Edit tour

Windows Analysis Report
https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c

Overview

General Information

Sample URL:	https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c
Analysis ID:	1447264
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5916 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=0&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=12041 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.daystarpayments.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_185.2.dr, chromecache_132.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_185.2.dr, chromecache_132.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_202.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_223.2.dr	String found in binary or memory: http://scripts.sil.org/OFLMontserratThin-BoldVersion
Source: chromecache_162.2.dr	String found in binary or memory: http://scripts.sil.org/OFLMontserratThin-MediumVersion
Source: chromecache_129.2.dr	String found in binary or memory: http://scripts.sil.org/OFLMontserratThin-RegularVersion
Source: chromecache_219.2.dr, chromecache_157.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_139.2.dr, chromecache_181.2.dr, chromecache_160.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_202.2.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_157.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_157.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_157.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_157.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_157.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_157.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_193.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_143.2.dr	String found in binary or memory: https://cdn.gtranslate.net/flags/
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_215.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_157.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_185.2.dr, chromecache_132.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_185.2.dr, chromecache_132.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_223.2.dr, chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)
Source: chromecache_219.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.32.0/LICENSE
Source: chromecache_186.2.dr	String found in binary or memory: https://google.com
Source: chromecache_186.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_143.2.dr	String found in binary or memory: https://gtranslate.com
Source: chromecache_157.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_157.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_186.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_157.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_157.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_157.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_157.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_157.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_144.2.dr, chromecache_199.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_157.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_157.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_157.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_157.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_143.2.dr	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://twitter.com/DaystarPayments
Source: chromecache_157.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/#/schema/logo/image/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/#breadcrumb
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/#organization
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/#primaryimage
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/#website
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/?p=11063
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/?s=
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/about-us/
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/apply-now/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/best-cbd-payment-solutions/
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/comments/feed/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-chargeback-prevention/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-contact/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-ds-gateway/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-getting-started
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-getting-started/
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-getting-started/#breadcrumb
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-getting-started/#primaryimage
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-global-payment-processing/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-high-risk-processing/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-no-fee-processing/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-paas/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-pricing/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/daystar-retail-payments/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/e-commerce-payment-processing/
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/feed/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/get-started/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/high-ticket-merchant-services/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/iso-agent-program/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/payment-processing-for-subscriptions/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/payment-solutions-for-adult-industries/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/payment-solutions-for-casinos-and-gaming-companies/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/privacy-policy/
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2022/11/logo.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/11/icon1.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/11/icon2-1.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/11/icon3-1.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/11/icon5.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/11/icon6.png
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/12/Untitled-design-12.png
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-180x180.png
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-192x192.png
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-270x270.png
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-32x32.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/image1-150x150.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/image1-300x300.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/image1-360x360.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/image1.webp
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/logo-300x129.webp
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/logo-360x155.webp
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/logo-370x159.webp
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/logo.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-300x244.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-360x293.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-370x301.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-768x625.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/paas-1024x765-1.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-300x258.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-360x310.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-370x318.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-768x661.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2.webp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-content/uploads/2024/05/Untitled-design-1-1.webp
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-json/
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.daystarpayments.com%2
Source: chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-json/wp/v2/pages/11063
Source: chromecache_161.2.dr	String found in binary or memory: https://www.daystarpayments.com/wp-json/wp/v2/pages/2576
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.daystarpayments.com/xmlrpc.php?rsd
Source: chromecache_186.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_206.2.dr, chromecache_137.2.dr, chromecache_165.2.dr, chromecache_213.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11272802727/?random
Source: chromecache_140.2.dr, chromecache_174.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11423436062/?random
Source: chromecache_186.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_157.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-11423436062
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_157.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.instagram.com/daystarpayments/
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.linkedin.com/company/daystarpaymentsystems
Source: chromecache_144.2.dr, chromecache_199.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_177.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_157.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_157.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_144.2.dr, chromecache_199.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_157.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_157.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_157.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_157.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@24/167@78/34

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5916 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5916 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5916 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
http://www.smartmenus.org/	0%	URL Reputation	safe
https://www.youtube.com	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://www.youtube.com/	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
http://youtube.com/streaming/metadata/segment/102015	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://youtube.com/api/drm/fps?ek=uninitialized	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/bg3.png	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/plugins/elementor/assets/js/tabs.c2af5be7f9cb3cdcf3d5.bundle.min.js	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/plugins/gtranslate/js/float.js?ver=6.5.3	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/12/Untitled-design-12.png	0%	Avira URL Cloud	safe
https://realtime.luckyorange.com/mqtt	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-192x192.png	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.70d63d6d093f3a45a0c6.bundle.min.js	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-360x310.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-ds-gateway/	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=44813&tfd=77426	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/www-embed-player.vflset/www-embed-player.js	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163z8893682453za200&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=page_view&_c=1&tfd=10210	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/iso-agent-program/	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=scroll&epn.percent_scrolled=90&tfd=15004	0%	Avira URL Cloud	safe
https://www.youtube.com/ptracking?html5=1&video_id=HXJEakm65FI&cpn=HhvLVt-RnKxTEP9r&ei=lrZQZqPqHOvA6dsP94ee4Ak&ptk=youtube_none&pltype=contentugc	0%	Avira URL Cloud	safe
https://cdn.gtranslate.net/flags/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/payment-solutions-for-adult-industries/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-pricing/	0%	Avira URL Cloud	safe
https://in.visitors.live/socket.io/?EIO=3&transport=websocket	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/11272802727/?random	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/1423059381965053?v=2.9.156&r=stable&domain=www.daystarpayments.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-chargeback-prevention/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/bg2.jpg	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLMontserratThin-MediumVersion	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon2-1.png	0%	Avira URL Cloud	safe
https://tools.luckyorange.com/core/core.js?v=0b59897	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-paas/	0%	Avira URL Cloud	safe
https://gtranslate.com	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/image1-360x360.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon1.png	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-high-risk-processing/	0%	Avira URL Cloud	safe
https://www.youtube.com/ptracking?html5=1&video_id=HXJEakm65FI&cpn=HiHYYKo7qHOnQDeH&ei=qbZQZrntFsG66dsP3Our4Ao&ptk=youtube_none&pltype=contentugc	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon3-1.png	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=video_start&epn.video_current_time=2&epn.video_duration=16&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=true&_et=3550&tfd=32614	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&epn.percent_scrolled=90&_et=32&tfd=18643	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/#breadcrumb	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage.webp	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-contact/	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/11423436062/?random	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-370x301.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-getting-started/#primaryimage	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=3&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=43220&tfd=77426	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/image2.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-global-payment-processing/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/#organization	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/daystar-getting-started/	0%	Avira URL Cloud	safe
https://github.com/JulietaUla/Montserrat)	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/litespeed/js/1d4bf4c17bc68ec761951d45626a34b9.js?ver=4a1c2	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLMontserratThin-BoldVersion	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon6.png	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/bg-1-1.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/payment-processing-for-subscriptions/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/high-ticket-merchant-services/	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/#website	0%	Avira URL Cloud	safe
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=0&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=12041	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/embed.js	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon5.png	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true&authuser=0	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://docs.google.com/get_video_info	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/logo.webp	0%	Avira URL Cloud	safe
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/?p=11063	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2024/01/logo-360x155.webp	0%	Avira URL Cloud	safe
https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-270x270.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
daystarpayments.com	192.124.249.2	true	false	unknown
i.ytimg.com	172.217.18.118	true	false	unknown
rr2.sn-p5qlsnrl.googlevideo.com	74.125.155.39	true	false	unknown
api-preview.luckyorange.com	34.107.203.234	true	false	unknown
static.doubleclick.net	142.250.74.198	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	142.251.5.155	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
youtube-ui.l.google.com	142.250.184.238	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
rr2.sn-p5qs7nzr.googlevideo.com	173.194.53.7	true	false	unknown
googleads.g.doubleclick.net	216.58.212.162	true	false	unknown
play.google.com	142.250.185.206	true	false	unknown
realtime.luckyorange.com	35.244.167.102	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.97	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
td.doubleclick.net	142.250.185.194	true	false	unknown
in.visitors.live	35.201.124.9	true	false	unknown
settings.luckyorange.com	34.107.203.234	true	false	unknown
d20519brkbo4nz.cloudfront.net	13.32.27.6	true	false	unknown
tools.luckyorange.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.daystarpayments.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr2---sn-p5qs7nzr.googlevideo.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
rr2---sn-p5qlsnrl.googlevideo.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
icreativefintech.us22.list-manage.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://i.ytimg.com/vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/plugins/gtranslate/js/float.js?ver=6.5.3	false	Avira URL Cloud: safe	unknown
https://realtime.luckyorange.com/mqtt	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/bg3.png	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/plugins/elementor/assets/js/tabs.c2af5be7f9cb3cdcf3d5.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.70d63d6d093f3a45a0c6.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	URL Reputation: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=44813&tfd=77426	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bc657243/www-embed-player.vflset/www-embed-player.js	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=scroll&epn.percent_scrolled=90&tfd=15004	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163z8893682453za200&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=page_view&_c=1&tfd=10210	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/ptracking?html5=1&video_id=HXJEakm65FI&cpn=HhvLVt-RnKxTEP9r&ei=lrZQZqPqHOvA6dsP94ee4Ak&ptk=youtube_none&pltype=contentugc	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	false		unknown
https://in.visitors.live/socket.io/?EIO=3&transport=websocket	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/bg2.jpg	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/1423059381965053?v=2.9.156&r=stable&domain=www.daystarpayments.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://tools.luckyorange.com/core/core.js?v=0b59897	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/ptracking?html5=1&video_id=HXJEakm65FI&cpn=HiHYYKo7qHOnQDeH&ei=qbZQZrntFsG66dsP3Our4Ao&ptk=youtube_none&pltype=contentugc	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=video_start&epn.video_current_time=2&epn.video_duration=16&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=true&_et=3550&tfd=32614	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&epn.percent_scrolled=90&_et=32&tfd=18643	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336	false		unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=3&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=43220&tfd=77426	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/image2.webp	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/litespeed/js/1d4bf4c17bc68ec761951d45626a34b9.js?ver=4a1c2	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/bg-1-1.webp	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/embed.js	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=0&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=12041	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/logo.webp	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_144.2.dr, chromecache_199.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_194.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://www.smartmenus.org/	chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/xmlrpc.php?rsd	chromecache_161.2.dr, chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/12/Untitled-design-12.png	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-192x192.png	chromecache_161.2.dr, chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_177.2.dr, chromecache_215.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_185.2.dr, chromecache_132.2.dr	false	URL Reputation: safe	unknown
https://admin.youtube.com	chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_194.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-360x310.webp	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/daystar-ds-gateway/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/iso-agent-program/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.gtranslate.net/flags/	chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown
https://yurt.corp.google.com	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/payment-solutions-for-adult-industries/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-pricing/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/11272802727/?random	chromecache_206.2.dr, chromecache_137.2.dr, chromecache_165.2.dr, chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_161.2.dr, chromecache_142.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/	chromecache_161.2.dr, chromecache_142.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/daystar-chargeback-prevention/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLMontserratThin-MediumVersion	chromecache_162.2.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc1950	chromecache_219.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon2-1.png	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://gtranslate.com	chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-paas/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-high-risk-processing/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon1.png	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon3-1.png	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/image1-360x360.webp	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/#breadcrumb	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage.webp	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_215.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com/license/free	chromecache_185.2.dr, chromecache_132.2.dr	false	URL Reputation: safe	unknown
https://youtu.be/	chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-contact/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/lowerimage-370x301.webp	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/11423436062/?random	chromecache_140.2.dr, chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-getting-started/#primaryimage	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-global-payment-processing/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/#organization	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/daystar-getting-started/	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/JulietaUla/Montserrat)	chromecache_223.2.dr, chromecache_162.2.dr, chromecache_129.2.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLMontserratThin-BoldVersion	chromecache_223.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon6.png	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/#website	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/payment-processing-for-subscriptions/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/high-ticket-merchant-services/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/11/icon5.png	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net	chromecache_186.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/get_video_info	chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_185.2.dr, chromecache_132.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2024/01/logo-360x155.webp	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_144.2.dr, chromecache_225.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	false	URL Reputation: safe	unknown
https://www.daystarpayments.com/?p=11063	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-270x270.png	chromecache_161.2.dr, chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
142.250.181.246	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.212.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.238	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
173.194.53.7	rr2.sn-p5qs7nzr.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
13.32.27.6	d20519brkbo4nz.cloudfront.net	United States	7018	ATT-INTERNET4US	false
74.125.155.39	rr2.sn-p5qlsnrl.googlevideo.com	United States	15169	GOOGLEUS	false
172.217.18.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
142.250.74.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
34.107.203.234	api-preview.luckyorange.com	United States	15169	GOOGLEUS	false
35.201.124.9	in.visitors.live	United States	15169	GOOGLEUS	false
142.251.5.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.244.167.102	realtime.luckyorange.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
192.124.249.2	daystarpayments.com	United States	30148	SUCURI-SECUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.185.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.98	unknown	United States	15169	GOOGLEUS	false
142.250.186.65	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447264
Start date and time:	2024-05-24 17:45:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@24/167@78/34
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.daystarpayments.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.206, 142.250.185.99, 108.177.15.84, 34.104.35.123, 104.102.49.40, 142.250.186.67, 142.250.74.202, 142.250.185.168, 52.165.165.26, 199.232.214.172, 192.229.221.95, 13.85.23.206, 142.250.185.174, 142.250.185.78, 20.166.126.56, 216.58.206.74, 172.217.18.106, 172.217.16.202, 216.58.212.138, 142.250.186.74, 142.250.184.202, 142.250.186.170, 172.217.18.10, 172.217.23.106, 142.250.186.106, 142.250.186.42, 216.58.212.170, 142.250.185.74, 142.250.186.138, 142.250.185.106, 142.250.185.138, 172.217.16.138, 216.58.206.42, 142.250.186.131, 142.250.185.234, 142.250.185.170, 142.250.186.174
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, e13829.x.akamaiedge.net, clientservices.googleapis.com, pubsub.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, swc.list-manage.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c

Input	Output
URL: https://td.doubleclick.net/td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEma Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No fields for username or password are present in the form.", "No 'Login' or 'Sign In' button is present in the form." ] }
Signer First Name Signer Last Name Quick Setup Enter Signer First Name Enter Signer Last Name Fill out a few details in the merchant application form and you will be on your way to take payments in no time. Signer Phone Signer Email Get Paid Fast Enter Signer Emaill Enter Signer Phone We dont hold your cash. You can see your funds getting credited in your bank in the minimum time of 1-2 days. Business Tax ID Business Start Date Simple Pricing We follow a simple pricing. What you see is what you get. No Business Tax ID dd/ mm/ YYYY surprising or hidden charges! State of Formation Numtm of Enter State Name Enter in numbers Legal Business Narne Enter Legal Business Name Corporate Legal Address Enter Full Address with City, State and Zip DBA Doing Business As?
URL: https://td.doubleclick.net/td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now% Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No fields for username or password are present.", "No 'Login' or 'Sign In' button is present." ] }
Signer First Name Signer Last Name Quick Setup Enter Signer First Name Enter Signer Last Name Fill out a few details in the merchant application form and you will be on your way to take payments in no time. Signer Phone Signer Email Get Paid Fast Enter Signer Emaill Enter Signer Phone We dont hold your cash. You can see your funds getting credited in your bank in the minimum time of 1-2 days. Business Tax ID Business Start Date Simple Pricing We follow a simple pricing. What you see is what you get. No Business Tax ID dd/ mm/ YYYY surprising or hidden charges! State of Formation Numtm of Enter State Name Enter in numbers Legal Business Narne Enter Legal Business Name Corporate Legal Address Enter Full Address with City, State and Zip DBA Doing Business As?
URL: https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No fields for username or password are present.", "No 'Login' or 'Sign In' button is present." ] }
Signer First Name Signer Last Name Quick Setup Enter Signer First Name Enter Signer Last Name Fill out a few details in the merchant application form and you will be on your way to take payments in no time. Signer Phone Signer Email Get Paid Fast Enter Signer Emaill Enter Signer Phone We dont hold your cash. You can see your funds getting credited in your bank in the minimum time of 1-2 days. Business Tax ID Business Start Date Simple Pricing We follow a simple pricing. What you see is what you get. No Business Tax ID dd/ mm/ YYYY surprising or hidden charges! State of Formation Numtm of Enter State Name Enter in numbers Legal Business Narne Enter Legal Business Name Corporate Legal Address Enter Full Address with City, State and Zip DBA Doing Business As?
URL: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to Google Tag Manager, which is commonly used for tracking and analytics purposes. There are no indications of malicious activity." }
/* / / Google Tag Manager / (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','myLayer','GTM-MX3TT22'); / End Google Tag Manager / / */
URL: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to language translation settings for a website. It does not contain any malicious elements or behaviors. It is configuring settings for a translation plugin, which is a common and legitimate functionality." }
/* / window.gtranslateSettings = / document.write / window.gtranslateSettings \|\| {};window.gtranslateSettings['55523285'] = {"default_language":"en","languages":["en","fr","de","pt","es"],"url_structure":"sub_directory","native_language_names":1,"detect_browser_language":1,"flag_style":"2d","wrapper_selector":"#gt-wrapper-55523285","alt_flags":{"en":"usa"},"float_switcher_open_direction":"bottom","switcher_horizontal_position":"right","switcher_vertical_position":"bottom","flags_location":"\/wp-content\/plugins\/gtranslate\/flags\/"}; / */
URL: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be a library for lazy loading images and other media elements. It does not contain any obvious malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code primarily focuses on managing the loading state of media elements and handling events related to their loading process. Therefore, it is considered to be of no risk." }
!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).LazyLoad=e()}(this,function(){"use strict";function e(){return(e=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,a=arguments[e];for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(t[n]=a[n])}return t}).apply(this,arguments)}function i(t){return e({},it,t)}function o(t,e){var n,a="LazyLoad::Initialized",i=new t(e);try{n=new CustomEvent(a,{detail:{instance:i}})}catch(t){(n=document.createEvent("CustomEvent")).initCustomEvent(a,!1,!1,{instance:i})}window.dispatchEvent(n)}function l(t,e){return t.getAttribute(gt+e)}function c(t){return l(t,bt)}function s(t,e){return function(t,e,n){e=gt+e;null!==n?t.setAttribute(e,n):t.removeAttribute(e)}(t,bt,e)}function r(t){return s(t,null),0}function u(t){return null===c(t)}function d(t){return c(t)===vt}function f(t,e,n,a){t&&(void 0===a?void 0===n?t(e):t(e,n):t(e,n,a))}function _(t,e){nt?t.classList.add(e):t.className+=(t.className?" ":"")+e}function v(t,e){nt?t.classList.remove(e):t.className=t.className.replace(new RegExp("(^\|\\s+)"+e+"(\\s+\|$)")," ").replace(/^\s+/,"").replace(/\s+$/,"")}function g(t){return t.llTempImage}function b(t,e){!e\|\|(e=e._observer)&&e.unobserve(t)}function p(t,e){t&&(t.loadingCount+=e)}function h(t,e){t&&(t.toLoadCount=e)}function n(t){for(var e,n=[],a=0;e=t.children[a];a+=1)"SOURCE"===e.tagName&&n.push(e);return n}function m(t,e){(t=t.parentNode)&&"PICTURE"===t.tagName&&n(t).forEach(e)}function a(t,e){n(t).forEach(e)}function E(t){return!!t[st]}function I(t){return t[st]}function y(t){return delete t[st]}function A(e,t){var n;E(e)\|\|(n={},t.forEach(function(t){n[t]=e.getAttribute(t)}),e[st]=n)}function k(a,t){var i;E(a)&&(i=I(a),t.forEach(function(t){var e,n;e=a,(t=i[n=t])?e.setAttribute(n,t):e.removeAttribute(n)}))}function L(t,e,n){_(t,e.class_loading),s(t,ut),n&&(p(n,1),f(e.callback_loading,t,n))}function w(t,e,n){n&&t.setAttribute(e,n)}function x(t,e){w(t,ct,l(t,e.data_sizes)),w(t,rt,l(t,e.data_srcset)),w(t,ot,l(t,e.data_src))}function O(t,e,n){var a=l(t,e.data_bg_multi),i=l(t,e.data_bg_multi_hidpi);(a=at&&i?i:a)&&(t.style.backgroundImage=a,n=n,_(t=t,(e=e).class_applied),s(t,ft),n&&(e.unobserve_completed&&b(t,e),f(e.callback_applied,t,n)))}function N(t,e){!e\|\|0<e.loadingCount\|\|0<e.toLoadCount\|\|f(t.callback_finish,e)}function C(t,e,n){t.addEventListener(e,n),t.llEvLisnrs[e]=n}function M(t){return!!t.llEvLisnrs}function z(t){if(M(t)){var e,n,a=t.llEvLisnrs;for(e in a){var i=a[e];n=e,i=i,t.removeEventListener(n,i)}delete t.llEvLisnrs}}function R(t,e,n){var a;delete t.llTempImage,p(n,-1),(a=n)&&--a.toLoadCount,v(t,e.class_loading),e.unobserve_completed&&b(t,n)}function T(o,r,c){var l=g(o)\|\|o;M(l)\|\|function(t,e,n){M(t)\|\|(t.llEvLisnrs={});var a="VIDEO"===t.tagName?"loadeddata":"load";C(t,a,e),C(t,"error",n)}(l,function(t){var e,n,a,i;n=r,a=c,i=d(e=o),R(e,n,a),_(e,n.class_load
URL: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to performance tracking and user agent detection, which are common practices for optimizing web applications. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code does not interact with sensitive user data or perform any actions that would typically be associated with phishing or other malicious activities." }
var ytcsi={gt:function(n){n=(n\|\|"")+"data_";return ytcsi[n]\|\|(ytcsi[n]={tick:{},info:{},gel:{preLoggedGelInfos:[]}})},now:window.performance&&window.performance.timing&&window.performance.now&&window.performance.timing.navigationStart?function(){return window.performance.timing.navigationStart+window.performance.now()}:function(){return(new Date).getTime()},tick:function(l,t,n){var ticks=ytcsi.gt(n).tick;var v=t\|\|ytcsi.now();if(ticks[l]){ticks["_"+l]=ticks["_"+l]\|\|[ticks[l]];ticks["_"+l].push(v)}ticks[l]= v},info:function(k,v,n){ytcsi.gt(n).info[k]=v},infoGel:function(p,n){ytcsi.gt(n).gel.preLoggedGelInfos.push(p)},setStart:function(t,n){ytcsi.tick("_start",t,n)}}; (function(w,d){function isGecko(){if(!w.navigator)return false;try{if(w.navigator.userAgentData&&w.navigator.userAgentData.brands&&w.navigator.userAgentData.brands.length){var brands=w.navigator.userAgentData.brands;var i=0;for(;i<brands.length;i++)if(brands[i]&&brands[i].brand==="Firefox")return true;return false}}catch(e){setTimeout(function(){throw e;})}if(!w.navigator.userAgent)return false;var ua=w.navigator.userAgent;return ua.indexOf("Gecko")>0&&ua.toLowerCase().indexOf("webkit")<0&&ua.indexOf("Edge")< 0&&ua.indexOf("Trident")<0&&ua.indexOf("MSIE")<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc")}, false);if(isGecko()){var isHidden=(d.visibilityState\|\|d.webkitVisibilityState)=="hidden";if(isHidden)ytcsi.tick("vc")}var slt=function(el,t){setTimeout(function(){var n=ytcsi.now();el.loadTime=n;if(el.slt)el.slt()},t)};w.__ytRIL=function(el){if(!el.getAttribute("data-thumb"))if(w.requestAnimationFrame)w.requestAnimationFrame(function(){slt(el,0)});else slt(el,16)}})(window,document);
URL: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be configuration settings for a web application, likely related to YouTube or a similar service. It sets various flags and configurations but does not contain any obvious malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts. The presence of long random hexadecimal strings and tracking/advertisement functionality is noted but considered no risk." }
var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}}; ytcfg.set({"EVENT_ID":"h7ZQZoKxPNGH6dsPu_y_IA","EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_el_h":true,"ab_det_fet_wr":true,"ab_det_gen_re":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"always_send_and_write":true,"att_web_record_metrics":true,"autoescape_tempdata_url":true,"cancel_pending_navs":true,"check_login_info_at_app_init_time":true,"clean_up_manual_attribution_header":true,"clear_user_partitioned_ls":true,"copy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_cached_masthead_data":true,"disable_child_node_auto_formatted_strings":true,"disable_enf_isd":true,"disable_pacf_logging_for_memory_limited_tv":true,"disable_safari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_async_ab_enf":true,"enable_docked_chat_messages":true,"enable_dsa_one_click_ata_translators_infeed_elements":true,"enable_entity_store_from_dependency_injection":true,"enable_eom_webview_header":true,"enable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_identity_attributes_for_live_chat":true,"enable_ips_gating":true,"enable_is_extended_monitoring":true,"enable_mixed_direction_formatted_strings":true,"enable_pacf_slot_asde_infeed_h5":true,"enable_pacf_slot_asde_player_byte_h5":true,"enable_pacf_slot_asde_player_byte_h5_TV":true,"enable_pass_sdc_get_accounts_list":true,"enable_pl_r_c":true,"enable_pl_r_c_s":true,"enable_pl_r_si_fa":true,"enable_populate_att_psd_in_abe_feedback":true,"enable_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_in_player_video_h5":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"enable_smearing_expansion_dai":true,"enable_temp_fix_for_url_redirection":true,"enable_third_party_info":true,"enable_watch_next_pause_autoplay_lact":true,"enable_web_96_bit_csn":true,"enable_web_tiered_gel":true,"enable_window_constrained_buy_flow_dialog":true,"enable_ypc_spinners":true,"enable_yt_ata_iframe_authuser":true,"err_on_pl_r_c":true,"export_ne
URL: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be an error handling script. It captures unhandled errors and sends them to a specified URL for logging purposes. This is a common practice for monitoring and improving the stability of web applications. There are no indications of malicious behavior such as data exfiltration, phishing, or unauthorized access. The use of tracking or advertisement functionality is not considered a risk in this context." }
window.yterr=window.yterr\|\|true;window.unhandledErrorMessages={}; window.onerror=function(msg,url,line,opt_columnNumber,opt_error){var err;if(opt_error)err=opt_error;else{err=new Error;err.message=msg;err.fileName=url;err.lineNumber=line;if(!isNaN(opt_columnNumber))err["columnNumber"]=opt_columnNumber}var message=String(err.message);if(!err.message\|\|message in window.unhandledErrorMessages)return;window.unhandledErrorMessages[message]=true;var img=new Image;window.emergencyTimeoutImg=img;img.onload=img.onerror=function(){delete window.emergencyTimeoutImg};var values= {"client.name":ytcfg.get("INNERTUBE_CONTEXT_CLIENT_NAME"),"client.version":ytcfg.get("INNERTUBE_CONTEXT_CLIENT_VERSION"),"msg":message,"type":"UnhandledWindow"+err.name,"file":err.fileName,"line":err.lineNumber,"stack":(err.stack\|\|"").substr(0,500)};var parts=[ytcfg.get("EMERGENCY_BASE_URL","/error_204?t=jserror&level=ERROR")];var key;for(key in values){var value=values[key];if(value)parts.push(key+"="+encodeURIComponent(value))}img.src=parts.join("&")};
URL: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be configuration settings for a web application, likely related to YouTube or a similar service. It sets various flags and configurations, which is typical for such applications. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts. The code does not contain any suspicious patterns or functions that would indicate a high risk. Therefore, it is considered low risk." }
var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}}; ytcfg.set({"EVENT_ID":"p7ZQZo7VKM7n6dsPpPaC-AQ","EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_el_h":true,"ab_det_fet_wr":true,"ab_det_gen_re":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"always_send_and_write":true,"att_web_record_metrics":true,"autoescape_tempdata_url":true,"cancel_pending_navs":true,"check_login_info_at_app_init_time":true,"clean_up_manual_attribution_header":true,"clear_user_partitioned_ls":true,"copy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_cached_masthead_data":true,"disable_child_node_auto_formatted_strings":true,"disable_enf_isd":true,"disable_pacf_logging_for_memory_limited_tv":true,"disable_safari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_async_ab_enf":true,"enable_docked_chat_messages":true,"enable_dsa_one_click_ata_translators_infeed_elements":true,"enable_entity_store_from_dependency_injection":true,"enable_eom_webview_header":true,"enable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_identity_attributes_for_live_chat":true,"enable_ips_gating":true,"enable_is_extended_monitoring":true,"enable_mixed_direction_formatted_strings":true,"enable_pacf_slot_asde_infeed_h5":true,"enable_pacf_slot_asde_player_byte_h5":true,"enable_pacf_slot_asde_player_byte_h5_TV":true,"enable_pass_sdc_get_accounts_list":true,"enable_pl_r_c":true,"enable_pl_r_c_s":true,"enable_pl_r_si_fa":true,"enable_populate_att_psd_in_abe_feedback":true,"enable_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_in_player_video_h5":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"enable_smearing_expansion_dai":true,"enable_temp_fix_for_url_redirection":true,"enable_third_party_info":true,"enable_watch_next_pause_autoplay_lact":true,"enable_web_96_bit_csn":true,"enable_web_tiered_gel":true,"enable_window_constrained_buy_flow_dialog":true,"enable_ypc_spinners":true,"enable_yt_ata_iframe_authuser":true,"err_on_pl_r_c":true,"export_n
URL: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Model: gpt-4o	```json { "phishing_score": 4, "brands": "Daystar Payments", "phishing": false, "suspicious_domain": false, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL appears to be legitimate and matches the brand name 'Daystar Payments'. The page includes a form asking for personal information, which is common in both legitimate and phishing sites. The URL parameters suggest it was accessed via an email campaign, which can be a tactic used in phishing but is also common in legitimate marketing. There is no immediate evidence of phishing, but caution is advised due to the presence of social engineering techniques." }

URL: https://www.daystarpayments.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to language translation settings and does not exhibit any malicious behavior. It configures settings for a translation plugin, specifying default language, available languages, and UI preferences. There are no indications of phishing or harmful activities." }
/* / window.gtranslateSettings = / document.write / window.gtranslateSettings \|\| {};window.gtranslateSettings['10758220'] = {"default_language":"en","languages":["en","fr","de","pt","es"],"url_structure":"sub_directory","native_language_names":1,"detect_browser_language":1,"flag_style":"2d","wrapper_selector":"#gt-wrapper-10758220","alt_flags":{"en":"usa"},"float_switcher_open_direction":"bottom","switcher_horizontal_position":"right","switcher_vertical_position":"bottom","flags_location":"\/wp-content\/plugins\/gtranslate\/flags\/"}; / */

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	36892
Entropy (8bit):	5.6030036784139785
Encrypted:	false
SSDEEP:	768:AWN0HNdMyzmCd4iTF995R+DXcJ8NuumgT/3z:A4rMmCPTHOibgT/3z
MD5:	6CFD03508DD9E95F82E89C89B717F126
SHA1:	A4B3A08AB5308C483BB75ACD16C21BF5C230D89C
SHA-256:	C81AAAC40CE5AF5EE0280CC2C52A6C5424C4537022ECF6C8DAA7DEC78C1DB511
SHA-512:	FA41B9D76F147351FAB11BABF198B3A82F2D3CB9DCD0F67DE80BFF2CAACCDCCF1B7D9E2AADC22F73DC90E55CE47A71B184F8659E01F6FF105D439477990CF335
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aX8.ttf
Preview:	............GDEF...#...@....GPOS^". ......0.GSUB...j........OS/2T@%@.......`STAT..........Hcmap.K].........gasp............glyf.....M...B6head.A.....`...6hhea.F.....<...$hmtxO.QL........loca.......t....maxp.M......... name7._........\|post.......t....preph................................?.Y...F...............................a.H...3.................".........SF._.<............F.....p..H.$.3...............................$..wght....ital...........................................r.........X...K...X...^.2.6...............g...k........ULA....."........U.. .............. .......F...............................................!.(...+.3.....................)...,.4...6.6...8.:...<.C...E.G...I.M...O.k...m.t...v.y...{.\|...........................!.(...+.3.....................6.................................@...................................,.V.........4.".................................................R.o.m.a.n.I.t.a.l.i.c.W.e.i.g.h.t.h.t.t.p.:././.s.c.r.i.p.t.s...s.i.l...o.r.g./.O.F.L.M.o

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 842x507, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4746
Entropy (8bit):	7.94676295704572
Encrypted:	false
SSDEEP:	96:LE7pIfDwcrzruhGUOElHw1XPcZ0bsivU+SqRonV+UE/w2sTfHE:yODwcrzah9OElH0Py0bsxBq2V+UEobTk
MD5:	F3F8A50A18E0372B7F0E6FB8D22DAE1B
SHA1:	E66661F9BF27F59A4D5E71D20A35472AC6A8B18D
SHA-256:	39BDAE63514B83E06496E600662CC52D0692CC5D8F1CD5052CD947980BC349F8
SHA-512:	EB4EC75A18C830CB77A39052E6E9237C2D46128D8D700E8BCB5C661C6D2B350E3706A7906D9597D6DF16D3503E5AD92C0FA20647822FE26C5E6F160EDB3F0CCC
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/uploads/2024/01/image2.webp
Preview:	RIFF....WEBPVP8 v...07...J...>Q(.F#..."..8p..in....P..Y....O..d.@...>?J.3....W0.....W....g...#....w......m...k.o.Z..[......7Z..X.k..K...... wl...\+\|..7Z..X.k..K.G...p..kX.k..cu.n....V..q..7Z..X.k..cu.n.....U...c_I.kMu.d.5.I./.p...5.n.....7Z..X.k..cu.n..%......p..kX.k..cu.n...:._.`sJ.'u......{..4..w^.......#.!....+...bg...L.m.....5..cu.n.....7Z..u/....v....<o..y.6\|../....".<^...6..q...l...\+\|..7Z..X.k..cs...?.....7..N..qi.v.j.$....TD..c..>..."P,3.....n.....%.....\+\|..7Z..X.k.....v.t...w.E..fp..K.U.....6..H.1..0.'AK../.....5g&y.N.....d..jE<.7.{.s?....&.....7Z..Xo0.(.A>....x8...(AC.f....x....L..9AH..)Q.'.gn2..:.....^.{..RY35.4%..7.."..\.../...%..`...c..E...Mk..cu.n.<6.....3.n..b^..NwEa..^..#.XQ.\..V.BVu"M9.d<..rj....x.....h......2KKH....x.j....-.1.<...&.....7Z..X.N...,.A..0O,.e0.s$........C....W.:g.!@....,.....S).1.f..d..s$.(..xm..0.69..3..C..dl.L.!p.p...gcS...cu.n....A]k..R..'....7..X.W..{..i..o.y...%...j.]..jz...X...!w@;....4.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35994)
Category:	downloaded
Size (bytes):	1178681
Entropy (8bit):	4.9036215523086115
Encrypted:	false
SSDEEP:	24576:fKVXDt3qrS3cKJ1SS2yh3ynk6VJaS2xQNAWIznTFTPK0sBCwC:fMXDtZcKJh3ynk6VJaS2xQNAWIzD
MD5:	DDFF27AF406BF1E999A008F17424E3CC
SHA1:	CFD501D2586CDEDE39C2DE7AD2222AC0CABF4032
SHA-256:	24B7AC5D7CBBE6B17F5004D253BFD0A5864C55D6F0BA14E2DCF652054FB905E2
SHA-512:	030B043B20B3F09CFC294D5F3216B509481571963E1458104994237E341FA3B1A0A6AC90AB6C52FF82BF29D1AD4E92AD433E674D940ED5B2EB0A6390F19263D1
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2
Preview:	img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:0 0 !important;padding:0 !important}/! This file is auto-generated /..wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}body{--wp--preset--color--black:#000;--wp--preset--color--cyan-bluish-gray:#abb8c3;--wp--preset--color--white:#fff;--wp--preset--color--pale-pink:#f78da7;--wp--preset--color--vivid-red:#cf2e2e;--wp--preset--color--luminous-vivid-orange:#ff6900;--wp--preset--color--luminous-vivid-amber:#fcb900;--wp--preset--color--light-green-cyan:#7bdcb5;--wp--preset--color--vivid-green-cyan:#00d084;--wp--preset--color--pale-cyan-blue:#8ed1fc;--wp--preset--color--vivid-cyan

