: close
2024-05-10 04:53:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49873	3.33.220.150	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	659	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:25 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:25 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-05-10 04:53:25 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49882	3.235.201.212	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	862	OUT	GET /image.aspx?url=https%3A%2F%2Fwww.usbank.com%2Findex.html&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&res=1280x1024&accountid=5093&rt=8385&prev=b02ecca2-2bad-f1d6-188e-68be725f696a&luid=25751cf8-eef9-41bf-f6b6-3aa7abecca19&rnd=65791 HTTP/1.1 Host: 5093.global.siteimproveanalytics.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:25 UTC	186	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:25 GMT Content-Type: image/gif Content-Length: 34 Connection: close Cache-Control: max-age=0 Expires: Fri, 10 May 2024 04:53:25 UTC
2024-05-10 04:53:25 UTC	34	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49884	142.250.190.66	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	1423	OUT	GET /td/rul/978114044?random=1715316804134&cv=11&fst=1715316804134&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
2024-05-10 04:53:25 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 04:53:25 UTC	609	IN	Data Raw: 33 38 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 38c<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-05-10 04:53:25 UTC	306	IN	Data Raw: 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 Data Ascii: onds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.mess
2024-05-10 04:53:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49885	142.250.190.98	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	1299	OUT	GET /pagead/viewthroughconversion/978114044/?random=1715316804134&cv=11&fst=1715316804134&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
2024-05-10 04:53:25 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 04:53:25 UTC	552	IN	Data Raw: 61 34 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a49(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-10 04:53:25 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-05-10 04:53:25 UTC	833	IN	Data Raw: 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 35 33 31 33 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 35 38 30 76 38 37 34 30 39 32 39 32 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f Data Ascii: x3d11\x26fst\x3d1715313600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be4580v874092926za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usbank.com%2Findex.html\x26hn\x3dwww.googleadservices.co
2024-05-10 04:53:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49889	146.75.80.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:25 UTC	543	OUT	GET /ct/lib/main.2bdc3040.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:25 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23061 ETag: "502643635c99771e124de408718c65b3" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Fri, 10 May 2024 04:53:25 GMT
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 1f 8b 08 08 d0 85 32 66 00 03 6d 61 69 6e 2e 32 62 64 63 33 30 34 30 2e 6a 73 00 c4 5c 0f 73 db b6 92 ff 2a 32 67 aa 10 21 a5 90 94 2c 3b 14 11 8d d3 e7 ce e4 5e 9b 74 9a f4 e6 3a 1e 8f 87 96 20 8b 8d 0c fa 48 d0 ae 9f a5 7e f6 db 05 08 12 94 48 db 71 de cd 9b 36 36 09 82 8b 1f 16 fb 0f bb a0 0f 96 05 9f 8b 24 e5 36 23 0f b7 71 d6 4b e8 c3 76 aa 1b 7b 99 2d 54 33 9f 66 4c 14 19 b7 93 33 71 be d9 d8 9c e2 05 7d 48 42 e1 ae c3 03 df 65 7f dd a4 99 c8 c3 87 ed d6 65 f0 68 38 8f d7 6b 9b 0f cb 76 97 bb f5 75 46 e0 66 4d 0f 3c 97 13 a2 5b b7 d9 f0 9a 32 37 1b ce 69 02 3f 17 b4 42 26 e0 65 40 97 0d 53 bc 24 9b cd a7 cb 3f d9 5c 0c 17 6c 99 70 f6 6b 96 de b0 4c dc cb 6e 0f 8c 17 d7 2c 8b 2f d7 2c 04 f2 57 4c 84 6c 4b b6 40 2f 33 e8 91 07 ab e0 ea ed 85 75 40 c5 Data Ascii: 2fmain.2bdc3040.js\s*2g!,;^t: H~Hq66$6#qKv{-T3fL3q}HBeeh8kvuFfM<[27i?B&e@S$?\lpkLn,/,WLlK@/3u@
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 3a 2c 4d b5 16 7c e3 39 90 ff ef 84 dd 41 90 bb df 08 23 82 4b ef f2 3c 35 98 da 2f 94 81 ae a1 6c b5 cc ce 2c cb 11 75 74 81 d8 d1 a6 33 4d c7 33 d6 ed c0 9f 4e 49 7e 97 88 39 86 24 0f f3 38 67 56 9c cf 93 c4 0a e5 f5 1a 64 91 fb e5 0d 44 ad 71 76 6f 85 3a 5e 9d ca 56 a9 cf a1 be 1c 94 d7 3d e5 4b 74 df 2f 76 8d 47 75 9d e7 81 7e 6b 9e 0f 82 9a 82 3f 81 fd 44 4d 4f dd 96 64 82 d7 e5 a0 2b f6 57 8d e3 dd bb 77 be 6a be 84 1f 93 71 f5 e4 4f 63 d4 32 52 0e a5 07 68 41 c5 a9 0d 7c e3 28 3d 3f a7 77 2c fb 11 48 d9 04 ac 1c 6c 5a 6a 79 a9 b6 69 92 7d 60 b2 80 81 40 11 36 2e 95 ef e4 9b 8d 52 4d 4e de 61 80 a3 d5 a6 74 11 96 ec cf ea fe 6c b3 61 66 c7 99 71 1d 32 12 51 6f e7 55 98 2e b4 45 d4 e6 ea aa 7e 8c eb 2a a8 00 df 24 17 a5 5e 5a 51 2e ad 64 1b 42 4f a9 Data Ascii: :,M\|9A#K<5/l,ut3M3NI~9$8gVdDqvo:^V=Kt/vGu~k?DMOd+WwjqOc2RhA\|(=?w,HlZjyi}`@6.RMNatlafq2QoU.E~*$^ZQ.dBO
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 36 d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1d 2a 4f 40 57 ee d7 e1 e7 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 f9 d7 d3 1f bf 5c fc 72 f2 3f 17 ef ff f8 72 fa 99 1e 7a ed ae 93 56 9e 43 b4 e6 f8 5a 5b cd 4a 84 c8 ee a5 7a ed 65 ca fd 0a 9c 30 72 84 0f d5 65 ab 8f 75 97 69 da 52 e7 18 07 db ad 3b 0e 64 8c 05 3d 6c d2 ea f1 c5 30 2f 2e 65 2e ab df 57 f1 98 be b7 7d d7 27 c6 d6 7a 3b 8f cb 2d 93 1a e0 c0 df 6e 21 22 fc 3a fc fa 4b fc 97 ea 82 89 0b 60 d9 4d 9a ae 3f 27 ff 62 f4 18 04 1c ee 57 ad db 9f f6 24 a8 2b b6 ae 0a 89 f6 2b 80 3a 3d 2f 8d 90 6a Data Ascii: 6Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~\r?rzVCZ[Jze0reuiR;d=l0/.e.W}'z;-n!":K`M?'bW$++:=/j
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 5b 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 17 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d fe f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 4b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 Data Ascii: [9~[<^;\E\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2Kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: 51 d8 5e 95 37 a3 64 c0 66 f5 ad 83 fc 1b 30 b3 80 8f d5 7f fc 23 2b 51 52 9e 13 4b 07 98 f7 a3 d9 14 dc 19 c1 13 e0 bc cc 83 66 0e 3b af aa c5 69 e4 b3 91 3c 91 d8 f5 55 b2 3a 2e a6 b3 ef 6d 64 5a bf b3 c9 99 d0 9f d7 c8 e9 55 d9 5d e6 32 27 05 39 a9 ff ee 41 53 f6 f0 a0 67 bb ec ed 7f ae 5e fe b1 87 f6 bf 89 81 9f 68 71 ac 6e 37 eb dd 24 dc 3f 75 fa 7f ec 5d 6b 57 db 48 93 fe 2b 89 4f c2 2b 8d 64 a3 fb 05 d0 f0 12 6e 21 e1 b6 06 92 99 38 84 a3 18 01 4a 40 72 6c 19 c2 60 ff f7 7d aa bb 25 b5 6d 31 97 0f bb e7 ec 7b f6 43 82 d4 f7 ae ae ae 7a 4a dd 55 66 ab 90 cc 95 d3 4d 89 1f f9 ad 0e d9 1f c2 50 d5 35 00 04 26 c1 86 e5 05 10 ee bc b3 e0 ea 9b 36 1f e6 55 01 3a 1a 62 6f 34 4d 09 4d bf 9c 71 e1 4f 9f b9 db d2 7c 4a c8 9c 66 16 9c b3 d8 a7 7d e6 97 c5 3a Data Ascii: Q^7df0#+QRKf;i<U:.mdZU]2'9ASg^hqn7$?u]kWH+O+dn!8J@rl`}%m1{CzJUfMP5&6U:bo4MMqO\|Jf}:
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: d9 53 b3 02 4f c1 c4 f4 26 b6 a5 e2 71 f3 36 be 1b 24 97 2a 6f e1 d5 72 a7 c0 66 a7 7b b4 62 42 1c 61 2f d0 45 de 13 0d 37 41 e3 fa ae eb 65 c2 c7 3d 1e 26 2f b2 3c 6b 33 0e 82 82 a9 ee b8 75 3e 67 7b a0 fd f0 92 42 3c e5 6c 37 89 22 3a ab c0 23 34 f2 48 64 c2 87 ed 26 be 27 13 67 81 49 15 f5 c5 5d 52 dc e4 97 14 b1 4c 99 8f 32 a8 3e 09 57 bb 8c 5d d8 2d f5 f9 ec c7 05 49 7a 1b e4 bb 86 f9 95 a1 1e 59 38 ad 84 9c fb 7b 09 8f 03 52 5f 77 e1 f0 e1 69 ba 3a ec ec ef 9d 9c 46 4f 3b c7 17 fb 47 9b 1b fb 17 27 a7 47 dd 8d dd ed 95 27 80 6f cc 76 c5 34 0c 7d 3c 4c 57 5a 57 83 0b 0a 73 75 7b 82 91 c7 d7 49 6b aa 6f 6d 77 f7 3e c0 74 de 3e de 7b bf 58 7e 90 66 6d d0 28 bd 4f 2e db c9 20 fd 8e 0a 27 9b dd 8d e3 ed 0b ea 71 fb 70 bb 7b d2 5c 69 d4 1f c6 83 a4 4d 6e Data Ascii: SO&q6$*orf{bBa/E7Ae=&/<k3u>g{B<l7":#4Hd&'gI]RL2>W]-IzY8{R_wi:FO;G'G'ov4}<LWZWsu{Ikomw>t>{X~fm(O. 'qp{\iMn
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: cf c5 71 77 7b 67 ef 37 ad b5 fd 93 fc f1 81 e4 fe f5 7a f4 2f b1 73 e3 17 af 47 fa 8b af e3 e2 c5 15 9d 21 b3 ac 16 8b aa 96 b1 be 81 69 38 7b cd 07 14 58 8c 54 fc e7 11 e8 92 92 19 d2 28 ef 9c 2a b4 19 d5 d5 ac 8c ef 56 ae 68 56 49 76 2a c3 46 70 da c8 fe 65 80 9c 16 93 d6 45 24 05 92 55 9b 29 39 99 8c b9 a8 24 5d 3b aa 1f af ca c7 f5 62 85 22 bc aa 58 a7 9b d8 72 3d b0 21 ff a6 47 b2 9e 7f f2 e4 a1 07 d8 b0 b0 a9 de 82 36 7f b2 45 0b fa 75 88 bc c3 9c 39 f3 ce 21 29 7c 16 f4 88 6a 7f 6b ae 50 08 77 57 f6 01 52 f6 fb 56 5a cb 2d 95 ae e4 97 0d 1c 36 34 40 64 20 3d c4 83 22 f4 59 54 b9 6a 01 d6 0b ec b7 aa fa f7 a6 fe 6f 4a 4a c8 90 2e 97 20 5d 0e c6 18 cb 1f db b3 32 a4 c3 58 31 49 2e 8c 15 ec f0 c7 a8 67 9a a6 67 bb 96 63 04 74 a6 16 3a 8e ef 38 a6 6e Data Ascii: qw{g7z/sG!i8{XT(VhVIvFpeE$U)9$];b"Xr=!G6Eu9!)\|jkPwWRVZ-64@d ="YTjoJJ. ]2X1I.ggct:8n
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: a8 56 9a b5 04 3b 02 17 6d 99 16 04 ba 84 40 30 48 17 ea 13 84 98 01 23 a0 43 88 22 a4 eb 6b 5c 82 35 0d a1 b3 6d 1a 56 0d 51 7c cf f3 89 c2 9e 0c 56 80 86 a1 b9 9d 80 b4 a6 84 5b 80 15 a0 bd b0 5e 32 84 41 b6 03 30 00 98 21 a3 19 cb f1 08 03 b0 49 d4 c0 c6 77 03 1b 70 24 90 31 8e e9 a1 82 1f da 9e 84 76 4c 13 2b e1 63 30 8e 0c 7c 5c 30 8b 43 d7 d5 66 30 90 0b 0c 61 80 33 5d 19 0e 11 dd 03 ea c3 96 91 11 d6 00 8d f9 58 3b 19 24 41 e3 3a b4 6c c4 7a 35 5e 32 c1 1e be 1b 82 af 64 e8 84 a9 1a 3e 96 6e 06 44 61 34 46 e0 41 d9 1a 33 78 ca 24 6a 40 b5 db 33 d0 ca 05 47 bb d8 1d be 8c b2 4c c3 43 d7 06 6d d5 19 bc 45 5a 9d a0 95 04 bd 4c c7 b6 b0 67 31 08 19 85 99 8e 07 54 61 62 cd 24 40 16 b8 d8 35 21 08 2a 41 33 ec 28 00 05 2c 84 25 a1 34 2c 2f 86 88 dd e3 4a Data Ascii: V;m@0H#C"k\5mVQ\|V[^2A0!Iwp$1vL+c0\|\0Cf0a3]X;$A:lz5^2d>nDa4FA3x$j@3GLCmEZLg1Tab$@5!*A3(,%4,/J
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: c5 65 95 fd 3b cf fe 5d 1b 97 d9 90 1f f7 55 f6 0f 9e fd 43 8b cb 6c 88 94 c7 2a fb 13 cf fe a4 8d ca 6c 48 99 87 2a fb 23 cf fe a8 5d 95 d9 10 3c c4 3d 7f 61 ff a7 c2 fe 9f f9 48 57 54 71 00 e7 ec 6a e2 ed 74 fe 46 70 02 09 55 9d 20 29 42 3e 0b d2 92 d5 ae 08 39 5d d2 33 a8 d2 3e 94 bc c0 0d 7f 45 88 ee 92 74 cc b2 57 84 10 2f 09 66 5b 55 e2 8f 92 1d 00 ed aa c4 4f 25 3f e8 4e dd d1 c7 92 21 e8 bb 22 c5 25 fa 67 df 04 ea 33 70 f6 7b 3c 4d f7 06 fa c3 c7 41 91 2f 2d f1 bf 74 9a d1 65 f7 94 3e d0 51 fe e8 b9 74 fe 9b e5 3c 8f fd 42 d4 62 c3 77 a3 4d d1 74 c3 9d 0b 71 42 59 96 59 ec f6 b9 1c de 71 99 ab ae 0e d7 95 64 e1 f7 44 d8 c7 98 05 d7 84 3a c0 1d fd ee 7b 32 65 11 5f 65 3c f9 4c ad ea 00 54 e7 21 c3 4d 6f 35 d3 34 d5 88 22 c5 5e e2 21 a5 6b ef 62 6f Data Ascii: e;]UCllH#]<=aHWTqjtFpU )B>9]3>EtW/f[UO%?N!"%g3p{<MA/-te>Qt<BbwMtqBYYqdD:{2e_e<LT!Mo54"^!kbo
2024-05-10 04:53:25 UTC	1378	IN	Data Raw: b9 5c d5 85 04 55 b4 23 b0 4d c4 12 0e 3c f2 8d ca a6 6a 61 09 04 3a 71 b2 c8 44 5f 06 2b e0 b3 30 9e 0e 98 91 82 73 08 64 56 4b 8c a3 3c 09 9f 6b f9 8a c4 32 1f 9c 12 71 1d d5 94 8b 7a fe da c7 0d e5 54 0f 09 83 88 e0 c9 5f 25 64 51 c6 e8 fe e3 0b df 2d 60 ca 4a 3d 45 fc da bb 00 7c 81 79 fb 35 4a c0 62 7d eb 3f 1e fd 6e fb f7 8f 77 2e 76 2f 9e 04 dd 8b bf fe ed 76 b5 fe ef c1 ce 7f f5 c3 dd af 17 d1 05 0c da 2f fc f2 c5 db 41 e9 1b 2a ed fa 3b de 13 f6 45 d6 b3 b7 fb 5d eb 62 77 e7 c2 bd f0 2e 9e 0c 1e 3f 7a c2 16 79 fa c5 6e 4b 26 0c f3 12 33 fa 92 9f df f4 42 26 d2 af 20 f8 f8 69 78 33 cf 56 8b 79 2a 86 8b 8c 4e 6d 98 72 ca 3f 42 5b e9 62 b2 0b 44 bf 8b 45 f4 56 2e 9e 2f 08 86 62 a8 f2 1b 65 ec 01 f9 d0 b8 e0 50 b6 bd 6d bb 95 11 7e a3 3e 13 d9 08 28 Data Ascii: \U#M<ja:qD_+0sdVK<k2qzT_%dQ-`J=E\|y5Jb}?nw.v/v/A;E]bw.?zynK&3B& ix3VyNmr?B[bDEV./bePm~>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49890	142.250.191.226	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	935	OUT	GET /ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://6219543.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:26 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49893	35.190.43.134	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	821	OUT	GET /cm/i?pid=89cfe344-53d3-4495-9a99-77bfbb3bf779&u_scsid=9dde3cb5-9929-4673-850a-706d8ea5c1ba&u_sclid=1b7b3086-98a6-4f32-96d3-0e0dd54e20c0 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:26 UTC	385	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:26 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49892	35.190.43.134	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	622	OUT	GET /config/com/89cfe344-53d3-4495-9a99-77bfbb3bf779.js?v=3.16.3-2405090301 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usbank.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:26 UTC	494	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:26 GMT access-control-allow-origin: https://www.usbank.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 175 x-envoy-upstream-service-time: 40 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:26 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 38 39 63 66 65 33 34 34 2d 35 33 64 33 2d 34 34 39 35 2d 39 61 39 39 2d 37 37 62 66 62 62 33 62 66 37 37 39 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('89cfe344-53d3-4495-9a99-77bfbb3bf779',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49891	192.28.147.68	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	888	OUT	POST /webevents/visitWebPage?_mchNc=1715316804368&_mchCn=&_mchId=451-RQS-232&_mchTk=_mch-usbank.com-1715316804363-20412&_mchHo=www.usbank.com&_mchPo=&_mchRu=%2Findex.html&_mchPc=https%3A&_mchVr=163&_mchEcid=675616D751E567410A490D4C%40AdobeOrg%3A7%3A21375164595563744931909202357212933986&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 Host: 451-rqs-232.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:26 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 10 May 2024 04:53:26 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 9c6efc80-3548-43d9-8aba-900aade9e87d Access-Control-Allow-Origin: *
2024-05-10 04:53:26 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49898	172.217.2.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	1355	OUT	GET /pagead/1p-user-list/978114044/?random=1715316804134&cv=11&fst=1715313600000&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqr-3N1DveI6JygubYx7IQGvAgR0XmceOPIbXKlrHl2D26nVNI&random=3200754453&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49897	151.101.0.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	774	OUT	GET /user/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&cb=1715316805486&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 326 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5930973859211573 Date: Fri, 10 May 2024 04:53:27 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:27 UTC	326	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49895	151.101.0.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	703	OUT	GET /user/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316805500&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 326 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU0yVTFOMlpqTm1RdE5UZ3pOeTAwWXpZekxUZzBPVGd0TXpVMFptSTJPR0UzTkRnNQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1479601787416884 Date: Fri, 10 May 2024 04:53:27 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:27 UTC	326	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49896	151.101.0.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:26 UTC	1437	OUT	GET /v3/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1715316805506 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 10 May 2025 04:53:27 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1245714578320552 Date: Fri, 10 May 2024 04:53:27 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:27 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49901	54.145.109.191	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	650	OUT	GET /ibs:dpid=771&dpuuid=CAESEIaCpfzFeivtgp6WS-mHbRA&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:27 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: iemAdXqHR90= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v060-084de7015.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:27 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49900	104.244.42.195	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	470	OUT	GET /i/adsct?p_user_id=21449694286267189811878938773483760058&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_4UCtcSrM/gEBaObNm3VdmQ=="
2024-05-10 04:53:27 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 10 May 2024 04:53:26 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 8ac671de774eae40 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 1292d1768f515336a07028ad3f2c344ee61f6cd91c4f77c61a96d82fc97facad connection: close
2024-05-10 04:53:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49902	63.140.38.112	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	3202	OUT	GET /ee/va6/v1/interact?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=c668bd2c-46b7-4bc2-be55-3e386b87e8ad HTTP/1.1 Host: smetrics.usbank.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32 [TRUNCATED]
2024-05-10 04:53:27 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: c668bd2c-46b7-4bc2-be55-3e386b87e8ad vary: Origin date: Fri, 10 May 2024 04:53:27 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49904	63.140.39.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	647	OUT	GET /ee/t34/v1/identity/acquire?configId=c48cde25-8fef-4d2b-92b4-31785d4d433d&requestId=e99511ec-b802-4316-9bee-942584c07efd HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:27 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: e99511ec-b802-4316-9bee-942584c07efd vary: Origin date: Fri, 10 May 2024 04:53:27 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49903	3.227.199.28	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	670	OUT	GET /bct?pid=8bc436aa-e0fc-4baa-9c9a-06fbeca87826&puid=21449694286267189811878938773483760058&_ct=img HTTP/1.1 Host: mid.rkdms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	646	IN	HTTP/1.1 302 FOUND Server: awselb/2.0 Date: Fri, 10 May 2024 04:53:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close set-cookie: sc=3%3A117072; Domain=rkdms.com; Expires=Sat, 10 May 2025 04:53:27 GMT; Secure; Path=/; SameSite=None set-cookie: sessionid=h-32516cec6ec3427bac6d4d42235b7c87_t-1715316807; Domain=rkdms.com; Expires=Sat, 10 May 2025 04:53:27 GMT; Secure; Path=/; SameSite=None Vary: Accept-Encoding Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Location: https://dpm.demdex.net/ibs:dpid=129099&dpuuid=32516cec6ec3427bac6d4d42235b7c87

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49906	35.71.131.137	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	422	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.usbank.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:27 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-05-10 04:53:27 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49907	23.21.63.192	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:27 UTC	618	OUT	GET /image.aspx?url=https%3A%2F%2Fwww.usbank.com%2Findex.html&title=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&res=1280x1024&accountid=5093&rt=8385&prev=b02ecca2-2bad-f1d6-188e-68be725f696a&luid=25751cf8-eef9-41bf-f6b6-3aa7abecca19&rnd=65791 HTTP/1.1 Host: 5093.global.siteimproveanalytics.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:27 UTC	186	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:27 GMT Content-Type: image/gif Content-Length: 34 Connection: close Cache-Control: max-age=0 Expires: Fri, 10 May 2024 04:53:27 UTC
2024-05-10 04:53:27 UTC	34	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49909	142.250.190.34	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	688	OUT	GET /ddm/fls/z/dc_pre=CPbhvIalgoYDFe2zfwQdChwPrA;src=6219543;type=geninq0;cat=homepage;ord=8186464337144;npa=0;auiddc=;ps=1;pcor=653494834;pscdl=noapi;frm=0;gtm=45fe4580za200;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usbank.com%2Findex.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49912	151.101.0.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	1525	OUT	GET /v3/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316806779&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22tealium%22%2C%22pin_unauth%22%3A%22dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-05-10 04:53:28 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 10 May 2025 04:53:28 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="; Expires=Sat, 10 May 2025 04:53:28 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5356331960562870 Date: Fri, 10 May 2024 04:53:28 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:28 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49914	151.101.0.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	569	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-05-10 04:53:28 UTC	367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4103 ETag: "19c94b308deaf8fbf050b4fca2fa21b7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 4770 Date: Fri, 10 May 2024 04:53:28 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-05-10 04:53:28 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-05-10 04:53:28 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-05-10 04:53:28 UTC	1347	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49915	52.84.125.87	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	572	OUT	GET /adrum-ext.8ad16b8375327e66a32816a8ad7be617.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:28 UTC	779	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 54962 Connection: close Date: Tue, 23 Apr 2024 08:20:54 GMT Server: nginx/1.16.1 Last-Modified: Wed, 17 Apr 2024 09:59:48 GMT ETag: "661f9d94-d6b2" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0958bcd2929a58bce81e81d995bf358a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C1 X-Amz-Cf-Id: ILrrqHLfmw8mr-_bHvJ6vTcz5uT2f-6h0RwCLq8WSCzPuqZNUc3vqw== Age: 1456354