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3978
Entropy (8bit):	4.8019347763068385
Encrypted:	false
SSDEEP:	96:ngmnuckg+4SVy5hxRWXN80GVi2vb5lL6Y8y0Wpbb9L:ngPctSVuhxwXNNGVi2vb5ZAy0qBL
MD5:	743E67C55ED998AC479523B50AC80272
SHA1:	AB2472E4DEF306B7A93E47CBBCCCEDE6E1B1F7D2
SHA-256:	5530332BC811EADD6167F6C7419FEC6C3387B371E3449226639C25FF656C136F
SHA-512:	7E5C9651CE7D9B186A66E76CBB5F82E34365BDC25532E9B55B111F33E65BA6CE4307FC5E75A9F3BA4EF6CD3D8DBC26D072B41633787CBB14916C9BB83D353CED
Malicious:	false
Reputation:	low
URL:	https://settings.luckyorange.com/0cce5631
Preview:	{"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app":true,"trial-guard":true,"shopify-new-app":true,"integration::google-analytics::v1":true,"integration::wordpress::v1":true,"integration::shopify::v2":true,"integration::bigcommerce::v1":true,"integrations":true,"integration::hubspot::v1":true,"send-integration-events":true,"integration::custom-notifications::v1":true,"intelligent-fingerprint":true,"trackFrames":true,"rdc":true,"store-resources":true,"paypal":true,"sessionDuration":true,"email-reports":true,"integration::zapier::v1":true,"export-button":true,"integration::square::v1":true,"shopify-checkout-pixel":true,"multiQuestionSurvey":true,"plan-pricing-page-variant":true,"onboarding-benchmark":true,"conversational-discovery":true,"integration::optimizely::v1":true},"ip":"8.46.123

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1043
Entropy (8bit):	5.941485950861932
Encrypted:	false
SSDEEP:	24:Y7EhKhyAMi4yjVJ12+AH/q0D4cocW7ZgHyyPbJ5mSpGpy:YghmMW/12HfR/DP5mSpP
MD5:	2266BDAD1A92CFA8A817A1D1A516EF65
SHA1:	39E8C9F21F902A7A1024057A47E9CD83FBFC09AA
SHA-256:	7F0B372F7D3AA2A6A7489F2C5F2B882BF73BECC5CEED15366E4989FF5B5F845D
SHA-512:	809BD2F5726AA39E55D696538D2F9D9020D6E98D9018855ED03F7C68C9BD3FFD4F9B1CF7189DCD1A23A33C137B95FF980BB2374EFC26D420D4E8E8F7B5621375
Malicious:	false
Reputation:	low
Preview:	{"access_token":"ya29.c.c0AY_VpZhrettoA7hMTuOCSOFpUWdFUdFrXxkaA5iATf74DHkrP4hQLMoWegh89C93slhBFbWtN_3pDzZ_wz5CM9RO_WsWIXYwV3cFWVIFHIvN8R7kKjyPyCMDwPza_jwrfR6491Ys6PbM5OWebGCPC7ZwptHRlMeIGYHUimLFD45BbnNx4ls1AEGwvKeMjgw3MWBrYTKwtOGdguZm-vEt_t8H2kqC_lsGqwEwTOk-CcSSIMO9ceKHyxjCvj0DTg1LQAh__M4VnUCT41eSRTwHylr6HqTG3So_KHwHSY-sjat64ggmXr1r41vAFfpMeSNyTXwzVMn8F6in8OPY-jruAn88Zf2UL6qf70-DwhoVkvI8DQTGHAtvl0gD4k9yL389Df9rRRh3YieufonmcqyJsucdVepgM8vRzOlSdjpgi4_S8knWZXpke-X49gyWBayavf-XrOJWbRefqF6uqV4vr434O3OBhJgJx2dtpq5dZtRx87SZJ1il7h2viZ9_seiI7qQ1kjFV5ZiJgcd6J1ke01vZU9YBM4olVto7ceiOUy-gB_d7swlfbumFZupSsJfzpQ6XVJOUkO8S1hi_4j06SVoV47cgu5tww5O9si0eXtv615cQZl2u-XnX1eJ6muxynesQnr91Ze0h0gyUkYQaMgFfnmo3l0-eiqR0siaYn5ub6M7myyJ-j-1djWfSFpwom1Q2ccm6bcjr51Fzp6z8wc30IfdYbc0nu-049fSt0cXIm_exOd4WbWqaX8-oxomm9m_mX1ySOsfWFJiJUB7Jr1XjSW9hZxbdQIZ5roegcfgsapsuWZf4kIuZ9mb9yjn8mRgFwFI9x9ttaJFhZu3iaZX6odB1V8hiZrpsyxou83_ObmS9iB1m_aFtMRX--_Ihqe8If0beteir2I9qyW7cjy2ht_M_gbvtOizuytxezp8ZOvoWi-Rijtm61wBf2RMpkW33p5QRmcrBs-

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261
Category:	downloaded
Size (bytes):	13276
Entropy (8bit):	7.985753112644483
Encrypted:	false
SSDEEP:	192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5
MD5:	F0F8230116992E521526097A28F54066
SHA1:	0447C6B10BBF73F97B23DCFD6E6A48510822CB6E
SHA-256:	8AFC6E5E842BAAB16010C2CE6FCF48EC4DED8E1579A37C1F1BC027E120D04951
SHA-512:	8D16904F9BFF3E0660C960BFC63CFBB649FA656F1E0B24112578DA414CDD141BC2EF766612DFF765B58497C260E013CBD333C3A75AB2BD2EE861BE4C8A538F36
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
Preview:	wOF2......3...........3..K......................?FFTM....`..Z.....\..".6.$..T..6.. ..[..+..iUG\|......E...e..q..!#aS...(.HG...b.&..S..c,...{Aq>.f8...G.D.D.D.U..D~...=u8.S..B.Hj..=.....7...7...6.=/.X.h.(~HR4.H....M..$$$!....%.$..&.JOH...-A..i.Q...r....$xrz...zo-X.)...^..L-.}...%...........I\.2/.....a}.Q$..^3.ek......s.K....).v[A....(-p..=..TR........Z.3{lfW.....@',.U... .t.~...P..0..............F$)..U.]..~.......r. .B.7+...[.YZ....:n`......L_jnRr.X.........h...q....._s.]...1.x..0......y.A..)zC.i.....S...:..f..)kC.......-J..%./...m!'`..I..c.s d.`.y.c.6.D.'d..)......~.U..R{E...c....;...&1....n...=%EE@%.j....p..}TLY5........8...w........&.O..P.p...C....z8....:$.....H._.....G.`...%.....G<e.e.!.7...1..H...........e....,..B ..E..%.I .O...Z..L.ml.s...4.x...E..\|.jL0.4..8.R[\....w}.[.7..2...jZ..5.p.}.........y}w.1......E[.m......%..[.....g..+..........&[m.,..vx..]=..OnX.>..}S..............n.\|..OW.^..?.u;6.Pa.ao............}..c...l.V.91.f....1".#.?.[.K.m.-.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2651), with no line terminators
Category:	downloaded
Size (bytes):	2651
Entropy (8bit):	5.85186651100456
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08r1vpQ6wJWTr92sG9sKBP6:wsbSUtJfxrqvWWWdV6j1f1BsrxS
MD5:	2055431E1EA30A6DA5239D723E3B1A76
SHA1:	F88A2015C7085F8F104DB375E1EE05E4978E6368
SHA-256:	480733E52E357FE7B7A4DE10F5C8901083E97C4411F29F73993487F9B5FD28D3
SHA-512:	2D9DEA57AF4A9AD0E1DDB7FF38160A117E4981DD0090B698DC066B2DC6287A58F557EE2522C5515F9A10B8C8CCB53DC9559A07648EA76169D51821F0ACB6F932
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11272802727/?random=1716565652128&cv=11&fst=1716565652128&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1615
Entropy (8bit):	5.262276279096683
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDUvS8f:3qD+2+pUAew85zsDUKA
MD5:	A025B421A82CB34CEA13D6026A01FAD0
SHA1:	C8334FC12C9ADBBA04D8ED5DD210952D891FA0DE
SHA-256:	787B1FF80BDAB8833FDE93FAECE5C952D8E90868857DB3AE71E28E70F9BDE197
SHA-512:	0510D4388254F2FD88F144D2DBBAC707C76BA44CD45F91144BFAD391812C6362A28269B1111AF7415DFE65F3A1474DAEB231FD41FA33739E517C7351D360576A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh
Category:	downloaded
Size (bytes):	36216
Entropy (8bit):	6.443733467788012
Encrypted:	false
SSDEEP:	768:3yMCDH4ToJ/D8iu8DZw3jlS16oplDjM3xAOxrLzXXw8NG9J:Kqi8iug6ldglDjSKqvzXXwN
MD5:	85DF2CB76110CE9CE787B45A5266D23A
SHA1:	91187234316D05377268346F4631E2DE3BB6AFFE
SHA-256:	4501B0C41BD6FFD12D34114EED5113B9E136F5F1715D7B4348DD1CCB570470F9
SHA-512:	5A2DC1965D0197DADD5CBB5962F6F647FB96FE15CD7CB63FBFD11D1D71DE90CE5876706A0AE3275D227FC7867BCE631A3F25D3ABAD8DFB8644B2F0DD4A588EE9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf
Preview:	........... GDEF......}P...dGPOS.....}.....GSUB............OS/2t6....uH...`cmap...#..v.....cvt /.....{P...Xfpgm.."...xX....gasp......}D....glyf.]5Y...,..m.hdmx),....u.....head.Y.i..p....6hhea......u$...$hmtx.Dd...q.....loca.....n.....maxp.4.\..n.... name..9...{....\|post.m.d..}$... prepz/.W..z....:...d...(.............o......9........................EX../....>Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^.......>.......<......9.........EX../....>Y..EX../....>Y.....+X!...Y..../01.#.3.462...."&..o.\|.,L--L,......"//"!--......;............./..../........01..#.3..#.3..P.a..Q.a.t...........U...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.!.#.#5!.!5!.3.!.3.3.#.3.!.#.!.!....McM...S...)OcO.;OdO..S...Md..;S.....f..]..`...`...``.G].f.......s.0.....+.{..,-..9.../..EX../....>Y..EX../....>Y..EX. /.. .>Y..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2630), with no line terminators
Category:	downloaded
Size (bytes):	2630
Entropy (8bit):	5.843906140720918
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08P1EgPQ6wJWTr92sG9sNou6:wsbSUtJfxrqvWWWdV6j1TSEsrjr
MD5:	47DC647D7E73A02DDAF0A787B872CD4E
SHA1:	4550FE05C6673DE249F4F8A8D332101B921CAD91
SHA-256:	739A3C4F6A62128C567CA7DA4C3DDA537C4B9F12D67B329F3A633B2BC232527D
SHA-512:	947123F0070039654F1F5FBAC2D468E9E16FF3D142DCCC01AFAF545BDE4ED7EB58931AC56789D476D0AC05B585F01F2A1949E4C8F84F842A656F3C1148244A46
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11423436062/?random=1716565650394&cv=11&fst=1716565650394&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (668), with no line terminators
Category:	downloaded
Size (bytes):	668
Entropy (8bit):	5.26514680959417
Encrypted:	false
SSDEEP:	12:hjLqdVlpGE8k9UPunDtG3bzI4impgh2Yo2nwDNzgGgyf9woEVv+3b:hjLqd3pGD4UPuxuI7thVnsNzgsSZVv+L
MD5:	50453D0FE0C710640FDEC46D90A37773
SHA1:	788A8A40C72611DF2CC39567CEDD505F625952CE
SHA-256:	81ABAC99664D8E981380FE95205D0DA1B5470F6DAFB6C0944F2BE32525E9248E
SHA-512:	2FE0D1DA831C6A834142837E7C86CD77329220E9D56BBA60CD486AAA0AA07000072427192F3DC2CC6A0FD50463DD4953C20DA1F281E8B56DC68F8728D388509F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISywIJas2SnWi1_QYSBQ0Sc5E5EgUN3if53RIFDaztTG4SBQ2mu2K3EgUNGxKELBIFDfpHhF8SBQ1WQVFCEgUNfsrMqxIFDUY6mXISBQ0W8xwrEgUNWmj-2BIFDXAaNPMSBQ22_P92EgUNT6tGnhIFDSD3WtwSBQ183wkMEgUNrrn3whIFDZD31SASBQ1CUFplEgUN2Oh1gRIFDfZjjZQSBQ2KNOapEgUNUPaiTRIFDUzhmSoSBQ0FyhdlEgUNo4N2_xIFDXevdO0SBQ0QaFoxEgUND9_EXBIFDTpowdkSBQ1MAw4ZEgUNW-g83xIFDeqvfmkSBQ0Ag0RMEgUNV77x_BIFDaqe8yYSBQ06K6pbEgUNOALOARIFDZ0x_jQSBQ2jLo1LEgUNujZ_mRIFDRr7KzoSBQ2B0s_UEgUNPUlibRIFDTcH8LMSBQ33waR1EhcJQrJwRgKElKASBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	Ct4DCgsNEnORORoECFsYAQoLDd4n+d0aBAgFGAEKCw2s7UxuGgQIDRgBCgsNprtitxoECAkYAQoHDRsShCwaAAoHDfpHhF8aAAoHDVZBUUIaAAoLDX7KzKsaBAgiGAEKCw1GOplyGgQIPBgBCgcNFvMcKxoACgsNWmj+2BoECDwYAQoHDXAaNPMaAAoHDbb8/3YaAAoHDU+rRp4aAAoHDSD3WtwaAAoLDXzfCQwaBAgDGAEKCw2uuffCGgQIBRgBCgsNkPfVIBoECA0YAQoLDUJQWmUaBAgJGAEKCw3Y6HWBGgQIAxgBCgsN9mONlBoECAUYAQoHDYo05qkaAAoHDVD2ok0aAAoHDUzhmSoaAAoLDQXKF2UaBAgJGAEKCw2jg3b/GgQIDRgBCgcNd6907RoACgsNEGhaMRoECDwYAQoHDQ/fxFwaAAoHDTpowdkaAAoHDUwDDhkaAAoHDVvoPN8aAAoHDeqvfmkaAAoHDQCDREwaAAoHDVe+8fwaAAoHDaqe8yYaAAoHDTorqlsaAAoHDTgCzgEaAAoHDZ0x/jQaAAoHDaMujUsaAAoHDbo2f5kaAAoHDRr7KzoaAAoHDYHSz9QaAAoHDT1JYm0aAAoHDTcH8LMaAAoHDffBpHUaAAoSCgcNkWGVThoACgcNkWGVThoA

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8790)
Category:	downloaded
Size (bytes):	64300
Entropy (8bit):	5.145613480944656
Encrypted:	false
SSDEEP:	768:uIqgZRPuA0yOjgOOx/qQCylVV9+a2l3wsebv60BxrE8IqDhMx8zY5YAniFoDylHa:uIB1p0yOjyqqzV4+vnUniflH/bVU
MD5:	6D9A952636DCB0409B95B08AFCDE24D9
SHA1:	C870ED5B4B24BA00491258FF77604BFC198E2512
SHA-256:	668AEB2F93018B695EA2DFAF4E5CCFE278F370473FE95FD32B874D64AFD901BE
SHA-512:	E67D186EDDF2613CEF06A56DD3BF93DE6459DDCBFC3E8AAACE3E0ABC73ACBD8FC5D2B81A027080BF8AE29CA8AB9D859602E27A3F0E1D470608B1E3B48C662675
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><link data-optimized="2" rel="stylesheet" href="https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2" /><meta name='robots' content='noindex, nofollow' /><title>Getting Started \| Daystar</title><meta name="description" content="Getting Started \| Daystar" /><meta property="og:locale" content="en_US" /><meta property="og:type" content="article" /><meta property="og:title" content="Getting Started \| Daystar" /><meta property="og:description" content="Getting Started \| Daystar" /><meta property="og:url" content="https://www.daystarpayments.com/daystar-getting-started/" /><meta property="og:site_name" content="Daystar Payments" /><meta property="article:modified_time" content="2024-05-20T19:15:07+00:00" /><meta property="og:image" content="https://www.daystarpayments.com/wp-content/uploads/2023/12/Untitled-design-12.png" /><meta property="og:image:width" content="500" /><meta pro

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3129)
Category:	downloaded
Size (bytes):	22878
Entropy (8bit):	5.283376942212855
Encrypted:	false
SSDEEP:	384:FzCKMPZATN09o0mtmwfEXMb5TZ/dDsKCnfwj:FVMhAh060smwcX0T1dMa
MD5:	710F2DEE46DAB8BA9AE0DE6036D9DB0B
SHA1:	148D563D03DE3521C1F3BACEABBE29578446D2CD
SHA-256:	E7B82CF334E70A450ECF59D4D92355D1CB408B1A95F028DECB50C597AC53E42D
SHA-512:	B55C437FB434CF6F7B363E3480315270E9D38A119776746A9432B32CB453F9C8D9906F92B188F8F3FCC73F5333A59BBDC5221424EE579DAD1913C1299B205E73
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/gtranslate/js/float.js?ver=6.5.3
Preview:	(function(){. var gt = window.gtranslateSettings \|\| {};. gt = gt[document.currentScript.getAttribute('data-gt-widget-id')] \|\| gt;.. var lang_array_english = {"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","az":"Azerbaijani","eu":"Basque","be":"Belarusian","bn":"Bengali","bs":"Bosnian","bg":"Bulgarian","ca":"Catalan","ceb":"Cebuano","ny":"Chichewa","zh-CN":"Chinese (Simplified)","zh-TW":"Chinese (Traditional)","co":"Corsican","hr":"Croatian","cs":"Czech","da":"Danish","nl":"Dutch","en":"English","eo":"Esperanto","et":"Estonian","tl":"Filipino","fi":"Finnish","fr":"French","fy":"Frisian","gl":"Galician","ka":"Georgian","de":"German","el":"Greek","gu":"Gujarati","ht":"Haitian Creole","ha":"Hausa","haw":"Hawaiian","iw":"Hebrew","hi":"Hindi","hmn":"Hmong","hu":"Hungarian","is":"Icelandic","ig":"Igbo","id":"Indonesian","ga":"Irish","it":"Italian","ja":"Japanese","jw":"Javanese","kn":"Kannada","kk":"Kazakh","km":"Khmer","ko":"Korean","ku":"Kurdish (Kurm

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	361451
Entropy (8bit):	5.594885575898619
Encrypted:	false
SSDEEP:	3072:zs44gRc0Iard8OdwCMr7ba8SyCKqjysCBIQOar1prkHgdDBqzGmRFeHxKJkJHRT0:Y49b8OdwCM6Fz1zQbh/dDBqzGaUJO/t
MD5:	4C12F74E62C720B918C656BF401643BB
SHA1:	BEB7A411C98E2B1ECB0E8791C0699370F2903516
SHA-256:	2C3604CAF34124A2CCB8145F9906965E9D2EF30CB793629BB473ABA98CC22BE5
SHA-512:	7A587C321FD4E1EA74D9C4F5E05ACF43D1F12FF20CEE7344577C390151880B08794950E6113DA736EF48B95BB16F3C7D3BFDAEDFCB68D4E4FA3B38F961B4408F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-58PX1N3KV2&l=myLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":24,"vtp_instanceDestinationId":"AW-11272802727","tag_id":39},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CS

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (600), with no line terminators
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	5.26743545900215
Encrypted:	false
SSDEEP:	12:gpoOO19s7E8zieonQgsVIqNV/5xSdCAeRRmB2c/QorgrHdi0khO9epJ7P+:gGxD6DzieonXsVRR480BBx8rAdhp/z+
MD5:	A6477AE695B395517DBA3827DA555F34
SHA1:	BCA3680A0BC68A9E4AD87057F33152F205DE227B
SHA-256:	B4B1175A0BDF27924CB1A588CAF7F6ABFBEFB5A9F6304C4419FCBC806A79054E
SHA-512:	A5F9947148E396E1B18CD2CDFAAB56FCE1BBA2B5471B1247F63B3C832139D9627E22B80F6512A3FD87EC5301F577186C538D6E006CEABD1A59A3978A824E2DBD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISvQIJqAu2KIMTWE0SBQ0Sc5E5EgUN3if53RIFDaztTG4SBQ2mu2K3EgUNGxKELBIFDVZBUUISBQ1-ysyrEgUNRjqZchIFDRbzHCsSBQ1aaP7YEgUNcBo08xIFDbb8_3YSBQ1Pq0aeEgUNIPda3BIFDXzfCQwSBQ2uuffCEgUNkPfVIBIFDUJQWmUSBQ3Y6HWBEgUN9mONlBIFDYo05qkSBQ1M4ZkqEgUNBcoXZRIFDaODdv8SBQ13r3TtEgUNEGhaMRIFDQ_fxFwSBQ06aMHZEgUNTAMOGRIFDVvoPN8SBQ3qr35pEgUNAINETBIFDVe-8fwSBQ2qnvMmEgUNOiuqWxIFDTgCzgESBQ2dMf40EgUNoy6NSxIFDbo2f5kSBQ0a-ys6EgUNgdLP1BIFDT1JYm0SBQ03B_CzEgUN98GkdRIeCVh2J9OVUtezEgUN9ltz0hIFDf1u-xoSBQ0s2Pbt?alt=proto
Preview:	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

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	560748
Entropy (8bit):	7.99773380393872
Encrypted:	true
SSDEEP:	12288:dnhqh7pSnc/kWVeZXHIpwkwmBG5Q+oaP+U/KyM3cudX0g:dnAh7Yc/HeRAwkwmBMQvUBMMyXD
MD5:	066972004F42579165905160CDFE7CD5
SHA1:	1BCB18B0ACCC8EFA17424839E5D889E81283CEF1
SHA-256:	0FEAD8A9F5365AF5177BC6D5DBDC40D646310C477E95C769FC2ADECD75C5C765
SHA-512:	E7C5DD82019DE8C3E967335ACB703043ECDF06784FE2602C6716B341FAD281F7130D8E47B902D382701057BDA42A2882BFDA2C08F3293012A3717310FD383331
Malicious:	false
Reputation:	low
Preview:	:....1....HXJEakm65FI... .....0..;j..........p.."..qD.....moof....mfhd...........\|traf....tfhd....................tfdt.......(...Ltrun...............0.......A...............,...............R............................................................................... ..............+................!...............\|.......................................................................................l......5s...............k...............+...............E...............................F...............3...............-..............4................-...............M...............................r...............4...............................<..............2................&...............4...............................{..............................................................3...............................................................................................................................29...............j...............................#....................

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	843
Entropy (8bit):	7.676177048347055
Encrypted:	false
SSDEEP:	12:6v/7iosFSbqVR97sWxQRa4GsUKAlJfNSvS32oUo8N4Kc5xyYCvb7wKwpLLFnfkbS:jFFv9WRiTJfZ7V5AXfKpLLx4zW
MD5:	F4FCFC9D6BC698C4E93DDE983AA8DD97
SHA1:	533F07A3EB83497762D7CD27517ABE8CCE6FD518
SHA-256:	98A6F2382B165E44B18521824065A12D044AA7CE8CE7092074327CC0AD628B33
SHA-512:	333677555DE575F4AC8E68C6EDD61E9F32AA48013B77D6E7201336A527F87CCCFA3B03B2601702CA57D500EFB0FA060205510FCAB5BE62180F21A8846BEFC85A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX....oTU....s^..yi..hC...i%)...FI.h$$...p.p......\..1.L\....%..n0......"...K.....{.....#..\1..9.'..K.......;..Ec.n...N........_"..'...u...;..Hw.e}......?3k......4..8c,..X...f.....8....%1.[c.~..,p.Xs2.~..cL.x.U..b....5.&....I..."..PSh....o.Q......T&J...f....G...=`...c.5f.{...3.{.y.....b..D..w.d.c..%....<.......1...7.a`..P...D..<....#...l..^.!.F.gir.8<..X....>(..xV.Y.c..$}1..c...Z..y!.=..,..0..........9.....7..j...\...S........Wm.0."g.i?.............$...{:M.SY.......(...o\..]`.".H....\.f...20...&p.X..ff.z......./.!.e.....u.n\|,...X......{.J.G.r.\.F.T.....O.m..-p........W..T.'.U..c..Z...n.=.....}......c.b.........]..r.Qt.\.....W........+....K..W........G.,"..""]U.@..P.H.4U%.1..{.......n.-B$0..+L.v.>..-..P..D..G...@.h........C./.F#\|{.......IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 416, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87280
Entropy (8bit):	7.903105685542463
Encrypted:	false
SSDEEP:	1536:5/56nqai9IVwinRFlIefg6chXrpUWxfJJSfxkLmXUi+8z:50nLi9IVwiVfrcTBqfqLmXv+8z
MD5:	53FAF4FDFC57DF7736FD5F2171A860A8
SHA1:	124808EB23658A90D77D94198402278BF4F71AFC
SHA-256:	0B6ECD76A9855281A42F0304131B59ECC4AEE415014CC321CBB57280944E1E2A
SHA-512:	30C902EDFCDA8DE4C6E7687BDAEB06D2831443523892665DA354D5F0A244C6CA8EA68F9E8A9AF40C6BC33572111D5B1ED23EA805C342F753C164D93115477F4C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K.z.....pHYs...............T.IDATx....\I..{\|.{..L.A2HF.U.....].ACh` .B..<....Ac..Hh4FOz.F..Aj......r..U.UY.L2.=>]..u..+.q. .Yu..."....m.m...m;..b. .. .. .. .. .. .. .......... .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	201054
Entropy (8bit):	7.994343719505646
Encrypted:	true
SSDEEP:	3072:EIqqYwrrMsFkV6cAOZdlRTgS61zSJi8daIwbnRdYf4B/DKn1M1xCbGj3iK58v:ETB9E2vv61zad1iRd+4B7+1+jSK58
MD5:	CC8FFE47273BAB5FFA7CECED49A44300
SHA1:	81491F2AABBCA8C2905160A7B6BDB11FFDC986CB
SHA-256:	3F9CFEE67308FE9E501C8DB11E447F5CB05D3BD7A7E8BCF45A29762716D88BB0
SHA-512:	E23F77751DCE42ECB765E520A506E3311970285EBE5977AB1D080F77A9EADC8458EC3F39FCD4356890E1CECA0B08D3AFCFB54A46643D685C8F2D9B95A4C4A8DC
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8X...........+..ALPH......Hn.I........8.s........7Ox.3........Q.>.}...rD.X.}....."..(.+....^;.sV..9.\gYpu..K....gJM..jP.7..S.h.D,..C>......+.I]zd3sJ...0l.6.e...........cf......u.}.URe.6...9.CV..:...4.$>f..lo....;O....[...C..\|.....^..4_c..aZc...Lo.8.c0[..Y.....Bj.!.@ .....J..]H ..5..<....u.$d....Hp$9n$...]....-.Z0"&..$Ia.pU...=..$9..$I.$I..\.....a.,..j..1.... I.$I.-...O.......{VU...$.$......x..\.Y.<..9"\|.m.m#[.,.. j.k.E......[.$K.$.R..}.....T.P&.....u^"..$.%I.t.B;DR..s..E.<2{.[.$K.$..g....5..B$.k...\.)"\|A.dI.$[>;y&b"2.H...=.....Efp.<..._u~..U...6...8.\|tH...o..3.+......sP..1..x..!.....R....0.A.t......}.R...e..^\....%B...^.6....d..,*......x......4q.v.U..L/.c6vjU..(.Nu..3^FJ....-qQ.F....^....<.N.....c_e...UW.#..;I...I.a.y.V..x..{GY....r.-...................>,.X\...\|..Y~. n...qz.8.....i...\..z.2\|Vy...p.^ .ZJ.c\FG.v.6....Al.....S.Z&D...?r.gC'..koG..E./<..p......r.........Vp.xe/B..(i..2...P.....G..!]>n5........."WV{]?...Z.....B.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19201)
Category:	downloaded
Size (bytes):	19245
Entropy (8bit):	5.030313933547054
Encrypted:	false
SSDEEP:	384:njIj4UX8HOfXXtaij86dYXviaX0QG+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZJ:njIj4UX8HOfXXtaij86dYXqaX0h+aEeC
MD5:	4735B08E7B26079C4D775AD26C6EBA8E
SHA1:	1B0F3C855CD11773F66FA68E9FDF2D5ED2F8B0D5
SHA-256:	B74D2A4BDEA92C2DA393CAB19D8B93C65DAE3F56D4A6E472808943C8FF6FA6CF
SHA-512:	BA3807F201B5F487A4E4EBE8820DFDE2144D43AF58ACB3AA0299C23DBAF1887895FA1D7FEB0CE41AE95BDB4B51D1A2144D37779B9B24D264DB02BCC2B5CC217F
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/form.72b77b99d67b130634d2.bundle.min.js
Preview:	/! elementor-pro - v3.16.0 - 20-09-2023 /."use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[680],{2679:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class DataTimeFieldBase extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{fields:this.getFieldsSelector()},classes:{useNative:"elementor-use-native"}}}getDefaultElements(){const{selectors:e}=this.getDefaultSettings();return{$fields:this.$element.find(e.fields)}}addPicker(e){const{classes:t}=this.getDefaultSettings();jQuery(e).hasClass(t.useNative)\|\|e.flatpickr(this.getPickerOptions(e))}onInit(){super.onInit(...arguments),this.elements.$fields.each(((e,t)=>this.addPicker(t)))}}t.default=DataTimeFieldBase},784:(e,t,s)=>{var r=s(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=r(s(2679));class DateField extends i.default{getFieldsSelector(){return".elementor-date-field"}getPickerOptions(e){const t=jQuery(e);ret

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	3.250896414359222
Encrypted:	false
SSDEEP:	6:ijPltl9TtzOlXuJn/FnnbgZzMnnsMntDlhiUkmMqR3xl/l9msKX:qPnTtaRup/dbgZ4nnsMtDlh7Txl/TMX
MD5:	882A82EF1266520D852EB4007F7113B0
SHA1:	BE811811064F30672C38DDB2D9F137E7C9E1B813
SHA-256:	4D2EE6C276ED9008270A80641FC604E407D74ED63A144B543A2CD8F8199F79DD
SHA-512:	771FB3FF363620E167BD95A525EFFE67169D9D69194AC4229E77E0AF9AE327B97C72CD7548DDC91E79B5F890E91CD0BB701D1BA539F6A3C09C42A1387FE52BEC
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D...............................................................................................................?..@..............................................................