2024-05-10 04:53:28 UTC	15605	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 38 61 64 31 36 62 38 33 37 35 33 32 37 65 36 36 61 33 32 38 31 36 61 38 61 64 37 62 65 36 31 37 20 76 3a 32 34 2e 34 2e 30 2e 34 34 35 34 2c 20 63 3a 36 30 63 37 61 35 62 65 61 61 37 39 33 65 37 64 36 36 32 62 62 63 39 38 62 30 62 61 65 65 61 38 31 34 39 30 31 66 64 66 2c 20 62 3a 32 34 2e 34 2e 30 2e 34 34 35 34 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 20 47 6f 6f 67 6c 65 20 49 Data Ascii: ;/* Version 8ad16b8375327e66a32816a8ad7be617 v:24.4.0.4454, c:60c7a5beaa793e7d662bbc98b0baeea814901fdf, b:24.4.0.4454 /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 2010 Google I
2024-05-10 04:53:28 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 70 3d 63 2e 75 74 69 6c 73 2e 69 73 53 74 72 69 6e 67 2c 61 3d 63 2e 75 74 69 6c 73 2e 69 73 4e 75 6d 62 65 72 2c 0a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 7d 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 47 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 29 7b 65 3d 7b 76 65 72 3a 63 2e 63 6f 6e 66 2e 61 67 65 6e 74 56 65 72 2c 64 61 74 61 54 79 70 65 3a 22 52 22 2c 72 6f 6f 74 47 55 49 44 3a 62 2e 51 64 28 29 2c 72 65 6c 65 61 73 65 4b 65 79 3a 63 2e 63 6f 6e 66 2e 72 65 6c 65 61 73 65 49 64 2c 65 76 65 6e 74 73 3a 65 7d 3b 63 2e 63 68 61 6e 6e 65 6c 2e 67 61 2e 63 61 26 26 63 2e 63 68 61 6e 6e 65 6c 2e 67 61 2e 63 61 2e 69 64 26 26 28 65 2e 61 67 65 6e 74 49 64 3d 63 2e 63 68 61 6e 6e 65 6c 2e 67 61 2e 63 Data Ascii: ){var p=c.utils.isString,a=c.utils.isNumber,b=function(){function k(){}k.prototype.Gc=function(e,a,b){e={ver:c.conf.agentVer,dataType:"R",rootGUID:b.Qd(),releaseKey:c.conf.releaseId,events:e};c.channel.ga.ca&&c.channel.ga.ca.id&&(e.agentId=c.channel.ga.c
2024-05-10 04:53:28 UTC	16384	IN	Data Raw: 72 20 68 3d 65 5b 62 5d 3b 61 2e 70 75 73 68 28 6d 28 5b 6c 28 4e 75 6d 62 65 72 28 68 5b 30 5d 29 2c 66 2e 67 6a 29 2c 67 28 68 5b 31 5d 29 2c 67 28 68 5b 32 5d 29 5d 2c 0a 21 30 2c 21 31 29 29 7d 72 65 74 75 72 6e 20 6d 28 61 2c 21 30 2c 65 2e 6c 65 6e 67 74 68 3c 6b 2e 6c 65 6e 67 74 68 29 7d 2c 22 2e 61 6a 61 78 45 72 72 6f 72 22 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 6d 28 5b 65 28 63 5b 30 5d 29 2c 6e 28 63 5b 31 5d 2c 65 2c 66 2e 65 6a 29 5d 2c 21 30 2c 21 31 29 7d 2c 22 2e 75 73 65 72 44 61 74 61 22 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 7c 7c 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 21 31 2c 61 3d 30 2c 62 3d 5b 5d 2c 6c 3d 30 3b 6c 3c 63 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 67 3d 63 5b 6c 5d 3b 62 5b 6c Data Ascii: r h=e[b];a.push(m([l(Number(h[0]),f.gj),g(h[1]),g(h[2])],!0,!1))}return m(a,!0,e.length<k.length)},".ajaxError":function(c){return m([e(c[0]),n(c[1],e,f.ej)],!0,!1)},".userData":function(c){c=c\|\|[];for(var k=!1,a=0,b=[],l=0;l<c.length;l++){var g=c[l];b[l
2024-05-10 04:53:28 UTC	6589	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 76 61 72 20 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 44 2e 63 61 6c 6c 28 74 68 69 73 2c 6b 29 2c 62 3d 63 2e 6a 64 2e 62 75 69 6c 64 28 6b 29 3b 62 2e 50 4c 43 3d 31 3b 65 2e 6d 65 74 72 69 63 73 3d 62 3b 65 2e 74 69 6d 65 73 74 61 6d 70 3d 6b 2e 74 69 6d 65 73 74 61 6d 70 28 29 3b 6b 3d 28 6e 65 77 20 63 2e 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 49 6e 66 6f 42 75 69 6c 64 65 72 28 6b 2e 72 65 73 54 69 6d 69 6e 67 28 29 29 29 2e 62 75 69 6c 64 28 29 3b 6e 75 6c 6c 21 3d 3d 6b 26 26 28 65 2e 72 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 49 6e 66 6f 3d 0a 6b 29 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 62 7d 28 63 2e 5a 61 29 3b 63 2e 77 66 3d 70 7d 29 28 63 2e 65 76 65 6e 74 73 Data Ascii: ototype.D=function(k){var e=a.prototype.D.call(this,k),b=c.jd.build(k);b.PLC=1;e.metrics=b;e.timestamp=k.timestamp();k=(new c.ResourceTimingInfoBuilder(k.resTiming())).build();null!==k&&(e.resourceTimingInfo=k);return e};return b}(c.Za);c.wf=p})(c.events

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49913	63.140.39.248	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	4008	OUT	GET /b/ss/usbankcom/10/JS-2.18.0/s5991795903118?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F4%2F2024%206%3A53%3A26%205%20-120&d.&nsid=0&jsonv=1&.d&sdid=40DCE03561CEE31B-618DC03130DF2483&mid=21375164595563744931909202357212933986&aamlh=7&ce=UTF-8&pageName=Personal%20Home%20Page&g=https%3A%2F%2Fwww.usbank.com%2Findex.html&cc=USD&c53=personal%20home%20page%3Alogin%20widget%20error&pe=lnk_o&pev2=personal%20home%20page%3Alogin%20widget%20error&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=675616D751E567410A490D4C%40AdobeOrg&lrt=1782&AQE=1 HTTP/1.1 Host: smetrics.usbank.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=3B907FDC79BFE6A5B28E3E695BE8F7E4~YAAQD6k4F9WCvE+PAQAAHS7ZYBfyV1dXM2cYRO0a8nrJwuZYFnOFCbB2cL7Up0hbuesMCMAlBSqgdJbgqJ03S3vmI6gHpTxM9o9801zoCTz9jsCz6TergN7S4tVfQlDQ5e1+ZlaWbTk3UsWNHedES/TySAg75GtvxytbLKQliz9v065kUxVQZ4JrFuumnHYDRv9pqsr195rHcr1NytSRnOfiEzOF0yPFbWb/1b0PmM4SdVagJwAfqc1LskMDyRgtgN3zUpS1LGo36LhNQ6gv1lcPiT3uOF7Wj5vwTqtiyuxmLWiBXtvn9doK/ULkXFdZicOpG2P3/+u3X1/NhbsCIvC2tADhYxaxqbAPMecQcv2gK5w9Pc91YRw14rlvSy+iTMAfrlkej6zo~4408645~3162928; at_check=true; AMCVS_675616D751E567410A490D4C%40AdobeOrg=1; s_ecid=MCMID%7C21375164595563744931909202357212933986; AMCV_675616D751E567410A490D4C%40AdobeOrg=1585540135%7CMCIDTS%7C19854%7CMCMID%7C21375164595563744931909202357212933986%7CMCAAMLH-1715921599%7C7%7CMCAAMB-1715921599%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715324000s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mboxEdgeCluster=34; C3UID-562=1922498971715316800; C3UID=1922498971715316800; mbox=session#fb1f6f0b3224402bb37db5d5f32f93d5#1715318658\|PC#fb1f6f0b3224402bb37db5d5f32 [TRUNCATED]
2024-05-10 04:53:29 UTC	829	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 10 May 2024 04:53:28 GMT expires: Thu, 09 May 2024 04:53:28 GMT last-modified: Sat, 11 May 2024 04:53:28 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C21375164595563744931909202357212933986; Path=/; Domain=usbank.com; Max-Age=63072000; Expires=Sun, 10 May 2026 04:53:53 GMT; etag: 3683614797938425856-4618255178165799517 vary: * x-aam-tid: FC0ubdvvS7k= dcs: dcs-prod-va6-2-v060-03ed3e0c9.edge-va6.demdex.com 5 ms content-type: application/x-javascript;charset=utf-8 content-length: 1375 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-10 04:53:29 UTC	1375	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 74 5f 75 73 62 61 6e 6b 22 2c 22 63 76 22 3a 22 73 65 67 6d 65 6e 74 73 3d 50 65 72 73 6f 6e 61 6c 20 48 6f 6d 65 20 70 61 67 65 22 2c 22 74 74 6c 22 3a 33 36 30 2c 22 64 6d 6e 22 3a 22 61 70 69 2d 61 64 6f 62 65 2e 63 6f 6d 22 7d 5d 2c 22 75 75 69 64 22 3a 22 32 31 34 34 39 36 39 34 32 38 36 32 36 37 31 38 39 38 31 31 38 37 38 39 33 38 37 37 33 34 38 33 37 36 30 30 35 38 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 46 43 30 75 62 64 76 76 53 37 6b 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"at_usbank","cv":"segments=Personal Home page","ttl":360,"dmn":"api-adobe.com"}],"uuid":"21449694286267189811878938773483760058","dcs_region":7,"tid":"FC0ubdvvS7k=","ibs":[{"id":"60","ttl":144

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49910	44.221.183.201	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	858	OUT	GET /ibs:dpid=1957&dpuuid=23FC2B2FA67E6B5B3B573F54A7F86A66 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:28 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: mTB9dDH5Ql4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v060-0f59aceff.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49911	44.221.183.201	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	860	OUT	GET /ibs:dpid=129099&dpuuid=32516cec6ec3427bac6d4d42235b7c87 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usbank.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:28 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: rozglj3SRJE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v060-0eee1850d.edge-va6.demdex.com 1 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49921	151.101.64.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:28 UTC	714	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-05-10 04:53:29 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1088476148723335 Date: Fri, 10 May 2024 04:53:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:29 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49922	15.197.193.217	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:29 UTC	778	OUT	GET /track/up?adv=6e5dfk2&ref=https%3A%2F%2Fwww.usbank.com%2Findex.html&upid=7hi7raz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:29 UTC	136	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:29 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49920	52.5.162.211	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:29 UTC	646	OUT	GET /services/authorizationservice/GetVisitorSettings3?groupid=19921&site=production&service=presence HTTP/1.1 Host: www.glance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:29 UTC	625	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:29 GMT Content-Type: application/json; charset=utf-8 Content-Length: 281 Connection: close Cache-Control: public, max-age=37 Expires: Fri, 10 May 2024 04:54:06 GMT Last-Modified: Fri, 10 May 2024 04:53:06 GMT Vary: * Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, Accept Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 3600 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Origin-Agent-Cluster: ?0 Strict-Transport-Security: max-age=31536000
2024-05-10 04:53:29 UTC	281	IN	Data Raw: 7b 22 56 53 65 72 76 65 72 22 3a 22 6c 62 2d 76 69 64 65 6f 2e 67 6c 61 6e 63 65 2e 6e 65 74 22 2c 22 63 6f 6c 6f 53 65 6c 65 63 74 55 72 6c 22 3a 22 70 72 65 73 65 6e 63 65 2d 6c 6f 63 61 74 69 6f 6e 2e 67 6c 61 6e 63 65 2e 6e 65 74 5c 2f 63 6f 6c 6f 2d 6c 6f 6f 6b 75 70 22 2c 22 69 73 4d 65 74 72 69 63 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 50 72 65 73 65 6e 63 65 4c 6f 61 64 42 61 6c 61 6e 63 65 64 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 73 50 61 73 73 77 6f 72 64 22 3a 22 22 2c 22 6d 65 74 72 69 63 73 55 72 6c 22 3a 22 22 2c 22 70 72 65 73 65 6e 63 65 55 72 6c 22 3a 22 22 2c 22 70 72 69 76 69 6c 65 67 65 53 74 72 69 6e 67 22 3a 22 65 6e 63 72 79 70 74 3a 6f 6e 3b 67 75 65 73 74 73 3a 31 30 22 2c 22 73 63 72 65 65 6e 73 68 61 72 Data Ascii: {"VServer":"lb-video.glance.net","coloSelectUrl":"presence-location.glance.net\/colo-lookup","isMetricsEnabled":false,"isPresenceLoadBalanced":false,"metricsPassword":"","metricsUrl":"","presenceUrl":"","privilegeString":"encrypt:on;guests:10","screenshar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49923	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:29 UTC	674	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808005&S=0&N=0&P=0&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 689 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:29 UTC	689	OUT	Data Raw: 78 9c 8d 53 c9 72 9b 40 10 fd 15 d7 dc 52 a1 04 33 2c 03 54 e5 20 c9 92 e5 d8 96 1d 2d 46 52 2a 07 40 c3 ce 80 d8 a5 c4 ff 9e 06 45 95 1c 73 e2 cd 9b d7 dd af bb 99 ef 3f 51 85 4c 54 22 01 75 c8 c4 44 97 04 74 06 20 11 45 40 ed 8d 09 90 69 48 54 40 2e 48 41 f9 09 3e 94 79 4c 56 1d 59 95 b1 ac 28 8e a4 1f 35 43 51 8f 2a 53 b5 23 f1 a8 02 b2 12 99 32 a6 44 d6 04 94 f7 45 a6 19 2f eb 94 15 77 8e cd e3 90 fb 77 bf ee de 58 51 66 dc 4e fe a1 b6 a3 f5 e8 6e 02 47 c8 50 17 09 c4 05 55 95 97 a6 28 b6 6d 3b aa cb 5e 39 72 b3 54 0c f9 91 75 a3 a0 4a 13 50 66 ff 2f 75 19 08 15 bf 47 47 64 f6 5d 15 c8 24 2a b4 c9 12 b0 8c 15 89 08 e8 82 4c cf 4e 4a 06 99 91 09 57 39 32 7f 22 1b 99 ba 64 08 c8 01 15 56 d4 61 1e 98 48 bd 1e 32 69 d4 90 21 07 00 5d 01 c6 bb 31 7e 0f e4 Data Ascii: xSr@R3,T -FR@Es?QLT"uDt E@iHT@.HA>yLVY(5CQS#2DE/wwXQfNnGPU(m;^9rTuJPf/uGGd]$*LNJW92"dVaH2i!]1~