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11423436062?random=1716565650394&cv=11&fst=1716565650394&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 88x88, components 3
Category:	dropped
Size (bytes):	414
Entropy (8bit):	3.098057099996971
Encrypted:	false
SSDEEP:	6:ijPltl9TtzOlXuJn/FnnbgZzMnnsMntDl96dmMqR3xl/l9msK/:qPnTtaRup/dbgZ4nnsMtDl9nTxl/TM/
MD5:	F3C4A42803338A1A56BC401545833C6A
SHA1:	A6166CCD6CA649B4234B835B0CDA7B2F59ED8EAA
SHA-256:	532415241D8C3FA4C4112158405AA2A64FC82F27E8BAF8DDD1B381FF2EDDD0AB
SHA-512:	068ABF692DEE2503DBF681B0EBB8461D075BA9BEF4B2542924B0F8E4264A26327A7E2C6B18C0AEA1A6202B6C2C5B615F0F2CBE0AAAD7D75CB19764CE00C313F6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................X.X...............................................................................................................?..@............................................................................................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2583437
Entropy (8bit):	5.660758914949604
Encrypted:	false
SSDEEP:	24576:wRe6evenamxdavUjuKZwZZSg3hqJFok66:ue6emnamraMjuKZwZZ/sJFoY
MD5:	1A07B3637D035852C1BF496244E02E5D
SHA1:	5499D5010793C37998D7109F7ADA060BB53F9516
SHA-256:	489C5DB1FE048E9E5D4DEB643C382C2BAEE253283EC1C55F5E62B12C746E0E64
SHA-512:	954C45573703C72322A3821D7D910BAD40B20A18F5530BDC5D7389A7C5D5FF33F7A0A6815D9C59300B5441ED6B127FC238897E3A586B73C4D583257E2AC265E4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	335895
Entropy (8bit):	7.9989448467797
Encrypted:	true
SSDEEP:	6144:k3Hl0nLu7VaDVuBSG+ZMRLlL8sTCQ5Utt7xa4SW0h1udbF0zajEzOhWGE:ylDBSGnHLlCQOH9aK0hUbBjJE
MD5:	DD2EF76BA7601874B6C64E83F01BCF2F
SHA1:	7E8C36B2B8FFC77953597EB80180695197059CBA
SHA-256:	8F5EEFDFBA8CD1B1BC353DACF4A8A97BF47F64DB5B49CA678DF6C07390226B23
SHA-512:	F25C106D2930DB0D96DD8D94B3D7A1C21B28C4C160D6EE118349D75B1C94718AA292B9D8A2BC1BD5F84AA850242CBEBD5B66077A5DE67ED83F103EBF59797093
Malicious:	false
Reputation:	low
Preview:	:....1....HXJEakm65FI... .....0..]j..........p.....(.......a..L...s.8..Xp...i......@'.[..^.{W3w<..o0..}a.]}]....4o..5.Q.e..M...S.?u.^.w.\|l.bf.j...W....HI..\|.....L..4._}...a....%...;R[...o..V..7...975] .}K..sb.j..(..m.......9..~Mwc.q..U...G0.)...J.}...Z..J.x.:....[.!.g."q.?..V2....\......W........w......c..4_.<BtkJ&8.........7.^.k}..... .]..C...c..'4.w...........r7.d......0...h..8O...<..kNV......}.s..............Az..k..XC.i.{.(..pg..e.....D.?Rs................Du.0MF...b....X}.B..\|Z..........eC\..?.o2.VK...5J..?u=..-\t...-.....5@m.H...r.Xs....3../..,<5....9.s=_M,.9..c........&.E[.5.>No.-U...9.?^.\.....fZ...B.Y......jq...=\. ojGe..vy.[.`..}.KY.V_.v..t.,.(.C..9..TEs.Y...\|.[.=.F@.M......(.(..=.Q7.B.+.b(.r.M3J...i..z....UfO#f.>n..b........ac.Gq.........Q]8...}M.j..I......i......YDd.UX:z.%.[..06...Q..tA...%.2.S...E..?..H...h.,.;B(.yN~\|.a.?........Xz..L.....0L...2.L...v...2e..GP..c. ...OVJ....{bJ...7....9..#$S1D..Q..vy.".:....UD....E..-.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Category:	downloaded
Size (bytes):	36052
Entropy (8bit):	6.422259650219282
Encrypted:	false
SSDEEP:	768:gBLBg59dznyrE3WqK1CBQLsAM283X3wop9x9B:uBa9dbL3iUiLNgX3woZ
MD5:	ECEC6C79A27C8914400D4116E02668AA
SHA1:	3B2880007B93580C4B35E2B31AFE2FC9B6FA5923
SHA-256:	8A9A74F4455F392EC3E7499CFDA6097B536BB4B7F1E529A079C3D953C08B54CA
SHA-512:	1316B152DB137123CEA488C2607A8CF7AB6EC397C6ED283DA3DBA76EF8BD414AAAF38EEB7D340EAFDFEE14C3247970FF2516D0C1CA28790E360D284CC1D9885C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf
Preview:	........... GDEF......\|p...dGPOS...(..\|.....GSUB............OS/2u.....t....`cmap...#..u.....cvt +~....z\|...Hfpgm_.....w.....gasp......\|d....glyf.C^]...,..l.hdmx03#7..t.....head...\..p....6hhea.&....t`...$hmtx".J...pP....loca......n.....maxp.4....m.... name..9...z....~post.m.d..\|D... prep*v60..yP...)...d...(.............P...EX../....>Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^....\|...........<......9.........EX../....>Y..EX../....>Y.....+X!...Y..../01.#.!.2....#"&46...".4.IYYIHYY.....qVCBVV.W...@...O.......&......9........./......9../........01..#.3..#.3..(...E'...v.e.%..e.%....@.............. !..9.........EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.#.#.#5!.#5!.3.3.3.3.#.3.#.#.3.#...H.H...2...I.I.I.I..2..H.[.2....f.........`...`....f.F......\.).7...-.r.+./..9...EX../....>Y..EX.!/..!.>Y..!...9........!..9

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9128)
Category:	downloaded
Size (bytes):	92165
Entropy (8bit):	5.123623743021048
Encrypted:	false
SSDEEP:	768:uOKZUPT5EcnbZ/Qj/TICDAa0DJM2E/XQVRNbj/a2Ux:u5A+cnbZ/Qj7aA/XQV/bVQ
MD5:	B38CD3818A0B2CF080BF1AE50A80495C
SHA1:	BB03AE9E1A964ABF716C646700694893335AE0EE
SHA-256:	269F523DACC46FD7D00F49C4EB9F70B8AEEE1C22BBB5A7295EEA4BD8D53F47D0
SHA-512:	FC74C46A2409888A1C7980EE3114D5F265431BBBE0ED6135F5C67982F5CBE350405C06B32FBF6258EF0EADDFE0A513529D86C6895FF4B380044016C458BBE938
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><link data-optimized="2" rel="stylesheet" href="https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2" /><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /><title>Merchant Payment Processing \| No Fee Merchant Processing</title><meta name="description" content="Daystar Payments offers secure, fast merchant account services & high-risk payment processing solutions, including chargeback management. Contact us today!" /><link rel="canonical" href="https://www.daystarpayments.com/" /><meta property="og:locale" content="en_US" /><meta property="og:type" content="website" /><meta property="og:title" content="Merchant Payment Processing \| No Fee Merchant Processing" /><meta property="og:description" content="Daystar Payments offers secure, fast merchant account services & high-risk payment processing solutions, includi

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	36956
Entropy (8bit):	5.606619604870783
Encrypted:	false
SSDEEP:	768:lCKNcPN4zunNdMyzmQZfIrcmy0/nqIzv3MpVm5Qn+rkqyf:l3AgMmQDmpzvaVV+I1f
MD5:	065C5B1CE1CE32E5ED2B22AB349FD0A5
SHA1:	3B7DA826CA8433559FBBC1A45C9FF701475C5E9B
SHA-256:	F1F9D4B87B9D3D230B02BE0A57AC9B88684680BF83EFE269A272CF2E780CCF5E
SHA-512:	FA848EB791ED7C2F3779DE9B2EE981ECC532FAC64263CCB7F8C36162190098B0321486A8EC6252659B2900AA158CE3D0A93381E75CD5182BCED67F727D34BA30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aX8.ttf
Preview:	............GDEF...#...<....GPOSiP.....$..0.GSUB...j........OS/2T.%@.......`STAT.,.........Dcmap.K].........gasp............glyf..~g..N...BBhead.N.....`...6hhea.S.....<...$hmtxV.Js........loca............maxp.M......... name9.g....t....post............preph................................?.Y...F...............................f.B...F.................".........=.._.<............F.....p..B. .F...............................$..wght....ital.......................................r.........X...K...X...^.2.6...............g...k........ULA....."........U.. .............. .......F...............................................!.(...+.3.....................)...,.4...6.6...8.:...<.C...E.G...I.M...O.k...m.t...v.y...{.\|...........................!.(...+.3.........0.;.F.Q.\.g.s.~.........>.I.b.m.x.................*.6.S.u...............".-.8.C.x.......C...................7.R.].v...............).........G.............%.p.....................1.=.y.........................<.W.......#...9.D.O.b..........

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	162683
Entropy (8bit):	7.994709947147668
Encrypted:	true
SSDEEP:	3072:fEfosdYUE2w6k+D5cGCbCQMnAERFO3T0O7JYqqWJcU/5hkLc+mR7AK5+f:f2osd7wq0bCCERFeOocUBmLR1f
MD5:	E64E62B9701BB4AE4477DFD131167521
SHA1:	9B3DEB3DCBECFBDFC9BFBB1598815F15EFDD8FAF
SHA-256:	7DBBFB0B20711A6408C2DF11B9B4ED277500BDFC24E12BE3E7E096337548AC5C
SHA-512:	843E7867765A9869F2E6D51C2957FF07520868EE689451756D8EC9491B27A2EF144FD0765DB5C70F5E757498A38799B4B8542AB4AD48C568D8BC609DA7915C43
Malicious:	false
Reputation:	low
Preview:	:....0....HXJEakm65FI... ......0..j...........p............moof....mfhd............traf....tfhd....................tfdt............trun.......t.......y.......N...............................................................2...............................<...............................h...............................................................P...............................................{.......<......."..............................................................................................................................#................................^...............................+...............................................n...............................................................................................................X...............................................................)...............u...............@...............c...............................h..............Vu...............x.......................................~.............

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1607
Entropy (8bit):	5.267420279695592
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDU+KES8f:3qD+2+pUAew85zsDUB7A
MD5:	E17D78DB8CE8452B703A5BE0C7DA8B5A
SHA1:	C12C38C52F3EBDAE2C225D5C1F0F2B2C651E0616
SHA-256:	C5391B8BF5A804753366B5937C3DFE72907C4650FBBE571B81C38859900D70DA
SHA-512:	A70BE6F9A2C75EF0C3323B6816031D85CDABC54E0E273D0FC8EC2086194893F65C6FCFEBF3757225DC6C8B285021D39A704EFA6737071752B27AF2B97207DC55
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2807), with no line terminators
Category:	downloaded
Size (bytes):	2807
Entropy (8bit):	5.866497491171687
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08t12GopQ6RBEqSEcRBEqSE0:wsbSUtJfxrqvWWWdV6j1Z123p5BfSjB+
MD5:	30B28BE7ACD19821563BD66A72962658
SHA1:	3E9240656DF89DA89D42FB4443226A01A377C1BF
SHA-256:	61052F64623A8C8C30AA2F8E63B5819D1B399449EDB3C7B4E890C2B1BF6DD31E
SHA-512:	4F2417791F62DAA418EFDC7E51EBA217895ED15E45CD46817EFA13EEC6BFDBC0BBDC3FE38979375C0E6B25E3CDE62051DD7DE95631A16247FDCE283CEE8622A9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11272802727/?random=1716565597065&cv=11&fst=1716565597065&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 81612, version 1.0
Category:	downloaded
Size (bytes):	81612
Entropy (8bit):	7.99762798109289
Encrypted:	true
SSDEEP:	1536:mU9FSafiVK4eoDE9kuqu3GbcJuGiZmvfgFrsrr4l1ESfkmS3a+:mYFURoZCMLngsEl1DYK+
MD5:	B4D6B90F14C0441AAC364E194978408E
SHA1:	142696D43851C8EBA0F54C7B94C5F6EBD09703E6
SHA-256:	6B2680FAB784D245CBB23D3B51E8D18740E8FC1C7C1C8EADCF0B2B7612125FF8
SHA-512:	FEAB357B65D7302CC6CA2AFC86B84851C9B307BA68659FE9E6F7191FF38BDD1D38658E503124B6940F77F5C216B4400C23B8BABCD6C13FAC2313FA91E5269F09
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
Preview:	wOF2......>.......OH..>x.........................T.`..P.........<..6.$..8. ..S../[..D....[....T..`..^w.Mv;PH..e....=.D./.......#A.m.p.....jj}fU.A@#....\GUM"K...Re.FU.A`.2.E...`!XH..t..9f...rR..U..Ia.0P.H_.J.\..n.~...9...cU..nz.'z...%.{x..4.....I....N.+.\|..`....3.O..Y..}..._T.F.#\.]...:..Cf..?:4.`B..U.....g..&....5..aR.A.7.....\%6q...u....,..S...Re1Z...,.l..Qt.E...y~:..s.}.4}/.%../i.X.T.$M.m.[GiK.?5..../bS\|......Ef.........H..^...zDI...m@+&`".`c..Fc.q.Uw.....`&!...L..S...."..s.....@X5..xz...../7......@5..#^AB..Gh......pM.k&P.......{.(D.x....@.1m6!-...wD.......o...p..H....(.l...^..1[..lC^..k.........9r...r".<r..T.PP..G..:.i...X.<\|..R.nb. ..v.Sf.!cSe...!>..uVN7..dp^.u...0`..W.R....~..@..[..-.6....Wf...R....]..L.7..G.S...qR.P........{....~.$-.$^...4..-..G5...}...I.1%l.-....d.by^V..p..v].$k..Y.8..lg(gVU...._.,5d'2.......?........J...j..,C`...G....M....v.ni@`;...N.....PS....7M......H..w..@A..q.N..v.T....~^..{.6Yb.]B`..6.(A.%E.Z..mJ@..PO...+.<..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	827
Entropy (8bit):	3.8029521876356993
Encrypted:	false
SSDEEP:	12:5tM3ydYsnXQ9Sk+6SkU3eC/0b6kIttFLwoqaj+QItEkeLC+j95I1eiHb/+j/Y:5Pd9nASk+dOydLwoqaj+BeRzI17z+bY
MD5:	1C46D87B66ADAB8602DC2F70EA869C9C
SHA1:	A466BD6573DF95D6FB8D7B5D57C5E969098C1145
SHA-256:	359C28440E1435CB4EFE3411BB1ADC423B24E8C26670E7C82D12C5CCE0C2FB26
SHA-512:	2AA699AE668AB5AFCE9B11419254F683F57052C04394DA6F8DF4FED27E1686D0641327D1564829557FF40EFA0B4DE312FF70159DD2796C001F56F5A5FFC4F219
Malicious:	false
Reputation:	low
Preview:	:.........HXJEakm65FI... .....0.j..........p..........ftypdash....iso6av01mp41....moov...lmvhd.....W.q.W.q..u0...g................................................@..................................(mvex... trex............................trak...\tkhd.....W.q.W.q...........g................................................@........8......mdia... mdhd.....W.q.W.q..u0...gU......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01...........................8.H...H..........AOM Coding............................av1C.........B...w..@@@A....colrnclx...........stts............stsc............stco............stsz................stss............vmhd...............Dsidx..........u0..........................B..............?.......

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11272802727?random=1716565651846&cv=11&fst=1716565651846&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	384
Entropy (8bit):	3.250896414359222
Encrypted:	false
SSDEEP:	6:ijPltl9TtzOlXuJn/FnnbgZzMnnsMntDlhiUkmMqR3xl/l9msKX:qPnTtaRup/dbgZ4nnsMtDlh7Txl/TMX
MD5:	882A82EF1266520D852EB4007F7113B0
SHA1:	BE811811064F30672C38DDB2D9F137E7C9E1B813
SHA-256:	4D2EE6C276ED9008270A80641FC604E407D74ED63A144B543A2CD8F8199F79DD
SHA-512:	771FB3FF363620E167BD95A525EFFE67169D9D69194AC4229E77E0AF9AE327B97C72CD7548DDC91E79B5F890E91CD0BB701D1BA539F6A3C09C42A1387FE52BEC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D...............................................................................................................?..@..............................................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	5.268027136303121
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUeh3:3q3+pUAew85zvc/h3
MD5:	DC116BFBFD7B5EF441DA8062F5C02169
SHA1:	0AE353B9604CF429F5C69530333E0C44B5E837DE
SHA-256:	295EB26CB69D6F217D4323D4492C2668123E325A3F47403E38294913FD7A206D
SHA-512:	56D00FD44F67A5B62D914926EE8254F391F8BB3FA90D380632492B14F0ECF43331EEB22405667A5BED05A665AB8219534C0F2CEB62FFB711C433C5BA982FBAD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	5.127460746698079
Encrypted:	false
SSDEEP:	12:UoCBPJ1dE7EEemMNAPOtG0zhzofTQIPseRWWgAYRRjjwE9oQKX62HoRlviR4SI//:B0FZpmBWhmRWwkAOoQKX62HoRla4SI6M
MD5:	FC86D5F996455F07E896D7CF9FF5B95C
SHA1:	F22E7FA4EEF1981234D58D794DC9DDA9BCD942AA
SHA-256:	06F9825419E6D1B06D7E64EBFFFE075894A5D345493FF2428D31776AEE39EDF4
SHA-512:	3F5B585C5EFB4404700AD2745EFBE19F617F681049081666BCE0B8DC15AD53EC9868DEB951EA351B151DA06358F9920D668E700049DFF3808B6ACF89A124CBD2
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js
Preview:	/! elementor-pro - v3.16.0 - 20-09-2023 /."use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[50],{8872:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=elementorModules.frontend.handlers.Base.extend({getDefaultSettings:()=>({selectors:{form:".elementor-form"}}),getDefaultElements(){var e=this.getSettings("selectors"),t={};return t.$form=this.$element.find(e.form),t},bindEvents(){this.elements.$form.on("submit_success",this.handleFormAction)},handleFormAction(e,t){if(void 0===t.data.popup)return;const o=t.data.popup;if("open"===o.action)return elementorProFrontend.modules.popup.showPopup(o);setTimeout((()=>elementorProFrontend.modules.popup.closePopup(o,e)),1e3)}});t.default=o}}]);

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3978
Entropy (8bit):	4.803936960493229
Encrypted:	false
SSDEEP:	96:ngmnuckg+4SVy5hxRWXN80GVi2vb5lL6Y8y0WZb9L:ngPctSVuhxwXNNGVi2vb5ZAy0mBL
MD5:	DD24EC262386109802F149F7C35B74D6
SHA1:	1E460BDF53D8BA4FE12495E976D3E353139DB2CE
SHA-256:	80B02E9498BBB1A547E7EAA93CDFA3958AEA27032366F3A52D49673793FA4B90
SHA-512:	393E8ECDB944F04D6B6CB1FF3E9F77DAC9A5625C28B9B3FC67D8B1688B73E354DCA320C418E7A3A93E3C7859942A351887A65EA8321FAA5D3985F984E46B2CED
Malicious:	false
Reputation:	low
Preview:	{"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app":true,"trial-guard":true,"shopify-new-app":true,"integration::google-analytics::v1":true,"integration::wordpress::v1":true,"integration::shopify::v2":true,"integration::bigcommerce::v1":true,"integrations":true,"integration::hubspot::v1":true,"send-integration-events":true,"integration::custom-notifications::v1":true,"intelligent-fingerprint":true,"trackFrames":true,"rdc":true,"store-resources":true,"paypal":true,"sessionDuration":true,"email-reports":true,"integration::zapier::v1":true,"export-button":true,"integration::square::v1":true,"shopify-checkout-pixel":true,"multiQuestionSurvey":true,"plan-pricing-page-variant":true,"onboarding-benchmark":true,"conversational-discovery":true,"integration::optimizely::v1":true},"ip":"8.46.123

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	390
Entropy (8bit):	6.481893445670357
Encrypted:	false
SSDEEP:	6:OEcnRgcKSMZTJ31Chr8nhee1SIsCitb/YOLLR81kfgWdbDoCMBEQ75d9ZJlaWTs:onKZF3IB2hezRCy/PLe1M2X5dPJlaW4
MD5:	B33D3F77C1754247281CFBFF49A36D06
SHA1:	135DA4ADBE1838DFAED66F7B8455BB882D971AB1
SHA-256:	E702B997EFEBABCC4BE02CD0D4F1C3526D36567F645F0570987FDE1F530E6544
SHA-512:	560A8DA8B898CB4234E15A5CF3369D465B2A3269A999963C964745DDDFA991C1E5776B96988EF3CE1E3B93FEAEA070F8E1F26F985D33450182503EF1FF90069E
Malicious:	false
Reputation:	low
Preview:	:....N....HXJEakm65FI... .......CggKA2RyYxIBMQ0.j.............CggKA2RyYxIBMQp.......E..B...B...B..B..B..webmB...B....S.g.......M.M.t.M..S...I.fS.........DM..S...T.kS..........M..S...S.kS...........I.f....B@D..Fq..M..google/video-fileWA.google/video-file.T.k....s.....t......"...eng..A_OPUSc..OpusHead..8........V..c..V.......G;.....bd...S.k.................'............

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2799), with no line terminators
Category:	downloaded
Size (bytes):	2799
Entropy (8bit):	5.844712446185724
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08k1EIXPQ6RBEqSEcRBEqSED:wsbSUtJfxrqvWWWdV6j1gSm5BfSjBfS8
MD5:	837E16E10837C11778C42E05F1B3C512
SHA1:	8ACE174AD01A74691349669B5FC08342E4A9D25E
SHA-256:	6E9C0D2B2D0A12562725D00DECA97A5CFB2AC05013086661180D31FB9AD80BC1
SHA-512:	4252BA97846D8833FAD3C8142E25B267BF9162703ABFF3B82C489619E008DFA913E836DDE2F981F58371738B63C19E6295EE5D18ADCC64CD8FAC120732E6A4EE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11423436062/?random=1716565592441&cv=11&fst=1716565592441&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.950212064914748
Encrypted:	false
SSDEEP:	3:WZoS8/ZYn:WZoS8/ZYn
MD5:	C3F64CB2A8B00CBBC30CE2908208A29D
SHA1:	E4AA7CAB67F4CF5FA52371DDC25A75AAFD4D0CCC
SHA-256:	391601283994BCD9486160BF8A5637410D280E1BDDD3AEF5428454976E193E81
SHA-512:	6CCBC26128FE65D6D313B965DA3D2E201D506442D0036404ABB490BE0FC99B3A0FDB611269B932DBA7F3A621E11F79ED213D2B11D487EE39C54A17D97A823552
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlCsnBGAoSUoBIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.307661970610565
Encrypted:	false
SSDEEP:	24:E1pXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1pXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	8F2BE0DEF3279BEE50C0CFA805ED08BF
SHA1:	DE8D807D18C2CCB370A4F7862F03A16F4820890E
SHA-256:	658C3743E102ACB9742575AE382021F1480D52325368C632F3EA7C7137B1BA01
SHA-512:	AE9EAF9E400191FCDB4ECD04877A2BFC745F871F3849839E57D587A313777BFB54A573BBEEC17EE3A08D640CD1BDD5043709C726F5BBD5797E5EEAA4C8A47493
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	268141
Entropy (8bit):	7.997588488313565
Encrypted:	true
SSDEEP:	6144:fBGQnp1gqZaRP8CXXTOx2mvNxY5+M/K70p9M50sezQXdWOlp2KRhR9:fnnNYP80I2mvNxT4K4qXeqp2YV
MD5:	ECCFC8C02AAF40DE894B6EE26FEF48F1
SHA1:	2CAF979C65D7F60C50A6A876C4669A798D00899D
SHA-256:	08F4DD0301A5589A775D76E0DF6D8C7D2CF5D381184D47D6A17C4C1EFE5F3CAE
SHA-512:	1CDD613C54347797F336FF8D0134DED4488FC3659F82021609EE250D17432A1D2D107E5AEE51ED72E1A7660AE155FF43FE2A70F4715D69794E0E8B768913BBA9
Malicious:	false
Reputation:	low
Preview:	:....1....HXJEakm65FI... .....0...j..........p..... .....moof....mfhd............traf....tfhd....................tfdt...........trun.......t......oJ.......O...............@...............................................................................................................T...............................M...............................................................W..............................7/..............................................................................................................................0................................Y...............................8..............................................................6{...............S...............................+...............................................r..............................29...............................................U...............B..............................."...............................`...............3...............................C.......,............

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.267116199711405
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDUwS8f:3qD+2+pUAew85zsDUnA
MD5:	716E330272188750C9E9967A9339D968
SHA1:	193FC7CFB7F2F3737AF5E319D12DF05553A18CDF
SHA-256:	97FDC7A730DAE5B905E9DE6D6BB33E82FF0E7F7CEC051C838A446EFEBB8FF9F3
SHA-512:	A0354910391D562B38743839BC06910192524B92AD72C2F392D323271715CD9BA702F3FDB15FAFEEEB112356AC96C2902DFA63E269991833E3F4C64A23C04297
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med
Category:	downloaded
Size (bytes):	36460
Entropy (8bit):	6.4258715359621785
Encrypted:	false
SSDEEP:	768:U9yVJgIpAqZsXgDNHOxBlNOKdhr6N+0cZXSx+rXXGqpxk0S49x9B:UFnq805Ox7dhr6NPsXSx+DXGqpT
MD5:	54FEEDCD3C51096071C45AB2E0054B35
SHA1:	B7E7056A1D3AD8946F0D8F729909FB3DD1587C6D
SHA-256:	1CEB245A8F768B65C2AE250D96F5457B96E9537326DA2FEB2310B707736817AA
SHA-512:	C62D2350B1CDB0EF6DF2715DF025D531D55033B4684A0F7F88E087C31F8BF068D4EE6F213ECF5900FD6DD8D6ED0551A2050A8E3B5F2301435BD716CA711F58FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc9.ttf
Preview:	........... GDEF......~....dGPOS...(..~l....GSUB............OS/2t.....u....`cmap...#..wP....cvt 1..K..\|....\fpgm..$...x.....gasp......}.....glyf.W.....,..n.hdmx+1.3..v@....head...r..qt...6hhea......u....$hmtx..S...q.....loca.....oh....maxp.4....oH... name..:...\|\....post.m.d..}.... prep...)..z....S...d...(.............o......9........................EX../... >Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^...............<......9.........EX../... >Y..EX../....>Y.....+X!...Y..../01.#.!.462...."&.~......J.JH.H......9KK97JJ....e...@.......%...EX../...">Y..../..../......./01..#.3..#.3..#...-#...w.}....}.....`...............EX../... >Y..EX../... >Y..EX../....>Y..EX../....>Y......9../.....+X!...Y............../.....+X!...Y...............................01.#.#.#5!.#5!.3.3.3.3.#.3.#.#.3.#...L.L...:...N.N.N.N..:..L.v.:....f....9....`...`....f.8.9...d.-.&...,...*-...9...EX../... >Y..EX../... >Y..EX.#/.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	376389
Entropy (8bit):	5.190488654636762
Encrypted:	false
SSDEEP:	1536:9oi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDhKTzb:9oi8ZiSgKBjSoyJufRWckQoSN
MD5:	734B31725E29C82861A2C08184FC7055
SHA1:	5AE2D674DD076C2025EAD424F423B53BC5F46E6C
SHA-256:	2958E30EDA7143B853DB1D5E3A9E606F83D3BF40A162148FBCA5A1B61D184223
SHA-512:	952FC63062D9E622BF71A8D2D83A63550CEF69750E4D25A2659740883486C788AABBC4CB5A73A599F4F8031A8C514FF5F1109701803B35D777414F92D9210F95
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt
Category:	downloaded
Size (bytes):	36216
Entropy (8bit):	6.4316264958535445
Encrypted:	false
SSDEEP:	768:KV4i+tezjtQYgu30G0xL9nIbuEJ7Le95+BrkpkcXjmjyNG9J:Q2z3G0xpMuSL1BgpkcXjmjb
MD5:	A0D084A3E8176664E75F8ECA3EBEA96C
SHA1:	324EC20B91392A6871D7846E0FF2972447A1B2B8
SHA-256:	A9EF021078603005C0B08FBA881F1A7EB62EF213238021F3E8A4A00DAA60B9D6
SHA-512:	EE929EEF22C525D1E8F5A8479EEF826B614005467BB47068F12CA54B5DA68FF69B40B62F4CC4FB708322564076B6C41C90C81A034C444BEF32B2308BE47F9815
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf
Preview:	........... GDEF......}P...dGPOS.....}.....GSUB............OS/2t.....uD...`cmap...#..v.....cvt +.....{\...Tfpgmw.`...xT....gasp......}D....glyf&.x....,..m.hdmx'/./..u.....head.j.z..p....6hhea......u ...$hmtx..]u..q.....loca..m,..n.....maxp.4....n.... name.U9...{....tpost.m.d..}$... prep.f....z....I...d...(.............q......9........................EX../....>Y..EX../....>Y......9......9......9......9..........9......9.......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^.......{.......0...EX../....>Y..EX../....>Y.....+X!...Y......901.#.3.462..."&.[....7l88l7......-==Z;;........#.........../......9../........01..#.3..#.3...o.....o...x...........w...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.!.#.#5!.!5!.3.!.3.3.#.3.#.#.!.!....P.P...E....R.R..R.R..E..P....E.....f....b....`...`.....f.#.b....n.0.....+.i...EX../....>Y..EX."/..".>Y.."...9..................+X!.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7086
Entropy (8bit):	4.549946790837975
Encrypted:	false
SSDEEP:	192:XQ584UQsoEAcY0w6Ad6/UIINJ5plB9ZVxtJFhd1klL2:A584UQsoEAcY0wO/eJ5plB9ZVxtJFhd7
MD5:	01DA87AA8144E5CDCDECB4E42FB8C310
SHA1:	65A64ABC1E8FF2DBE8A8956099FFF319E563CF90
SHA-256:	06219CCD02713075A14E7FAE7DE570EBAD7776E8C596B5597A95B86A46957DFF
SHA-512:	3A88B58A931E4199AE3FE83FEAC9C47CF7F0CB6BE34EA76E959B4F982984272FDFE0C4EDFF7CFE65ECA0A8B91E5209FB1B8116D951F5C6BE7FDF63F9B2D4941C
Malicious:	false
Reputation:	low
Preview:	:....O....HXJEakm65FI... ......*.CggKA2RyYxIBMQ0..j.............CggKA2RyYxIBMQp.6..m..C.uQ.........................)........=........Q........e........y.............................................................................-........A........U........i........}..............................................................................1........E........Y........m..............................................................................!........5........I........]........q..............................................................................%........9........M........a........u.............................................................................)........=........Q........e........y.............................................................................-........A........U........i........}..............................................................................1........E........Y........m..........................................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35994)
Category:	downloaded
Size (bytes):	1172225
Entropy (8bit):	4.910198240674397
Encrypted:	false
SSDEEP:	24576:fKVXDt3qrS3cKJ17S2yh3ynk6VJaS2xQNAWIznTFTeK0sBCwC:fMXDtZcKJE3ynk6VJaS2xQNAWIz+
MD5:	4187AFA6E2A8AF9719EF76E9DDE0899A
SHA1:	43ED11BA2E27FEA1044CCA37A74BD55952797036
SHA-256:	D6F53F2B9B4E750375F2FD0927E3A3851DBCEC2B17C69FD84AA3EC63AA5C01CF
SHA-512:	4B587B764CC809129D8296E8CDF9C7B6E7746A36EBB5BE9CB78A46F544007AF5F49787EAC2D6B73B557A46C615E77A58BDF1F6E2C050DBDCF2712AC13521E61E
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2
Preview:	img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:0 0 !important;padding:0 !important}/! This file is auto-generated /..wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}body{--wp--preset--color--black:#000;--wp--preset--color--cyan-bluish-gray:#abb8c3;--wp--preset--color--white:#fff;--wp--preset--color--pale-pink:#f78da7;--wp--preset--color--vivid-red:#cf2e2e;--wp--preset--color--luminous-vivid-orange:#ff6900;--wp--preset--color--luminous-vivid-amber:#fcb900;--wp--preset--color--light-green-cyan:#7bdcb5;--wp--preset--color--vivid-green-cyan:#00d084;--wp--preset--color--pale-cyan-blue:#8ed1fc;--wp--preset--color--vivid-cyan

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	260706
Entropy (8bit):	5.539480973750813
Encrypted:	false
SSDEEP:	3072:Cac0Iard8OdGMVba8mqCiqjysCBIQO2R1prkHgdDBqzGmRmdHxKbdiN:Lb8OdGMM9r1zQvz/dDBqzGaLC
MD5:	2E76C58681D69619ACF984A8283BEFEE
SHA1:	836FB6BCE42D4DC62BB4EE824B1572004F552FCC
SHA-256:	6D43C4BC4D2EAEE0CCDC46BBC3AD5FAD90D8A2DAC94D8067BC028FC6B8701CBB
SHA-512:	41A98F339BFB344797A2E72B4B78233E2985FEB7D05E5AEE4835E0F9B064DB10C4F9D0F274695FEB77441E1933D0055CFAA873827341388C1EE78F9DE2B1EAD5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-11423436062
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-11423436062","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52206)
Category:	downloaded
Size (bytes):	53485
Entropy (8bit):	5.709879385524635
Encrypted:	false
SSDEEP:	1536:j/W4kYZa/RT27KTofIEUbV8scsslwP0DKUIFo0:C4kYZa/RTMm2tUbV8scyclIFo0
MD5:	4065CA3C719827EC22D783A699D53E4E
SHA1:	95B493DF038EBF94891063F3FE462F7AA73B74ED
SHA-256:	F8813D3553A30C778A6E0B882A832FF7B646BDB767473102089901646BB920AB
SHA-512:	4AC1FEFAA7F6E11631D9B42F466F4516A35E4C7E986866F61B5F00D758B031051EC24C74621F80E5872ECC0E789BB6115D1F6E4B4B42176EB41C8796A12E8F73
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function T(R){return R}var m=this\|\|self,K=function(R){return T.call(this,R)},U=function(R,e,h,v,c,p,S,M,L,a,F,B){for(F=(a=84,54);;)try{if(59==a)break;else if(84==a)M=S,L=m.trustedTypes,a=h;else{if(60==a)return F=54,M;if(82==a)F=54,a=43;else if(a==R)m.console[c](B.message),a=60;else if(43==a)a=m.console?R:60;else if(a==e)F=10,M=L.createPolicy(p,{createHTML:K,createScript:K,createScriptURL:K}),a=60;else{if(a==v)return M;a==h&&(a=L&&L.createPolicy?e:v)}}}catch(O){if(54==F)throw O;10==F&&(B=O,a=82)}};(0,eval)(function(R,e){return(e=U(20,78,6,96,"error","ad",null))&&1===R.eval(e.createScript("1"))?function(h){return e.createScript(h)}:function(h){return""+h}}(m)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicatio

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	151427
Entropy (8bit):	7.996776299006867
Encrypted:	true
SSDEEP:	3072:gZVVHOF4qlAqrFtINxiJBL8+PRMOTP5cgBwPbLG0E3dBT5Z5W:8DHdqtixiJ3mi70E3dBT5Z5W
MD5:	D4EDDB275154A14DAAFED9F24CBC2F2D
SHA1:	A1F3A009C25FCFB47BE7B03C3828FB4B0F32663A
SHA-256:	7F625E747FC54CFA9EB94781D0F4B5EA74EF71C5D0A497F72FA192AA0368FA43
SHA-512:	A7D020578F1822E46ECF101C424BD8FC3FE9C0BDA8689FCE18326EAF31B93B8396BDC3953197548E584B62786E9C3F104B1EE8278CD9741C1F765C6EB51FD420
Malicious:	false
Reputation:	low
Preview:	:....1....HXJEakm65FI... ......0...j...........p....z....=l.K.Y.t.xTX..........z...>z6.'.f.Tcj..A3.b.[.J..N.R$...(q....\|u.........`d.g.7....}s.D...AcU'w..]>%-./q......E.6P......w.)..x..&.......q..+....l..F2.qH..yK...i"R1....Tc....2.]...&..._VX>.Ny.........M....;4../p...2...+....A.}..o=.KQb.X6......vH..$.'..._..z.l.....E ..].r]..tq.qJ..........\|.m.U].g... ..Y.Y..2.qP......N...5~....9.H.Q....0q.....t"~..\|....U.".).....n..].[.qd.3.@.(y^2..eax.<......g..-..[S...e.!.Z,....8..1.........k:....&'..V<5.e3T}.N.{.~.?......v...\|\s=COC.....~....;q.............h.;5..........H.....C....ML.....h..-z_/i.Ra.R..X...Hd.......4c..\...:i...D...83.C.c...`>.)........8....)y.../.P...Y,.I(z...,8.-...9.C#X........d{BzBU..^%...Ms...S.(....%...\|L.p.........Ue.e.c.a.W......!....5\|..H..p...`.....KilF........%.c.vFN....X..XNk.......,._.J....{.h.Z,S.{.....ti.k...0`9.i..T.h.;.Q....l`&....1M...s..........=....u<u.."+...t.W..."4.kY..#.\|.....y.....?..IQ..W..3..C\9pJ..2.f.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 842x507, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4746
Entropy (8bit):	7.94676295704572
Encrypted:	false
SSDEEP:	96:LE7pIfDwcrzruhGUOElHw1XPcZ0bsivU+SqRonV+UE/w2sTfHE:yODwcrzah9OElH0Py0bsxBq2V+UEobTk
MD5:	F3F8A50A18E0372B7F0E6FB8D22DAE1B
SHA1:	E66661F9BF27F59A4D5E71D20A35472AC6A8B18D
SHA-256:	39BDAE63514B83E06496E600662CC52D0692CC5D8F1CD5052CD947980BC349F8
SHA-512:	EB4EC75A18C830CB77A39052E6E9237C2D46128D8D700E8BCB5C661C6D2B350E3706A7906D9597D6DF16D3503E5AD92C0FA20647822FE26C5E6F160EDB3F0CCC
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 v...07...J...>Q(.F#..."..8p..in....P..Y....O..d.@...>?J.3....W0.....W....g...#....w......m...k.o.Z..[......7Z..X.k..K...... wl...\+\|..7Z..X.k..K.G...p..kX.k..cu.n....V..q..7Z..X.k..cu.n.....U...c_I.kMu.d.5.I./.p...5.n.....7Z..X.k..cu.n..%......p..kX.k..cu.n...:._.`sJ.'u......{..4..w^.......#.!....+...bg...L.m.....5..cu.n.....7Z..u/....v....<o..y.6\|../....".<^...6..q...l...\+\|..7Z..X.k..cs...?.....7..N..qi.v.j.$....TD..c..>..."P,3.....n.....%.....\+\|..7Z..X.k.....v.t...w.E..fp..K.U.....6..H.1..0.'AK../.....5g&y.N.....d..jE<.7.{.s?....&.....7Z..Xo0.(.A>....x8...(AC.f....x....L..9AH..)Q.'.gn2..:.....^.{..RY35.4%..7.."..\.../...%..`...c..E...Mk..cu.n.<6.....3.n..b^..NwEa..^..#.XQ.\..V.BVu"M9.d<..rj....x.....h......2KKH....x.j....-.1.<...&.....7Z..X.N...,.A..0O,.e0.s$........C....W.:g.!@....,.....S).1.f..d..s$.(..xm..0.69..3..C..dl.L.!p.p...gcS...cu.n....A]k..R..'....7..X.W..{..i..o.y...%...j.]..jz...X...!w@;....4.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	188755
Entropy (8bit):	7.997650562948468
Encrypted:	true
SSDEEP:	3072:77ICfou7nSatYQ5ySS4jfPiBmoc/84In2ziHYoDYw6hSBjF87fta8tw:XICgu7SaaQ5pS4jfPiBmochA2zvGYwYC
MD5:	0C4EFF67E8EAECE39ED67C19CFAFC01F
SHA1:	B3F6511346D7593206D0E886637F3AB5A5F9AD8E
SHA-256:	56461F4F24D12F6166AA1553FD9870FE5F6C753569FDD46DF06612AD0D8D4F78
SHA-512:	6AD669DA2D59B53FFDD7E66016D6BB7890007D28E182F02FD2BB6FC41CD0E8573ACE338DD6741B9F1AB064F5A4822BE41B8BF91A7662D05F4E929B8D169D6F15
Malicious:	false
Reputation:	low
Preview:	:....1....HXJEakm65FI... .....0..0j..........p........}wD3i..PX... L.)..-39......P<G.d.8..%.....p. .._/......@.....y....B.W...R...g..L6./.._.....ow.;.`....<?....}9.?<..2.B.Z+.;.,..}!..e.HA.1C.p...]..\|9..!..<.?.u.W.}. #....1....o..U.IF6u..h#...oQn;.&A.ULR..[}e.n.QLe...R.G.....S.n.i1.}.[..o...+.h.R..j7.R...y&..2.V.^<.......e.......F..)..j\c.T....aBB.^.h..P.9).S/).I_..E.....$.$...i....bs.......V..bK...2dBX.]..V.y.....nyf..urXM..D..4k....D....:....C].TAH......R>..iD..0.R.G...t....#..q..Vk..2'.d...f%....}.`^z.U.....3yv..]..}.;..Y.#fY..8Q.D..g8.....^0+..'o>..A.K..........^.=.Uz....R;.X..@..."hJ2#.....L...-._..m.a.A..S..`.l.3+..J...<.{.Ht..;.B.1...TO.F{...&C..;3.B.um\|.i:...........Q.BRR..%.].F?....F.A."..!&'.......d..e..fxx.2..).H.....0.....!...'..#5....}..[@q+.fH..Y.........P/C1=..t..<...E.a...5.~u..].mLd.kXA.D.....!..M...O..].\|^3....W.k..1./]..*S(.^.NY...:.3...K.VV@...{^@..H......d....e.Y.\|..B...b...]';.C.(...Z.].%\@z....,.....o'=..V...5

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.588757034124145
Encrypted:	false
SSDEEP:	3:xPWiliu0yhSEW+3SrykX1HRhkP/R:xPWiliu0yoWCryeMZ
MD5:	B1F711F3B556CA26DDB8FDB541A37F10
SHA1:	D4E52FEC2904893A0EADFA98CEE52DD059AB866D
SHA-256:	26D7792DA3293755124BBEC79C1747B56B21B9A7BA73F59549FEF5B924FB44E9
SHA-512:	C51CD750CD53BABCCA399BD52F15481CE3D3207326C17FD3E63864B6CF59992CCF54A8A0FA5B7F8FDCFDCC61489169B5040EAECCBC49CD4FBAB212D9776C4D4C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwnyX9aN8GlbqxIFDfZbc9ISBQ1QeQqDEgUNCt1e4RIFDf1u-xoSBQ0s2PbtEgUNjHAVVw==?alt=proto
Preview:	CjYKBw32W3PSGgAKBw1QeQqDGgAKBw0K3V7hGgAKBw39bvsaGgAKBw0s2PbtGgAKBw2McBVXGgA=

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1043
Entropy (8bit):	5.919795263067747
Encrypted:	false
SSDEEP:	24:YG3WjReSavIdJVIkpHI9p4B41JO//gXAnmt/zC3:YG3jSdjHI9p4B4lQc+3
MD5:	538F002BE5C7533E2BFB1DC8C45948C5
SHA1:	0CFFCB0D81207DFC6B7CF38CC574A56CBCAD6EC5
SHA-256:	C4F641FE2A4066E12802F1F82A9497BA56F96854AFD1F8624015C6214C917E42
SHA-512:	4C6063C07A97564C04106DBB8DDFADAFB5BD70A60705D22C846B2376E613A1C0C3DDE76961CE270547F8BD5F66953A41344F7DA14861169F655B6C63603F8A74
Malicious:	false
Reputation:	low
URL:	https://api-preview.luckyorange.com/public-auth
Preview:	{"access_token":"ya29.c.c0AY_VpZgJs84g03hJ1D3uzHdmyci5uDVJZ7lc1iOdYXariSnqzxHLYGMFiZip4XaCXH5osMtc-q7C0AJjQkioZgd0SK5mMxLm3z9ks9_LZfKa0sX5JXFUpDHtwAfJff-SLBBm1446BcV2JMTDaidCG6IEIMEXoHMV6bfymiytBSzeaZoQvvXjJEM9CPQDyp5j3DbMGzvZZH8xJFzHARyI8pEQmdxNp_eso6bb4VECFPtxr1imk0pasXQrPFgQ7vwpcEzZRiyx-R2TV0PigxVQktWFFT8jrNUjvpxt5iPIxM_TW4LRyKOZHnlqexxmBykuCYoZEXh4hlD5lFf0nNTVndilCY3LA_N5Y6pmsqCG0UdbXXROvN-u6wKutuxbE389DbJqfeY_gWXaxpxVw-YsOQf0Qk90mafcwt4x8h6r4igUU_l1YsXQ_XBeS9Sl_rMeyu70WmQBwWrogXQ79gXo5iuW9B14Q3ik5bb6gXygd3nnes6Vy2y8gIjJRnXcgm8nUeO0-bSauVXs_lhc5tcphmSXR7lRxMwm9s_2x3zYX59FWk_dsBQrByJafzRag0aS00h8fcyYthg3beW2IldxXM6Uvea5sUo1r53Q-uo8BiFe5qB3yOo_8ua0nmRx2u8ceqBlBZiIywUqrzBOpB8ylucuVRgF1-nFreBdcmRy9WFwJuyskt01bu5Mbomx5t5hjU_lpfykMrI9YMqmyq_9sSQOs-ZgRMXtsV05yy4j5hejd0MnrbyuXu81kRzW58cO_rki3pskY_gZs8Yqny_FhuSF-XRsI7-gpUUcarlw1cyeBrhO-Z0W4_cnVOoe-3ktB8Uoo5k2wR-dRwJJyc6mrv_qwbp9VhyS8SfRY5nMphXpI_yvZSf5q4Url91JuBI42F3vYiocWzuohf68wF02kdyQjuRSd4v-3YvQMcg2uqwJUUZ4fn109RtFQWvIMkez_trfsSF1rsFzJZ

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	64047
Entropy (8bit):	5.600690408192519
Encrypted:	false
SSDEEP:	768:8+1NK2AEUwWyKlTCKmkSRYOAF27OAd5GW/K5SU0e0qDoVVchC2/jW3rgqv:DWFzSRYwroW/KK2fe
MD5:	0691A0284541E31B0D8584E2E7F4A29C
SHA1:	895B5DF3472FD5DA3110852F954D8146232032A2
SHA-256:	7053DEF58737C584B633C9EFAE1848CA99FA6130C1843B16FB72DE9A656C8C04
SHA-512:	1173CB0E0DA40BC1C0929618E565F277C7F3D97D11D33398CF309EC4F9B6BE94DD474B816CE136E380BF55E10BEE6EDF9FD2711EDBCBE36A9BE8169C1193025D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var dsb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.IS(a)},esb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Hc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13478)
Category:	downloaded
Size (bytes):	584328
Entropy (8bit):	5.318689142239828
Encrypted:	false
SSDEEP:	12288:eP35ejJjMjS6UCOTLbwvsBtM2pWNTX/gYo107TP2:eP35ejJjv6UCOtpWpX/gYG07Te
MD5:	503E1FAACC150A4F6F725BCECFCE6AE2
SHA1:	0D47C4D955A6C8DDEB2DFAA183DFBBA7B73881AA
SHA-256:	4C7DFE2C2D542FB9DB6AA5318DEF22BC384F0C3853EA505C545F8213F4233DAE
SHA-512:	74DCC3F29D3195AF76E26B1EE100F58F6F4AF375DCE534D51768D8D3456A4B4B3A027958D581CC90C78EEA99755C963FC9953B90B2C39FB13B1F50F0AF115FB1
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/litespeed/js/503e1faacc150a4f6f725bcecfce6ae2.js?ver=4a1c2
Preview:	window._wpemojiSettings={"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.daystarpayments.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.5.3"}};./! This file is auto-generated /.!function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\u

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 217801
Category:	downloaded
Size (bytes):	65337
Entropy (8bit):	7.996316777232322
Encrypted:	true
SSDEEP:	1536:4ssouMgFttdoQtLTmhZqEoFM8eo3Pt06uav17+nOwQsuNP0A+acA:45FlrShAEoW8esv1COnNJ0A+aB
MD5:	20EED4291A9F01572FB51567A0879237
SHA1:	0F7E72C783B2BA4EA246F2A36C3B628C932AEEF0
SHA-256:	F703DCC11FBFD27D43FBBB339FAAC40250DB31FD061A8CA87B4667D1211039D9
SHA-512:	4FD1BBDC883134C5C16394F56D1DA06179DB083138A680F0A6D37F394E1CFDE805722885B3E0F6513F1FE0C8E123A1F3CD217F5F418107F9C0EE44BB2258B2C2
Malicious:	false
Reputation:	low
URL:	https://tools.luckyorange.com/core/core.js?v=0b59897
Preview:	............z.H. ......)..d[..s].t..om...Y.......HV...fwg.....v..}..&[."..yA..).....T.E ........"..a....r...e...V..r.....c.0cen.+.[.m.d...Lw....X.wY..G..a.F<..g...q.?.f#......."M.$.^pw.do..i..i~.(.S.8.v:LF.v...lf....0\|.}..u;pnUe.b..!........../TO...f.4...Y.......u.}...a.N.x.....E....._.I.g},..../C/g...c.\.....Bb.,KY........i....g)k.....)..C.Y..}...>L.;....p,.7.u.ZI.N.4....e[..48...........7..U.....q..i..z~.D..u..,O...}p.nokq3/[^.Q.=.U2)"n.......#.d6Ul.+.......k.$\|...v......1~..j...x...w..Bb...S....(r.:...o.z.,H..(......0.C.PFp).....S.......r..z..j[..a<.~..q.B..FqeJ....v...+....>....X.}.csImJd.[.g,.u,\|..x...,M.Z.$...]...".0........{......$^4..VC.k!. ...&.^..._.fQ8...W....r.1.CM..@...D......=....../a.9...D..d..A...oO.1,.8.~u'2.Ar. \|.y.f..5=....b.A.~..4..0.&..........Zy8..G?...>.B.L!..H.b.~1.%..0...y..y........k&....n_&.....p.......\|3.p+.qG,.._......Zq0..L?o...E..k9r...j.Z..S0.r\.C.Qo..F..5....L.B.>.#.."x...C>j.....,.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 88x88, components 3
Category:	downloaded
Size (bytes):	414
Entropy (8bit):	3.098057099996971
Encrypted:	false
SSDEEP:	6:ijPltl9TtzOlXuJn/FnnbgZzMnnsMntDl96dmMqR3xl/l9msK/:qPnTtaRup/dbgZ4nnsMtDl9nTxl/TM/
MD5:	F3C4A42803338A1A56BC401545833C6A
SHA1:	A6166CCD6CA649B4234B835B0CDA7B2F59ED8EAA
SHA-256:	532415241D8C3FA4C4112158405AA2A64FC82F27E8BAF8DDD1B381FF2EDDD0AB
SHA-512:	068ABF692DEE2503DBF681B0EBB8461D075BA9BEF4B2542924B0F8E4264A26327A7E2C6B18C0AEA1A6202B6C2C5B615F0F2CBE0AAAD7D75CB19764CE00C313F6
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s88-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................X.X...............................................................................................................?..@............................................................................................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 416, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87280
Entropy (8bit):	7.903105685542463
Encrypted:	false
SSDEEP:	1536:5/56nqai9IVwinRFlIefg6chXrpUWxfJJSfxkLmXUi+8z:50nLi9IVwiVfrcTBqfqLmXv+8z
MD5:	53FAF4FDFC57DF7736FD5F2171A860A8
SHA1:	124808EB23658A90D77D94198402278BF4F71AFC
SHA-256:	0B6ECD76A9855281A42F0304131B59ECC4AEE415014CC321CBB57280944E1E2A
SHA-512:	30C902EDFCDA8DE4C6E7687BDAEB06D2831443523892665DA354D5F0A244C6CA8EA68F9E8A9AF40C6BC33572111D5B1ED23EA805C342F753C164D93115477F4C
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/uploads/2023/11/bg3.png
Preview:	.PNG........IHDR.............K.z.....pHYs...............T.IDATx....\I..{\|.{..L.A2HF.U.....].ACh` .B..<....Ac..Hh4FOz.F..Aj......r..U.UY.L2.=>]..u..+.q. .Yu..."....m.m...m;..b. .. .. .. .. .. .. .......... .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A..A..A..A....!.. .. .. .. .. .. .. ...B..A..A..A..A..A..A..A....... .. .. .. .. .. .. .'....A..A..A..A..A..A..ApO..8.. .. .. .. .. .. .... .p..A..A..A..A..A..A...=A.. .. .. .. .. .. .. ..{...A..A..A..A.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 96924, version 1.0
Category:	downloaded
Size (bytes):	96924
Entropy (8bit):	7.997509095261741
Encrypted:	true
SSDEEP:	1536:SXEHmp0ciVUu44QV8VguyD24D1AYkDFM7lmt5Hl+lB2AbRvDEk4gfu4PjzHhRn:2yTVNEV8VguySVhy5O5HABTvD043HPn
MD5:	8192142E6211A46255BED91E8D5717D4
SHA1:	9ECB3FDD5EC6331CB20C17003D3E3E98161C0468
SHA-256:	B8E6C0950B169464C66DA055D932BC8CF911FD8A937F1D9CA60FD0F0E9F6F083
SHA-512:	CD85C7AE26CF08F6B06417AAAD792DDEE91DC6502EA9333C9C1CD1E1A5A390C916EAC1F7C1B973BA65EA064B3CE3CBFAE16F62867262303B4CABE305B07871D6
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0
Preview:	wOF2......z.......U<..z?.........................T.`..\|.............$..$..6.$.. . ..5..A...[!.r'.......m...S...ll`..<Kz..T....0n...;..Qo.R.....$Y...y..l..D!.,-P5..F..Exjc.[.Q...(..0V$.La=.K...FDiy^.....Ju.....X..v.C..77).."S02...(....ta..))I.$L.......2y.`.b..`y<.A...{z..Pu......E.K...u.Z..-..f..j&&.....A...A..%m....&......_4...q7.>9..=\|n.F...+E\|).h.H.....j.&;Y_H)...5.....X...9..;r.j.\..x...M]..U.A-.u..U^....xd. ...1.s.=; ]. As..mit-.....`(.....n~?.uh.I.. h0O m.T.:..."....W......JI<r....x.....,a_..KBi-\Dn....Z.x.($]."U.....-jw..SF....9..Q..X1y....4.....Uv......z.,<....&D..\....0.(K..3.`.v....n[...........t...3JCK..M..?.[..Y.....l..G...o........_..2...2.d..9s..c.........[1rl."926F.Q..$..&X........h.0._._P?.W.\|....`p.j....).....[..&.C.yR.s...]o.e;.T.f"D.c.\...8.p....&R..r...".T@I.,..g..~.;.s:....O..8.K X....@..-ce.J...f$.}......f1.,..N...9.n3.fy3..p.A.P.:[........X.x.;.....@f` @.mV.\.L..).8p.dj....M..G.,..-.....Y .. U.D.R..IEM.?.:...T8..d.(P...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	361466
Entropy (8bit):	5.594923762164711
Encrypted:	false
SSDEEP:	3072:zs44gRc0Iard8OdwCMEba8KyCKqjysCBIQOar1prkHgdDBqzGmRFeHxKJktHRT56:Y49b8OdwCMpFz1zQbh/dDBqzGaUtO/t
MD5:	2594F41C613EFA5264EB98988875D2AD
SHA1:	EBDF4222A1B3C94A1C92F6A0B9C1B8031F5E2302
SHA-256:	4AB1154BB22D7F56F04DF01EFB1EB26AF0E0B8B3A89FA24ECEF45D51A6847157
SHA-512:	9611E6A664CFC4B2ABB621B16BD497EBA4B8EBA388181447103CFCEA81AA398FF407C1AEF9E3A9D4E007F1E982743B047DECD47B63FF8DDEE1238FFAA05345E3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-11272802727&l=myLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":24,"vtp_instanceDestinationId":"AW-11272802727","tag_id":39},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CS

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17452
Entropy (8bit):	7.981154270044159
Encrypted:	false
SSDEEP:	384:nSXXV6oWIT09ZCjAzBPas055VHHZx6joTfz+YlkeNahI:WsoWmmCjAVPa/nQoTfzR7
MD5:	4D8AF627048379469A840C427945B6C3
SHA1:	89A33595518195A434523E52F9DAA7BAF24B08A1
SHA-256:	05253F6A1DF13C0FF4CE14E36E3FA0EF58C8A6C01EDD0CE04E1D2F454F30F79D
SHA-512:	1CD9FCFEEB126DCA578B9C766188BA02A1971AB93771BE53C2A97DB01A4D45CE84C923AD1056E8D5748913EEE1257362BBF1B8C9E09F2B62BFE06F253D2FB51D
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/uploads/2024/01/logo.webp
Preview:	RIFF$D..WEBPVP8X..............ALPH~4.....m.6..............tw./..4c..B..s.%82kZ.S....H........1......0.3.EHn.I.b..h].rt.L/...p Ij.lN0......w$I.m...0....E..a........=..#...... I..FC....@u....q....UO..;.{.<D ...H.@)..a.J...{;}..:>S..6V.m...T..F.)V.. ..x.'k..=..2...!A.$.mF...X..=........?.D]..B...t.[..r.....2...b.U>9......#.`...T......Z.EQ..'^H.`.M.qy.E....[....T. u.:.O..<F. ;=m.4G.....2M...S...+..5..)Q....8.y&..01F..V.P@.....k..nzu.(1...;...c..P......]..a)....!..e..S6..{...s..,.9.M.6.........!)8!..!H..aa.S.(...`......?..A..V/h...1....9Co.J......qx.z..u.c..l'Z'D~W.;......JV..<...............[c..A.....L1(...c....l.._z...A....s.<..~.........)i..:i.p&.b.....N........ ..W.\..&.r.>....bl.M.A.FM[P..S...~^...cLH....o.Th...L....0;N..`..<.L+.........8}=..c.i\|....e..Z.gIh6..4.qA"8.I....'... ..P..B.o..#.....a....Q..p(...@0.~.0.%.+.h..%....y.F..o.ZU...?...m..A...r....%C. M[....%.g.9..t.B...:....W.:.1.h.H....`\+~.M......q...&.g...c.*4_.0.R.1.52......

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	75176
Entropy (8bit):	7.930166095621449
Encrypted:	false
SSDEEP:	1536:53fxIwsRouC6Vsz1Jkx3LHGGvQOPKRf/5nG/FYnBSoT7nE:hxI9aBCsBwpQOPKnG/FYnAqzE
MD5:	2817D4872F58AE779577971283A67683
SHA1:	A8103219E9B002141E94DC8C852DF92741D860D2
SHA-256:	E93BFD6B837BBDF6EFCD31B8130C7C019F2CF35647F01B94BFEEAE6EBD096750
SHA-512:	DCA8993F385B718E7B8F3F297064D61AF2E01D5B173F811C7D81604BB5B4DC82839413A46F61B1BD38B734FAE56A095F3398490890CDA3EA475D99E59379C9C8
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA
Preview:	......JFIF................................................. .++ +,+..+5+,++(56.+;=6+<+34+...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...........".......................................A........................!.1A"Q..2aq#B.R..3b.r...$CS...s.4c............................................................?..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13478)
Category:	downloaded
Size (bytes):	566003
Entropy (8bit):	5.308033134345947
Encrypted:	false
SSDEEP:	12288:ePu5ejJjMjS6UCOTLbwvsBtM2pW17Yo107TPn:ePu5ejJjv6UCOtpW17YG07Tf
MD5:	1D4BF4C17BC68EC761951D45626A34B9
SHA1:	B1290CF5C50C7A5B2D2C381C355F1CD6CAF00FDE
SHA-256:	6AC304E916BD0266D81B4D9AD7C2FE3179E88EF71CECAFD93214ABE156CD27C9
SHA-512:	50E9DF62178D68A8E3686C64720C2C2D844B9D0504F98EAA8CFF6711E640D2A15BA128ED100C99F89373373D13A2EB53993A841ECB90F54FCD87B667C8F772C7
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/litespeed/js/1d4bf4c17bc68ec761951d45626a34b9.js?ver=4a1c2
Preview:	window._wpemojiSettings={"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.daystarpayments.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.5.3"}};./! This file is auto-generated /.!function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\u

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336
Preview:	<html></html>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	5.268388270264093
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehG0:3q3+pUAew85zvc/hG0
MD5:	010AC21CFFBF2E910B2D0C66A924E377
SHA1:	3427A3E7C925D1B7B2B85CFE7B7FE27DE71258FA
SHA-256:	E6A2AE9B4E1A304837C40C31C647C66F66611946FCFA9E4C4D1AF8BDF509FC0B
SHA-512:	AB224CF32B402A86EDC557F3CD48B345FD34BB7E0168FBAF3A4152FDBF039F62FF8E17428420AF20F5F89BD5C4E1C986AE977479DAD96C82C9D59AA1FB36196A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	201054
Entropy (8bit):	7.994343719505646
Encrypted:	true
SSDEEP:	3072:EIqqYwrrMsFkV6cAOZdlRTgS61zSJi8daIwbnRdYf4B/DKn1M1xCbGj3iK58v:ETB9E2vv61zad1iRd+4B7+1+jSK58
MD5:	CC8FFE47273BAB5FFA7CECED49A44300
SHA1:	81491F2AABBCA8C2905160A7B6BDB11FFDC986CB
SHA-256:	3F9CFEE67308FE9E501C8DB11E447F5CB05D3BD7A7E8BCF45A29762716D88BB0
SHA-512:	E23F77751DCE42ECB765E520A506E3311970285EBE5977AB1D080F77A9EADC8458EC3F39FCD4356890E1CECA0B08D3AFCFB54A46643D685C8F2D9B95A4C4A8DC
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/uploads/2024/01/bg-1-1.webp
Preview:	RIFFV...WEBPVP8X...........+..ALPH......Hn.I........8.s........7Ox.3........Q.>.}...rD.X.}....."..(.+....^;.sV..9.\gYpu..K....gJM..jP.7..S.h.D,..C>......+.I]zd3sJ...0l.6.e...........cf......u.}.URe.6...9.CV..:...4.$>f..lo....;O....[...C..\|.....^..4_c..aZc...Lo.8.c0[..Y.....Bj.!.@ .....J..]H ..5..<....u.$d....Hp$9n$...]....-.Z0"&..$Ia.pU...=..$9..$I.$I..\.....a.,..j..1.... I.$I.-...O.......{VU...$.$......x..\.Y.<..9"\|.m.m#[.,.. j.k.E......[.$K.$.R..}.....T.P&.....u^"..$.%I.t.B;DR..s..E.<2{.[.$K.$..g....5..B$.k...\.)"\|A.dI.$[>;y&b"2.H...=.....Efp.<..._u~..U...6...8.\|tH...o..3.+......sP..1..x..!.....R....0.A.t......}.R...e..^\....%B...^.6....d..,*......x......4q.v.U..L/.c6vjU..(.Nu..3^FJ....-qQ.F....^....<.N.....c_e...UW.#..;I...I.a.y.V..x..{GY....r.-...................>,.X\...\|..Y~. n...qz.8.....i...\..z.2\|Vy...p.^ .ZJ.c\FG.v.6....Al.....S.Z&D...?r.gC'..koG..E./<..p......r.........Vp.xe/B..(i..2...P.....G..!]>n5........."WV{]?...Z.....B.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2838), with no line terminators
Category:	downloaded
Size (bytes):	2838
Entropy (8bit):	5.8534071479460605
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08t1gpQ6RBEqSEcRBEqSEVPn:wsbSUtJfxrqvWWWdV6j1B1w5BfSjBfSC
MD5:	A7324EAF202412CA5F5A7E537533DF13
SHA1:	1278BB1552BA021C893C1BE063A81789963F7304
SHA-256:	0974E15B40F6D4BF9AB965EC38AA8C856854FA0EE21362A5E6E24D81A60633E5
SHA-512:	DDAD688D17D06C23BE7FC4785222CD2C9966DDA0A026481A009C147EF8B27313162982ABB0A21F593046E85F95A660A5D768CDEA1E9CDBCE07102F9830016730
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11272802727/?random=1716565598683&cv=11&fst=1716565598683&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	7.676177048347055
Encrypted:	false
SSDEEP:	12:6v/7iosFSbqVR97sWxQRa4GsUKAlJfNSvS32oUo8N4Kc5xyYCvb7wKwpLLFnfkbS:jFFv9WRiTJfZ7V5AXfKpLLx4zW
MD5:	F4FCFC9D6BC698C4E93DDE983AA8DD97
SHA1:	533F07A3EB83497762D7CD27517ABE8CCE6FD518
SHA-256:	98A6F2382B165E44B18521824065A12D044AA7CE8CE7092074327CC0AD628B33
SHA-512:	333677555DE575F4AC8E68C6EDD61E9F32AA48013B77D6E7201336A527F87CCCFA3B03B2601702CA57D500EFB0FA060205510FCAB5BE62180F21A8846BEFC85A
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX....oTU....s^..yi..hC...i%)...FI.h$$...p.p......\..1.L\....%..n0......"...K.....{.....#..\1..9.'..K.......;..Ec.n...N........_"..'...u...;..Hw.e}......?3k......4..8c,..X...f.....8....%1.[c.~..,p.Xs2.~..cL.x.U..b....5.&....I..."..PSh....o.Q......T&J...f....G...=`...c.5f.{...3.{.y.....b..D..w.d.c..%....<.......1...7.a`..P...D..<....#...l..^.!.F.gir.8<..X....>(..xV.Y.c..$}1..c...Z..y!.=..,..0..........9.....7..j...\...S........Wm.0."g.i?.............$...{:M.SY.......(...o\..]`.".H....\.f...20...&p.X..ff.z......./.!.e.....u.n\|,...X......{.J.G.r.\.F.T.....O.m..-p........W..T.'.U..c..Z...n.=.....}......c.b.........]..r.Qt.\.....W........+....K..W........G.,"..""]U.@..P.H.4U%.1..{.......n.-B$0..+L.v.>..-..P..D..G...@.h........C./.F#\|{.......IEND.B`.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6080
Entropy (8bit):	4.23653362586822
Encrypted:	false
SSDEEP:	24:t414AhNMMJtMMaKKKKK+51KKKK+kG/GBlIQs9rBvyIrEnxn9rVIvoLMd3+FxUxvH:C4AhSkmC0DdavymqV+
MD5:	FD1DB9B9606BEF828892EAE52F30A642
SHA1:	2FC22E2636C912D135E456C841656E93ECBFA394
SHA-256:	1C64C14FA68916DBA409DDF0E38CA5DC8BD262B959A5814ECB6667096B35EFA5
SHA-512:	8F54327E0E9A3A85D935E89817D86426F59D7C15F6723FFFF7047CC72A407C41D2046BD9F6C58648AA57C3AA870947008FE47DE86A219126DFD0F53A5AC9D2D0
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/gtranslate/flags/svg/en-us.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 480"><desc>The United States of America flag, produced by Daniel McRae</desc><defs><clipPath id="a"><path fill-opacity=".67" d="M0 0h682.67v512H0z"/></clipPath></defs><g fill-rule="evenodd" clip-path="url(#a)" transform="scale(.9375)"><g stroke-width="1pt"><path d="M0 0h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0z" fill="#bd3d44"/><path d="M0 39.385h972.81V78.77H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0z" fill="#fff"/></g><path fill="#192f5d" d="M0 0h389.12v275.69H0z"/><path d="M32.427 11.8l3.54 10.896h11.458l-9.27 6.735 3.54 10.9-9.27-6.735-9.267 6.734 3.54-10.897-9.27-6.734h11.458zm64.853 0l3.54 10.896h11.46l-9.27 6.735 3.54 10.9-9.27-6.735-9.268 6.734 3.54-10.897-9.27-6.734H93.74zm64.856 0l3.54 10.896h11.458l-9.27 6.735 3.5

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11272802727?random=1716565652128&cv=11&fst=1716565652128&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1320)
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	5.128583622347244
Encrypted:	false
SSDEEP:	24:BR9VqsRthp0Mejm4s1RWe2LSaaq1aa5/DM/RR2ns4t8oYRFOobvuh0usUiEFyB/6:BR9bLToj4we2L9DM/RQnv8oYjOobG53l
MD5:	C9F7EBA1438291E35519F35ECCE0A2FA
SHA1:	3B2E3D1BCCF530E19D672620D9538586D31B6E51
SHA-256:	0FE30CB89393F906FFD491B86B6296A2B243E70BC05CC515AE4DCE99506644E1
SHA-512:	41872756934AFA5107335CBB0E90B8180E4B6A26F34B934F1F05BA849301E54AE1B1E936F16C0AD60F9D13E532196417C7D3DC1B74DEC86EAE8B3956B39000F8
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
Preview:	/! elementor - v3.21.0 - 20-05-2024 /."use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[357],{1327:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class TextEditor extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{paragraph:"p:first"},classes:{dropCap:"elementor-drop-cap",dropCapLetter:"elementor-drop-cap-letter"}}}getDefaultElements(){const e=this.getSettings("selectors"),t=this.getSettings("classes"),r=jQuery("<span>",{class:t.dropCap}),p=jQuery("<span>",{class:t.dropCapLetter});return r.append(p),{$paragraph:this.$element.find(e.paragraph),$dropCap:r,$dropCapLetter:p}}wrapDropCap(){if(!this.getElementSettings("drop_cap"))return void(this.dropCapLetter&&(this.elements.$dropCap.remove(),this.elements.$paragraph.prepend(this.dropCapLetter),this.dropCapLetter=""));const e=this.elements.$paragraph;if(!e.length)return;const t=e.html().replace(/ /g," "),r=t.match(/^ *([^ ] ?)/);if(!r)return;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2620), with no line terminators
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	5.851233318645216
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08I13opQ6wJWTr92sG9Qn6:wsbSUtJfxrqvWWWdV6j1s14psrx
MD5:	A53BBA4CC953A568529F15A4ACF969DE
SHA1:	799C7FAD6B7F64A95DC8C006C8F873C982E918FD
SHA-256:	C89A47305CE989444483C192767289D1FFBCBABADD138D9EC10BAEF148091075
SHA-512:	6D78951109A50453B7F863ABF00E7CE8AE83DE19FDE97C1FF4E7B548F81CD6D6FD5367F14EB1CB3862E7D04C43BF990E2E8C4F65C213ECFF36BEDC95CCEBEA3D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11272802727/?random=1716565651846&cv=11&fst=1716565651846&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66179
Entropy (8bit):	5.328092723523677
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyw:RIT7OX4s9eZYtj8ltw
MD5:	4CB4D6BB1EC7A78373E82D9C45B554AB
SHA1:	C5916DEBA5AEA5E218A3D93406C396C0D1E89500
SHA-256:	25D73A81CD2078501EAFF11707C0DDFEABAFCDC93B29FC368B9614D77692C2BA
SHA-512:	AEFE50D44759648B6408964796823E206554FEB812F60DA9AA36B44B2E9CFEAFF3BC5C0F2B24F8D90D7C748A58F3729D19E362CCD23C822D8EAA04C1E945F911
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1423059381965053?v=2.9.156&r=stable&domain=www.daystarpayments.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (676)
Category:	downloaded
Size (bytes):	42729
Entropy (8bit):	5.422219456024566
Encrypted:	false
SSDEEP:	768:50N5JFMKfmNlXeA80uKPdKl2vMO3Zn7f6hi3N:5aTOKfmvZfuKFASf6hi3N
MD5:	934C67D016086D0A692A59FD75E64E13
SHA1:	5D975FB4CF1514E1172DEC68FA6C834237A9F3B9
SHA-256:	FB0D349EE03CD9050679F9A9BA37A1062086645C1ADB782DFD0D78152222EA6F
SHA-512:	64C5F82A46315C8A6CDC41CEE04AD57CB985440C187CF4BE77BC584B665AD2D67C4219E8DE0B36E31166E8CB546F4E7FEE4C5A2E21A5C6D8D60EB742773C34DA
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var u=ba(this);function v(a,b){if(b)a:{var c=u;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&r(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+e++,k)}.function c(k,f){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	330937
Entropy (8bit):	5.603602210107194
Encrypted:	false
SSDEEP:	3072:yiF5VZu8lOwY+NuWBryjHspCZG/szT81YoaCxyxRa1vYC7CJl:vZY+QWBry7xZG/QTIwCxyvaxO
MD5:	01FFE52CEDFAC91DB631AFB50EC0406D
SHA1:	6C46D6F85C315D1B5A0F7207FFC9C11F51E91509
SHA-256:	5E7AA90ED8DAF375A49334177305EAA26FD800A2A580EFE1DA3388AD51B094D7
SHA-512:	0F3B013D65A6BF7ACBC350C0A664FBC4549D388599A9442A6A7E0EFC5BBD33DA5DADD8F4D0C63B0CA10C0EF891265A2921E370563CE92ACC1D0B977423B67AF4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	17452
Entropy (8bit):	7.981154270044159
Encrypted:	false
SSDEEP:	384:nSXXV6oWIT09ZCjAzBPas055VHHZx6joTfz+YlkeNahI:WsoWmmCjAVPa/nQoTfzR7
MD5:	4D8AF627048379469A840C427945B6C3
SHA1:	89A33595518195A434523E52F9DAA7BAF24B08A1
SHA-256:	05253F6A1DF13C0FF4CE14E36E3FA0EF58C8A6C01EDD0CE04E1D2F454F30F79D
SHA-512:	1CD9FCFEEB126DCA578B9C766188BA02A1971AB93771BE53C2A97DB01A4D45CE84C923AD1056E8D5748913EEE1257362BBF1B8C9E09F2B62BFE06F253D2FB51D
Malicious:	false
Reputation:	low
Preview:	RIFF$D..WEBPVP8X..............ALPH~4.....m.6..............tw./..4c..B..s.%82kZ.S....H........1......0.3.EHn.I.b..h].rt.L/...p Ij.lN0......w$I.m...0....E..a........=..#...... I..FC....@u....q....UO..;.{.<D ...H.@)..a.J...{;}..:>S..6V.m...T..F.)V.. ..x.'k..=..2...!A.$.mF...X..=........?.D]..B...t.[..r.....2...b.U>9......#.`...T......Z.EQ..'^H.`.M.qy.E....[....T. u.:.O..<F. ;=m.4G.....2M...S...+..5..)Q....8.y&..01F..V.P@.....k..nzu.(1...;...c..P......]..a)....!..e..S6..{...s..,.9.M.6.........!)8!..!H..aa.S.(...`......?..A..V/h...1....9Co.J......qx.z..u.c..l'Z'D~W.;......JV..<...............[c..A.....L1(...c....l.._z...A....s.<..~.........)i..:i.p&.b.....N........ ..W.\..&.r.>....bl.M.A.FM[P..S...~^...cLH....o.Th...L....0;N..`..<.L+.........8}=..c.i\|....e..Z.gIh6..4.qA"8.I....'... ..P..B.o..#.....a....Q..p(...@0.~.0.%.+.h..%....y.F..o.ZU...?...m..A...r....%C. M[....%.g.9..t.B...:....W.:.1.h.H....`\+~.M......q...&.g...c.*4_.0.R.1.52......

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261
Category:	downloaded
Size (bytes):	78196
Entropy (8bit):	7.997039463361104
Encrypted:	true
SSDEEP:	1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU
MD5:	E8A427E15CC502BEF99CFD722B37EA98
SHA1:	A9922842A120A7F1EACED667480C5E185A106D69
SHA-256:	D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF
SHA-512:	113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B
Malicious:	false
Reputation:	low
URL:	https://www.daystarpayments.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......1t..........1..K......................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u..p.(..U.d..{-.n.Pn...._=V2.e..vp.~........U..1...=..B..b....mvS....w.C.+.$...(..MMI.iH}..O...4.7.s...Y.)......}..^...{^...R.z....f..h4dD7.:1...Cj..l.8M..T...]}.]?Z..v....g.yV...^..\.?.wM\|......Ws..yf%..PL.....~.z.w.S.uQw..........EY.!.........j.O.....c...>T\|....W...Zk...9.......XJ...../I`x.R....c.h..w...?tm..l...LQ......hMg...x...1.F...cU.b\|.3....v.Kr.f.H ..9 @....... ......'..j...Vq.:.Q..+....._..(...J.....~../..Y<."......GB..:..P.B...7q...K.{...F"..3....6?.C,..B..P.V.......C.C..\....+....a...X.z..Tzdn.P.M....li...l2);.!..wX..xh.o.u!.........O.......Ew.$b7X..8d..H...s...z#d..&...J.G...Q.M.....rV?.....&....#...t]........+..............v...$X.P............ h.z.{...../F.-Y..!.a.1...&.;.^^.U.U.E....!O......./+~.........Q.\|.n@.W..P.tc.l.--....]6..........u..[.SN....i....4-......"...fC...`........@.......l=..g...-..C8...B.X.........g.~..p.1%..x.A.X..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	34279
Entropy (8bit):	5.380093497198471
Encrypted:	false
SSDEEP:	384:jR8vJGijdzXbJFJybe7O3SvY7DsVtSBzfQrnVamEI58O56/oXpgmyJutM0vCwM:jR8d1XmSvY7DsVt47S0jyr6/QWf
MD5:	45C0856F9E6EF2A846E76E69C4F66502
SHA1:	F3828A513D34E55FD76419238AFFB23A63E756C4
SHA-256:	17AA18CE8EC6F42D461E3DB839952B3E47240453E383D1F270F90FE04792A810
SHA-512:	DD15E5FD59AAD1854AE3A0BAFCAFB8E6AB912028EBE241E975D19D82EFEDEFA096CDED8D8C9B3786EA1EA35C9A75037C7A62B564FE259937FF354BA2C9595207
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var Pub=function(a,b){a.jb("onAutonavCoundownStarted",b)},j6=function(a,b,c){g.Jv(a.element,"ytp-suggestion-set",!!b.videoId);.var d=b.playlistId;c=b.dh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.qS&&(b.lengthText?(e=b.lengthText\|\|null,f=b.Ww\|\|null):b.lengthSeconds&&(e=g.bG(b.lengthSeconds),f=g.bG(b.lengthSeconds,!0)));var h=!!d;d=h&&"RD"===g.YUa(d).type;var l=b instanceof g.qS?b.isLivePlayback:null,m=b instanceof g.qS?b.isUpcoming:null,n=b.author,p=b.shortViewCount,q=b.publishedTimeText,r=[],t=[];n&&r.push(n);p&&(r.push(p),t.push(p));q&&t.push(q);c={title:b.title,author:n,author_and_views:r.join(" \u2022 "),aria_label:b.ariaLabel\|\|.g.pJ("Watch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Vk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.Ps};b instanceof g.pS&&(c.playlist_length=b.playlistLength);a.update(c)},k6

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	36888
Entropy (8bit):	5.632293912226105
Encrypted:	false
SSDEEP:	768:0HxNdMyzmbjpz5A4ORng1/qWBLE+6NVcyn67Z3ExFjtuA3:vMmbvtOgD7VyR3
MD5:	2E4B6A9D0C43D8B6881BAFD7C3DAA632
SHA1:	A0CDC69A3D6F9167CD062C146F5A12E570CF39B4
SHA-256:	5F81E69FA586448B4E47C1FAB952BBDFEE2CA315120B1E82EAFE4DF60833AEB6
SHA-512:	A848CF3ECC60D644D9DE49C52C0CA3BB82CCA237FFCE92308CD9F2A2A31D34C04DCFE9AFE425CE63A8E80F03B68223490F7A7B820F18B84FD9EF68CAC225697A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aX8.ttf
Preview:	............GDEF...#...<....GPOSh<.h......1.GSUB...j...d....OS/2Ul% .......`STAT...........Dcmap.K].........gasp............glyf...m..M...B,head.n.$...`...6hhea.r.....<...$hmtxf.;D........loca.......X....maxp.M......... name4.]9.......dpost.......X....preph................................?.Y...F.................................2...u................."..........F!_.<............F.....p..2...u...............................$..wght....ital.......................................r.........X...K...X...^.2.6...............g...k........ULA....."........U.. .............. .......F...............................................!.(...+.3.....................)...,.4...6.6...8.:...<.C...E.G...I.M...O.k...m.t...v.y...{.\|...........................!.(...+.3.......................................................:...........(.............\|.........&.V.........4.".................................................R.o.m.a.n.I.t.a.l.i.c.W.e.i.g.h.t.h.t.t.p.:././.s.c.r.i.p.t.s...s.i.l...o.r.g./.O.F.L.M.o.n.t

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6080
Entropy (8bit):	4.23653362586822
Encrypted:	false
SSDEEP:	24:t414AhNMMJtMMaKKKKK+51KKKK+kG/GBlIQs9rBvyIrEnxn9rVIvoLMd3+FxUxvH:C4AhSkmC0DdavymqV+
MD5:	FD1DB9B9606BEF828892EAE52F30A642
SHA1:	2FC22E2636C912D135E456C841656E93ECBFA394
SHA-256:	1C64C14FA68916DBA409DDF0E38CA5DC8BD262B959A5814ECB6667096B35EFA5
SHA-512:	8F54327E0E9A3A85D935E89817D86426F59D7C15F6723FFFF7047CC72A407C41D2046BD9F6C58648AA57C3AA870947008FE47DE86A219126DFD0F53A5AC9D2D0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 480"><desc>The United States of America flag, produced by Daniel McRae</desc><defs><clipPath id="a"><path fill-opacity=".67" d="M0 0h682.67v512H0z"/></clipPath></defs><g fill-rule="evenodd" clip-path="url(#a)" transform="scale(.9375)"><g stroke-width="1pt"><path d="M0 0h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0z" fill="#bd3d44"/><path d="M0 39.385h972.81V78.77H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0zm0 78.77h972.81v39.385H0z" fill="#fff"/></g><path fill="#192f5d" d="M0 0h389.12v275.69H0z"/><path d="M32.427 11.8l3.54 10.896h11.458l-9.27 6.735 3.54 10.9-9.27-6.735-9.267 6.734 3.54-10.897-9.27-6.734h11.458zm64.853 0l3.54 10.896h11.46l-9.27 6.735 3.54 10.9-9.27-6.735-9.268 6.734 3.54-10.897-9.27-6.734H93.74zm64.856 0l3.54 10.896h11.458l-9.27 6.735 3.5

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5152)
Category:	downloaded
Size (bytes):	269189
Entropy (8bit):	5.541394777423367
Encrypted:	false
SSDEEP:	3072:ZEc0Iard8OdNMLba8AqCiqjysCBIQOaR1prkH+dQWqzGmRmn4xKRs/+vN:Sb8OdNM89r1zQbzzdQWqzGaXK
MD5:	8F8CEAEAB5537827D6FF3AF0DBF3FEC5
SHA1:	C64EC18E27B6035171AC63135EFE55927A1A99BE
SHA-256:	012569A64938780AFAA3E50D1A40E355F548E5667A8450FD1186CF0437D66E35
SHA-512:	F4A26334BC9590FAA4D369A57EA9706E41EBB5F244948FE75F0B145C0221680075C6FC2600F9EFD73AD59735928C6C61AB828F14F090E0A1B050E22E6CCCB94E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MX3TT22&l=myLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"34",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__jsm","vtp_javascript":["template","(function(){var a=(new Date).getTime()+Math.random().toString(2).substr(49);return a})();"]},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	75176
Entropy (8bit):	7.930166095621449
Encrypted:	false
SSDEEP:	1536:53fxIwsRouC6Vsz1Jkx3LHGGvQOPKRf/5nG/FYnBSoT7nE:hxI9aBCsBwpQOPKnG/FYnAqzE
MD5:	2817D4872F58AE779577971283A67683
SHA1:	A8103219E9B002141E94DC8C852DF92741D860D2
SHA-256:	E93BFD6B837BBDF6EFCD31B8130C7C019F2CF35647F01B94BFEEAE6EBD096750
SHA-512:	DCA8993F385B718E7B8F3F297064D61AF2E01D5B173F811C7D81604BB5B4DC82839413A46F61B1BD38B734FAE56A095F3398490890CDA3EA475D99E59379C9C8
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................. .++ +,+..+5+,++(56.+;=6+<+34+...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...........".......................................A........................!.1A"Q..2aq#B.R..3b.r...$CS...s.4c............................................................?..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	827
Entropy (8bit):	3.75405400435703
Encrypted:	false
SSDEEP:	12:5tMu3y6DQ9SV36SkU3eC/bEb6k+7F6Hoqaj+QItEx95I1eiHb/fLea/Y:5r3y6ESRdaw4oqaj+mI17zzd/Y
MD5:	FD074059FAA50145A600B89768B1AA1E
SHA1:	19F21A7FB7A8113FD23B4105300CEE6F23647423
SHA-256:	B1F027EF958435540DE43C1387AE630299B76FACD8ACBF5F5B8CFBF49D21969D
SHA-512:	117502968E254B74D47A76F3B2F2B27B984566C9F9935A59AC326795DC3E3A1AAC3AD35C8B275F4E9E735FCA3F7BF2108EED2AE14830AC60CD6A8AAA0619B97D
Malicious:	false
Reputation:	low
Preview:	:.........HXJEakm65FI... ......0.j...........p..........ftypdash....iso6av01mp41....moov...lmvhd.....W.L.W.L..u0...g................................................@..................................(mvex... trex............................trak...\tkhd.....W.L.W.L...........g................................................@...............mdia... mdhd.....W.L.W.L..u0...gU......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.............................H...H..........AOM Coding............................av1C.........-L............colrnclx...........stts............stsc............stco............stsz................stss............vmhd...............Dsidx..........u0........................_...............?.......