2024-05-10 04:53:29 UTC	265	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:29 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-05-10 04:53:29 UTC	90	IN	Data Raw: 33 62 66 36 33 62 39 33 36 34 38 39 64 30 39 61 66 61 37 35 66 30 64 64 31 35 62 33 39 64 65 66 2f 36 61 62 62 37 38 66 61 34 37 34 34 30 61 38 34 37 39 63 65 39 39 34 30 32 66 33 32 34 31 61 65 2f 34 39 61 38 33 64 36 36 33 66 61 36 64 65 38 64 33 38 61 62 36 61 33 30 Data Ascii: 3bf63b936489d09afa75f0dd15b39def/6abb78fa47440a8479ce99402f3241ae/49a83d663fa6de8d38ab6a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49927	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:30 UTC	771	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808757&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&U=6abb78fa47440a8479ce99402f3241ae&Q=2&S=0&N=0&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:30 UTC	501	OUT	Data Raw: 78 9c 7d 90 4b 8f a2 40 14 85 ff 0a a9 d5 4c 9a 84 aa c2 a2 90 a4 17 a0 a0 dd 2a da f8 40 9d cc 02 e9 e2 a9 c5 43 05 d4 f8 df db d8 bd 98 e9 89 b3 ba e7 26 e7 3b 37 f7 5c 00 4b d9 09 68 97 af 09 2a ac bd 48 41 2f 98 f8 f6 fc 5c d2 75 9d 6c 50 4d 79 30 a3 f8 65 eb b8 24 30 36 b2 13 b5 60 d3 ad 6c 86 f0 4a 67 bb 65 6e 72 54 1e 37 7a 1e 5a fd c4 6d e9 61 aa d7 9e 5d 73 98 0f f0 12 92 8a 17 8b 74 89 cf dd a6 62 4f b3 de 68 1e 19 c6 58 89 54 38 53 39 5e ae cb 4a c6 7e 9a c6 b0 91 36 53 bb 56 06 f6 6b e2 a3 e4 68 a2 3c 6c ec d1 db d9 dc 34 43 25 e6 2d c3 45 ce be 6d ed 70 e1 2c cd 62 d7 0a ea 61 43 0e 6b 9a 5a d1 6a 7c 58 cd 3b 3c b3 02 1b 4f b8 9c 78 83 55 5f c1 11 4a b9 1b 17 7e d4 1f d4 b4 27 ed a6 cc ca 90 a3 4e a2 3e 32 8c c6 d1 67 8b 8e 6c 39 48 4e ce 95 Data Ascii: x}K@L@C&;7\KhHA/\ulPMy0e$06`lJgenrT7zZma]stbOhXT8S9^J~6SVkh<l4C%-Emp,baCkZj\|X;<OxU_J~'N>2gl9HN
2024-05-10 04:53:30 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49928	34.135.80.45	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:30 UTC	760	OUT	POST /?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808735&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=1&Y=1&X=7efe35b3531344b08d6945d5e56d2f74&z=1 HTTP/1.1 Host: usbank-sync.quantummetric.com Connection: keep-alive Content-Length: 27595 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:30 UTC	16384	OUT	Data Raw: 78 9c ec bd db 76 db 4a 92 20 fa 2b 39 ae 99 ea 5d d3 04 84 fb c5 d5 dd 35 b2 6c 6f f9 8c b4 b7 db 92 55 5d 9e dd c7 2b 09 26 49 94 41 80 1b 00 29 c9 7d ea ac 7e 38 3f d1 6f bd e6 6d 5e fa 23 ea 53 fa 4b 4e 44 02 20 41 10 20 01 8a ba 50 4a c9 86 70 c9 4b 64 44 64 64 44 64 66 e4 df fd 97 b7 3f 9f 5c fe e9 e3 3b 32 4e 27 c1 3f fc 5d 7e 65 74 f0 0f 7f 77 94 fd e9 47 83 db 7f f8 bb ff 22 49 ff 78 fe 7f 5d fc fc d3 e9 e5 f9 d9 eb 7f 79 a5 be 82 4b f8 ea f5 2b 7c 7e d5 7b 45 5f bd fe 5f ff f2 4a 2b de 06 34 1c c1 db 39 dc b2 50 fa 7c f1 ea 2f 7f f9 e7 de ab 13 9e 68 99 f5 dd f1 db f5 ac 5e 40 93 24 cf 4b 53 89 05 6c c2 c2 54 9a d0 f8 1b 8b 6b cb b9 38 f9 f4 e1 e3 65 5e d2 3f ff e5 2f 3d f1 4d 7c 3b dc 6f 3a 7e 43 ee ff 25 24 f0 f3 6a 35 c3 f9 bb cb e3 9a 4e 33 Data Ascii: xvJ +9]5loU]+&IA)}~8?om^#SKND A PJpKdDddDdf?\;2N'?]~etwG"Ix]yK+\|~{E__J+49P\|/h^@$KSlTk8e^?/=M\|;o:~C%$j5N3
2024-05-10 04:53:30 UTC	11211	OUT	Data Raw: 0a 83 c2 3f e0 20 c5 b7 0b a3 8e a5 1a 2a 0c b9 38 25 80 17 ae 1e 58 a6 83 0a 9c 87 11 2f 79 56 0d 55 32 50 10 74 03 6e 0c 07 20 44 55 12 20 54 30 a1 ad 66 37 a6 c5 63 ac 98 06 c9 ae b9 fe 81 91 c8 0c 2c de c8 42 58 1a 85 96 6a 66 6a 1c 6e 87 d6 8b 2b ff 02 2d 42 cd ce 50 21 97 ca 63 54 e4 7f 72 9d d4 e1 b1 cc 34 02 0d b2 b3 4b fe 41 75 1d fe 01 f4 74 3e a0 bb 8b 01 dd 46 25 d7 d6 55 78 69 b9 7a 7e cd d5 00 d4 ab 60 7c c7 f1 1c 71 83 d1 3e 20 b1 a5 aa d9 8d 8b 71 a4 01 05 3a c9 ae 99 16 83 4a 00 28 dc a0 0d a2 36 66 e8 18 ea 03 83 b1 a9 2a 6a 1b a8 38 83 be 67 70 ed 19 a8 e5 60 cc 0d 8c 93 01 b4 d2 25 4e 56 d4 59 15 0b f1 81 f5 20 61 50 79 55 0d ed ca 00 d5 c1 d6 ad 39 94 a4 81 a6 04 e4 53 40 cb 32 80 a0 90 ca c6 90 9e 16 aa 41 90 d6 91 5d d0 cd 40 0f c5 Data Ascii: ? 8%X/yVU2Ptn DU T0f7c,BXjfjn+-BP!cTr4KAut>F%Uxiz~`\|q> q:J(6fj8gp`%NVY aPyU9S@2A]@
2024-05-10 04:53:30 UTC	962	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 May 2024 04:53:30 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.usbank.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49933	151.101.192.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	795	OUT	GET /user/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&cb=1715316805486&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
2024-05-10 04:53:32 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 326 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7624600553387065 Date: Fri, 10 May 2024 04:53:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:32 UTC	326	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49932	142.250.190.36	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	1111	OUT	GET /pagead/1p-user-list/978114044/?random=1715316804134&cv=11&fst=1715313600000&bg=ffffff&guid=ON&async=1&gtm=45be4580v874092926za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usbank.com%2Findex.html&hn=www.googleadservices.com&frm=0&tiba=Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank&npa=0&pscdl=noapi&auid=706303381.1715316803&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqr-3N1DveI6JygubYx7IQGvAgR0XmceOPIbXKlrHl2D26nVNI&random=3200754453&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 04:53:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49934	151.101.192.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	1458	OUT	GET /v3/?tid=2620060266791&ov=%7B%22page_name%22%3A%22Consumer%20banking%20%7C%20Personal%20banking%20%7C%20U.S.%20Bank%22%2C%22page_category%22%3A%22%22%7D&pd=%7B%22np%22%3A%22tealium%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1715316805506 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
2024-05-10 04:53:32 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 10 May 2025 04:53:32 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6756124113821494 Date: Fri, 10 May 2024 04:53:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49939	151.101.192.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	724	OUT	GET /user/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316805500&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
2024-05-10 04:53:32 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 326 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7228588131990471 Date: Fri, 10 May 2024 04:53:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:32 UTC	326	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49936	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316809364&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=1017&N=2&P=1&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 958 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:32 UTC	958	OUT	Data Raw: 78 9c ed 59 6d 6f e2 38 10 fe 2b 96 3f dd 49 a0 c6 09 49 68 ba 77 12 d0 96 86 a3 b4 e5 25 6d a9 fa c1 49 5c f0 36 b1 73 89 79 09 88 ff 7e 0e 04 c4 6d d9 6a bb bd a5 3d 09 45 c2 af f3 3c 93 19 4f 26 19 1e e6 50 40 0b 4e 30 2c c0 b1 ec fc 29 5b 2c db 27 ec 13 9b c9 01 85 16 2a 40 7f f9 db 69 41 4b 5d 14 be 11 c1 9b 5d 91 1c 79 a3 38 26 4c 74 69 48 e4 3c 83 96 ae 28 2b f9 b5 60 57 ce db b2 fd 52 bd 3a bd 07 1a 40 cb 2b 6b d5 bc af e7 63 b4 42 80 89 48 03 b2 62 63 a3 20 f8 0f e1 20 8f b0 47 45 6a 01 e5 04 be 15 37 9f cb 51 bd 00 27 49 8e 2a 78 54 74 71 0c 02 3e a0 ac c8 23 c2 c0 84 fa 03 22 7e 96 43 b6 1a d0 77 30 0d 02 ee e2 a0 13 e2 58 54 92 84 26 02 33 51 15 0c 24 21 0e 56 d3 a7 24 79 96 fa 54 71 fc 3e 72 a0 64 d7 0e 15 12 82 63 6f 68 7b 9c 75 22 bc 83 39 Data Ascii: xYmo8+?IIhw%mI\6sy~mj=E<O&P@N0,)[,'@iAK]]y8&LtiH<(+`WR:@+kcBHbc GEj7Q'IxTtq>#"~Cw0XT&3Q$!V$yTq>rdcoh{u"9
2024-05-10 04:53:32 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:32 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49938	54.145.109.191	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	623	OUT	GET /ibs:dpid=129099&dpuuid=32516cec6ec3427bac6d4d42235b7c87 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:32 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: FDHHq6FITSs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v060-01793961d.edge-va6.demdex.com 2 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49937	54.145.109.191	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	621	OUT	GET /ibs:dpid=1957&dpuuid=23FC2B2FA67E6B5B3B573F54A7F86A66 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=21449694286267189811878938773483760058; dpm=21449694286267189811878938773483760058; dextp=60-1-1715316800580\|771-1-1715316801564\|1123-1-1715316803179\|903-1-1715316803601\|1957-1-1715316804811\|129099-1-1715316805975
2024-05-10 04:53:32 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: VhoJV9+kSio= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v060-0bcd741b0.edge-va6.demdex.com 1 ms set-cookie: dpm=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=21449694286267189811878938773483760058; Max-Age=15552000; Expires=Wed, 06 Nov 2024 04:53:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-10 04:53:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49935	151.101.192.84	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	1526	OUT	GET /v3/?event=PageVisit&ed=%7B%22event_id%22%3A%2261807405-086a-423d-8f4e-00594e723048%22%7D&tid=2620060266791&cb=1715316806779&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22tealium%22%2C%22pin_unauth%22%3A%22dWlkPU0ySTJZVGd6T0RFdE5EWXlOUzAwTWpnekxXRXlZbUV0TVRaa1l6SmlaVFE1T0dSaA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usbank.com%2Findex.html%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZCRnJrRHlUclBkczhiZmpvUEdPOXFJcFhUeVRWcU5GMWFjVDI1ZWZaK1JCTG9zK0QyemtaVEJLTFZzS2JKTUdTbnJFNUFQWncxd2xCNDNvUWV2WkwrKzhibHZuVVUxN1lnZUh6NjJQcXlMcz0mSzNNUVBmL3VITlRmVjdHZVVFaklUTmNlancwPQ=="