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 24, 2024 17:46:15.769726038 CEST	49678	443	192.168.2.4	104.46.162.224
May 24, 2024 17:46:16.629050970 CEST	49675	443	192.168.2.4	173.222.162.32
May 24, 2024 17:46:26.236933947 CEST	49675	443	192.168.2.4	173.222.162.32
May 24, 2024 17:46:27.569000006 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:27.569087982 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:27.569200993 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:27.569392920 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:27.569411039 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.093048096 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.093529940 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:28.093604088 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.094633102 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.094721079 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:28.096004009 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:28.096081018 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.096209049 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:28.096227884 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:28.144575119 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:28.323321104 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.323362112 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:28.323435068 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.323918104 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.323928118 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:28.982096910 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:28.989267111 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.989327908 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:28.990358114 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:28.990437984 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.993585110 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:28.993681908 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:29.034060955 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:29.034097910 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:29.082345009 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:29.527673006 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.527698994 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.527707100 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.527781963 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.527853966 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.544378042 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.544482946 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.544507027 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.588164091 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.604368925 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.604463100 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.604545116 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.604916096 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.604938030 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.605026007 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.605071068 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.605104923 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.605237961 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.605256081 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.616619110 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.616631985 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.616664886 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.616715908 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.616753101 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.631747007 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.631757021 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.631839037 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.631871939 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.643317938 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.643369913 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.643398046 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.643416882 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.643454075 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.654386044 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.654448032 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.654462099 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.654476881 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.654532909 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.704034090 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.704081059 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.704132080 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.704174042 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:29.704200983 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:29.754810095 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.146414042 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.150043964 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.150105000 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.151403904 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.151519060 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.158803940 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.158823967 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.159214020 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.159285069 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.159357071 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.159368992 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.159424067 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.159737110 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.159809113 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.159845114 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.206526995 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.212713003 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.212888956 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.366590977 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.366605997 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.366640091 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.366687059 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.366695881 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.366727114 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.366727114 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.367047071 CEST	49738	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.367065907 CEST	443	49738	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.371393919 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:30.371437073 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:30.371514082 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:30.381283045 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.381315947 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.381397009 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.381594896 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.381606102 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.387685061 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:30.387708902 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:30.546003103 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.546087027 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.546108961 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.546140909 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.546161890 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.546206951 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.546226025 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.556268930 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.556313992 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.556325912 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.556360960 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.556372881 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.556391001 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.556425095 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.558365107 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.558418989 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.558460951 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.558470011 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.558510065 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.566303015 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.566425085 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.566432953 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.566442013 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.566540003 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.597943068 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.633122921 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.633167982 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.633186102 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.633225918 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.633270025 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.633280993 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.639854908 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.639877081 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.639920950 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.639929056 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.639959097 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.646419048 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.646440029 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.646523952 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.646536112 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.648082018 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.648102999 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.648149014 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.648156881 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.648191929 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.652220011 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.652295113 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.652303934 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.652311087 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.652369022 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.658556938 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.658629894 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.658641100 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.661828041 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.661880970 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.661895037 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.661904097 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.661942005 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.665978909 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.666054010 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.666062117 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.706459999 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.718355894 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.718369961 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.718476057 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.718499899 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.721534967 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.721616030 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.721628904 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.725191116 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.725255966 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.725269079 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.729912996 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.729927063 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.729988098 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.729995012 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.730042934 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.732155085 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.732237101 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.732249975 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.737454891 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.737463951 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.737539053 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.737550974 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.737942934 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.738003969 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.738012075 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.741125107 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.741189003 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.741199970 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.747967005 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.748037100 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.748049974 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.753490925 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.753598928 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.753609896 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.753618956 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.753659010 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.755836010 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.755845070 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.755913973 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.755924940 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.755981922 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.757807016 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.757826090 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.757900953 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.757934093 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.757953882 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.757961988 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.758125067 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.759694099 CEST	49742	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.759711027 CEST	443	49742	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.799447060 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.819967031 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.820009947 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.820050955 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.820106030 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.820153952 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.822218895 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.822242022 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.822324991 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.822340012 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.825418949 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.825439930 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.825515985 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.825529099 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.828855991 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.828962088 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.828974009 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.828984976 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.829026937 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.831897020 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.831907988 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.831978083 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.831989050 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.832869053 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.835078955 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.835175991 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.835186005 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.837253094 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.837326050 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.837332964 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.841408014 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.841484070 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.841494083 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.842976093 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.843066931 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.843072891 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.845700026 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.845772028 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.845782995 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.847644091 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.847733974 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.847743034 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.887320995 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.901429892 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.907952070 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.907967091 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.908024073 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.908051014 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.908109903 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.910285950 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.910294056 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.910357952 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.910365105 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.911990881 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.912036896 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.912065983 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.912072897 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.912100077 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.913019896 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.913096905 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.913103104 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.916018009 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.916106939 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.916114092 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.917746067 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.917819977 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.917825937 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.918627977 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.918693066 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.918699980 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.921186924 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.921257973 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.921262980 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.922885895 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.922957897 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.922962904 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.923800945 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.923887014 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.923892021 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.928709030 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.928811073 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.928817987 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.930181026 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.930264950 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.930273056 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.932074070 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.932169914 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.932177067 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.933639050 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.933725119 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.933729887 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.934175014 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.936525106 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.936629057 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.936635017 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.977900028 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.992578983 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.992616892 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.992687941 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.992748022 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.992753983 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.995217085 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.995277882 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.995296955 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.995306015 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.995332956 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.996978045 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.997055054 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.997062922 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.997859955 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:30.997922897 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:30.997929096 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.000524044 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.000613928 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.000622988 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.002228975 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.002335072 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.002341986 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.003133059 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.003211975 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.003220081 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.005810022 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.005886078 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.005892038 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.006557941 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.006632090 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.006639004 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.008435965 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.008526087 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.008534908 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.009347916 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.009430885 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.009438038 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.011960983 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.012054920 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.012063026 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.012629986 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.012701988 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.012710094 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.014808893 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.014879942 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.014888048 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.016424894 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.016494036 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.016499043 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.017477989 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.017548084 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.017560005 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.059140921 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.074939966 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.075031996 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.083553076 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.083564043 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.083627939 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.083637953 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.084656954 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.084724903 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.084731102 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.084738016 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.084788084 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.086139917 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.086148024 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.086208105 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.086215973 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.087775946 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.088121891 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.088180065 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.088186979 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.089200974 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.089296103 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.089303017 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.091273069 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.091329098 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.091336012 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.092338085 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.092417002 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.092423916 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.093082905 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.093138933 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.093147039 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.094073057 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.094136000 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.094142914 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.096087933 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.096147060 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.096154928 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.097096920 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.097232103 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.097238064 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.098042011 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.098117113 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.098125935 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.099695921 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.099777937 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.099785089 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.100636959 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.100708008 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.100714922 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.101622105 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.101648092 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.101653099 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.101677895 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.102447987 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.102498055 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.102945089 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.103039026 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.103096008 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.103104115 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.108597040 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.108613968 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.108851910 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.122026920 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.122188091 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.123521090 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.145184040 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.158688068 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.166534901 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.170731068 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.170747995 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.170809984 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.170862913 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.170871973 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.173182964 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.173300982 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.173310041 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.173932076 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.173990011 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.173995972 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.175427914 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.175513983 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.175520897 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.176774025 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.176863909 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.176872969 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.177603006 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.177680016 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.177687883 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.179337025 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.179402113 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.179408073 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.180208921 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.180290937 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.180299044 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.181921005 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.182013988 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.182019949 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.182795048 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.182873964 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.182883024 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.184477091 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.184540987 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.184547901 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.186207056 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.186297894 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.186305046 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.187052011 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.187135935 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.187143087 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.188134909 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.188246012 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.188254118 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.189131975 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.189218998 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.189225912 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.190179110 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.190253973 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.190262079 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.238060951 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.241177082 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.261713028 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.261746883 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.261841059 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.261883020 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.261888981 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.262515068 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.262556076 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.262586117 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.262593031 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.262618065 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.263464928 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.263528109 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.263537884 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.265348911 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.265443087 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.265450954 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.266333103 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.266412020 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.266421080 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.267374992 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.267468929 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.267477036 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.268413067 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.268507004 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.268513918 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.269263983 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.269340992 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.269347906 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.270247936 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.270333052 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.270339966 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.271259069 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.271332979 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.271343946 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.272241116 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.272315979 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.272322893 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.273312092 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.273396015 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.273403883 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.274187088 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.274252892 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.274260998 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.275029898 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.275826931 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.275880098 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.275902033 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.275907040 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.275935888 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.277674913 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.277729988 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.277736902 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.308916092 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.328125000 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.348655939 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.348783016 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.348794937 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.349189997 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.349266052 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.349272013 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.350214958 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.350275993 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.350282907 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.350507021 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.351104975 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.351162910 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.351170063 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.352592945 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.352641106 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.352684021 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.352690935 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.352719069 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.354254007 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.354305029 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.354311943 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.355277061 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.355326891 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.355333090 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.356256008 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.356318951 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.356326103 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.357510090 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.357590914 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.357598066 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.357997894 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.358063936 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.358071089 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.358948946 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.358994961 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.359025002 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.359030962 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.359062910 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.359908104 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.360001087 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.360011101 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.360893965 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.360980988 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.360987902 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.361766100 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.361849070 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.361855984 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.408855915 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.437118053 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.437206984 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.437218904 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.438400984 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.438462019 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.438469887 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.439146996 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.439222097 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.439229012 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.440004110 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.440078974 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.440085888 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.441063881 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.441107988 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.441142082 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.441149950 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.441188097 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.442183018 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.442256927 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.442262888 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.443166971 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.443240881 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.443252087 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.444137096 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.444188118 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.444197893 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.445236921 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.445296049 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.445302963 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.445905924 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.445950985 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.445955038 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.445962906 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.446006060 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.447148085 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.447208881 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.447216034 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.447931051 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.447983027 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.447987080 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.448000908 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.448045969 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.448052883 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.448092937 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.448935986 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.449008942 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.449014902 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.491002083 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.525213003 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.525307894 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.525367022 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.525567055 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.525572062 CEST	49744	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.525590897 CEST	443	49744	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.525638103 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.525651932 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.527298927 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.527355909 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.527364016 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.528031111 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.528115034 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.528122902 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.529395103 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.529441118 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.529476881 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.529484034 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.529510021 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.530184984 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.530241966 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.530247927 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.530973911 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.531028032 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.531042099 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.531049013 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.531086922 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.531106949 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.531147957 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.531708002 CEST	49741	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.531718016 CEST	443	49741	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.717817068 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.717844009 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.717919111 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.718350887 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:31.718362093 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:31.751723051 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.751775026 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:31.751869917 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.752491951 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:31.752507925 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.176779985 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.176789045 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.176884890 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.177150965 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.177162886 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.178989887 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.179002047 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.179091930 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.179325104 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.179337978 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.184272051 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.184283972 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.184336901 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.184540033 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.184562922 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.185359001 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.185369968 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.185475111 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.185733080 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.185751915 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.289022923 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.289834023 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.289861917 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.290237904 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.291812897 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.291917086 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.292346001 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.333920956 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.333950043 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.462964058 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.463037968 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.470026016 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.470036983 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.470374107 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.474832058 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.522505999 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.677119017 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.677714109 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.677750111 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.678107023 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.678987980 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.679112911 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.679193020 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.687263012 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.687536001 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.687551975 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.687928915 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.688462019 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.688468933 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.688607931 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.688656092 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.689460039 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.689523935 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.689851999 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.689860106 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.689877033 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.689924002 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.692905903 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.692975998 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.693921089 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.693926096 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.694925070 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.695173025 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.695199966 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.698726892 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.698803902 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.699861050 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.700045109 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.700469971 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.700478077 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.715976000 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.716003895 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.716011047 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.716059923 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.716084957 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.720513105 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.720525980 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.725158930 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.725215912 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.725224972 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.739140987 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.739152908 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.752518892 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.754635096 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.754714012 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.754765034 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.755999088 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.756016970 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.756028891 CEST	49749	443	192.168.2.4	184.28.90.27
May 24, 2024 17:46:32.756033897 CEST	443	49749	184.28.90.27	192.168.2.4
May 24, 2024 17:46:32.769958019 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.802581072 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.802618027 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.802707911 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.802741051 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.802758932 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.822940111 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.822962046 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.823088884 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.823098898 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.831861973 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.831893921 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.833597898 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.833609104 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.836167097 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.836175919 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.836276054 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.836287022 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.878566027 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.889269114 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.889283895 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.889317989 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.889370918 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.889453888 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.892535925 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.892549038 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.892847061 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.892873049 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.904236078 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.904247046 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.904433966 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.904452085 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.905335903 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.905386925 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.905394077 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.905416965 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:32.905585051 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.941968918 CEST	49747	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:32.942003965 CEST	443	49747	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.077368021 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.077394962 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.077403069 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.077462912 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.077486992 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.085577011 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.085648060 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.085658073 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.119739056 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.119767904 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.119775057 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.119846106 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.119868040 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.126180887 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.126243114 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.126254082 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.131781101 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.163196087 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.163218975 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.163279057 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.163413048 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.163417101 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.166474104 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.183270931 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.183280945 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.183331013 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.183341026 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.185849905 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.185863018 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.185914040 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.185919046 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.187813997 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.187827110 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.187865019 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.187870979 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.187902927 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.208596945 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.208611965 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.208668947 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.208688021 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.210685968 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.210699081 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.210752010 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.210773945 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.215845108 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.215872049 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.215898037 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.215912104 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.215933084 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.217238903 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.217272997 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.217295885 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.217313051 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.217343092 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.249366045 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.249380112 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.250000000 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.250005960 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.250610113 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.250920057 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.250926018 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.261250973 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.268816948 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.268914938 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.268922091 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.269440889 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.269476891 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.269500017 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.269505978 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.269520998 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.275528908 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.275608063 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.275615931 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.279911995 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.279983044 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.279988050 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.280031919 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.296869040 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.296885014 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.297058105 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.297075987 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.297589064 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.297599077 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.297656059 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.297671080 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.298418999 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.298451900 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.298506021 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.298512936 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.298614025 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.306287050 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.306381941 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.306396961 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.306413889 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.306504011 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.320086002 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.355694056 CEST	49758	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.355720997 CEST	443	49758	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.636209965 CEST	49751	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:33.636241913 CEST	443	49751	192.124.249.2	192.168.2.4
May 24, 2024 17:46:33.753494978 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:33.753535986 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:33.753629923 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:33.753824949 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:33.753842115 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:34.443021059 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:34.495857954 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.308633089 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.308711052 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.312068939 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.312086105 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.312150955 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.344986916 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.345213890 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.345386028 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.345437050 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.391227007 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.511554956 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:36.511600971 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:36.511657000 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:36.512101889 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:36.512115002 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:36.662195921 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.666244030 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.666318893 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.666356087 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.666368008 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.666420937 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:36.666424036 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.666475058 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.667795897 CEST	49760	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:36.667839050 CEST	443	49760	216.58.212.162	192.168.2.4
May 24, 2024 17:46:37.177351952 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.246088982 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.246118069 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.247375965 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.247391939 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.247440100 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.249484062 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.249560118 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.250078917 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.250091076 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.458535910 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.458590031 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.487977028 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.488126040 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:37.488173008 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.527774096 CEST	49761	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:37.527805090 CEST	443	49761	142.250.185.194	192.168.2.4
May 24, 2024 17:46:38.095689058 CEST	49672	443	192.168.2.4	173.222.162.32
May 24, 2024 17:46:38.095731974 CEST	443	49672	173.222.162.32	192.168.2.4
May 24, 2024 17:46:38.390727043 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.390774012 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:38.390836000 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.391113043 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.391129017 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:38.391637087 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.391645908 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:38.391897917 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.392112970 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:38.392122984 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:38.878474951 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:38.878552914 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:38.878645897 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:39.036375046 CEST	49740	443	192.168.2.4	172.217.16.196
May 24, 2024 17:46:39.036403894 CEST	443	49740	172.217.16.196	192.168.2.4
May 24, 2024 17:46:39.082113981 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.082535982 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.082556009 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.082899094 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.083261013 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.083352089 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.083410978 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.083439112 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.112929106 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.114635944 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.114655018 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.115264893 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.115654945 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.115742922 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.115900040 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.162492990 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.198451042 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.406987906 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.407150030 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.407215118 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.408179045 CEST	49764	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.408194065 CEST	443	49764	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.456022024 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.456192970 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.456284046 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.470942020 CEST	49765	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.470956087 CEST	443	49765	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.902992010 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:39.903027058 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:39.903331995 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:39.903620005 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:39.903630972 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:39.904511929 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.904553890 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:39.904620886 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.904930115 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:39.904943943 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.557892084 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.558161020 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.558188915 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.559252977 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.559325933 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.559672117 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.559751987 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.559840918 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.559870005 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.568437099 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.568696022 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:40.568727016 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.569133043 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.569456100 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:40.569518089 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.569623947 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:40.569647074 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.606286049 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.606347084 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.651995897 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.786187887 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.786432028 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.786499977 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.787847042 CEST	49767	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:40.787868977 CEST	443	49767	216.58.206.68	192.168.2.4
May 24, 2024 17:46:40.790862083 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:40.790909052 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:40.791044950 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:40.791316032 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:40.791332960 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:40.792260885 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.792403936 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:40.792475939 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:40.803920031 CEST	49768	443	192.168.2.4	142.250.185.194
May 24, 2024 17:46:40.803951979 CEST	443	49768	142.250.185.194	192.168.2.4
May 24, 2024 17:46:41.014902115 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.014941931 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.015269995 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.015512943 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.015531063 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.503456116 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.504249096 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.504267931 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.505393982 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.506058931 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.506239891 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.506241083 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.506355047 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.549906015 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.712409019 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.712717056 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.712743998 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.714035034 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.714112997 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.714674950 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.714770079 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.714919090 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.714929104 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:41.768559933 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:41.785394907 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.785454035 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.785640955 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.785669088 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.787518978 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.787636042 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.788496971 CEST	49770	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.788511992 CEST	443	49770	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.793848991 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.793874979 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:41.793946981 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.794224024 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:41.794234991 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.001508951 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:42.006161928 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:42.006232977 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:42.006459951 CEST	49772	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:42.006477118 CEST	443	49772	216.58.212.164	192.168.2.4
May 24, 2024 17:46:42.469372034 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.469445944 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.469466925 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.469487906 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.469526052 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.469597101 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.469636917 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.490441084 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.490462065 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.490550995 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.490586042 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.497066021 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.497379065 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.497400045 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.497736931 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.498143911 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.498209000 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.498403072 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.498414993 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.540401936 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.540457964 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.540498018 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.540523052 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.540702105 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.541091919 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.542392969 CEST	443	49753	192.124.249.2	192.168.2.4
May 24, 2024 17:46:42.542479038 CEST	49753	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:42.544749975 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:42.544809103 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:42.544892073 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:42.545165062 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:42.545195103 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:42.736764908 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.738115072 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.738217115 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.738239050 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.744573116 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.744640112 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.744932890 CEST	49775	443	192.168.2.4	216.58.212.162
May 24, 2024 17:46:42.744951010 CEST	443	49775	216.58.212.162	192.168.2.4
May 24, 2024 17:46:42.774580002 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:42.774622917 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:42.774682045 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:42.774998903 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:42.775008917 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.255592108 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.255916119 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.255970001 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.256313086 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.256899118 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.256972075 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.257070065 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.257105112 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.319118023 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.319453001 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.319463015 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.319859982 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.319937944 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.320583105 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.320627928 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.321839094 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.321901083 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.322191954 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.322191954 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.322199106 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.362498999 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.367875099 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.492044926 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.492121935 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.492173910 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.492640018 CEST	49777	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.492655993 CEST	443	49777	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.494584084 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.494616032 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.494935989 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.495384932 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:43.495398998 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:43.496783972 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:43.496824026 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:43.496942997 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:43.497184992 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:43.497203112 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:43.517297029 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.517366886 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.517508030 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.517712116 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.517724037 CEST	443	49778	216.239.32.181	192.168.2.4
May 24, 2024 17:46:43.517740011 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.517792940 CEST	49778	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:43.532167912 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:43.532205105 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:43.532299042 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:43.532597065 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:43.532615900 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.172029972 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.172347069 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:44.172359943 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.172681093 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.173347950 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:44.173398018 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.173610926 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:44.173626900 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.178525925 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.178910017 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.178935051 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.179394960 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.180078983 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.180151939 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.180299044 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.226491928 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.248363018 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.248760939 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.248780012 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.249798059 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.249866962 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.251456976 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.251512051 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.251921892 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.251928091 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.299314976 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.393999100 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.395636082 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.395780087 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:44.396516085 CEST	49780	443	192.168.2.4	216.58.206.68
May 24, 2024 17:46:44.396532059 CEST	443	49780	216.58.206.68	192.168.2.4
May 24, 2024 17:46:44.398446083 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.398494959 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.399307966 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.401482105 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.401494980 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.406032085 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.406066895 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.406244993 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.406737089 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.406758070 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.469160080 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.469268084 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.470371962 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.470933914 CEST	49781	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:44.470956087 CEST	443	49781	216.58.212.164	192.168.2.4
May 24, 2024 17:46:44.596312046 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.596391916 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.596864939 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.611314058 CEST	49782	443	192.168.2.4	142.251.5.155
May 24, 2024 17:46:44.611332893 CEST	443	49782	142.251.5.155	192.168.2.4
May 24, 2024 17:46:44.723658085 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.723685980 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.723692894 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.723967075 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:44.723987103 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.742207050 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.742297888 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.742321014 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:44.742449045 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:44.742904902 CEST	49757	443	192.168.2.4	192.124.249.2
May 24, 2024 17:46:44.742921114 CEST	443	49757	192.124.249.2	192.168.2.4
May 24, 2024 17:46:44.912990093 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.913024902 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.913110018 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.914051056 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.914066076 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.926342010 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.952797890 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.952821970 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.954278946 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.954780102 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:44.954957962 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:44.955111027 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.002506971 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.003839016 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.087059975 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.088802099 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.088833094 CEST	443	49783	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.089010954 CEST	49783	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.095788002 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.096163988 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:45.096229076 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.096627951 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.097866058 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:45.097963095 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.098170996 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:45.138540983 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.386010885 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.386101007 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.386200905 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:45.390990019 CEST	49784	443	192.168.2.4	216.58.212.164
May 24, 2024 17:46:45.391026020 CEST	443	49784	216.58.212.164	192.168.2.4
May 24, 2024 17:46:45.423135996 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.423485041 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.423506021 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.423845053 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.424385071 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.424434900 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.424927950 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.470499039 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.599092007 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.599299908 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.599369049 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.599533081 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.599548101 CEST	443	49785	216.239.32.181	192.168.2.4
May 24, 2024 17:46:45.599559069 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:46:45.599590063 CEST	49785	443	192.168.2.4	216.239.32.181
May 24, 2024 17:47:13.984186888 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.984255075 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.984275103 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.984348059 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.984400034 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:13.984430075 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.984675884 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:13.992145061 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.992167950 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.992341042 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:13.992348909 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:13.992480993 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.079823971 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.080018044 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.080035925 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.087956905 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.088154078 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.088165998 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.094162941 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.094345093 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.094352961 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.099483967 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.099633932 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.099642038 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.144526958 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.167448997 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.167496920 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.167651892 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.167669058 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.172588110 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.172600031 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.173022032 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.173048019 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.178936005 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.178947926 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.179054976 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.179068089 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.184206009 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.184216976 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.184278011 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.184288025 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.187786102 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.187796116 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.187953949 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.187963963 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.190412045 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.190468073 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.190536022 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.190545082 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.190645933 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.195384979 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.195395947 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.195578098 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.195585966 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.195740938 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.198188066 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.198373079 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.198379993 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.247812986 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.259788036 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.259805918 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.259984016 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.260011911 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.269201040 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.269212961 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.269292116 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.269318104 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.271924019 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.271936893 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.272080898 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.272097111 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.276370049 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.276381016 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.276467085 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.276477098 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.278414965 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.278424978 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.278557062 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.278578997 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.281188965 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.281232119 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.281270027 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.281294107 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.281435966 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.283793926 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.283803940 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.283942938 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.283968925 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.284112930 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.289247036 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.289381981 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.289395094 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.290436983 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.290591955 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.290607929 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.292747021 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.292854071 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.292866945 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.295444965 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.295644045 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.295655012 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.297996998 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.298135996 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.298145056 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.299587965 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.299796104 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.299803972 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.301961899 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.302094936 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.302103996 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.347970009 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.352982998 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.352993965 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.354306936 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.354332924 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.354675055 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.354685068 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.354774952 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.354788065 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.358792067 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.358840942 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.358882904 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.358906984 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.358938932 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.362649918 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.362745047 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.362759113 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.364073038 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.364497900 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.364511013 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.365814924 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.366205931 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.366225958 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.367490053 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.367650986 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.367669106 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.369853973 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.370174885 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.370197058 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.372874022 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.373004913 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.373023987 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.375674009 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.375814915 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.375823975 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.377026081 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.377125025 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.377144098 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.378599882 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.378755093 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.378772020 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.380172968 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.380388021 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.380410910 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.381175995 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.381331921 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.381346941 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.382972956 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.383064985 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.383081913 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.430758953 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.443206072 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.443259001 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.443588972 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.443613052 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.444207907 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.444277048 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.444322109 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.444333076 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.444355965 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.445046902 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.445178986 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.445189953 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.454121113 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.454255104 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.454273939 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.455209017 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.455353975 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.455367088 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.456047058 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.456398964 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.456407070 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.457643986 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.457783937 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.457793951 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.458662033 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.458791971 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.458801985 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.459532976 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.459665060 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.459673882 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.461505890 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.461910009 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.461920023 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.462496042 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.462758064 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.462768078 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.463509083 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.463673115 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.463681936 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.464514017 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.464680910 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.464688063 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.471568108 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.471662045 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.471672058 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.471858025 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.471967936 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.471976995 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.472805977 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.472990036 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.473001957 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.522563934 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.535733938 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.535752058 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.535938025 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.535954952 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540132999 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540146112 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540456057 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.540467024 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540914059 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540961981 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.540994883 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.541002989 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.541027069 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.547058105 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.547199011 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.547210932 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.548314095 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.548533916 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.548544884 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.548754930 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.548912048 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.548922062 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.549865007 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.550040007 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.550050974 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.551382065 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.551503897 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.551513910 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.552309036 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.552434921 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.552444935 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.553155899 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.553280115 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.553287983 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.554933071 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.555253983 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.555265903 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.555866003 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.555923939 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.555953979 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.555962086 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.555985928 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.556010008 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.556579113 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.556587934 CEST	443	49745	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.556613922 CEST	49745	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.585273981 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585273981 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585313082 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:14.585325003 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:14.585406065 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585406065 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585815907 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585815907 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:14.585825920 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:14.585836887 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:14.641664028 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.641706944 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:14.642107964 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.642885923 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:14.642899036 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.079524994 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.079787970 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.079813004 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.080595970 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.080877066 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.080938101 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.080938101 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.080961943 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.082632065 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.082714081 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.086056948 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.086136103 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.086155891 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.086584091 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.086704969 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.086724997 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.086776018 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.086791039 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.130453110 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.130454063 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.164275885 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.164598942 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.164632082 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.165020943 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.165730000 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.165787935 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.166163921 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.210499048 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.214782953 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.216451883 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.216547012 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.216635942 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.216856003 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.216872931 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.223721981 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.223794937 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.223906040 CEST	49789	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.223922014 CEST	443	49789	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.224217892 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.224412918 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.224539042 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.224915028 CEST	49788	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.224920034 CEST	443	49788	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.244538069 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.244570971 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.244748116 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.244779110 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.244810104 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.244930029 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.245068073 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.245080948 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.245359898 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.245374918 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.537317038 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.537338972 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.537410975 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.537420988 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.537482977 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.539613008 CEST	49790	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.539637089 CEST	443	49790	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.702869892 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.703309059 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.703341007 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.703685999 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.704015017 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.704086065 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.704137087 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.750499010 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.788150072 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.788199902 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.788569927 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.788750887 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.788759947 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.905587912 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.905913115 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.905951977 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.906364918 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.906431913 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.907094955 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.907150030 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.908104897 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.908185005 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.908267975 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.918189049 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.918474913 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.918508053 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.920140982 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.920242071 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.921380043 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.921467066 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.921542883 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.950515985 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.956231117 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.956340075 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.956401110 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.956427097 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.957768917 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:15.957778931 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:15.959389925 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.959491014 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.959510088 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.959537983 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.959589005 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.960217953 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.960263968 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.960570097 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.960570097 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.960602999 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.960690975 CEST	49792	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:15.960707903 CEST	443	49792	34.107.203.234	192.168.2.4
May 24, 2024 17:47:15.963232994 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.963257074 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.963387966 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.964982033 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.965002060 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.965858936 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.965873957 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.965976000 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.966501951 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:15.966626883 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.966643095 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.968594074 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.968612909 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.968691111 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.968844891 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:15.968858957 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:15.973112106 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:15.973134041 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.004914999 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.020158052 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.056467056 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.056510925 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.056615114 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.056884050 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.056895018 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.197711945 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.197751045 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.197834015 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.197860956 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.197875977 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.197916031 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.199107885 CEST	49794	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.199122906 CEST	443	49794	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.201857090 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.201915026 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.201951981 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.220784903 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:16.220834970 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:16.220943928 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:16.221411943 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:16.221426010 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:16.252825022 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.252846956 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.271780014 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.272027969 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.272047997 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.273121119 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.273190975 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.274008036 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.274077892 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.274521112 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.274529934 CEST	443	49795	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.288242102 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288256884 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288276911 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288290977 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288296938 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.288319111 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288330078 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.288395882 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.318507910 CEST	49795	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.322385073 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322396994 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322423935 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322439909 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322459936 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322464943 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.322505951 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.322537899 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.322581053 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.358256102 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.358273983 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.358316898 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.358341932 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.358351946 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.358362913 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.358422041 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.396018982 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.396045923 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.396116972 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.396122932 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.396183968 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.397948027 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.398005009 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.419504881 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.419536114 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.419583082 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.419589043 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.419637918 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.440850019 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.440872908 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.440927982 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.440932989 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.440977097 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.467782021 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.467793941 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.467874050 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.467883110 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.467920065 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.482903004 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.482949972 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.482978106 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.482985973 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.483027935 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.485656023 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.485709906 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.496064901 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.496102095 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.496144056 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.496150970 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.496186018 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.507996082 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.508018017 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.508085966 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.508091927 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.508128881 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.519268036 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.519778967 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.519808054 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.520826101 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.520893097 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.520906925 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.520916939 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.520981073 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.520981073 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.520987034 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.521029949 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.522716045 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.522766113 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.523252010 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.523260117 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.524605036 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.525247097 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.525268078 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.525870085 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.526447058 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.526462078 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.526819944 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.527259111 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.527312040 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.527467966 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.527873993 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.528279066 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.528476000 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.528853893 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.530992031 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.531013966 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.531049967 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.531058073 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.531105042 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.532707930 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.532773972 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.541259050 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.541292906 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.541336060 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.541342020 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.541371107 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.554773092 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.554800034 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.554836988 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.554841995 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.554874897 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.554891109 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.554912090 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.555408001 CEST	49793	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:16.555423021 CEST	443	49793	157.240.252.13	192.168.2.4