2024-05-10 04:53:32 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 10 May 2025 04:53:32 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZzUnJqVWhRalNyWkZXSEtDK3E2b21iNUpMbUp3ZG9IWG9wM1dHQjlZVC9pbndZeVdkNnIyOFg4WkJQRmI5eC9uYnIzcXlLaGVwS0F0MG05cktIU0dqK25ETFZsVlVrelZrT29ncWhCVkxFND0maEZndUNVQjJkbmZHdkliUk5jeXdrejJGZ1hrPQ=="; Expires=Sat, 10 May 2025 04:53:32 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6641728901579059 Date: Fri, 10 May 2024 04:53:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9ab3886c06a794ff1d841687ae65f5a1cfdbcfc8
2024-05-10 04:53:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49940	52.5.162.211	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	434	OUT	GET /services/authorizationservice/GetVisitorSettings3?groupid=19921&site=production&service=presence HTTP/1.1 Host: www.glance.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:32 UTC	625	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 281 Connection: close Cache-Control: public, max-age=32 Expires: Fri, 10 May 2024 04:54:04 GMT Last-Modified: Fri, 10 May 2024 04:53:04 GMT Vary: * Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, Accept Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 3600 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Origin-Agent-Cluster: ?0 Strict-Transport-Security: max-age=31536000
2024-05-10 04:53:32 UTC	281	IN	Data Raw: 7b 22 56 53 65 72 76 65 72 22 3a 22 6c 62 2d 76 69 64 65 6f 2e 67 6c 61 6e 63 65 2e 6e 65 74 22 2c 22 63 6f 6c 6f 53 65 6c 65 63 74 55 72 6c 22 3a 22 70 72 65 73 65 6e 63 65 2d 6c 6f 63 61 74 69 6f 6e 2e 67 6c 61 6e 63 65 2e 6e 65 74 5c 2f 63 6f 6c 6f 2d 6c 6f 6f 6b 75 70 22 2c 22 69 73 4d 65 74 72 69 63 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 50 72 65 73 65 6e 63 65 4c 6f 61 64 42 61 6c 61 6e 63 65 64 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 73 50 61 73 73 77 6f 72 64 22 3a 22 22 2c 22 6d 65 74 72 69 63 73 55 72 6c 22 3a 22 22 2c 22 70 72 65 73 65 6e 63 65 55 72 6c 22 3a 22 22 2c 22 70 72 69 76 69 6c 65 67 65 53 74 72 69 6e 67 22 3a 22 65 6e 63 72 79 70 74 3a 6f 6e 3b 67 75 65 73 74 73 3a 31 30 22 2c 22 73 63 72 65 65 6e 73 68 61 72 Data Ascii: {"VServer":"lb-video.glance.net","coloSelectUrl":"presence-location.glance.net\/colo-lookup","isMetricsEnabled":false,"isPresenceLoadBalanced":false,"metricsPassword":"","metricsUrl":"","presenceUrl":"","privilegeString":"encrypt:on;guests:10","screenshar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49942	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:32 UTC	458	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808005&S=0&N=0&P=0&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:32 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:32 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49959	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:34 UTC	740	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316813009&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=7479&N=61&P=2&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:34 UTC	467	OUT	Data Raw: 78 9c b5 93 6d 6b db 30 10 c7 bf 8a b9 d7 ae 2d c9 96 9f d8 9b 6d 19 ac 30 d6 b1 8c c1 28 79 e1 c6 8a e3 ce b6 82 a5 2c 83 d0 ef be 93 64 a7 19 6b 1b 33 36 64 d0 49 be fb dd f9 7f e7 db 23 34 50 5c e5 79 9e f9 b0 81 82 53 e6 c3 0f 28 80 06 11 0f 38 f8 a0 f1 20 85 31 d0 a2 29 e5 11 4d 32 92 a5 9c fb 50 41 11 f9 b0 fc 08 45 42 1f fc a3 f5 ad 1b 0d 0e 11 a7 9b b4 ca e2 0a ac 23 31 0e 63 ae d4 e6 a2 84 c5 ce f3 20 ee 2e 67 9a 00 11 61 36 9c b8 d8 9d 18 94 ec cb d6 db ca 4e 78 bb b2 16 45 2b eb a6 f7 0e 4d 55 0b ed 89 61 90 c3 b3 f4 24 cb 12 4b 4f 47 3a e7 d1 6f f4 41 56 c5 5e dd 95 fd f7 60 2d bb cb 1c 36 72 68 4c 92 ff 50 26 9d f8 2c e2 f4 9c 7f 39 34 99 22 e3 34 3d 8f fc 20 eb 5a 54 de cd 5e cf 48 3f 75 d9 94 ba c3 fd d5 9b 9b c5 37 b4 91 7b cb e2 95 75 8a Data Ascii: xmk0-m0(y,dk36dI#4P\yS(8 1)M2PAEB#1c .ga6NxE+MUa$KOG:oAV^`-6rhLP&,94"4= ZT^H?u7{u
2024-05-10 04:53:34 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:34 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49960	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:35 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316814115&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=756&N=1&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:35 UTC	273	OUT	Data Raw: 78 9c ad 91 bd 6e 83 30 14 46 5f 05 dd 99 62 1b 30 3f de bb 55 ea d0 b1 ca e0 04 63 dc 82 8d b0 29 91 22 de bd 8e 89 9a b4 6a 3a 75 c2 42 df f9 7c ee f5 09 1e 81 bd 9e 40 01 7b a8 eb ba 8a a1 05 46 49 1a c3 07 30 20 49 46 13 0a 31 38 60 a4 24 34 23 45 85 ab 92 d2 35 fe 42 ca 80 10 9c e6 1b b3 88 fd 7d 20 c3 69 88 e3 2d 3b 8a c9 1a cd fb a8 33 83 88 46 2e 05 eb 8d 54 3a 5a 54 23 85 8b c4 34 99 e9 47 5b 51 55 c5 a5 8d d2 ec 5b db 64 1a 36 db 3d d7 ef c9 c1 0c f7 39 92 e3 e2 1f 35 d2 8c 92 db ba 3f 92 79 59 de 26 9f 8c 94 a2 89 9e 67 f7 1b b3 8b e1 18 1e 67 d8 4a 67 ff e9 9c 1b 2d 43 c8 e8 5e 69 71 1e 55 69 99 5c 87 46 7c 76 1d 0a f6 68 19 5a d4 73 27 ac 43 03 d7 aa f5 87 e4 cd 0f ea ab 0e de 05 7b 09 1b 54 5e fc cd 75 e1 77 39 85 df b5 77 b1 57 19 42 82 1b Data Ascii: xn0F_b0?Uc)"j:uB\|@{FI0 IF18`$4#E5B} i-;3F.T:ZT#4G[QU[d6=95?yY&ggJg-C^iqUi\F\|vhZs'C{T^uw9wWB
2024-05-10 04:53:35 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:35 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49968	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:35 UTC	555	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808757&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&U=6abb78fa47440a8479ce99402f3241ae&Q=2&S=0&N=0&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49971	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:35 UTC	523	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316809364&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=1017&N=2&P=1&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:36 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:36 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49974	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:36 UTC	524	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316813009&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=7479&N=61&P=2&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:36 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:36 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49973	35.226.68.60	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:36 UTC	542	OUT	GET /?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316808735&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=1&Y=1&X=7efe35b3531344b08d6945d5e56d2f74&z=1 HTTP/1.1 Host: usbank-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:36 UTC	869	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 May 2024 04:53:36 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49982	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:36 UTC	633	OUT	GET /general5/wdp.js?loaderVer=5.1.0&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:36 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 May 2024 04:53:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 42706 Connection: close Set-Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=;Path=/;Expires=Sat, 10-May-2025 04:53:36 GMT;Max-Age=31536000;Secure;HttpOnly;SameSite=None Cache-Control: no-cache, private Pragma: no-cache Expires: 0 p3p: CP="NON DSP COR CURa" Accept-CH: Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-WoW64, ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-10 04:53:36 UTC	15578	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 32 33 20 54 72 61 6e 73 55 6e 69 6f 6e 20 4c 4c 43 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 38 30 38 30 38 62 61 65 2d 64 34 63 33 2d 34 37 61 63 2d 39 39 32 39 2d 35 64 37 37 32 36 34 64 38 32 33 63 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 20 57 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 58 61 28 29 7b 76 61 72 20 61 3d 7b 6f 70 74 69 6f 6e 61 6c 3a 5b 7b 52 74 70 44 61 74 61 43 68 61 6e 6e 65 6c 73 3a 21 30 7d 5d 7d 2c 62 3b 69 66 28 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 76 2e 52 54 43 50 65 65 72 43 6f 6e 6e 65 63 74 69 6f 6e 26 26 76 2e 52 54 43 50 65 65 72 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 22 66 75 6e 63 Data Ascii: /* Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c*/(function(){(function Wa(){function Xa(){var a={optional:[{RtpDataChannels:!0}]},b;if(b="function"===typeof v.RTCPeerConnection&&v.RTCPeerConnection\|\|"func
2024-05-10 04:53:36 UTC	1024	IN	Data Raw: 20 6b 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 0a 32 29 3b 76 61 72 20 70 3d 65 3e 3e 32 3b 65 3d 28 65 26 33 29 3c 3c 34 7c 67 3e 3e 34 3b 76 61 72 20 68 3d 28 67 26 31 35 29 3c 3c 32 7c 6b 3e 3e 36 3b 76 61 72 20 45 3d 6b 26 36 33 3b 69 73 4e 61 4e 28 67 29 3f 68 3d 45 3d 36 34 3a 69 73 4e 61 4e 28 6b 29 26 26 28 45 3d 36 34 29 3b 63 2b 3d 41 2e 46 2e 63 68 61 72 41 74 28 70 29 2b 41 2e 46 2e 63 68 61 72 41 74 28 65 29 2b 41 2e 46 2e 63 68 61 72 41 74 28 68 29 2b 41 2e 46 2e 63 68 61 72 41 74 28 45 29 7d 7d 72 65 74 75 72 6e 20 63 7d 2c 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 2c 65 2c 67 2c 6b 2c 70 2c 68 2c 45 3b 69 66 28 61 29 69 66 28 76 2e 61 74 6f 62 26 26 41 2e 50 61 28 61 29 29 62 Data Ascii: k=a.charCodeAt(b+2);var p=e>>2;e=(e&3)<<4\|g>>4;var h=(g&15)<<2\|k>>6;var E=k&63;isNaN(g)?h=E=64:isNaN(k)&&(E=64);c+=A.F.charAt(p)+A.F.charAt(e)+A.F.charAt(h)+A.F.charAt(E)}}return c},decode:function(a){var b="",c=0,d,e,g,k,p,h,E;if(a)if(v.atob&&A.Pa(a))b
2024-05-10 04:53:36 UTC	7639	IN	Data Raw: 22 29 3b 4f 28 6e 2e 4c 2c 21 30 2c 6e 2e 6d 29 3b 0a 4f 28 22 62 62 5f 63 61 6c 6c 62 61 63 6b 22 2c 22 22 2c 6e 2e 41 2c 6d 5b 6e 2e 4c 5d 29 3b 4f 28 6e 2e 6f 2c 22 22 2c 22 22 2c 6d 5b 6e 2e 4c 5d 29 3b 4f 28 22 73 65 63 75 72 65 5f 77 65 62 73 6f 63 6b 65 74 73 22 2c 21 30 2c 6e 2e 6d 29 3b 4f 28 22 69 67 6e 6f 72 65 5f 65 76 65 6e 74 73 22 2c 5b 5d 2c 22 41 72 72 61 79 22 29 3b 6d 5b 6e 2e 6f 5d 26 26 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 5b 6e 2e 6f 5d 29 26 26 75 28 41 2e 64 65 63 6f 64 65 28 22 59 6d 4a 76 64 58 51 67 5a 57 78 6c 62 57 56 75 64 43 42 6b 61 57 51 67 62 6d 39 30 49 47 56 34 61 58 4e 30 49 47 46 30 49 48 4a 31 62 6e 52 70 62 57 55 3d 22 29 2c 22 22 2c 21 30 29 3b 4f 28 6e 2e 44 29 3b 69 66 28 Data Ascii: ");O(n.L,!0,n.m);O("bb_callback","",n.A,m[n.L]);O(n.o,"","",m[n.L]);O("secure_websockets",!0,n.m);O("ignore_events",[],"Array");m[n.o]&&!document.getElementById(m[n.o])&&u(A.decode("YmJvdXQgZWxlbWVudCBkaWQgbm90IGV4aXN0IGF0IHJ1bnRpbWU="),"",!0);O(n.D);if(
2024-05-10 04:53:36 UTC	16384	IN	Data Raw: 31 32 2c 35 31 36 2c 35 33 36 38 37 31 34 32 34 2c 35 33 36 38 37 31 34 32 38 2c 36 36 30 34 38 2c 36 36 30 35 32 2c 35 33 36 39 33 36 39 36 30 2c 35 33 36 39 33 36 39 36 34 5d 2c 63 3d 5b 30 2c 31 2c 31 30 34 38 35 37 36 2c 31 30 34 38 35 37 37 2c 36 37 31 30 38 38 36 34 2c 36 37 31 30 38 38 36 35 2c 36 38 31 35 37 34 34 30 2c 36 38 31 35 37 34 34 31 2c 32 35 36 2c 32 35 37 2c 31 30 34 38 38 33 32 2c 31 30 34 38 38 33 33 2c 36 37 31 30 39 31 32 30 2c 36 37 31 30 39 31 32 31 2c 36 38 31 35 37 36 39 36 2c 36 38 31 35 37 36 39 37 5d 2c 64 3d 5b 30 2c 38 2c 32 30 34 38 2c 32 30 35 36 2c 31 36 37 37 37 32 31 36 2c 31 36 37 37 37 32 32 34 2c 31 36 37 37 39 32 36 34 2c 31 36 37 37 39 32 37 32 2c 30 2c 38 2c 32 30 34 38 2c 32 30 35 36 2c 31 36 37 37 37 32 31 36 Data Ascii: 12,516,536871424,536871428,66048,66052,536936960,536936964],c=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],d=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216