May 24, 2024 17:47:16.561064959 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.562550068 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.562563896 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.562887907 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.565057993 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.565109015 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.565557957 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.566066980 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.571417093 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.573020935 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.573035002 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.574071884 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.574121952 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.574492931 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.574502945 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.575031996 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.575086117 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.575318098 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.575324059 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.594155073 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.594182014 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.594296932 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.595061064 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:16.595068932 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:16.610495090 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.628520966 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.829287052 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.830244064 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.830322027 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.830374956 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.830389977 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.830427885 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.830459118 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.830651999 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.833259106 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.873089075 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.873197079 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.873275042 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.911937952 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.912012100 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.912034035 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.912080050 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.912122965 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.912152052 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.924544096 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.924752951 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.924818039 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.951097012 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.951138020 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.951163054 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.951193094 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.951215029 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.953016043 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.953171015 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.953214884 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.953294039 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.953356028 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.959170103 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.959182978 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.959223032 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:16.959265947 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.959287882 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.959311962 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:16.965953112 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.998703003 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.998743057 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.998914957 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.998927116 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:16.998980045 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.999650002 CEST	49798	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:16.999692917 CEST	443	49798	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.006010056 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:17.010365963 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.011320114 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.011370897 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.011439085 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.011755943 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.011768103 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.012809992 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.012816906 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.012826920 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.012871027 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.014238119 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.014302015 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.014749050 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.014756918 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.015836954 CEST	49796	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.015851974 CEST	443	49796	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.024195910 CEST	49800	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.024224043 CEST	443	49800	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.026922941 CEST	49799	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:17.026962042 CEST	443	49799	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.049957991 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.050029993 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:17.050065041 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.050093889 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.050149918 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:17.065116882 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.207824945 CEST	49797	443	192.168.2.4	192.124.249.2
May 24, 2024 17:47:17.207899094 CEST	443	49797	192.124.249.2	192.168.2.4
May 24, 2024 17:47:17.294179916 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.294245958 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.294408083 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.295712948 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.296793938 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.296807051 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.297108889 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.297142029 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.297561884 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.298074961 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.298163891 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.298512936 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.346503973 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.613284111 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.618516922 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.618572950 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.618588924 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.632550001 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.632606983 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.632613897 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.636399984 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.636452913 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.636459112 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.644151926 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.644206047 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.644212961 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.651202917 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.651290894 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.651299953 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.657126904 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.657186031 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.657191992 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.662992954 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.663045883 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.663052082 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.709382057 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.709451914 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.709480047 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.712666988 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.712729931 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.712748051 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.719110012 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.719239950 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.719264984 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.727984905 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.728029966 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.728075981 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.728097916 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.728173018 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.733130932 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.745136976 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.745203018 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.745230913 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.749232054 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.749516964 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.749546051 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.753318071 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.753366947 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.753393888 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.763808012 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.763887882 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.763916016 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.763947010 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.763993025 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.764039993 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.768786907 CEST	49802	443	192.168.2.4	142.250.184.238
May 24, 2024 17:47:17.768802881 CEST	443	49802	142.250.184.238	192.168.2.4
May 24, 2024 17:47:17.770157099 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770184040 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770194054 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770242929 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770292997 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770317078 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770343065 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.770343065 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.770374060 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.770406008 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.770406008 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.770431995 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.775254011 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.775719881 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.775739908 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.776490927 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.777029037 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.777105093 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.777170897 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.813918114 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.822505951 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:17.832149982 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:17.835930109 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.835963964 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.836060047 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.836092949 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.837925911 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.839679003 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.839695930 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.840290070 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.841500998 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.841644049 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.841726065 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.844053030 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.844113111 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.844149113 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.844161034 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.844229937 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.893845081 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.911557913 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.911626101 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.911678076 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.911714077 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.911736012 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918056965 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.918102026 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.918133974 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918148041 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.918190002 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918190002 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918275118 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.918319941 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918849945 CEST	49801	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:17.918868065 CEST	443	49801	13.32.27.6	192.168.2.4
May 24, 2024 17:47:17.972326040 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.972465038 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.972589016 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.972605944 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.975980997 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.976073980 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.976083040 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.976186037 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:17.976275921 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:17.976275921 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:18.276647091 CEST	49805	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:18.276668072 CEST	443	49805	34.107.203.234	192.168.2.4
May 24, 2024 17:47:18.359246016 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.359342098 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.360441923 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.361244917 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.361334085 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.361349106 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.363353968 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.363483906 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.363491058 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.366282940 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.366317987 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.366334915 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.366342068 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.366492987 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.368920088 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.372620106 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.372709036 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.372739077 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.375433922 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.375472069 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.375509024 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.375518084 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.375597000 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.449891090 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.450090885 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.450156927 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.452331066 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.452404022 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.452423096 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.452598095 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.452651024 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.452665091 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.453187943 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.453241110 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.453253984 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.458946943 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.461740971 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.461755037 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.465471029 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.465500116 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.465543032 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.465559006 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.465684891 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.471262932 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.471343040 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.471554041 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.471599102 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.477854013 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.478137970 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.478214025 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.478240967 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.484424114 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.485694885 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.485709906 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.490124941 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.490667105 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.490729094 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.490744114 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.491219997 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.495922089 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.495984077 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.496664047 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.496736050 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.503341913 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.504436016 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.504509926 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.504523993 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.507492065 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.507518053 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.507576942 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.507592916 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.507776976 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.513256073 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.513329983 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.542882919 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.542927027 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.542998075 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.543035984 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.543737888 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.543792963 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.543808937 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.544198036 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.544250965 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.544267893 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.545597076 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.545669079 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.545681000 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.547849894 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.547874928 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.547924042 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.547940016 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.547970057 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.551589012 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.551671028 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.551685095 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.553877115 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.553904057 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.553934097 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.553946972 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.553994894 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.567195892 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.567239046 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.567276955 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.567291021 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.567342043 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.567735910 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.568547964 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:18.568717003 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:18.646239042 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:18.646282911 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:18.646522045 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:18.646575928 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:18.646624088 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:18.646640062 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:18.646948099 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:18.646962881 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:18.647171021 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:18.647195101 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.110815048 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.110862970 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.110984087 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.111419916 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.111433029 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.128845930 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.133992910 CEST	49803	443	192.168.2.4	157.240.252.13
May 24, 2024 17:47:19.134025097 CEST	443	49803	157.240.252.13	192.168.2.4
May 24, 2024 17:47:19.135575056 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.135607958 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.135709047 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.135771990 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.135790110 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.135937929 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.135950089 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.136984110 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.137043953 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.147555113 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.193017006 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.398593903 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.398622990 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.399862051 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.399933100 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.422904968 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.423152924 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.426665068 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.426685095 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.473380089 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.474828005 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.475013018 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.479146957 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.479190111 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:19.479249954 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.480587006 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.480595112 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:19.480647087 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.481707096 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.481717110 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:19.481851101 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:19.481858015 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:19.482578039 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.482589960 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.523436069 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.557975054 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.558053970 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.558101892 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.560071945 CEST	49806	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.560096025 CEST	443	49806	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.582871914 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.582915068 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.582973003 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.584533930 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:19.584552050 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:19.620501995 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.622692108 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.622970104 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.623120070 CEST	49807	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:19.623131037 CEST	443	49807	35.201.124.9	192.168.2.4
May 24, 2024 17:47:19.664201975 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.664241076 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:19.664307117 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.665118933 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.665127039 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:19.665175915 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.665841103 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.665853024 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:19.666356087 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:19.666368008 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:19.796209097 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.797589064 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.797656059 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.798221111 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.798295021 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.798965931 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.799024105 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.813443899 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.813600063 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.813872099 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.813898087 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:19.858163118 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.862046957 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:19.910475969 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.946523905 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.946552038 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.947071075 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.947621107 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.947683096 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:19.948116064 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:19.990502119 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:20.074443102 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.074981928 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:20.075007915 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.076126099 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.077328920 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:20.077510118 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.077893019 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:20.122493029 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.160053015 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.161500931 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.161521912 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.162669897 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.162751913 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.164093018 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.164185047 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.164393902 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.164401054 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.165805101 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.166129112 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.166138887 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.167201042 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.167269945 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.168265104 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.168329000 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.168548107 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.168557882 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.169589996 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.172097921 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.172152996 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.172180891 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.172209978 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.172255993 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.172266006 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.189433098 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.191248894 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.191332102 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.191345930 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.191365004 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.191411972 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.191418886 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.193196058 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.194401026 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.194494009 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.194502115 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.197798967 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.197838068 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.197887897 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.197896957 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.197937965 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.201149940 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.201225042 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.208401918 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.237242937 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.237345934 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.237961054 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.238025904 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.238532066 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.238542080 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.238739967 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.238794088 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.239732027 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.239810944 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.241192102 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.241197109 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.245135069 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.245227098 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:20.245362043 CEST	443	49808	13.32.27.6	192.168.2.4
May 24, 2024 17:47:20.245402098 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.245424032 CEST	49808	443	192.168.2.4	13.32.27.6
May 24, 2024 17:47:20.248898983 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.248999119 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.249201059 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.249211073 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.249840021 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.249892950 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.249946117 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.250062943 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.250125885 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.251754045 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.251808882 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.252294064 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.252346992 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.252469063 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.252659082 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.252675056 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.253529072 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.253582001 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.257190943 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.257247925 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.260957956 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.261013985 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.261516094 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.261570930 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.263019085 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.263075113 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.265942097 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.266001940 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.266024113 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.272830009 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.272890091 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.272903919 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.277681112 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.277745008 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.277754068 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.283246994 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.283407927 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:20.283431053 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.283452034 CEST	443	49812	35.244.167.102	192.168.2.4
May 24, 2024 17:47:20.283509016 CEST	49812	443	192.168.2.4	35.244.167.102
May 24, 2024 17:47:20.284193039 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.284243107 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.284252882 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.284465075 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.290498972 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.293088913 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.293138981 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.293148041 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.297915936 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.298007011 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.298017025 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.299679041 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.299938917 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.299947023 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.300614119 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.300679922 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.300688982 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.305516005 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.305579901 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.305588961 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.328480959 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.328566074 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.328599930 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.330441952 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.330496073 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.330502987 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.340028048 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.340109110 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.340117931 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.340640068 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.340699911 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.340706110 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.343255043 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.343405962 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.343420982 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.347923994 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.348200083 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.348325968 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.348335028 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.349925995 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.349983931 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.349991083 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.351532936 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.351574898 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.351603985 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.351612091 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.351664066 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.354825020 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.356823921 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.356925011 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.356931925 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.358202934 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.358258009 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.358277082 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.362107038 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.362211943 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.362221956 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.368007898 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.368061066 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.368069887 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.370138884 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.370213032 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.370223045 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.380330086 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.380374908 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.380410910 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.380420923 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.380517960 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.380526066 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.380565882 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.380645037 CEST	49809	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.380656958 CEST	443	49809	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.386938095 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.387402058 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.387459993 CEST	443	49813	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.387533903 CEST	49813	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.388425112 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.388525963 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.388612032 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.388851881 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.388894081 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.405853033 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.406099081 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.406157970 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.406513929 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.406538963 CEST	443	49814	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.406550884 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.406584024 CEST	49814	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.448724985 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.448822975 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.448879957 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.449462891 CEST	49810	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.449486017 CEST	443	49810	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.595285892 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.604585886 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.604665995 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.604693890 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.604707003 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.604757071 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.605833054 CEST	49811	443	192.168.2.4	157.240.251.35
May 24, 2024 17:47:20.605851889 CEST	443	49811	157.240.251.35	192.168.2.4
May 24, 2024 17:47:20.772800922 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:20.772856951 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:20.772933006 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:20.780071974 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:20.780097008 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:20.782234907 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.782274961 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.782335997 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.783374071 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.783387899 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.785433054 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.785468102 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.785547972 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.786211967 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.786226034 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.788819075 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.788831949 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.788944960 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.789443016 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.789463997 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.824625969 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:20.824667931 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:20.824734926 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:20.824922085 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:20.824939013 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:20.832289934 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.832328081 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:20.832448006 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.832448006 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.832464933 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:20.832607985 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.833195925 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.833215952 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:20.833405972 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:20.833417892 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:20.930346966 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.930653095 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.930682898 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.931278944 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.932208061 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.932337999 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.932955980 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:20.936131001 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.936789989 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.936853886 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.937246084 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.938003063 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.938097954 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:20.938337088 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:20.978511095 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:20.978538036 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.092365980 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.092499971 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.092556000 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.097987890 CEST	49817	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.098016977 CEST	443	49817	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.099972010 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.100019932 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.100538969 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.101650000 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.101663113 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.130916119 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.130951881 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.131114960 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.131808043 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.131819010 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.209105968 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.209157944 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.209259987 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.209276915 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.211921930 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.211982965 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.211998940 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.214526892 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.215363026 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.215377092 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.219863892 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.219918013 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.219929934 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.227268934 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.229707956 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.229724884 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.232091904 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.232147932 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.232156992 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.244477987 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.245712996 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.245723009 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.285819054 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.287586927 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.296806097 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.297627926 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.297658920 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.298059940 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.298391104 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.298463106 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.298530102 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.298568010 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.298614025 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.298650026 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.298747063 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.304073095 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.308434010 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.308605909 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.308639050 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.312057972 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.314506054 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.314562082 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.314574003 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.319971085 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.320527077 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.320581913 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.320591927 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.320638895 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.326894045 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.333547115 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.333587885 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.333600998 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.333621025 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.333672047 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.343787909 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.346076965 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.346121073 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.346133947 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.349823952 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.349864006 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.349875927 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.349884987 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.349932909 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.354331017 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.358511925 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.360198975 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.360229969 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.360307932 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.360322952 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.360369921 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.366533041 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.372078896 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.372133970 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.372143030 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390477896 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390552044 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390558004 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.390592098 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390647888 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390652895 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.390664101 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.390769958 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.390779018 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.397778034 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.397849083 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.397860050 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.403719902 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.403774977 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.403784990 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.407445908 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.407502890 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.407516003 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.408411026 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.408639908 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.408648014 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.411324024 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.411453962 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.411463022 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.414089918 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.414146900 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.414155960 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.416996956 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.417063951 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.417073965 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.424285889 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.424346924 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.424355984 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.426379919 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.426434040 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.426441908 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.428195953 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.428271055 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.428277016 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.432528973 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.432589054 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.432596922 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.433604956 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.433681011 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.433690071 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.436891079 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.437043905 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.437056065 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.444191933 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.444480896 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.444489002 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.447141886 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.447360039 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.447366953 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.448040009 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.448129892 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.448143959 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.448703051 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.448999882 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.449017048 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.449415922 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.449651003 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.450115919 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.450326920 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.450506926 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.450562954 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.451206923 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.451215029 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.455130100 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.455136061 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.455199003 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.455212116 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.455854893 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.455882072 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.456068039 CEST	443	49818	35.201.124.9	192.168.2.4
May 24, 2024 17:47:21.456166029 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.456166029 CEST	49818	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:21.460386038 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.460474968 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.460481882 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.461158037 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.461200953 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.461218119 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.461230993 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.461277962 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.464831114 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.477930069 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479121923 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.479139090 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479692936 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479753017 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.479795933 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479810953 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479863882 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479865074 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.479882956 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.479948997 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.480518103 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.480815887 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.480823994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.480869055 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.481137991 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.481162071 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.481281042 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.481290102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.481648922 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.481658936 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.482029915 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.482083082 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.482089043 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.482603073 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.482666969 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.483114004 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.483150959 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.483170033 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.483191013 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.483236074 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.483242035 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.483279943 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.483498096 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.483963966 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.483971119 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.485004902 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.485110044 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485143900 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485156059 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.485162973 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485179901 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.485228062 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485263109 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485270023 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.485277891 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.485302925 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.486325979 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.486385107 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.486676931 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:21.488203049 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.488262892 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.488269091 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.489231110 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.490398884 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.490474939 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.490494013 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.490514040 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.490571976 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.490581989 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.491081953 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.491137028 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.491144896 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.492738962 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.492818117 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.492825031 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.493354082 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.493411064 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.493417025 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.496217966 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.496290922 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.496299982 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.496989012 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.497143984 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.497170925 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.498183966 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.498461962 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.498470068 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.501645088 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.501667976 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.502501011 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.503916025 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.504651070 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.504709005 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.504719019 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.504767895 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.504774094 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.505726099 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.505794048 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.505800962 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.505953074 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.506171942 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.506182909 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.506311893 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:21.506335020 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:21.506545067 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.506555080 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.507069111 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.507118940 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.507131100 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.507528067 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:21.507596970 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:21.507672071 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.507790089 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.508335114 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.508418083 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.508500099 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.510236025 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:21.510344028 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:21.512758017 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.512809992 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.512820005 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.513215065 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.513262987 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.513272047 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.514000893 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.514122963 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.514132023 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.514580011 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.514626026 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.514636040 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.516890049 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.516949892 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.516968012 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.517656088 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.517754078 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.517762899 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.520015001 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.520311117 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.520322084 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.522537947 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.522594929 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.522603035 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.522610903 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.522670031 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.524535894 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.524961948 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.524991989 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.525032043 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.525041103 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.525082111 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.525496006 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.530498981 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.533953905 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.534014940 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.534027100 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.535329103 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.535402060 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.535412073 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.536034107 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.536082983 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.536092043 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.536494017 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.536537886 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.536549091 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.537157059 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.537210941 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.537219048 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.539917946 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.539973021 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.539980888 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.542238951 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.542418957 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.542427063 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.543061018 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.543118000 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.543124914 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.543986082 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.544035912 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.544037104 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.544051886 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.544106960 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.544114113 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.547228098 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.547275066 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.547282934 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.547791004 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.547878981 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.547888041 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.549518108 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.549581051 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.549588919 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.551384926 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.551405907 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.551405907 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.551430941 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.551440001 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.551450968 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.563863993 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.563939095 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.563951969 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.564950943 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.565021992 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.565062046 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.565112114 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.565112114 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.565144062 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.565965891 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.566018105 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.566026926 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.566653967 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.566709995 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.566718102 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.567363024 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.567394972 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.567423105 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.567424059 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.567437887 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.567467928 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.569075108 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.569147110 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.569155931 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.572196007 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.572236061 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.572278976 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.572294950 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.572324991 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.572340965 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.573910952 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.577693939 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.577718019 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.578450918 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.578712940 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.578733921 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.578879118 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.578922033 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.578932047 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.579514027 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.579687119 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.579698086 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.583195925 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:21.583213091 CEST	443	49824	172.217.18.118	192.168.2.4
May 24, 2024 17:47:21.583292961 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.583741903 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.583800077 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.583825111 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.584287882 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.584332943 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.584347963 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.586834908 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.586915970 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.586936951 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.587402105 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.587466955 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.587486029 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.587863922 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.587919950 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.587932110 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.588490009 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.588963985 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.588987112 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.589406967 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.589682102 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.589725971 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.589749098 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.590506077 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.590506077 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.590521097 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.590588093 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.593193054 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.593334913 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.593363047 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.593507051 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.593552113 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.593561888 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.595810890 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.595859051 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.595880985 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596189022 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596230984 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.596244097 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596786022 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596829891 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596873045 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.596885920 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.596921921 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.598105907 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.602442026 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.602907896 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.603112936 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.603116989 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.603143930 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.603190899 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.603682041 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.606465101 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.606523991 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.606548071 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.606941938 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.607007027 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.607019901 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.607475996 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.607536077 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.607546091 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.613356113 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.613411903 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.613430023 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.613785028 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.613828897 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.613840103 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.614152908 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.614192963 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.614202023 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.621385098 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.621438980 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.621462107 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.621831894 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.621933937 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.621948957 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.622345924 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.622495890 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.622507095 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.624970913 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.625021935 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.625030994 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.625401020 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.625466108 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.625473022 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.626198053 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.626246929 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.626257896 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.631844044 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.631911993 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.631943941 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.632322073 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.632365942 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.632375956 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.632693052 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.632814884 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.632827044 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.636569977 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.636629105 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.636651039 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.636974096 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.637023926 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.637037992 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.637833118 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.638031960 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.638046980 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.638731003 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.638789892 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.638809919 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.638843060 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.638887882 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.639326096 CEST	49816	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.639343023 CEST	443	49816	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.667144060 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.667542934 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.667576075 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.671725035 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.671794891 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.672255039 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.672461033 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.672543049 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.672558069 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.690043926 CEST	49824	443	192.168.2.4	172.217.18.118
May 24, 2024 17:47:21.690525055 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.730509996 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.731698990 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.731952906 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.731969118 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.734076977 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.734261036 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.734268904 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.736593008 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.737515926 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.737575054 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.737579107 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.737600088 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.737648010 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.741827011 CEST	49827	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.741844893 CEST	443	49827	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.742294073 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.742368937 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.742388964 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.747036934 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.747132063 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.747143030 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.755980968 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.756220102 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.756228924 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.763933897 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.764030933 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.764044046 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.765620947 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.765675068 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.765804052 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.765819073 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.767035961 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.767082930 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.767102003 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.774033070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.774079084 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.774106979 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.774138927 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.774152994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.774198055 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.775289059 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.775302887 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.775360107 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.775434971 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.775567055 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.775567055 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.775584936 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.777462959 CEST	49825	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.777487040 CEST	443	49825	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.779316902 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.779475927 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.779493093 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.782201052 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.782284021 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.782290936 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.785053968 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.785109997 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.785115004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.787065029 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.787220001 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.787234068 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.788897991 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.789261103 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.789273977 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.789671898 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.789844036 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.789849997 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.792285919 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.792294979 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.792433023 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.792438030 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.792541027 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.792553902 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.799985886 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.800048113 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.800056934 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.811383963 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.815922976 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.815995932 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.816989899 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.816989899 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.816989899 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.817023993 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.817590952 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.817648888 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.817657948 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.818192005 CEST	49826	443	192.168.2.4	157.240.0.35
May 24, 2024 17:47:21.818219900 CEST	443	49826	157.240.0.35	192.168.2.4
May 24, 2024 17:47:21.820708990 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.820786953 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.820846081 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.821367025 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.821439981 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.821458101 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.823462963 CEST	49829	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.823477030 CEST	443	49829	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.825376987 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.825401068 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.825661898 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.826195955 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:21.826204062 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:21.827296972 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.827488899 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.827507019 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.833353043 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.833645105 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.833659887 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.839067936 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.839199066 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.839214087 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.845130920 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.845206976 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.845227003 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.848433971 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.849759102 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.850424051 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.850501060 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.850517035 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.851373911 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.851402044 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.851412058 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.851685047 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.851692915 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.855195045 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.856173038 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.856194019 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.856383085 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.857353926 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.857695103 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.857709885 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.857841015 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.858449936 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.858472109 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.858504057 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.860018969 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.860028028 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.860094070 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.860101938 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.861645937 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.861645937 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.861665010 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.862682104 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.865058899 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.865133047 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.865140915 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.865854979 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.865974903 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.865984917 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.867927074 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.868685007 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.868695021 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.869749069 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.870512009 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.870512009 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.870522022 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.870570898 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.870579004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.873316050 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.873666048 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.873677969 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.875725031 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.875945091 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.876390934 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.876447916 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.876461983 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.876504898 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.877655029 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.877671957 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.880146027 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.880604982 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.880613089 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.881958961 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.882018089 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.882030964 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.882428885 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.884432077 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.884576082 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.884588957 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.888868093 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.888998985 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.889005899 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.889239073 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.889323950 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.889333010 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.892435074 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.892515898 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.892522097 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.893264055 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.893358946 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.893374920 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.894117117 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.894160032 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.894165993 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.898659945 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.898925066 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.898938894 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.899956942 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.899988890 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.900150061 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.900161982 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.900207043 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.903397083 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.903567076 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.903578043 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904140949 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904197931 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.904207945 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904222965 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904309988 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904421091 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.904421091 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.904778004 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.904778004 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.904799938 CEST	443	49821	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904958963 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.904962063 CEST	49821	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.905405998 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.905420065 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.905437946 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910386086 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910506010 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.910521030 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910774946 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910818100 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910830021 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.910855055 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.910950899 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.915409088 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.915669918 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.916897058 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.916904926 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.921361923 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.921397924 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.921442986 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.921449900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.921499968 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.926347971 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.941598892 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.942302942 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.942606926 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.942635059 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.944206953 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.944590092 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.944633961 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.944660902 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.944688082 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.944789886 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.944802046 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.946197033 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.946769953 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.946790934 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.946810961 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.946819067 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.946836948 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.949314117 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.949347973 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.949368954 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.949383974 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.949501038 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.949734926 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.950176001 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.950274944 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.950284004 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.951047897 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.951097965 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.951103926 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.951961994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.952030897 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.952038050 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.953248024 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.953356028 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.953361988 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.953699112 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.953779936 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.953788996 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.954691887 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.955427885 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.955950022 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.955959082 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.956166029 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.957243919 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.957305908 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.957312107 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.957431078 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.959880114 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.959944010 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.959949970 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.961539984 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.961648941 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.961657047 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.965193033 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.965260029 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.965266943 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.965507984 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.966506958 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.966516018 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.969285011 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.969357967 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.969364882 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.969995975 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.970057964 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.970067978 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.972836018 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.972927094 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.972934008 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.973177910 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.973481894 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.973490953 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.975768089 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.975826025 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.975832939 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.977294922 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.977993965 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.978003025 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.979545116 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.979607105 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.979617119 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.981430054 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.981525898 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.981554031 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.981563091 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.982505083 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.983517885 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.983573914 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.983582020 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.985137939 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.988368988 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.988429070 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.988435984 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.988976002 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.989047050 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.989053965 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.991529942 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.991616011 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.991621971 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.992801905 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.994010925 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.994024992 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.995409012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.995461941 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.995466948 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.997510910 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.997596025 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.997739077 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.997747898 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.997790098 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.999341965 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:21.999425888 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:21.999433041 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.000343084 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.003264904 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.003421068 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.003427029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.003508091 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.003868103 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.003875971 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.006330013 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.006402969 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.006409883 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.007045031 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.007117987 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.007126093 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.007167101 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.007251978 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.009721994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.009780884 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.009790897 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.010504961 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.013931036 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.014091969 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.014106035 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.016432047 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.016495943 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.016506910 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.034181118 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.034240961 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.034260988 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.035747051 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.035779953 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.035815954 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.035824060 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.036071062 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.036346912 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.037198067 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.037225008 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.037609100 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.037617922 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.037813902 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.038156033 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.038496017 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.038546085 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.038553953 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.039350033 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.039378881 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.039513111 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.039520979 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.039868116 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.040147066 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.040724039 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.040808916 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.040827036 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.041383028 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.041630983 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.041639090 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.042073011 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.042500973 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.042507887 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.045387030 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.045485020 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.045492887 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.049778938 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.049846888 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.049864054 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.054084063 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.054157972 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.054171085 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.054501057 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.054550886 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.054555893 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056005955 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056021929 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056034088 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056046963 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056080103 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.056082010 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056092978 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056118965 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.056196928 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.056205988 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.056293011 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.056863070 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.057720900 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.057742119 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058140039 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.058149099 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058213949 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.058585882 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058593035 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058621883 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058640003 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.058645010 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.058845997 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.059441090 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.059453011 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.059575081 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.059581995 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.060368061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.060442924 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.060447931 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.061191082 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.061212063 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.061240911 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.061403990 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.061403990 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.061412096 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.062064886 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.062155962 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.062160015 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.062957048 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.062977076 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063057899 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.063064098 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063529015 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.063821077 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063827991 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063864946 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063875914 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.063879967 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.063910007 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.064676046 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.064683914 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.064795971 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.064804077 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.065571070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.065614939 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.065622091 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.066468000 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.066504002 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.066531897 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.066543102 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.066548109 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.066590071 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.067321062 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.067372084 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.067375898 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068157911 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068396091 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.068403006 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068845034 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068851948 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068896055 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068907022 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.068912029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.068949938 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.069062948 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.069070101 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.069685936 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.069693089 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.069828033 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.069833994 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.070569038 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.070574999 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.070589066 