2024-05-10 04:53:36 UTC	1024	IN	Data Raw: 3b 76 61 72 20 65 3d 62 2e 61 70 69 7c 7c 7b 7d 2c 66 3d 7b 6e 75 69 64 49 6e 64 65 78 3a 5b 5d 7d 3b 64 3d 64 2e 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 69 66 28 63 2e 6c 6f 61 64 65 72 26 26 21 31 3d 3d 3d 63 2e 6c 6f 61 64 65 72 2e 74 70 7c 7c 62 2e 64 79 6e 4d 61 69 6e 29 72 65 74 75 72 6e 21 31 3b 62 2e 64 79 6e 4d 61 69 6e 3d 6b 3b 65 26 26 28 61 28 22 6a 73 74 6f 6b 65 6e 22 2c 22 63 6c 4b 50 50 58 58 36 35 49 71 46 30 36 47 49 67 6f 6c 35 49 62 56 36 58 5a 44 62 78 49 65 4d 37 61 4b 4d 6c 51 79 4f 6f 6c 6b 3d 22 29 2c 65 2e 64 65 63 6f 64 65 26 26 28 63 3d 65 2e 64 65 63 6f 64 65 2c 62 2e 72 69 70 53 65 72 76 65 72 55 72 6c 3d 63 28 22 62 58 42 7a 62 6d 46 79 5a 53 35 70 5a 58 4e 75 59 58 4a 6c 4c 6d 4e 76 62 51 3d 3d 22 29 2c 62 Data Ascii: ;var e=b.api\|\|{},f={nuidIndex:[]};d=d.decodeURIComponent;if(c.loader&&!1===c.loader.tp\|\|b.dynMain)return!1;b.dynMain=k;e&&(a("jstoken","clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk="),e.decode&&(c=e.decode,b.ripServerUrl=c("bXBzbmFyZS5pZXNuYXJlLmNvbQ=="),b
2024-05-10 04:53:36 UTC	1057	IN	Data Raw: 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 22 29 2e 73 6c 69 63 65 28 30 2c 34 30 30 29 29 2c 61 28 22 73 76 72 74 69 6d 65 22 2c 22 32 30 32 34 2f 30 35 2f 31 30 20 30 34 3a 35 33 3a 33 36 22 29 2c 61 28 22 69 67 67 79 22 2c 22 4a 77 45 4f 65 33 44 4e 4b 33 42 68 53 39 34 57 4d 73 76 6b 55 44 49 76 35 74 51 41 6e 71 75 4c 6a 34 6a 44 76 78 54 65 54 43 50 37 73 6d 49 63 74 64 44 7a 69 36 47 30 72 41 64 6e 33 46 42 5a 22 29 2c 61 28 22 64 69 64 22 2c 22 30 44 72 74 33 66 64 61 73 69 46 52 68 64 58 47 37 43 57 50 67 48 62 64 76 7a 78 61 41 52 31 2b 70 62 59 68 61 61 35 31 45 4d 59 57 47 55 59 56 37 4a 4d 55 46 78 30 49 52 2b 48 57 48 6b 69 4d 65 4f 54 42 73 4a 72 75 69 Data Ascii: ecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36").slice(0,400)),a("svrtime","2024/05/10 04:53:36"),a("iggy","JwEOe3DNK3BhS94WMsvkUDIv5tQAnquLj4jDvxTeTCP7smIctdDzi6G0rAdn3FBZ"),a("did","0Drt3fdasiFRhdXG7CWPgHbdvzxaAR1+pbYhaa51EMYWGUYV7JMUFx0IR+HWHkiMeOTBsJrui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49984	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:36 UTC	522	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316814115&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=756&N=1&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49986	142.250.191.166	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:36 UTC	879	OUT	GET /json?spot=3033967&src=1521091&var=s_6_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_6_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1517995152937 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlQ69FKlre3PGEKZrYnFwZlWW9sYFKkvDgiIpv5bBG1P80rc9-XnIywvfec
2024-05-10 04:53:36 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 04:53:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 04:53:36 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 36 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_6_Integrate_DFA_get_0={"ec":"nh"};
2024-05-10 04:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49994	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:37 UTC	601	OUT	GET /star HTTP/1.1 Host: mpsnare.iesnare.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.usbank.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk= Sec-WebSocket-Key: Ot56A3lnveVJVcGUaFN92Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-10 04:53:37 UTC	119	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 10 May 2024 04:53:37 GMT Content-Length: 34 Connection: close
2024-05-10 04:53:37 UTC	34	IN	Data Raw: 43 61 6e 20 22 55 70 67 72 61 64 65 22 20 6f 6e 6c 79 20 74 6f 20 22 57 65 62 53 6f 63 6b 65 74 22 2e Data Ascii: Can "Upgrade" only to "WebSocket".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49995	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:37 UTC	680	OUT	GET /time.mp3?nocache=0.6296069907483965 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.usbank.com/index.html Accept-Language: en-US,en;q=0.9 Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk= Range: bytes=0-
2024-05-10 04:53:37 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Fri, 10 May 2024 04:53:37 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-10 04:53:37 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 51 b5 3e 22 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXingQ>"@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49997	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:37 UTC	640	OUT	GET /5.7.0/logo.js HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk=
2024-05-10 04:53:37 UTC	654	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 May 2024 04:53:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 505 Connection: close Last-Modified: Tue, 06 May 2014 00:01:40 GMT Expires: Sat, 10 May 2025 04:53:37 GMT Cache-Control: private p3p: CP="NON DSP COR CURa" Accept-CH: Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-WoW64, ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-10 04:53:37 UTC	505	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 32 33 20 54 72 61 6e 73 55 6e 69 6f 6e 20 4c 4c 43 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 38 30 38 30 38 62 61 65 2d 64 34 63 33 2d 34 37 61 63 2d 39 39 32 39 2d 35 64 37 37 32 36 34 64 38 32 33 63 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 61 2e 69 6f 5f 67 6c 6f 62 61 6c 5f 6f 62 6a 65 63 74 5f 6e 61 6d 65 7c 7c 22 49 47 4c 4f 4f 22 3b 61 3d 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 7b 7d 3b 61 3d 61 2e 69 6f 3d 61 2e 69 6f 7c 7c 7b 7d 3b 62 3d 61 2e 69 6f 5f 64 64 70 3b 69 66 28 61 2e 6c 6f 67 6f 4d 61 69 6e 29 72 65 74 75 72 6e 21 31 3b 61 2e 6c 6f 67 6f 4d 61 69 6e 3d 63 3b 61 2e Data Ascii: /* Copyright(c) 2023 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c*/(function(){(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49996	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:37 UTC	680	OUT	GET /time.mp3?nocache=0.8098658682685631 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.usbank.com/index.html Accept-Language: en-US,en;q=0.9 Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk= Range: bytes=0-
2024-05-10 04:53:37 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Fri, 10 May 2024 04:53:37 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-10 04:53:37 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 51 b5 3e 22 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXingQ>"@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	50002	44.238.162.224	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:38 UTC	601	OUT	GET /star HTTP/1.1 Host: mpsnare.iesnare.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.usbank.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=clKPPXX65IqF06GIgol5IbV6XZDbxIeM7aKMlQyOolk= Sec-WebSocket-Key: Jyh+AWh/rZBzazE2sOKTrA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-10 04:53:38 UTC	119	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 10 May 2024 04:53:38 GMT Content-Length: 34 Connection: close
2024-05-10 04:53:38 UTC	34	IN	Data Raw: 43 61 6e 20 22 55 70 67 72 61 64 65 22 20 6f 6e 6c 79 20 74 6f 20 22 57 65 62 53 6f 63 6b 65 74 22 2e Data Ascii: Can "Upgrade" only to "WebSocket".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	50008	54.218.88.117	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:39 UTC	665	OUT	POST /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 34051 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:39 UTC	16384	OUT	Data Raw: 7b 22 76 72 22 3a 22 32 34 2e 34 2e 30 2e 34 34 35 34 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 3f 33 22 2c 22 74 73 22 3a 31 37 31 35 33 31 36 37 39 39 30 36 38 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 34 2f 35 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 30 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 31 33 38 31 2c 22 44 44 54 22 3a 35 2c 22 44 50 54 22 3a 32 35 2c 22 50 4c 54 22 3a 31 34 31 31 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 67 65 74 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 30 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 36 2f 37 Data Ascii: {"vr":"24.4.0.4454","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2?3","ts":1715316799068,"mg":"0","au":"0://4/5","at":0,"pp":0,"mx":{"PLC":1,"FBT":1381,"DDT":5,"DPT":25,"PLT":1411,"ARE":0},"md":"get","xs":200,"si":0},{"eg":"2","et":2,"eu":"0://6/7
2024-05-10 04:53:39 UTC	16384	OUT	Data Raw: 22 3a 30 2c 22 64 22 3a 30 2c 22 73 22 3a 30 2c 22 70 22 3a 22 22 7d 2c 7b 22 75 22 3a 22 30 3a 2f 2f 32 32 36 2f 32 32 37 2f 32 35 33 2f 32 35 34 22 2c 22 69 22 3a 32 2c 22 72 22 3a 32 2c 22 66 22 3a 32 2c 22 6f 22 3a 39 37 32 34 2c 22 6d 22 3a 5b 30 2c 30 2c 36 31 31 5d 2c 22 65 22 3a 30 2c 22 64 22 3a 30 2c 22 73 22 3a 30 2c 22 70 22 3a 22 22 7d 2c 7b 22 75 22 3a 22 30 3a 2f 2f 32 35 35 2f 38 30 2f 32 35 36 2f 32 35 37 3f 32 35 38 22 2c 22 69 22 3a 32 2c 22 72 22 3a 32 2c 22 66 22 3a 32 2c 22 6f 22 3a 39 38 32 31 2c 22 6d 22 3a 5b 30 2c 30 2c 31 32 32 33 5d 2c 22 65 22 3a 30 2c 22 64 22 3a 30 2c 22 73 22 3a 30 2c 22 70 22 3a 22 22 7d 2c 7b 22 75 22 3a 22 30 3a 2f 2f 32 35 35 2f 32 35 39 2f 32 30 31 3f 32 36 30 22 2c 22 69 22 3a 37 2c 22 72 22 3a 36 2c Data Ascii: ":0,"d":0,"s":0,"p":""},{"u":"0://226/227/253/254","i":2,"r":2,"f":2,"o":9724,"m":[0,0,611],"e":0,"d":0,"s":0,"p":""},{"u":"0://255/80/256/257?258","i":2,"r":2,"f":2,"o":9821,"m":[0,0,1223],"e":0,"d":0,"s":0,"p":""},{"u":"0://255/259/201?260","i":7,"r":6,
2024-05-10 04:53:39 UTC	1283	OUT	Data Raw: 54 56 45 52 53 49 4f 4e 3d 32 2e 35 2e 30 26 51 5f 43 4c 49 45 4e 54 54 59 50 45 3d 77 65 62 26 51 5f 42 52 41 4e 44 49 44 3d 77 77 77 2e 75 73 62 61 6e 6b 2e 63 6f 6d 22 2c 22 6c 61 74 65 73 74 22 2c 22 51 5f 5a 6f 6e 65 49 44 3d 5a 4e 5f 36 56 78 6b 79 71 59 57 61 46 39 66 31 54 37 26 51 5f 43 4c 49 45 4e 54 56 45 52 53 49 4f 4e 3d 32 2e 35 2e 30 26 51 5f 43 4c 49 45 4e 54 54 59 2e 2e 2e 22 2c 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 22 6d 61 69 6e 2d 34 66 39 61 39 38 32 66 38 62 33 35 63 35 31 36 31 36 62 33 2e 6a 73 22 2c 22 43 6f 72 65 4d 6f 64 75 6c 65 2e 6a 73 22 2c 22 51 5f 43 4c 49 45 4e 54 56 45 52 53 49 4f 4e 3d 32 2e 35 2e 30 26 51 5f 43 4c 49 45 4e 54 54 59 50 45 3d 77 65 62 26 51 5f 42 52 41 4e 44 49 44 3d 75 73 62 61 6e 6b 22 2c 22 37 2e Data Ascii: TVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=www.usbank.com","latest","Q_ZoneID=ZN_6VxkyqYWaF9f1T7&Q_CLIENTVERSION=2.5.0&Q_CLIENTTY...","favicon.ico","main-4f9a982f8b35c51616b3.js","CoreModule.js","Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=usbank","7.
2024-05-10 04:53:39 UTC	1216	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:33\|g:2a893853-bacc-4ebb-89cf-dafc84b956c1; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:33\|g:2a893853-bacc-4ebb-89cf-dafc84b956c1\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:33\|i:559461; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:33\|i:559461\|e:2; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:33\|i:559461\|e:2\|t:1715316819285; Path=/; Expires=Fri, 10-May-2024 04:54:09 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 9 server: envoy
2024-05-10 04:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	50010	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:39 UTC	741	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316818012&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=8920&N=79&P=3&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 4157 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:39 UTC	4157	OUT	Data Raw: 78 9c ed 3c 09 73 db 36 d6 7f 85 a3 99 7e 6d 5a 83 e2 4d 4a de ce ae af 38 4e 7d c6 4e b2 6d a7 e3 01 49 50 62 4c 91 2c 49 49 76 3b f9 7e fb 3e 80 87 28 5e a2 e4 a4 99 dd 46 b6 65 91 00 1e de 7b 78 37 40 fd fa e7 20 19 8c 07 78 b0 37 08 e1 ff 3f 5e 9d 1c 1c c3 67 77 30 16 25 69 6f f0 61 30 fe f5 cf 81 38 18 ff 39 f0 a1 f9 f6 ee e7 f3 13 68 c6 70 fb b7 bd c1 51 fa ef 96 36 4f a1 f9 f4 f5 d2 7d 52 c4 0f 37 ff af fc 38 f8 f8 f1 23 b4 d9 00 48 11 35 e8 74 39 18 eb a3 8f 7b 1d f3 c9 db ce 87 dd 3f 94 43 ff f7 a3 d9 4f 17 a5 f9 84 ce 49 94 6d 27 09 0e de db e4 fd e5 0f 3f 3d 4e ca 44 e5 93 44 f9 24 87 57 c7 3f 73 32 27 b2 1f fa 5f 2a 7d a6 3f 6a 76 25 a4 a8 fc 2a 64 90 44 a5 13 61 b5 8e f0 d1 9b b3 eb bb 1c e3 1a 46 8d 50 b4 9e 50 e4 4e 28 7a 4f 28 f5 25 d8 96 Data Ascii: x<s6~mZMJ8N}NmIPbL,IIv;~>(^Fe{x7@ x7?^gw0%ioa089hpQ6O}R78#H5t9{?COIm'?=NDD$W?s2'_}?jv%dDaFPPN(zO(%
2024-05-10 04:53:39 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:39 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	50012	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:40 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316819110&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=1333&N=2&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 485 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:40 UTC	485	OUT	Data Raw: 78 9c 95 92 6d 6f da 30 10 c7 bf 0a ba bd 4d 88 1d e7 89 68 68 1b 85 b6 54 a5 ac 82 d2 6e d3 5e 38 8e 43 a2 82 43 1d 43 a8 10 df 7d 8e 87 ba a8 55 a5 2e 56 2e 67 fb fe bf bb d8 77 80 3d c4 bf 0e b0 86 18 2e 46 73 b0 60 ab bd 5c a9 4d 15 3b 0e dd 14 dd 6d 95 50 f1 d8 65 e5 da a1 5b 95 73 a1 0a 46 55 51 0a 87 6d 2b 55 ae b9 b4 9b 75 1d bb b1 59 29 b2 62 e9 ec b0 f3 d7 d3 38 06 b1 8b 90 05 15 c4 da ce 20 f6 48 44 2c 90 10 63 8c b0 05 4a 6f e0 10 fb 04 07 11 f6 f5 5c a7 df e7 52 2b 2b 75 92 a6 10 f7 c8 f1 b7 05 23 53 6a a1 05 7e 10 58 90 19 e4 4e 0b be e9 dc e3 61 e7 92 d3 94 cb b8 33 9c ce cf a6 13 30 b0 7f 6c d7 45 47 eb 5d f9 82 cb 4a ff d4 0b 03 77 d1 5b 00 7e 07 70 96 53 21 f8 aa 5d 43 cd 93 ff d0 97 52 f2 95 39 d5 36 83 a6 29 47 98 bb 36 25 61 62 7b 41 Data Ascii: xmo0MhhTn^8CCC}U.V.gw=.Fs`\M;mPe[sFUQm+UuY)b8 HD,cJo\R++u#Sj~XNa30lEG]Jw[~pS!]CR96)G6%ab{A
2024-05-10 04:53:40 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	50015	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:40 UTC	524	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316818012&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=8920&N=79&P=3&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:40 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	50017	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:40 UTC	523	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316819110&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=1333&N=2&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50016	52.26.29.98	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:41 UTC	403	OUT	GET /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:41 UTC	1211	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b0e1034c-3861-4059-9e13-d3b343847c0c; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:0\|g:b0e1034c-3861-4059-9e13-d3b343847c0c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:5; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:5\|t:1715316821180; Path=/; Expires=Fri, 10-May-2024 04:54:11 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-05-10 04:53:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50023	54.218.88.117	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:45 UTC	664	OUT	POST /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 3339 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usbank.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:45 UTC	3339	OUT	Data Raw: 7b 22 76 72 22 3a 22 32 34 2e 34 2e 30 2e 34 34 35 34 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 33 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 74 73 22 3a 31 37 31 35 33 31 36 38 31 36 35 36 36 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 61 74 22 3a 30 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 31 36 39 30 2c 22 56 43 54 22 3a 34 34 2c 22 50 4c 43 22 3a 31 7d 2c 22 72 74 22 3a 7b 22 76 22 3a 32 2c 22 69 63 22 3a 7b 22 6f 74 68 65 72 22 3a 31 2c 22 66 65 74 63 68 22 3a 34 2c 22 63 73 73 22 3a 31 2c 22 73 63 72 69 70 74 22 3a 31 2c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 3a 31 7d 2c 22 69 74 22 3a 7b 22 6f 74 68 65 72 22 3a 31 2c 22 Data Ascii: {"vr":"24.4.0.4454","dt":"R","rg":"0","es":[{"eg":"1","et":3,"eu":"0://1/2","ts":1715316816566,"mg":"0","au":"0://1/2","at":0,"mx":{"PLT":1690,"VCT":44,"PLC":1},"rt":{"v":2,"ic":{"other":1,"fetch":4,"css":1,"script":1,"xmlhttprequest":1},"it":{"other":1,"
2024-05-10 04:53:45 UTC	1216	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:33\|g:e670f90e-3b23-441a-a67c-acac2d3480dc; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:33\|g:e670f90e-3b23-441a-a67c-acac2d3480dc\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:33\|i:559461; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:33\|i:559461\|e:5; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:33\|i:559461\|e:5\|t:1715316825302; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-05-10 04:53:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	50024	52.26.29.98	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:45 UTC	575	OUT	GET /eumcollector/beacons/browser/v2/AD-AAB-ACD-CWE/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:b0e1034c-3861-4059-9e13-d3b343847c0c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:5\|t:1715316821180
2024-05-10 04:53:46 UTC	1500	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 04:53:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b0e1034c-3861-4059-9e13-d3b343847c0c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:5\|t:1715316821180; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:79795859-b49e-4480-b404-33352243b737; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:79795859-b49e-4480-b404-33352243b737\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1715316825979; Path=/; Expires=Fri, 10-May-2024 04:54:15 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-05-10 04:53:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	50025	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:49 UTC	741	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828016&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30623&N=136&P=4&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 90 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:49 UTC	90	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 41 22 40 15 15 4a 56 66 26 e6 3a 4a 95 4a 56 26 26 46 3a 4a 29 4a 56 86 06 26 e6 86 3a 4a c1 7e 40 a6 b1 59 ad 0e c4 38 7f c2 c6 e1 32 d0 00 66 46 2e 76 79 a3 da 58 00 3d c1 26 36 Data Ascii: xV*QRPQ6N.`hA"@JVf&:JJV&&F:J)JV&:J~@Y82fF.vyX=&6
2024-05-10 04:53:49 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	50026	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:49 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828570&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2275&N=3&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:49 UTC	34	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 30 34 32 34 33 34 31 35 30 b3 30 35 30 b1 b4 34 33 ad 05 00 4f ee 05 ea Data Ascii: xVU2304243415005043O
2024-05-10 04:53:50 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	50027	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:49 UTC	526	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828016&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30623&N=136&P=4&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:50 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	50028	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:50 UTC	523	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316828570&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2275&N=3&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	50029	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:54 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833031&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30803&N=139&P=5&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:54 UTC	187	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 18 a8 3e 0f a8 3e 39 27 b1 b8 18 c8 2e 03 b2 8b 13 75 93 4a 4b 4a f2 f3 14 8a 73 13 73 72 82 73 13 8b 4a 5c 52 8b b3 4b f2 0b 7c 13 8b d2 33 f3 14 12 f3 32 73 13 4b 52 81 ea 53 94 ac cc 8d cd 75 94 82 fd 94 ac 0c 8d 2d 6b 75 88 75 86 29 94 0f a6 f1 39 c2 37 3f 09 d5 3e 03 e2 2d 41 f5 ab 11 d4 9a e2 92 ca 9c 54 a8 35 29 99 c5 05 39 89 95 56 0a 79 f9 79 a9 d6 14 5a 60 8c cf 82 a4 9c fc e4 6c d2 6d 40 0e 27 1a 78 00 5b 34 10 e1 fc 58 00 df 22 96 b1 Data Ascii: xV*QRQQ6N.`XT>>9'.uJKJssrsJ\RK\|32sKRSu-kuu)97?>-AT5)9VyyZ`lm@'x[4X"
2024-05-10 04:53:54 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:54 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	50030	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:54 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833575&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2301&N=4&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:54 UTC	22	OUT	Data Raw: 78 9c ab 56 4a 55 b2 32 32 d4 51 aa 28 06 d2 06 b5 00 23 61 04 36 Data Ascii: xVJU22Q(#a6
2024-05-10 04:53:55 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:54 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	50031	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:54 UTC	526	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833031&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=30803&N=139&P=5&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:53:55 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:53:54 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	50032	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:53:55 UTC	523	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316833575&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2301&N=4&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	50034	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:04 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316843097&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=31426&N=145&P=6&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 204 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:04 UTC	204	OUT	Data Raw: 78 9c a5 90 4f 0b 82 40 10 c5 bf ca 32 e7 0d 34 d7 c0 ad 53 78 e9 60 1d ec 12 d1 61 fd 43 88 eb ae b8 5b 24 d1 77 6f 4d 0f 05 62 5a cc e1 bd 81 c7 fc 66 e6 78 07 0d 14 0a c0 70 03 ba 20 1e 86 1a 28 21 04 43 02 d4 b6 2c 7b 8e 21 dc 1a 4b dc 07 6e c3 7b 13 de 18 5d ad 77 fe 01 39 c8 7e 55 a3 f3 37 df aa 83 5c 64 99 bc 30 f9 98 33 a5 8c bf 1a af d8 2c ba 68 2d 05 52 05 e3 3c 2c 58 a5 fd 54 e5 5a 96 01 ab ce 99 40 4c 64 05 d3 29 b4 8b 10 cf 1a 8f 77 bb be d1 41 78 20 a3 4f ce 04 48 ff 8d 4a d7 3c ed 30 49 a6 4a ce 6a 8a 22 2e e3 7c f9 27 c1 19 22 08 29 d2 e9 80 be 3f 7d 3d c0 fe 6d fe f8 f5 4f 4f fa eb 9f 1f Data Ascii: xO@24Sx`aC[$woMbZfxp (!C,{!Kn{]w9~U7\d03,h-R<,XTZ@Ld)wAx OHJ<0IJj".\|'")?}=mOO
2024-05-10 04:54:04 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:04 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	50035	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:05 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316844120&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2317&N=5&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:05 UTC	34	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 30 34 b1 30 33 b6 b4 34 35 b2 30 34 37 32 37 37 36 ab 05 00 51 08 05 fa Data Ascii: xVU230403450472776Q
2024-05-10 04:54:05 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	50036	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:05 UTC	526	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316843097&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=31426&N=145&P=6&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:05 UTC	251	IN	HTTP/1.1 400 Bad Request content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	50037	34.122.199.206	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:05 UTC	523	OUT	GET /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316844120&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2317&N=5&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	50038	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:14 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316853116&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=32086&N=152&P=7&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 148 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:14 UTC	148	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 ca 55 d2 51 aa 50 b2 32 33 31 d0 51 aa 54 b2 32 31 36 d5 51 4a 51 b2 b2 34 37 06 0a 04 fb 29 59 19 9a 1a d5 ea 40 d4 86 00 d5 7a 02 69 1b 27 7f 97 48 05 63 05 43 30 04 d1 46 48 6c 08 6d ac 60 aa 60 00 54 9f 07 54 5f 5c 52 99 93 0a 64 97 01 d9 29 99 c5 05 39 89 95 56 0a 79 f9 79 a9 d6 4a 60 cb 0c 2d cc 0c c9 b5 c3 10 9f 1d 49 39 f9 c9 d9 30 4b 88 b7 c1 14 ca 07 d1 c4 fa c1 80 3c e3 89 76 be 41 6d 2c 00 13 38 65 2e Data Ascii: xV*QRUQP231QT216QJQ47)Y@zi'HcC0FHlm``TT_\Rd)9VyyJ`-I90K<vAm,8e.
2024-05-10 04:54:14 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:14 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	50039	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:14 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316853658&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2343&N=6&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 30 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:14 UTC	30	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 30 32 37 30 32 35 31 31 b5 34 33 33 07 82 5a 00 45 7f 05 90 Data Ascii: xVU2302702511433ZE
2024-05-10 04:54:15 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:15 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	50040	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:24 UTC	741	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316863140&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=32520&N=157&P=8&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 88 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:24 UTC	88	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 21 22 40 35 15 4a 56 66 a6 16 3a 4a 95 4a 56 26 a6 c6 3a 4a 29 4a 56 16 66 c6 86 3a 4a c1 7e 4a 56 86 a6 e6 b5 3a 10 f3 fc 09 9b 87 dd 34 03 98 09 b9 b8 e4 63 01 19 bd 26 18 Data Ascii: xV*QRPQ6N.`h!"@5JVf:JJV&:J)JVf:J~JV:4c&
2024-05-10 04:54:24 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:24 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	50041	34.132.213.129	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:24 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316863724&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2367&N=7&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:24 UTC	73	OUT	Data Raw: 78 9c 3d cb 39 0e 80 30 0c 05 d1 bb fc 3a 42 36 5e c9 79 48 49 45 89 b8 3b 89 64 51 bd 69 e6 c1 85 4e 1b 19 8b a6 68 88 78 46 b8 34 0c 74 d3 86 fb 24 74 26 5a c5 7f ed 73 5a 4a a9 a5 95 5e 46 99 e5 31 7d 3f 01 81 1a f1 Data Ascii: x=90:B6^yHIE;dQiNhxF4t$t&ZsZJ^F1}?
2024-05-10 04:54:25 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:25 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	50042	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:29 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316868175&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=32699&N=160&P=9&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:29 UTC	120	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 10 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 f2 f2 f3 52 ad 81 82 29 4a 56 46 16 16 c6 3a 4a c1 7e 4a 56 86 66 06 b5 3a e4 59 66 84 cf b2 a4 9c fc e4 6c a8 6d 24 d8 60 0a e5 83 68 62 3d 43 a6 f1 24 38 3f 16 00 e3 af 5d 12 Data Ascii: xV*QRQQ6N.`XT>2'.S2r+R)JVF:J~JVf:Yflm$`hb=C$8?]
2024-05-10 04:54:29 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:29 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	50044	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:34 UTC	785	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; AWSALBCORS=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	50043	52.200.169.160	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:34 UTC	781	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/pg2mwwr4y5qrTOYYo57JLVf9cvP1Zr1NCdyHh7kO53fmNwvNoMmkBkSNAKTgqR3E4sLr56DuDhdIOgDd09d6wdkNyOznjLZK7A!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=EByXs5pRZSMolH7oxBPtWfQN8q9CeIFAoQ3CaR9Qp5DrrOAw9MPNeohD4a7EkQupwwp60lajLvb76O3sP6aM+XAi6njgEddzcHs/APWPF5UC98w2tT71akexcW4K; AWSALBCORS=Hqf99ehJGl+t1eQNZeq+X8Ha/eEhXryz3pxPEcJ29sI2KUBIftRU+GklArtn+2Ls4HG93Q0ygb7EhJSOdAcefHclnUPHWPNHwR0NK5C1foQKr+4g4WxWXfSH2Dwk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	50045	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:34 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316873185&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=33098&N=164&P=10&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 88 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:34 UTC	88	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 41 22 40 15 15 4a 56 66 26 c6 3a 4a 95 4a 56 26 c6 16 3a 4a 29 4a 56 16 86 46 26 3a 4a c1 7e 4a 56 86 66 26 b5 3a 10 d3 fc 09 9b 86 cb 3c 03 98 19 b9 b8 e4 63 01 1c 7f 26 0a Data Ascii: xV*QRPQ6N.`hA"@JVf&:JJV&:J)JVF&:J~JVf&:<c&
2024-05-10 04:54:34 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:34 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	50046	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:34 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316873763&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2483&N=8&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:34 UTC	40	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 30 37 34 33 34 37 31 36 b4 30 34 b4 34 33 b0 34 d4 51 4a 55 b2 32 33 ad 05 00 76 7d 07 2d Data Ascii: xVU230743471604434QJU23v}-
2024-05-10 04:54:35 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:35 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50048	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:39 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316878206&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=33277&N=167&P=11&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:39 UTC	123	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 08 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 f2 f2 f3 52 ad 81 82 29 4a 56 c6 c6 96 66 3a 4a c1 7e 4a 56 86 66 e6 b5 3a e4 59 66 8c cf b2 a4 9c fc e4 6c a8 6d 06 c4 db 60 0a e5 83 68 62 3d 43 a6 f1 44 3b df b0 36 16 00 ee a2 5d 1e Data Ascii: xV*QRQQ6N.`XT>2'.S2r+R)JVf:J~JVf:Yflm`hb=CD;6]
2024-05-10 04:54:39 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:39 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50049	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:44 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316883248&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=33676&N=171&P=12&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 53 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:44 UTC	53	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 ca 55 d2 51 aa 50 b2 32 33 b1 d4 51 aa 54 b2 32 31 31 d1 51 4a 51 b2 32 b7 30 35 d6 51 0a f6 53 b2 32 34 37 ac 8d 05 00 f8 05 0a a1 Data Ascii: xV*QRUQP23QT211QJQ205QS247
2024-05-10 04:54:44 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:44 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	50050	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:45 UTC	738	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316884006&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2515&N=9&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:45 UTC	33	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 30 b7 34 37 32 35 30 33 35 33 30 b4 b4 34 31 32 aa 05 00 4b 47 05 bc Data Ascii: xVU230472503530412KG
2024-05-10 04:54:45 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:45 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50051	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:49 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316888262&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=33721&N=172&P=13&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:49 UTC	121	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 00 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 92 72 f2 93 b3 ad 81 a2 29 4a 56 c6 66 a6 e6 3a 4a c1 7e 4a 56 86 e6 46 b5 3a e4 d9 66 8c cf b6 bc fc bc 54 a8 65 06 c4 5b 60 0a e5 83 68 e2 3d 43 9e f9 c4 3b 3f 16 00 00 d4 5d 18 Data Ascii: xV*QRQQ6N.`XT>2'.S2r+r)JVf:J~JVF:fTe[`h=C;?]
2024-05-10 04:54:49 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50052	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:55 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316893689&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=34120&N=176&P=14&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 89 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:55 UTC	89	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 21 22 40 35 15 4a 56 66 a6 16 3a 4a 95 4a 56 26 a6 c6 3a 4a 29 4a 56 e6 06 86 40 81 60 3f 25 2b 43 73 b3 5a 1d 88 79 fe 84 cd c3 6e 9a 01 cc 84 5c ec f2 86 b5 b1 00 19 3a 26 18 Data Ascii: xV*QRPQ6N.`h!"@5JVf:JJV&:J)JV@`?%+CsZyn\:&
2024-05-10 04:54:55 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:55 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50053	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:56 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316894820&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2540&N=10&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:56 UTC	33	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 b0 34 b4 b0 30 33 35 34 33 b2 30 37 30 31 31 b4 a8 05 00 4b 68 05 c0 Data Ascii: xVU2340354307011Kh
2024-05-10 04:54:56 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:54:56 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50054	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:54:59 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316898693&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=34299&N=179&P=15&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:54:59 UTC	121	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 00 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 f2 f2 f3 52 ad 81 82 29 4a 56 26 e6 46 46 3a 4a c1 7e 4a 56 86 e6 96 b5 3a e4 59 66 88 cf b2 a4 9c fc e4 6c a8 6d 06 c4 db 60 0a e5 83 68 62 3d 43 a6 f1 24 38 3f 16 00 e5 0e 5d 12 Data Ascii: xV*QRQQ6N.`XT>2'.S2r+R)JV&FF:J~JV:Yflm`hb=C$8?]
2024-05-10 04:55:00 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:00 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50055	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:00 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316899244&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2565&N=11&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 53 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:00 UTC	53	OUT	Data Raw: 78 9c ab 56 4a 55 b2 b2 30 d7 51 2a 4e 31 50 b2 32 34 30 00 b1 0c e1 2c 23 25 2b 30 6d 0c a5 4d a0 b4 29 94 36 83 d2 e6 50 da 02 4a 5b 02 e9 5a 00 f6 cf 16 04 Data Ascii: xVJU0Q*N1P240,#%+0mM)6PJ[Z
2024-05-10 04:55:00 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:00 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50056	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:04 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316903698&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=34698&N=183&P=16&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 90 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:04 UTC	90	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 41 22 40 15 15 4a 56 66 a6 86 3a 4a 95 4a 56 26 26 66 3a 4a 29 4a 56 a6 a6 e6 a6 3a 4a c1 7e 4a 56 86 16 c6 b5 3a 10 d3 fc 09 9b 86 cb 3c 43 98 19 b9 d8 e5 0d 6a 63 01 1e b7 26 0d Data Ascii: xV*QRPQ6N.`hA"@JVf:JJV&&f:J)JV:J~JV:<Cjc&
2024-05-10 04:55:05 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50057	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:05 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316904254&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2657&N=12&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:05 UTC	33	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 34 30 34 36 31 35 31 32 32 36 37 35 31 34 33 b6 a8 05 00 4a 32 05 ad Data Ascii: xVU23404615122675143J2
2024-05-10 04:55:05 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50058	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:09 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316908709&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2682&N=13&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 16 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:09 UTC	16	OUT	Data Raw: 78 9c ab 56 4a 55 b2 b2 34 af 05 00 0a 54 02 4c Data Ascii: xVJU4TL
2024-05-10 04:55:10 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:10 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50059	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:14 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316913717&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=34877&N=186&P=17&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:14 UTC	124	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 10 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 f2 f2 f3 52 ad 81 82 29 4a 56 a6 96 c6 c6 3a 4a c1 7e 4a 56 86 16 66 b5 3a e4 59 66 84 cf b2 a4 9c fc e4 6c a8 6d 86 c4 db 60 0a e5 83 68 62 3d 63 40 9e f1 44 3b df a0 36 16 00 ec 6c 5d 1a Data Ascii: xV*QRQQ6N.`XT>2'.S2r+R)JV:J~JVf:Yflm`hb=c@D;6l]
2024-05-10 04:55:15 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:15 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50060	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:19 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316918735&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=35276&N=190&P=18&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 84 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:19 UTC	84	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 68 0a a5 0d 21 22 40 35 15 4a 56 66 a6 a6 3a 4a 95 4a 56 26 a6 06 3a 4a 29 40 da 0c c4 08 f6 53 b2 32 b4 34 a8 d5 81 98 e7 4f d8 3c ec a6 c1 4d c8 c5 25 1f 0b 00 13 00 26 00 Data Ascii: xV*QRPQ6N.`h!"@5JVf:JJV&:J)@S24O<M%&
2024-05-10 04:55:20 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:20 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50061	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:20 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316919282&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2690&N=14&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 41 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:20 UTC	41	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 34 30 33 37 35 30 35 34 34 35 b3 30 37 37 b4 34 d2 51 4a 55 b2 32 34 30 af 05 00 7d b2 07 60 Data Ascii: xVU2340375054450774QJU240}`
2024-05-10 04:55:20 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:20 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50062	34.29.92.19	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:24 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316923746&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=35455&N=193&P=19&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:24 UTC	121	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 08 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 f2 f2 f3 52 ad 81 82 29 4a 56 66 16 a6 96 3a 4a c1 7e 4a 56 86 96 c6 b5 3a e4 59 66 8c cf b2 a4 9c fc e4 6c a8 6d 06 c4 db 60 0a e5 83 68 62 3d 43 a6 f1 24 38 3f 16 00 f5 c8 5d 23 Data Ascii: xV*QRQQ6N.`XT>2'.S2r+R)JVf:J~JV:Yflm`hb=C$8?]#
2024-05-10 04:55:25 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:25 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50063	34.70.212.173	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:30 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316928751&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=35854&N=197&P=20&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 53 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:30 UTC	53	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 ca 55 d2 51 aa 50 b2 32 33 35 d3 51 aa 54 b2 32 31 35 d4 51 4a 51 b2 32 b2 34 b6 d4 51 0a f6 53 b2 32 b4 34 af 8d 05 00 f7 ae 0a a5 Data Ascii: xV*QRUQP235QT215QJQ24QS24
2024-05-10 04:55:30 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50064	34.70.212.173	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:30 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316929406&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2723&N=15&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 30 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:30 UTC	30	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 34 b0 30 34 30 34 b7 30 b6 30 33 37 04 72 6a 01 45 2f 05 7e Data Ascii: xVU23404040037rjE/~
2024-05-10 04:55:30 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50065	34.70.212.173	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:34 UTC	743	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316933762&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=35899&N=198&P=21&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:34 UTC	121	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 0a 51 d2 51 f2 04 d2 36 4e fe 2e 91 0a c6 0a 86 60 08 a2 8d 90 d8 10 da 58 c1 54 c1 00 a8 3e 0f a8 be b8 a4 32 27 15 c8 2e 03 b2 53 32 8b 0b 72 12 2b ad 14 92 72 f2 93 b3 ad 81 a2 29 4a 56 16 a6 e6 e6 3a 4a c1 7e 4a 56 86 96 16 b5 3a e4 d9 66 8c cf b6 bc fc bc 54 a8 65 06 c4 5b 60 0a e5 83 68 a2 3d 43 a6 f9 c4 3b 3f 16 00 0f df 5d 23 Data Ascii: xV*QRQQ6N.`XT>2'.S2r+r)JV:J~JV:fTe[`h=C;?]#
2024-05-10 04:55:35 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:35 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50066	34.70.212.173	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:40 UTC	742	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316938805&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&S=36298&N=202&P=22&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 53 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:40 UTC	53	OUT	Data Raw: 78 9c 8b ae 56 2a 51 b2 52 ca 55 d2 51 aa 50 b2 32 33 35 d5 51 aa 54 b2 32 31 35 d0 51 4a 51 b2 32 34 b7 30 d6 51 0a f6 53 b2 32 32 30 aa 8d 05 00 f7 1c 0a 92 Data Ascii: xV*QRUQP235QT215QJQ240QS220
2024-05-10 04:55:40 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50067	34.70.212.173	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 04:55:40 UTC	739	OUT	POST /horizon/usbank?T=B&u=https%3A%2F%2Fwww.usbank.com%2Findex.html&t=1715316806886&v=1715316939412&H=49a83d663fa6de8d38ab6a30&s=3bf63b936489d09afa75f0dd15b39def&Q=2&S=2747&N=16&z=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usbank.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 04:55:40 UTC	33	OUT	Data Raw: 78 9c ab 56 ca 55 b2 32 d0 33 34 b0 34 31 35 36 30 35 33 34 33 35 31 b1 34 b3 ac 05 00 4a da 05 bf Data Ascii: xVU234415605343514J
2024-05-10 04:55:40 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.usbank.com access-control-allow-credentials: true date: Fri, 10 May 2024 04:55:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Target ID:	0
Start time:	06:52:26
Start date:	10/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240509T112530.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:52:29
Start date:	10/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,6777075850867909004,4976181827630672047,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report securedoc_20240509T112530.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Windows Analysis Report
securedoc_20240509T112530.html