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.070755005 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.070760012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.070805073 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.071248055 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.071253061 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.071405888 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.071466923 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.071496010 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.071510077 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.071515083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.071553946 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.072283983 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.072299004 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.072324991 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.072724104 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.072732925 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.072896004 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.073110104 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.073149920 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.073174000 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.073220968 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.073225975 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.073261976 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.073916912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.074129105 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.074225903 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.074233055 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.074425936 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.074511051 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.074517012 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.075442076 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.075489044 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.075494051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.075823069 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.075862885 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.075867891 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.076251030 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.076406956 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.076411963 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.076945066 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.076987028 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.076991081 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077285051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077349901 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.077354908 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077548027 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077577114 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077599049 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.077603102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.077636957 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.077872038 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.078063011 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.078181982 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.078188896 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.078289032 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.078448057 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.078454018 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.080178022 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.080224037 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.080228090 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.081566095 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.081610918 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.081615925 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.081624031 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.081712961 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.081718922 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.082040071 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.082209110 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.082216024 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.084171057 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.084216118 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.084222078 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.085201979 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.085244894 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.085249901 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.085299015 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.085498095 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.085644960 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.085652113 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.086507082 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.086544037 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.088155031 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.088202953 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.088212967 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.088805914 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.088848114 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.088854074 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.088915110 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.089092970 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.089260101 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.089397907 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.089405060 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.089634895 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.092886925 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093137980 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093177080 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093194008 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.093204021 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.093213081 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093252897 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.093640089 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093887091 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093941927 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.093971014 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.094508886 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.094516993 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.094571114 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.096023083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.096071959 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.096076965 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.100560904 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.100630045 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.100663900 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.100718975 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.100728989 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.100898981 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.101083040 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101125956 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101135015 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.101142883 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101190090 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.101609945 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101691961 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101736069 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.101741076 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.101910114 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.102257967 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.102459908 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.102468967 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.102844000 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.102881908 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.102900982 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.102905989 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103169918 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.103174925 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103553057 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103593111 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103626966 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103653908 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.103662014 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.103722095 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.105535984 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.105649948 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.106019974 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.106072903 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.106075048 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.106087923 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.106283903 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.108846903 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.109113932 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.109169006 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.109181881 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.112170935 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.112222910 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.112230062 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.127242088 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.127718925 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.127798080 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.127955914 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.127960920 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.127986908 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.128647089 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.128660917 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.128984928 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.129044056 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.129053116 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.129157066 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.129251957 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.129666090 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.129913092 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.129992008 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.130393982 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.130393982 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.130410910 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.130439043 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.130496979 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.130548000 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.131081104 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.131169081 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.131234884 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.131243944 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.131520033 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.131527901 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.131854057 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.132324934 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.132337093 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.132522106 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.132611990 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.132644892 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.132652998 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.132702112 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.133348942 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.133505106 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.133589983 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.133680105 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.133691072 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.134062052 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.134074926 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.139941931 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140105963 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.140130997 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140201092 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140250921 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.140259027 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140857935 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140892029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140912056 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.140917063 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.140961885 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.140966892 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.141735077 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.141772032 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.141814947 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.141849041 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.141855001 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.141882896 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.142632961 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.142671108 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.142688036 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.142692089 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.142852068 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.142857075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.143543005 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.143582106 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.143589973 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.143594980 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.143629074 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.143634081 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.144488096 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.144527912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.144561052 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.144566059 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.144607067 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.145345926 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.145432949 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.145440102 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.145469904 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.145582914 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.145591021 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.146234989 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.146243095 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.146300077 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.146363020 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.146368027 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.146389961 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.146395922 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.147178888 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.147208929 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.147234917 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.147239923 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.147409916 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.148016930 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148107052 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148113966 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.148133993 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148199081 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.148222923 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148910046 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148920059 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.148968935 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.149003029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.149015903 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.149017096 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.149022102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.149029016 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.149071932 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.149863005 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150034904 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150120020 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150181055 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.150188923 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150288105 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.150624037 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150825024 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.150979996 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.150988102 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151168108 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151202917 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151217937 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.151222944 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151267052 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.151271105 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151282072 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.151312113 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.151315928 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154015064 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154051065 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154077053 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.154084921 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154200077 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.154316902 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154376030 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154416084 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154418945 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.154428959 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.154462099 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.155189037 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.155267954 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.155271053 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.155291080 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.155383110 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.155436039 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.155442953 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.155810118 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.155873060 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.158740044 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.158782959 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.158792019 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.158803940 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.158900976 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.158905983 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.160742044 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.160840988 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.160854101 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.160959959 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161211967 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161267996 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.161273003 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161617041 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161650896 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161667109 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.161672115 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.161801100 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.169270992 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.169408083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.169430971 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.169461012 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.169469118 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.169538975 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.169815063 CEST	49820	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.169831991 CEST	443	49820	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.175653934 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.175726891 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.175728083 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.175740957 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.175779104 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.176434994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.176624060 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.176659107 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.176695108 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.176708937 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.176714897 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.176731110 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.178071976 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.178126097 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.178129911 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.178139925 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.178195953 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.178267956 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.178725004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.178778887 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.178785086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.196810007 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.196860075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.196913004 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.196922064 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.196969032 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.199862957 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200086117 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200161934 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.200167894 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200407982 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200447083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200455904 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.200460911 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200508118 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200510979 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.200519085 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200575113 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.200829983 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200894117 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200930119 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200958967 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.200980902 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.200985909 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.201009035 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.201533079 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.201584101 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.201595068 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.201601982 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.201651096 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.202135086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.202682972 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.202718019 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.202769041 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.202776909 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.202817917 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.202964067 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233019114 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233073950 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233107090 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233143091 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233144045 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233174086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233206034 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233217955 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233221054 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233228922 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233268976 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233273983 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233311892 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233393908 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233434916 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233441114 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233484983 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233691931 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233761072 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233794928 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233813047 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233819008 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.233861923 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.233871937 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236315966 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236358881 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236381054 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.236386061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236419916 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236464977 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.236469984 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.236512899 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.236711025 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.237842083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.238104105 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.238173962 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.238179922 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.238225937 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.238233089 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.238445044 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.238606930 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.238611937 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243057966 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243099928 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243118048 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243129015 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243165016 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243187904 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243192911 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243303061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243338108 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243343115 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243380070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243386984 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243393898 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243442059 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243442059 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243454933 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243494987 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.243499994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.243985891 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.244033098 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.244036913 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.246702909 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.246742964 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.246761084 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.246767044 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.246808052 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.246814013 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.248848915 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.248907089 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.248914957 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259053946 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259094954 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259120941 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.259126902 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259136915 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259179115 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.259191036 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.259236097 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.266006947 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.266266108 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.266304016 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.266324043 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.266330004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.266410112 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.266415119 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272011042 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272053003 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272063971 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.272073984 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272109985 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272113085 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.272119999 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272161961 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.272869110 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272929907 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.272960901 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.273009062 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.273020029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.273063898 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.273073912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.273130894 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.273175001 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.273180008 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.290890932 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.290934086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.290956974 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.290963888 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.291137934 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.291142941 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.294981003 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.295033932 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.295039892 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.297348022 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.297400951 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.297405958 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.299278975 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.299344063 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.299349070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.303128958 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.303179026 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.303234100 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.303240061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.303284883 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.305252075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.307439089 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.307482004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.307519913 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.307549000 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.307554960 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.307565928 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.314112902 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.314342022 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.314356089 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.314728975 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.315059900 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.315129042 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.315262079 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.326008081 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.326077938 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.326092005 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.328834057 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.328890085 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.328906059 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.331706047 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.331737041 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.331767082 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.331773996 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.331834078 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.335813046 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.336148024 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.336183071 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.336199999 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.336210012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.336249113 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.338020086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.339982986 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.340229988 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.340239048 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.341653109 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.341700077 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.341711998 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.341718912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.341762066 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.343509912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.345279932 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.345321894 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.345371008 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.345392942 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.345679998 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.346769094 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.348308086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.348340988 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.348370075 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.348377943 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.348421097 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.349982023 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.351407051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.351445913 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.351461887 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.351466894 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.351509094 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.353126049 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.354527950 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.354567051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.354587078 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.354593039 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.354732990 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.355958939 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.358505964 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.359262943 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.359330893 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.359349012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.359927893 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.359967947 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.359986067 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.359997034 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.360204935 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.360212088 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.361418962 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.361471891 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.361483097 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.362709999 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.362763882 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.362782001 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.364021063 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.364088058 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.364104033 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.365621090 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.365678072 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.365685940 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.366533995 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.366585016 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.366591930 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.368292093 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.368349075 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.368357897 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.369792938 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.369872093 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.369882107 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.370006084 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.370048046 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.370054007 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.371175051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.371227026 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.371236086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.372351885 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.372402906 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.372417927 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.373522043 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.373581886 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.373593092 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380146980 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380193949 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380203009 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.380209923 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380248070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380273104 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.380275965 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380285978 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.380321980 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.381172895 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.381223917 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.381228924 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.381726980 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.381797075 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.381802082 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.383784056 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.383826017 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.383856058 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.383879900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.383923054 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.384862900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396229029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396284103 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.396306992 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396682978 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396724939 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396743059 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.396753073 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.396840096 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.398130894 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.402965069 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403004885 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403019905 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.403044939 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403083086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403114080 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.403115034 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403127909 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403156042 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.403162003 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.403199911 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.403212070 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.406402111 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.406455040 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.406470060 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.406529903 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.406594992 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.406599998 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.418746948 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.418943882 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.418972015 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.419001102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.419045925 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.419589043 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423389912 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423438072 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423471928 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423481941 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.423501968 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423522949 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.423551083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.423631907 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.423638105 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.425280094 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.425329924 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.425335884 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.425345898 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.425673962 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.426554918 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.427771091 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.427829027 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.427834034 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.427851915 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.427891970 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.429012060 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.430423021 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.430459023 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.430470943 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.430493116 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.430656910 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.431515932 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.432784081 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.432815075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.432864904 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.432876110 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.432920933 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.434041023 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.435297012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.435338020 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.435362101 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.435374022 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.435412884 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.436477900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.437642097 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.437680960 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.437757969 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.437762976 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.437808990 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.438810110 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.439996004 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.440048933 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.440059900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.441220045 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.441271067 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.441291094 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.441298008 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.441721916 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.442368031 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.443341017 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.443422079 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.443427086 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.444318056 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.444386005 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.444391012 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.445339918 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.445388079 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.445399046 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.445404053 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.445512056 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.446187973 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.447123051 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.447180986 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.447186947 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.447191954 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.447222948 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.448034048 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.448961020 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.449014902 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.449021101 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.453290939 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.453376055 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.453402042 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.453726053 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.453905106 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.453913927 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.454525948 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.454567909 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.454575062 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.455746889 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.455781937 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.455799103 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.455809116 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.455921888 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.456545115 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.457268000 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.457298994 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.457328081 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.457334995 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.457376957 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.458012104 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.458748102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.458781958 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.458825111 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.458832979 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.459018946 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.459472895 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.461004019 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.461066961 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.461074114 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.461714029 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.461905956 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.461911917 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.472939014 CEST	49833	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:22.472981930 CEST	443	49833	35.201.124.9	192.168.2.4
May 24, 2024 17:47:22.473076105 CEST	49833	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:22.473510981 CEST	49833	443	192.168.2.4	35.201.124.9
May 24, 2024 17:47:22.473526955 CEST	443	49833	35.201.124.9	192.168.2.4
May 24, 2024 17:47:22.488966942 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.489042044 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.489061117 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.489070892 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.489123106 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.489350080 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.490065098 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.490102053 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.490134001 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.490139008 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.490190029 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.490762949 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.491483927 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.491520882 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.491555929 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.491590977 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.491597891 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.491628885 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.492568016 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.492605925 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.492618084 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.492621899 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.492707014 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.493613005 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.494599104 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.494648933 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.494657993 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.494664907 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.494740009 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.500300884 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.500499010 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.500669956 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.500807047 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.500823021 CEST	443	49831	34.107.203.234	192.168.2.4
May 24, 2024 17:47:22.500833035 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.500874043 CEST	49831	443	192.168.2.4	34.107.203.234
May 24, 2024 17:47:22.511293888 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.511934996 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.511961937 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.512005091 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.512015104 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.512070894 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.512614965 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.513434887 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.513464928 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.513493061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.513494015 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.513503075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.513531923 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.514381886 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.514408112 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.514452934 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.514460087 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.514544964 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.515182018 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.515223980 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.515278101 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.515292883 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.516041040 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.516069889 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.516100883 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.516108036 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.516155958 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.516815901 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.516865015 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.517127037 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.517133951 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.517676115 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.517703056 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.517759085 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.517765045 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.517813921 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.518465042 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519303083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519332886 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519362926 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519392014 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519392014 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.519408941 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.519424915 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.519469976 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.520097971 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.520191908 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.520262003 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.520267963 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.520958900 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.520993948 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.521013975 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.521019936 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.521091938 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.522452116 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.522505045 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.522556067 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.522562027 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523221016 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523322105 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.523330927 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523715019 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523746967 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523797989 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.523803949 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.523844004 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.524429083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.524686098 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.525096893 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.525104046 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.533885002 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.533943892 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.533951044 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.535398006 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.535430908 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.535456896 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.535465002 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.535588026 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.535593987 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547103882 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547173977 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.547207117 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547671080 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547718048 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547719955 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.547729969 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.547782898 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.547789097 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548719883 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548758030 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548793077 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.548795938 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548804045 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548846960 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.548852921 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.548891068 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.549684048 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.550040007 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.550075054 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.550100088 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.550110102 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.550153971 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.550159931 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.551089048 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.551155090 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.551162958 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.553595066 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.553653002 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.553661108 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.554081917 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.554128885 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.554136038 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.556585073 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.556752920 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.556760073 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.582227945 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.582524061 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.582551956 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.582632065 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.582643032 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.582684994 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.583688974 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.583728075 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.583765030 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.583806038 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.583811045 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.583817005 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.583865881 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.584690094 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.584752083 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.584780931 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.584825993 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.584832907 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.584868908 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.585701942 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.586205006 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.586241007 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.586257935 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.586263895 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.588794947 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.588800907 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.612041950 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.612607002 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.612639904 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.612672091 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.612771034 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.612771034 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.612809896 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.613487005 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.613493919 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.613723993 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.613754988 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.613791943 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.613797903 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.613838911 CEST	49819	443	192.168.2.4	216.58.212.142
May 24, 2024 17:47:22.613843918 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.614783049 CEST	443	49819	216.58.212.142	192.168.2.4
May 24, 2024 17:47:22.614814043 CEST	443	49819	216.58.212.142	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 24, 2024 17:46:26.290543079 CEST	192.168.2.4	1.1.1.1	0x9d31	Standard query (0)	icreativefintech.us22.list-manage.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:26.290689945 CEST	192.168.2.4	1.1.1.1	0xe511	Standard query (0)	icreativefintech.us22.list-manage.com	65	IN (0x0001)	false
May 24, 2024 17:46:27.510788918 CEST	192.168.2.4	1.1.1.1	0x879e	Standard query (0)	www.daystarpayments.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:27.510976076 CEST	192.168.2.4	1.1.1.1	0x1ff4	Standard query (0)	www.daystarpayments.com	65	IN (0x0001)	false
May 24, 2024 17:46:28.258914948 CEST	192.168.2.4	1.1.1.1	0xfae8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:28.259038925 CEST	192.168.2.4	1.1.1.1	0xa3ec	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 17:46:33.730036974 CEST	192.168.2.4	1.1.1.1	0xdf0e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:33.730195045 CEST	192.168.2.4	1.1.1.1	0xc180	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:46:36.443209887 CEST	192.168.2.4	1.1.1.1	0xcbdf	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:36.443516970 CEST	192.168.2.4	1.1.1.1	0xd8ca	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:46:39.827924967 CEST	192.168.2.4	1.1.1.1	0x9aca	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:39.828226089 CEST	192.168.2.4	1.1.1.1	0x579d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 17:46:40.987101078 CEST	192.168.2.4	1.1.1.1	0x75e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:40.988420963 CEST	192.168.2.4	1.1.1.1	0x5b66	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 17:46:42.746085882 CEST	192.168.2.4	1.1.1.1	0x30d5	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:42.746260881 CEST	192.168.2.4	1.1.1.1	0xaf1b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 24, 2024 17:46:43.520370960 CEST	192.168.2.4	1.1.1.1	0x8cc9	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:43.520561934 CEST	192.168.2.4	1.1.1.1	0xdce6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:47:14.571902037 CEST	192.168.2.4	1.1.1.1	0x3da6	Standard query (0)	settings.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:14.572252989 CEST	192.168.2.4	1.1.1.1	0x3e86	Standard query (0)	settings.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:15.226248980 CEST	192.168.2.4	1.1.1.1	0xb22a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.226463079 CEST	192.168.2.4	1.1.1.1	0x3fc2	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 24, 2024 17:47:15.226953983 CEST	192.168.2.4	1.1.1.1	0xfe6e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.227097988 CEST	192.168.2.4	1.1.1.1	0x77ad	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 24, 2024 17:47:15.544944048 CEST	192.168.2.4	1.1.1.1	0xdfac	Standard query (0)	www.daystarpayments.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.545097113 CEST	192.168.2.4	1.1.1.1	0x5e9a	Standard query (0)	www.daystarpayments.com	65	IN (0x0001)	false
May 24, 2024 17:47:15.972507954 CEST	192.168.2.4	1.1.1.1	0x2f30	Standard query (0)	settings.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.972759962 CEST	192.168.2.4	1.1.1.1	0x647e	Standard query (0)	settings.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:16.201011896 CEST	192.168.2.4	1.1.1.1	0xca17	Standard query (0)	tools.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.201725006 CEST	192.168.2.4	1.1.1.1	0x94c5	Standard query (0)	tools.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:18.513036966 CEST	192.168.2.4	1.1.1.1	0x915c	Standard query (0)	in.visitors.live	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:18.513290882 CEST	192.168.2.4	1.1.1.1	0x6581	Standard query (0)	in.visitors.live	65	IN (0x0001)	false
May 24, 2024 17:47:18.577605963 CEST	192.168.2.4	1.1.1.1	0x44bb	Standard query (0)	realtime.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:18.577744961 CEST	192.168.2.4	1.1.1.1	0x81d9	Standard query (0)	realtime.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:19.110217094 CEST	192.168.2.4	1.1.1.1	0x25c6	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.110361099 CEST	192.168.2.4	1.1.1.1	0xd835	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 24, 2024 17:47:19.443769932 CEST	192.168.2.4	1.1.1.1	0x800	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.444185972 CEST	192.168.2.4	1.1.1.1	0x503b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 17:47:19.646934986 CEST	192.168.2.4	1.1.1.1	0xc44e	Standard query (0)	api-preview.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.647531986 CEST	192.168.2.4	1.1.1.1	0x486a	Standard query (0)	api-preview.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:20.774410009 CEST	192.168.2.4	1.1.1.1	0xdb46	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.778700113 CEST	192.168.2.4	1.1.1.1	0xe4e1	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 24, 2024 17:47:20.816210032 CEST	192.168.2.4	1.1.1.1	0x6753	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.816423893 CEST	192.168.2.4	1.1.1.1	0xff2a	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 17:47:21.109298944 CEST	192.168.2.4	1.1.1.1	0xf515	Standard query (0)	api-preview.luckyorange.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:21.109666109 CEST	192.168.2.4	1.1.1.1	0xd5e5	Standard query (0)	api-preview.luckyorange.com	65	IN (0x0001)	false
May 24, 2024 17:47:24.913186073 CEST	192.168.2.4	1.1.1.1	0xdef6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:24.913371086 CEST	192.168.2.4	1.1.1.1	0xb0e8	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:47:24.919387102 CEST	192.168.2.4	1.1.1.1	0xb41b	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:24.919547081 CEST	192.168.2.4	1.1.1.1	0x4dae	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:47:25.081177950 CEST	192.168.2.4	1.1.1.1	0xbcc5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:25.081559896 CEST	192.168.2.4	1.1.1.1	0x3e78	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 17:47:25.887370110 CEST	192.168.2.4	1.1.1.1	0x5d46	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:25.887516975 CEST	192.168.2.4	1.1.1.1	0x726b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:47:26.301017046 CEST	192.168.2.4	1.1.1.1	0xcbb7	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.301301003 CEST	192.168.2.4	1.1.1.1	0x8d24	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
May 24, 2024 17:47:26.304251909 CEST	192.168.2.4	1.1.1.1	0x9de	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.304409981 CEST	192.168.2.4	1.1.1.1	0xd1c	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 24, 2024 17:47:27.485903025 CEST	192.168.2.4	1.1.1.1	0x49f7	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:27.486027956 CEST	192.168.2.4	1.1.1.1	0x4d45	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
May 24, 2024 17:47:29.267574072 CEST	192.168.2.4	1.1.1.1	0xc14c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.268235922 CEST	192.168.2.4	1.1.1.1	0xd7bd	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 24, 2024 17:47:34.903418064 CEST	192.168.2.4	1.1.1.1	0x5490	Standard query (0)	rr2---sn-p5qlsnrl.googlevideo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:34.903722048 CEST	192.168.2.4	1.1.1.1	0x5040	Standard query (0)	rr2---sn-p5qlsnrl.googlevideo.com	65	IN (0x0001)	false
May 24, 2024 17:47:35.745383978 CEST	192.168.2.4	1.1.1.1	0xed6f	Standard query (0)	rr2---sn-p5qlsnrl.googlevideo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:35.745383978 CEST	192.168.2.4	1.1.1.1	0xbe16	Standard query (0)	rr2---sn-p5qlsnrl.googlevideo.com	65	IN (0x0001)	false
May 24, 2024 17:47:43.696085930 CEST	192.168.2.4	1.1.1.1	0xaa6	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.696377993 CEST	192.168.2.4	1.1.1.1	0x65ad	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 24, 2024 17:47:53.725529909 CEST	192.168.2.4	1.1.1.1	0xf62e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:53.725888968 CEST	192.168.2.4	1.1.1.1	0xdd32	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 24, 2024 17:47:53.873451948 CEST	192.168.2.4	1.1.1.1	0x4d71	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:53.873718023 CEST	192.168.2.4	1.1.1.1	0x5624	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	65	IN (0x0001)	false
May 24, 2024 17:47:54.619618893 CEST	192.168.2.4	1.1.1.1	0xb92d	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:54.619759083 CEST	192.168.2.4	1.1.1.1	0xce39	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	65	IN (0x0001)	false
May 24, 2024 17:47:55.743005037 CEST	192.168.2.4	1.1.1.1	0xb41b	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:55.743159056 CEST	192.168.2.4	1.1.1.1	0xbcef	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 17:47:55.838520050 CEST	192.168.2.4	1.1.1.1	0x57e4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:55.838660002 CEST	192.168.2.4	1.1.1.1	0x52cf	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 24, 2024 17:46:26.309827089 CEST	1.1.1.1	192.168.2.4	0x9d31	No error (0)	icreativefintech.us22.list-manage.com	swc.list-manage.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:26.347641945 CEST	1.1.1.1	192.168.2.4	0xe511	No error (0)	icreativefintech.us22.list-manage.com	swc.list-manage.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:27.556587934 CEST	1.1.1.1	192.168.2.4	0x879e	No error (0)	www.daystarpayments.com	daystarpayments.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:27.556587934 CEST	1.1.1.1	192.168.2.4	0x879e	No error (0)	daystarpayments.com		192.124.249.2	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:27.574918985 CEST	1.1.1.1	192.168.2.4	0x1ff4	No error (0)	www.daystarpayments.com	daystarpayments.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:28.316167116 CEST	1.1.1.1	192.168.2.4	0xfae8	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:28.320869923 CEST	1.1.1.1	192.168.2.4	0xa3ec	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 17:46:33.739964962 CEST	1.1.1.1	192.168.2.4	0xdf0e	No error (0)	googleads.g.doubleclick.net		216.58.212.162	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:33.759531021 CEST	1.1.1.1	192.168.2.4	0xc180	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 17:46:36.503712893 CEST	1.1.1.1	192.168.2.4	0xcbdf	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:39.895499945 CEST	1.1.1.1	192.168.2.4	0x9aca	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:39.895514965 CEST	1.1.1.1	192.168.2.4	0x579d	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 17:46:40.494292021 CEST	1.1.1.1	192.168.2.4	0xbdb0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:40.494292021 CEST	1.1.1.1	192.168.2.4	0xbdb0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:40.994604111 CEST	1.1.1.1	192.168.2.4	0x75e1	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:41.043260098 CEST	1.1.1.1	192.168.2.4	0x5b66	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 17:46:41.048818111 CEST	1.1.1.1	192.168.2.4	0x57f2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:41.048818111 CEST	1.1.1.1	192.168.2.4	0x57f2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:42.773782969 CEST	1.1.1.1	192.168.2.4	0x30d5	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:42.773782969 CEST	1.1.1.1	192.168.2.4	0x30d5	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:42.773782969 CEST	1.1.1.1	192.168.2.4	0x30d5	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:42.773782969 CEST	1.1.1.1	192.168.2.4	0x30d5	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:42.773782969 CEST	1.1.1.1	192.168.2.4	0x30d5	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:43.531511068 CEST	1.1.1.1	192.168.2.4	0x8cc9	No error (0)	stats.g.doubleclick.net		142.251.5.155	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:43.531511068 CEST	1.1.1.1	192.168.2.4	0x8cc9	No error (0)	stats.g.doubleclick.net		142.251.5.156	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:43.531511068 CEST	1.1.1.1	192.168.2.4	0x8cc9	No error (0)	stats.g.doubleclick.net		142.251.5.157	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:43.531511068 CEST	1.1.1.1	192.168.2.4	0x8cc9	No error (0)	stats.g.doubleclick.net		142.251.5.154	A (IP address)	IN (0x0001)	false
May 24, 2024 17:46:54.023227930 CEST	1.1.1.1	192.168.2.4	0x1312	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:46:54.023227930 CEST	1.1.1.1	192.168.2.4	0x1312	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:14.584448099 CEST	1.1.1.1	192.168.2.4	0x3da6	No error (0)	settings.luckyorange.com		34.107.203.234	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243680000 CEST	1.1.1.1	192.168.2.4	0xfe6e	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243719101 CEST	1.1.1.1	192.168.2.4	0xb22a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.243719101 CEST	1.1.1.1	192.168.2.4	0xb22a	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:15.243747950 CEST	1.1.1.1	192.168.2.4	0x77ad	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.243747950 CEST	1.1.1.1	192.168.2.4	0x77ad	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 24, 2024 17:47:15.243777037 CEST	1.1.1.1	192.168.2.4	0x3fc2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.629262924 CEST	1.1.1.1	192.168.2.4	0x5e9a	No error (0)	www.daystarpayments.com	daystarpayments.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.783391953 CEST	1.1.1.1	192.168.2.4	0xdfac	No error (0)	www.daystarpayments.com	daystarpayments.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:15.783391953 CEST	1.1.1.1	192.168.2.4	0xdfac	No error (0)	daystarpayments.com		192.124.249.2	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.055507898 CEST	1.1.1.1	192.168.2.4	0x2f30	No error (0)	settings.luckyorange.com		34.107.203.234	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.219788074 CEST	1.1.1.1	192.168.2.4	0x94c5	No error (0)	tools.luckyorange.com	d20519brkbo4nz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:16.219801903 CEST	1.1.1.1	192.168.2.4	0xca17	No error (0)	tools.luckyorange.com	d20519brkbo4nz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:16.219801903 CEST	1.1.1.1	192.168.2.4	0xca17	No error (0)	d20519brkbo4nz.cloudfront.net		13.32.27.6	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.219801903 CEST	1.1.1.1	192.168.2.4	0xca17	No error (0)	d20519brkbo4nz.cloudfront.net		13.32.27.70	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.219801903 CEST	1.1.1.1	192.168.2.4	0xca17	No error (0)	d20519brkbo4nz.cloudfront.net		13.32.27.112	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:16.219801903 CEST	1.1.1.1	192.168.2.4	0xca17	No error (0)	d20519brkbo4nz.cloudfront.net		13.32.27.11	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:17.403603077 CEST	1.1.1.1	192.168.2.4	0xd7ab	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:17.403603077 CEST	1.1.1.1	192.168.2.4	0xd7ab	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:18.524519920 CEST	1.1.1.1	192.168.2.4	0x915c	No error (0)	in.visitors.live		35.201.124.9	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:18.591010094 CEST	1.1.1.1	192.168.2.4	0x44bb	No error (0)	realtime.luckyorange.com		35.244.167.102	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131520987 CEST	1.1.1.1	192.168.2.4	0x25c6	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.131537914 CEST	1.1.1.1	192.168.2.4	0xd835	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:19.131537914 CEST	1.1.1.1	192.168.2.4	0xd835	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 24, 2024 17:47:19.453218937 CEST	1.1.1.1	192.168.2.4	0x800	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:19.453218937 CEST	1.1.1.1	192.168.2.4	0x800	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:19.453428984 CEST	1.1.1.1	192.168.2.4	0x503b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:19.663316965 CEST	1.1.1.1	192.168.2.4	0xc44e	No error (0)	api-preview.luckyorange.com		34.107.203.234	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.819546938 CEST	1.1.1.1	192.168.2.4	0xdb46	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:20.831432104 CEST	1.1.1.1	192.168.2.4	0xff2a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:20.831464052 CEST	1.1.1.1	192.168.2.4	0x6753	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:20.831464052 CEST	1.1.1.1	192.168.2.4	0x6753	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:21.128223896 CEST	1.1.1.1	192.168.2.4	0xf515	No error (0)	api-preview.luckyorange.com		34.107.203.234	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:24.924778938 CEST	1.1.1.1	192.168.2.4	0xb0e8	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 17:47:24.929553032 CEST	1.1.1.1	192.168.2.4	0xdef6	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:24.929575920 CEST	1.1.1.1	192.168.2.4	0xb41b	No error (0)	static.doubleclick.net		142.250.74.198	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:25.088673115 CEST	1.1.1.1	192.168.2.4	0xbcc5	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:25.098229885 CEST	1.1.1.1	192.168.2.4	0x3e78	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 17:47:25.941812038 CEST	1.1.1.1	192.168.2.4	0x5d46	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:25.941828012 CEST	1.1.1.1	192.168.2.4	0x726b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 17:47:26.313271046 CEST	1.1.1.1	192.168.2.4	0xcbb7	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:26.313271046 CEST	1.1.1.1	192.168.2.4	0xcbb7	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.313287973 CEST	1.1.1.1	192.168.2.4	0x8d24	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:26.318305969 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:27.515885115 CEST	1.1.1.1	192.168.2.4	0x49f7	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:27.515885115 CEST	1.1.1.1	192.168.2.4	0x49f7	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:27.519516945 CEST	1.1.1.1	192.168.2.4	0x4d45	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:29.283277035 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:29.283277035 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:29.283307076 CEST	1.1.1.1	192.168.2.4	0xc14c	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:34.913181067 CEST	1.1.1.1	192.168.2.4	0x5490	No error (0)	rr2---sn-p5qlsnrl.googlevideo.com	rr2.sn-p5qlsnrl.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:34.913181067 CEST	1.1.1.1	192.168.2.4	0x5490	No error (0)	rr2.sn-p5qlsnrl.googlevideo.com		74.125.155.39	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:34.944911003 CEST	1.1.1.1	192.168.2.4	0x5040	No error (0)	rr2---sn-p5qlsnrl.googlevideo.com	rr2.sn-p5qlsnrl.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:35.760174990 CEST	1.1.1.1	192.168.2.4	0xed6f	No error (0)	rr2---sn-p5qlsnrl.googlevideo.com	rr2.sn-p5qlsnrl.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:35.760174990 CEST	1.1.1.1	192.168.2.4	0xed6f	No error (0)	rr2.sn-p5qlsnrl.googlevideo.com		74.125.155.39	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:35.764971018 CEST	1.1.1.1	192.168.2.4	0xbe16	No error (0)	rr2---sn-p5qlsnrl.googlevideo.com	rr2.sn-p5qlsnrl.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:37.313606024 CEST	1.1.1.1	192.168.2.4	0xdbfe	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:37.313606024 CEST	1.1.1.1	192.168.2.4	0xdbfe	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.750427961 CEST	1.1.1.1	192.168.2.4	0xaa6	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:43.750427961 CEST	1.1.1.1	192.168.2.4	0xaa6	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.750427961 CEST	1.1.1.1	192.168.2.4	0xaa6	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.750427961 CEST	1.1.1.1	192.168.2.4	0xaa6	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.750427961 CEST	1.1.1.1	192.168.2.4	0xaa6	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:43.803344965 CEST	1.1.1.1	192.168.2.4	0x65ad	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:53.737705946 CEST	1.1.1.1	192.168.2.4	0xf62e	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:53.885451078 CEST	1.1.1.1	192.168.2.4	0x4d71	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:53.885451078 CEST	1.1.1.1	192.168.2.4	0x4d71	No error (0)	rr2.sn-p5qs7nzr.googlevideo.com		173.194.53.7	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:53.915358067 CEST	1.1.1.1	192.168.2.4	0x5624	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:54.628658056 CEST	1.1.1.1	192.168.2.4	0xb92d	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:54.628658056 CEST	1.1.1.1	192.168.2.4	0xb92d	No error (0)	rr2.sn-p5qs7nzr.googlevideo.com		173.194.53.7	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:54.664048910 CEST	1.1.1.1	192.168.2.4	0xce39	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 17:47:55.753413916 CEST	1.1.1.1	192.168.2.4	0xb41b	No error (0)	td.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
May 24, 2024 17:47:55.852247000 CEST	1.1.1.1	192.168.2.4	0x57e4	No error (0)	play.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:28 UTC	856	OUT	GET /apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:29 UTC	845	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-DNS-Prefetch-Control: on Link: <https://www.daystarpayments.com/wp-json/>; rel="https://api.w.org/", <https://www.daystarpayments.com/wp-json/wp/v2/pages/11063>; rel="alternate"; type="application/json", <https://www.daystarpayments.com/?p=11063>; rel=shortlink X-LiteSpeed-Tag: e9f_HTTP.200,e9f_page,e9f_URL.a5983508486b57ee12add914fe23f28a,e9f_Po.11063,e9f_PGS,e9f_,e9f_MIN.4187afa6e2a8af9719ef76e9dde0899a.css,e9f_MIN.503e1faacc150a4f6f725bcecfce6ae2.js Vary: Accept-Encoding X-Sucuri-Cache: MISS
2024-05-24 15:46:29 UTC	7347	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 6f 70 74 69 6d 69 7a 65 64 3d 22 32 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 6c 69 74 65 73 70 65 65 64 2f 63 73 73 2f 34 31 38 37 61 66 61 36 65 32 61 38 61 66 39 37 31 39 65 66 37 36 65 39 64 64 65 30 38 39 39 61 2e 63 73 73 3f 76 65 72 3d 34 61 31 63 32 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 Data Ascii: 4000<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><link data-optimized="2" rel="stylesheet" href="https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2" /><meta name='robots' content='noi
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 32 2f 63 72 6f 70 70 65 64 2d 31 2d 35 2d 32 37 30 78 32 37 30 2e 70 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 20 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 65 Data Ascii: ation-TileImage" content="https://www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-270x270.png" /><meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" /></head><body class="page-template page-template-ele
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 2d 65 6d 61 69 6c 20 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 35 30 20 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 72 65 71 75 69 72 65 64 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 66 6f 72 6d 2d 66 69 65 6c 64 2d 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 22 3e 0a 53 69 67 6e 65 72 20 46 69 72 73 74 20 4e 61 6d 65 09 09 09 09 09 09 09 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 73 69 7a 65 3d 22 31 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 5f 66 69 65 6c 64 73 5b 65 6d 61 69 6c 5d 22 20 69 64 3d 22 66 6f 72 6d 2d 66 69 65 6c 64 2d 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f Data Ascii: ementor-field-group-email elementor-col-50 elementor-field-required"><label for="form-field-email" class="elementor-field-label">Signer First Name</label><input size="1" type="text" name="form_fields[email]" id="form-field-email" class="elemento
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 6c 64 20 62 65 20 6f 77 6e 65 72 29 09 09 09 09 09 09 09 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 73 69 7a 65 3d 22 31 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 5f 66 69 65 6c 64 73 5b 66 69 65 6c 64 5f 34 30 32 64 34 62 36 5d 22 20 69 64 3d 22 66 6f 72 6d 2d 66 69 65 6c 64 2d 66 69 65 6c 64 5f 34 30 32 64 34 62 36 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 73 6d 20 20 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6e 74 65 72 20 59 6f 75 72 20 46 69 72 73 74 20 4e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 61 72 69 61 2d 72 65 71 75 69 72 65 Data Ascii: ld be owner)</label><input size="1" type="text" name="form_fields[field_402d4b6]" id="form-field-field_402d4b6" class="elementor-field elementor-size-sm elementor-field-textual" placeholder="Enter Your First Name" required="required" aria-require
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 64 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 22 3e 0a 49 6e 2d 70 65 72 73 6f 6e 20 53 77 69 70 65 2f 54 65 72 6d 69 6e 61 6c 09 09 09 09 09 09 09 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 5f 66 69 65 6c 64 73 5b 66 69 65 6c 64 5f 64 35 37 64 38 34 64 5d 22 20 69 64 3d 22 66 6f 72 6d 2d 66 69 65 6c 64 2d 66 69 65 6c 64 5f 64 35 37 64 38 34 64 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 73 6d 20 20 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6e 74 65 72 20 69 6e 20 25 22 20 6d 69 6e 3d Data Ascii: d" class="elementor-field-label">In-person Swipe/Terminal</label><input type="number" name="form_fields[field_d57d84d]" id="form-field-field_d57d84d" class="elementor-field elementor-size-sm elementor-field-textual" placeholder="Enter in %" min=
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 31 2d 33 30 20 64 61 79 73 22 3e 31 31 2d 33 30 20 64 61 79 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 2d 39 30 20 64 61 79 73 22 3e 33 31 2d 39 30 20 64 61 79 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 30 2b 20 64 61 79 73 22 3e 39 30 2b 20 64 61 79 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 2f 73 65 6c 65 63 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 79 70 65 2d 73 75 62 6d 69 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 33 30 20 65 2d Data Ascii: ><option value="11-30 days">11-30 days</option><option value="31-90 days">31-90 days</option><option value="90+ days">90+ days</option></select></div></div><div class="elementor-field-group elementor-column elementor-field-type-submit elementor-col-30 e-
2024-05-24 15:46:29 UTC	8192	IN	Data Raw: 69 64 67 65 74 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 2e 64 65 66 61 75 6c 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 2d 77 72 61 70 70 65 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 66 61 63 65 Data Ascii: idget" data-widget_type="social-icons.default"><div class="elementor-widget-container"><div class="elementor-social-icons-wrapper elementor-grid"><span class="elementor-grid-item"><a class="elementor-icon elementor-social-icon elementor-social-icon-face
2024-05-24 15:46:30 UTC	7846	IN	Data Raw: 2c 6e 29 7b 65 3d 67 74 2b 65 3b 6e 75 6c 6c 21 3d 3d 6e 3f 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 6e 29 3a 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 7d 28 74 2c 62 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 20 73 28 74 2c 6e 75 6c 6c 29 2c 30 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 63 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 63 28 74 29 3d 3d 3d 76 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 2c 6e 2c 61 29 7b 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 28 65 29 3a 74 28 65 2c 6e 29 3a 74 28 65 2c 6e 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 65 29 7b 6e 74 3f 74 Data Ascii: ,n){e=gt+e;null!==n?t.setAttribute(e,n):t.removeAttribute(e)}(t,bt,e)}function r(t){return s(t,null),0}function u(t){return null===c(t)}function d(t){return c(t)===vt}function f(t,e,n,a){t&&(void 0===a?void 0===n?t(e):t(e,n):t(e,n,a))}function _(t,e){nt?t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:30 UTC	806	OUT	GET /wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:30 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:30 GMT Content-Type: text/css Content-Length: 1172225 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 22 May 2024 13:30:05 GMT ETag: "2480696-11e301-6190aeebb8226" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:46:30 UTC	7648	IN	Data Raw: 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 69 6d 67 2e 65 6d 6f 6a 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2f 2a 21 20 54 68 69 Data Ascii: img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:0 0 !important;padding:0 !important}/*! Thi
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 76 65 72 79 2d Data Ascii: d{background:var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background:var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important}.has-very-
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 31 22 7d 2e 65 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 32 22 7d 2e 65 69 63 6f 6e 2d 73 68 6f 72 74 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 33 22 7d 2e 65 69 63 6f 6e 2d 6e 65 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 34 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 35 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 36 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ore{content:"\e881"}.eicon-zoom-in:before{content:"\e882"}.eicon-shortcode:before{content:"\e883"}.eicon-nerd:before{content:"\e884"}.eicon-device-desktop:before{content:"\e885"}.eicon-device-tablet:before{content:"\e886"}.eicon-device-mobile:before{conte
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 39 34 38 22 7d 2e 65 69 63 6f 6e 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 39 22 7d 2e 65 69 63 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 61 22 7d 2e 65 69 63 6f 6e 2d 6d 61 70 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 62 22 7d 2e 65 69 63 6f 6e 2d 6d 65 65 74 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 63 22 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 73 68 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 64 22 7d 2e 65 69 63 6f 6e 2d 74 2d 6c 65 74 74 65 72 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 65 22 7d 2e 65 69 63 6f 6e Data Ascii: 948"}.eicon-cloud-upload:before{content:"\e949"}.eicon-search-bold:before{content:"\e94a"}.eicon-map-pin:before{content:"\e94b"}.eicon-meetup:before{content:"\e94c"}.eicon-slideshow:before{content:"\e94d"}.eicon-t-letter-bold:before{content:"\e94e"}.eicon
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 64 69 73 61 62 6c 65 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: -wrapper .dialog-button:disabled,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button:disabled{background-color:var(--e-a-btn-bg-disabled);color:var(--e-a-btn-color-disabled)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button:not(.elementor-
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 67 6f 2d 70 72 6f 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 67 6f 2d 70 72 6f 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 3a 66 6f 63 75 Data Ascii: s-wrapper .dialog-button.e-accent:hover,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.go-pro:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.go-pro:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-accent:focu
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 28 2d 2d 6f 72 64 65 72 29 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 62 73 6f 6c 75 74 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 3a 77 68 65 72 65 28 2e 65 2d 63 6f 6e 2d 66 75 6c 6c 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 29 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 29 3b 66 6c 65 78 2d 77 72 61 70 3a 76 61 72 28 2d 2d 66 6c 65 78 2d 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 Data Ascii: (--order);align-self:var(--align-self)}.elementor-element.elementor-absolute,.elementor-element.elementor-fixed{z-index:1}.elementor-element:where(.e-con-full,.elementor-widget){flex-direction:var(--flex-direction);flex-wrap:var(--flex-wrap);justify-conte
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 22 5d 7b 77 69 64 74 68 3a 36 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 36 36 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 36 36 22 5d 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 37 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 37 30 22 5d 7b 77 69 64 74 68 3a 37 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 37 35 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 37 35 22 5d 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 65 Data Ascii: "]{width:60%}.elementor-column.elementor-col-66,.elementor-column[data-col="66"]{width:66.666%}.elementor-column.elementor-col-70,.elementor-column[data-col="70"]{width:70%}.elementor-column.elementor-col-75,.elementor-column[data-col="75"]{width:75%}.ele
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 7b 6f 72 64 65 72 3a 33 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c Data Ascii: blet>.elementor-container>:nth-child(8){order:3}.elementor-reverse-tablet>.elementor-container>:nth-child(9){order:2}.elementor-reverse-tablet>.elementor-container>:nth-child(10){order:1}}@media (min-width:768px) and (max-width:-1){.elementor-reverse-tabl
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 33 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 34 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 35 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 35 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 36 2c 31 66 72 Data Ascii: ate-columns:repeat(3,1fr)}.elementor-grid-tablet-4 .elementor-grid{grid-template-columns:repeat(4,1fr)}.elementor-grid-tablet-5 .elementor-grid{grid-template-columns:repeat(5,1fr)}.elementor-grid-tablet-6 .elementor-grid{grid-template-columns:repeat(6,1fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:30 UTC	766	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:30 UTC	548	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:30 GMT Content-Type: text/javascript Content-Length: 87553 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 10 Nov 2023 15:27:45 GMT ETag: "2842c2a-15601-609cdf6505741" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:46:30 UTC	7644	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: n W(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: lected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: tion(e){return d(e,"parentNode")},parentsUntil:function(e,t,n){return d(e,"parentNode",n)},next:function(e){return A(e,"nextSibling")},prev:function(e){return A(e,"previousSibling")},nextAll:function(e){return d(e,"nextSibling")},prevAll:function(e){retur
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 65 2e 71 75 65 75 65 28 65 2c 74 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 2c 69 3d 6e 2e 73 68 69 66 74 28 29 2c 6f 3d 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 74 29 3b 22 69 6e 70 72 6f 67 72 65 73 73 22 3d 3d 3d 69 26 26 28 69 3d 6e 2e 73 68 69 66 74 28 29 2c 72 2d 2d 29 2c 69 26 26 28 22 66 78 22 3d 3d 3d 74 26 26 6e 2e 75 6e 73 68 69 66 74 28 22 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 65 6c 65 74 65 20 6f 2e 73 74 6f 70 2c 69 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 Data Ascii: e.queue(e,t),r=n.length,i=n.shift(),o=ce._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 64 65 7c 7c 74 68 69 73 29 69 66 28 31 3d 3d 3d 6c 2e 6e 6f 64 65 54 79 70 65 26 26 28 22 63 6c 69 63 6b 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 21 30 21 3d 3d 6c 2e 64 69 73 61 62 6c 65 64 29 29 7b 66 6f 72 28 6f 3d 5b 5d 2c 61 3d 7b 7d 2c 6e 3d 30 3b 6e 3c 75 3b 6e 2b 2b 29 76 6f 69 64 20 30 3d 3d 3d 61 5b 69 3d 28 72 3d 74 5b 6e 5d 29 2e 73 65 6c 65 63 74 6f 72 2b 22 20 22 5d 26 26 28 61 5b 69 5d 3d 72 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 3f 2d 31 3c 63 65 28 69 2c 74 68 69 73 29 2e 69 6e 64 65 78 28 6c 29 3a 63 65 2e 66 69 6e 64 28 69 2c 74 68 69 73 2c 6e 75 6c 6c 2c 5b 6c 5d 29 2e 6c 65 6e 67 74 68 29 2c 61 5b 69 5d 26 26 6f 2e 70 75 73 68 28 72 29 3b 6f 2e 6c 65 6e 67 74 68 26 26 73 2e 70 75 73 68 28 7b 65 6c 65 6d 3a 6c 2c 68 61 6e 64 6c 65 72 73 3a Data Ascii: de\|\|this)if(1===l.nodeType&&("click"!==e.type\|\|!0!==l.disabled)){for(o=[],a={},n=0;n<u;n++)void 0===a[i=(r=t[n]).selector+" "]&&(a[i]=r.needsContext?-1<ce(i,this).index(l):ce.find(i,this,null,[l]).length),a[i]&&o.push(r);o.length&&s.push({elem:l,handlers:
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 4f 65 2e 74 65 73 74 28 65 29 26 26 21 6b 65 5b 28 54 65 2e 65 78 65 63 28 65 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 7b 65 3d 63 65 2e 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 65 29 3b 74 72 79 7b 66 6f 72 28 3b 6e 3c 72 3b 6e 2b 2b 29 31 3d 3d 3d 28 74 3d 74 68 69 73 5b 6e 5d 7c 7c 7b 7d 29 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 2c 21 31 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3b 74 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 Data Ascii: ing"==typeof e&&!Oe.test(e)&&!ke[(Te.exec(e)\|\|["",""])[1].toLowerCase()]){e=ce.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]\|\|{}).nodeType&&(ce.cleanData(Se(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},repla
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 3d 65 2e 6e 6f 77 29 7d 7d 2c 63 65 2e 65 61 73 69 6e 67 3d 7b 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 65 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 2c 5f 64 65 66 61 75 6c 74 3a 22 73 77 69 6e 67 22 7d 2c 63 65 2e 66 78 3d 61 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 63 65 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 73 74 2c 75 74 2c 6c 74 2c 63 74 2c 66 74 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 Data Ascii: ={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},ce.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},ce.fx=at.prototype.init,ce.fx.step={};var st,ut,lt,ct,ft=/^(?:toggle
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4d 28 74 68 69 73 2c 63 65 2e 70 72 6f 70 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 5b 63 65 2e 70 72 6f 70 46 69 78 5b 65 5d 7c 7c 65 5d 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d Data Ascii: unction(e,t){return M(this,ce.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[ce.propFix[e]\|\|e]})}}),ce.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&ce.isXMLDoc(e)\|\|(t=
2024-05-24 15:46:30 UTC	8192	IN	Data Raw: 22 2c 68 74 6d 6c 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 78 6d 6c 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 20 74 65 78 74 2f 78 6d 6c 22 2c 6a 73 6f 6e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 78 6d 6c 3a 2f 5c 62 78 6d 6c 5c 62 2f 2c 68 74 6d 6c 3a 2f 5c 62 68 74 6d 6c 2f 2c 6a 73 6f 6e 3a 2f 5c 62 6a 73 6f 6e 5c 62 2f 7d 2c 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 3a 7b 78 6d 6c 3a 22 72 65 73 70 6f 6e 73 65 58 4d 4c 22 2c 74 65 78 74 3a 22 72 65 73 70 6f 6e 73 65 54 65 78 74 22 2c 6a 73 6f 6e 3a 22 72 65 73 70 6f 6e 73 65 4a 53 4f 4e 22 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 2a 20 74 65 78 74 22 3a 53 74 72 69 6e 67 2c 22 74 65 78 Data Ascii: ",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/,html:/\bhtml/,json:/\bjson\b/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:31 UTC	790	OUT	GET /wp-content/litespeed/js/503e1faacc150a4f6f725bcecfce6ae2.js?ver=4a1c2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:13 UTC	549	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:10 GMT Content-Type: text/javascript Content-Length: 584328 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 24 May 2024 15:46:29 GMT ETag: "24812c1-8ea88-619351230f3b3" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:13 UTC	7643	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 3d 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: window._wpemojiSettings={"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.daystarpayments.com\/wp-inclu
2024-05-24 15:47:13 UTC	8192	IN	Data Raw: 73 2c 22 74 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 5b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 74 79 70 65 22 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 22 6a 51 75 65 72 79 2e 69 73 Data Ascii: s,"type",function(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?f[Object.prototype.toString.call(e)]\|\|"object":typeof e},"type","jQuery.type is deprecated"),c(s,"isFunction",function(e){return"function"==typeof e},"isFunction","jQuery.is
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 65 6c 66 22 2c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 2c 22 61 6e 64 53 65 6c 66 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 2c 20 75 73 65 20 6a 51 75 65 72 79 2e 66 6e 2e 61 64 64 42 61 63 6b 28 29 22 29 2c 73 2e 44 65 66 65 72 72 65 64 26 26 28 57 3d 73 2e 44 65 66 65 72 72 65 64 2c 5f 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 Data Ascii: elf",s.fn.addBack,"andSelf","jQuery.fn.andSelf() is deprecated and removed, use jQuery.fn.addBack()"),s.Deferred&&(W=s.Deferred,_=[["resolve","done",s.Callbacks("once memory"),s.Callbacks("once memory"),"resolved"],["reject","fail",s.Callbacks("once memor
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 73 45 6e 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 6f 61 64 50 69 78 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 69 72 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 64 61 74 61 29 7b 72 65 74 75 72 6e 21 31 7d 2c 6f 6e 41 64 53 65 6e 73 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 43 6c 69 63 6b 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 70 61 72 61 6d 73 29 7b 7d 2c 6f 6e 57 61 74 63 68 56 69 64 65 6f 3a 66 75 6e 63 74 69 6f 6e 28 70 61 72 61 6d 73 29 7b 7d 2c 6f 6e 43 6f 6d 6d 65 6e 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 46 6f 72 6d 45 76 65 6e 74 3a 66 75 6e Data Ascii: ion(){return{isEnabled:function(){},disable:function(){},loadPixel:function(){},fireEvent:function(name,data){return!1},onAdSenseEvent:function(){},onClickEvent:function(params){},onWatchVideo:function(params){},onCommentEvent:function(){},onFormEvent:fun
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 68 3a 27 2f 27 7d 29 7d 65 6c 73 65 7b 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 75 72 6c 3a 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 55 72 6c 2c 64 61 74 61 54 79 70 65 3a 27 6a 73 6f 6e 27 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 27 70 79 73 5f 67 65 74 5f 70 62 69 64 27 7d 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 72 65 73 29 7b 69 66 28 72 65 73 2e 64 61 74 61 26 26 72 65 73 2e 64 61 74 61 2e 70 62 69 64 21 3d 21 31 26 26 6f 70 74 69 6f 6e 73 2e 73 65 6e 64 5f 65 78 74 65 72 6e 61 6c 5f 69 64 29 7b 69 66 28 21 28 6f 70 74 69 6f 6e 73 2e 63 6f 6f 6b 69 65 2e 64 69 73 61 62 6c 65 64 5f 61 6c 6c 5f 63 6f 6f 6b 69 65 7c 7c 6f 70 74 69 6f 6e 73 2e 63 6f 6f 6b 69 65 2e 65 78 74 65 72 6e 61 6c 49 44 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 29 29 Data Ascii: h:'/'})}else{jQuery.ajax({url:options.ajaxUrl,dataType:'json',data:{action:'pys_get_pbid'},success:function(res){if(res.data&&res.data.pbid!=!1&&options.send_external_id){if(!(options.cookie.disabled_all_cookie\|\|options.cookie.externalID_disabled_by_api))
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 61 6e 61 6c 79 74 69 63 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 67 6f 6f 67 6c 65 5f 61 64 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 67 6f 6f 67 6c 65 5f 61 64 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 70 69 6e 74 65 72 65 73 74 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 70 69 6e 74 65 72 65 73 74 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 62 69 6e 67 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 62 69 6e 67 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b Data Ascii: y_api=res.data.analytics_disabled_by_api;options.gdpr.google_ads_disabled_by_api=res.data.google_ads_disabled_by_api;options.gdpr.pinterest_disabled_by_api=res.data.pinterest_disabled_by_api;options.gdpr.bing_disabled_by_api=res.data.bing_disabled_by_api;
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 2d 63 6f 6f 6b 69 65 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 63 6f 6f 6b 69 65 2d 73 65 74 27 29 3d 3d 3d 27 61 63 63 65 70 74 27 29 7b 46 61 63 65 62 6f 6f 6b 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 41 6e 61 6c 79 74 69 63 73 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 50 69 6e 74 65 72 65 73 74 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 42 69 6e 67 2e 6c 6f 61 64 50 69 78 65 6c 28 29 7d 65 6c 73 65 7b 46 61 63 65 62 6f 6f 6b 2e 64 69 73 61 62 6c 65 28 29 3b 41 6e 61 6c 79 74 69 63 73 2e 64 69 73 61 62 6c 65 28 29 3b 50 69 6e 74 65 72 65 73 74 2e 64 69 73 61 62 6c 65 28 29 3b 42 69 6e 67 2e 64 69 73 61 62 6c 65 28 29 7d 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 46 69 72 73 74 28 27 63 6c 69 63 6b 27 2c 27 Data Ascii: -cookie',function(){if($(this).data('cookie-set')==='accept'){Facebook.loadPixel();Analytics.loadPixel();Pinterest.loadPixel();Bing.loadPixel()}else{Facebook.disable();Analytics.disable();Pinterest.disable();Bing.disable()}});$(document).onFirst('click','
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 4d 61 74 63 68 69 6e 67 28 29 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 63 6f 6e 73 65 6e 74 5f 6d 61 67 69 63 5f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 26 26 74 79 70 65 6f 66 20 43 53 5f 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 21 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 29 7b 66 62 71 28 27 69 6e 69 74 27 2c 70 69 78 65 6c 49 64 29 7d 65 6c 73 65 7b 76 61 72 20 74 65 73 74 5f 70 72 65 66 69 78 3d 43 53 5f 44 61 74 61 2e 74 65 73 74 5f 70 72 65 66 69 78 3b 76 61 72 20 63 73 5f 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 3d 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 63 73 5f 65 6e 61 62 6c 65 64 5f 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 27 2b 74 65 73 74 5f 70 72 65 66 69 78 29 Data Ascii: Matching();if(options.gdpr.consent_magic_integration_enabled&&typeof CS_Data!=="undefined"){if(!advancedMatching){fbq('init',pixelId)}else{var test_prefix=CS_Data.test_prefix;var cs_advanced_matching=Cookies.get('cs_enabled_advanced_matching'+test_prefix)
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 74 28 6e 61 6d 65 2c 64 61 74 61 2e 70 61 72 61 6d 73 29 7d 65 6c 73 65 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 70 61 72 61 6d 73 29 7b 66 69 72 65 45 76 65 6e 74 28 6e 61 6d 65 2c 70 61 72 61 6d 73 29 7d 2c 64 61 74 61 2e 64 65 6c 61 79 2a 31 30 30 30 2c 6e 61 6d 65 2c 64 61 74 61 2e 70 61 72 61 6d 73 29 7d 0a 72 65 74 75 72 6e 21 30 7d 2c 6f 6e 43 6f 6d 6d 65 6e 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 74 68 69 73 2e 66 69 72 65 45 76 65 6e 74 28 65 76 65 6e 74 2e 6e 61 6d 65 2c 65 76 65 6e 74 29 7d 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 74 68 69 73 2e 66 69 72 65 45 76 65 6e 74 28 65 76 65 6e 74 2e 6e 61 6d 65 2c 65 76 65 6e 74 Data Ascii: t(name,data.params)}else{setTimeout(function(name,params){fireEvent(name,params)},data.delay*1000,name,data.params)}return!0},onCommentEvent:function(event){this.fireEvent(event.name,event)},onDownloadEvent:function(event){this.fireEvent(event.name,event
2024-05-24 15:47:14 UTC	8192	IN	Data Raw: 3b 67 65 74 50 69 78 65 6c 42 79 53 6c 61 67 28 70 69 78 65 6c 73 5b 69 5d 29 2e 6f 6e 44 6f 77 6e 6c 6f 61 64 45 76 65 6e 74 28 65 76 65 6e 74 29 7d 0a 69 73 46 69 72 65 64 3d 21 30 7d 7d 7d 7d 7d 0a 69 66 28 69 73 46 69 72 65 64 29 7b 72 65 74 75 72 6e 7d 7d 7d 29 7d 0a 24 2e 65 61 63 68 28 6f 70 74 69 6f 6e 73 2e 74 72 69 67 67 65 72 45 76 65 6e 74 54 79 70 65 73 2c 66 75 6e 63 74 69 6f 6e 28 74 72 69 67 67 65 72 54 79 70 65 2c 65 76 65 6e 74 73 29 7b 24 2e 65 61 63 68 28 65 76 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 49 64 2c 74 72 69 67 67 65 72 73 29 7b 73 77 69 74 63 68 28 74 72 69 67 67 65 72 54 79 70 65 29 7b 63 61 73 65 20 27 75 72 6c 5f 63 6c 69 63 6b 27 3a 62 72 65 61 6b 3b 63 61 73 65 20 27 63 73 73 5f 63 6c 69 63 6b 27 3a 55 Data Ascii: ;getPixelBySlag(pixels[i]).onDownloadEvent(event)}isFired=!0}}}}}if(isFired){return}}})}$.each(options.triggerEventTypes,function(triggerType,events){$.each(events,function(eventId,triggers){switch(triggerType){case 'url_click':break;case 'css_click':U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 15:46:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=174223 Date: Fri, 24 May 2024 15:46:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	718	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:32 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:32 GMT Content-Type: font/woff2 Content-Length: 78196 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "2540cec-13174-618fad42b3984" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:46:32 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 31 74 00 0d 00 00 00 03 17 f4 00 01 31 1a 01 4b 85 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 4e 11 08 0a 8a e6 68 88 c3 42 01 36 02 24 03 9f 30 0b 9f 34 00 04 20 05 8a 2b 07 e2 2e 5b b4 75 92 81 70 d3 28 e4 d7 9b 55 15 64 81 f0 7b 2d 98 6e ee 50 6e 1b c0 c9 9f e1 5f 3d 56 32 b6 65 04 ef 76 70 d8 7e 97 ab c8 fe ff ff ff 7f 55 b2 90 31 fd bf c0 3d 09 1f 42 c0 82 62 ad ae b2 95 6d 76 53 b4 2e c6 94 ac 77 c9 43 19 2b e8 24 99 b8 a4 28 fd a0 4d 4d 49 e6 69 48 7d aa 93 4f e5 04 eb 34 c0 37 15 73 ce 12 17 59 81 29 02 2a 02 2a 02 ca d9 dd 7d ec 95 07 5e da b4 89 bb 7b 5e a1 b7 f2 aa 52 0a 7a df d0 0a 8d 66 c8 8c 06 68 34 64 44 37 eb 3a 31 2a 9a 99 18 43 6a 83 1f 6c cd 38 4d a5 Data Ascii: wOF21t1K?FFTM`NhB6$04 +.[up(Ud{-nPn_=V2evp~U1=BbmvS.wC+$(MMIiH}O47sY)*}^{^Rzfh4dD7:1Cjl8M
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: cd 0f 34 63 ac 92 f2 6c a2 6d f7 63 4f 1f 95 5a 97 bd 0c 5d 06 15 99 1d 87 2f 27 dd 79 3a d5 7a 1c c4 68 c0 59 9b 35 a9 aa bb a3 bf f6 0e a7 6a a1 c1 89 2b 69 8e 52 8b 61 08 78 08 d0 31 62 fa f9 e7 77 cf 36 6c bb 2d 6a 2b b5 bb cf 3a 2b dc 4e f8 7c ec 58 86 83 67 b1 7c 24 fa 88 58 d4 7d 12 e6 2d e7 bc 5b 00 5b 7f fb fb b6 8b 44 03 02 80 31 f7 05 63 0e 0a 74 02 e0 50 41 97 a2 23 ba e0 31 77 e4 5c 74 cf b6 81 50 af b8 33 c3 42 66 bc 5c 82 77 bc 29 be 64 26 12 da 20 90 24 df a1 7a 32 67 ca 63 d9 0f fc 8e 7f b8 48 34 2d 42 da 2d 75 17 0f 8b 2a 7b 8c c0 a3 be ab fe f2 3d 86 63 89 7d 08 0c f3 26 26 c4 88 ea 5d 46 d9 44 56 96 d2 a1 9b 3a 94 f1 85 0b a9 eb e5 f9 5e 2c 5d 25 91 18 a2 c3 01 6a fc d4 fa 88 59 3a 82 3c d4 b8 ab 99 04 13 c1 24 55 b1 1b 28 f4 52 f8 4d Data Ascii: 4clmcOZ]/'y:zhY5j+iRax1bw6l-j+:+N\|Xg\|$X}-[[D1ctPA#1w\tP3Bf\w)d& $z2gcH4-B-u*{=c}&&]FDV:^,]%jY:<$U(RM
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: 77 8f 64 bd 7a 60 1e f1 d2 b7 d5 dd 65 61 4c b2 20 79 2a cf 3e 84 b9 01 e5 fe b8 25 f7 ae c1 3d fd 92 d9 d0 a3 dc 86 bb 13 e3 f4 d6 6d a6 f3 58 9b d8 09 bb db 61 fd 80 e3 c5 d4 b3 c5 a4 f3 6d b8 1c c0 5b 53 93 c2 6a e5 ba 16 e4 1c a5 75 84 4c 1e 51 95 28 a8 2c 92 ae b7 b0 1b 87 f0 03 21 c4 c6 c4 a8 c6 10 31 5d 79 b7 3b d4 12 e3 7a e9 34 a3 3c f4 b1 a8 bb 28 59 67 1a 18 f2 8f c5 b7 5d e5 a9 1b 9d cb 96 4c 7c 83 7e ca c5 ad a3 c6 39 fd 84 58 e4 63 84 23 8f f0 f0 09 1a 2a dc 3a 95 08 26 5f 22 d0 e9 de 5e da 86 4c f8 ef 88 d9 08 01 cf 33 66 14 62 a4 8e 83 a4 9d 2e a0 e4 0d 7c 5b 8a 46 4f 32 13 d1 0b 8e 99 c3 b9 12 a1 0c 1b 03 86 7d 40 03 2b 79 17 16 32 ba f2 3b c4 77 2b d5 54 55 1c 99 ce 0c 41 84 2d 5d 9f 1b 23 82 3f 27 d3 7c 19 c7 28 df 34 d8 14 4b 5a 62 68 Data Ascii: wdz`eaL y>%=mXam[SjuLQ(,!1]y;z4<(Yg]L\|~9Xc#:&_"^L3fb.\|[FO2}@+y2;w+TUA-]#?'\|(4KZbh
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: f7 69 dd ae e9 8d d8 3a b9 7b 3f 37 9b e4 61 14 8d a7 66 26 79 37 4d cd 0f 3e 4c f1 c0 b5 05 a5 c4 1d 72 4f 0f 0a c2 a0 a2 8b 80 2f 3c 3c b6 44 91 71 5b e6 1f 4a 8d 7a 80 ad d6 d7 62 25 4f 6d f3 64 6b ec 13 14 13 cf 66 fe a8 c3 2b 02 87 1f 34 bb 93 dd 9d c0 98 6a 75 48 e6 64 d5 07 c0 ec 29 0e 9a 23 3a fc 8f 4b 0c 74 17 1b f1 77 85 1f 9e 1f 86 aa 9d 47 ae 15 ed 1b 58 fc 67 c4 d7 ad ec 15 29 3c 18 61 4a 3d ed e9 86 ad 93 3a 5e e3 6d 11 dc 89 a1 f2 d5 86 59 64 f6 56 4e 3b 68 23 52 0d 2b 07 cd b9 67 d2 eb 84 2c e6 d7 82 3a bb 7d 74 06 a2 ef 5c c1 22 64 d3 34 7a c7 a5 c2 56 3a 33 c8 5d 11 58 28 47 1a 0b 37 2c a1 7f bc 30 4b 1b 92 d9 cf 5e 06 a2 17 cb af 39 dc 13 49 93 6d ac 05 e9 55 c1 22 ec cc 8d 81 97 b9 dc 9c ee 4b 19 37 3d fc 5a 7a 18 75 a4 30 14 4e 7b 78 Data Ascii: i:{?7af&y7M>LrO/<<Dq[Jzb%Omdkf+4juHd)#:KtwGXg)<aJ=:^mYdVN;h#R+g,:}t\"d4zV:3]X(G7,0K^9ImU"K7=Zzu0N{x
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: 13 d1 b6 e0 19 d8 08 3e 3a 22 4a 25 3d a7 48 bb 7c 6a 65 cc e6 ab 33 93 5a 58 91 6c d1 cc 68 6e 43 76 3f dc ef 5e 4d cd 78 e2 bd 63 e1 a9 95 c1 ff c2 1c 24 f5 7f 13 6a 05 50 a1 26 49 3a 79 4d e0 5d 2e db e8 91 2d 19 35 50 46 29 86 51 89 ca 83 84 ba 2a 3f 8d a2 3d 54 46 5d f6 e5 ef 51 ae 43 2f 2f 9c 3c 41 36 20 23 22 9f d3 42 15 2a c2 9b 7d f7 39 ed 10 f5 c6 a9 74 fe e7 c9 4f 05 7e 7e 82 e8 fd 57 69 f0 a9 d3 df ee 7f 51 87 a4 da 56 3b 1f 83 ac 0b 76 f2 f9 9d 8e 2c 64 a1 ba 83 ff 7d a1 88 a7 c3 3c cd cb 03 dd 78 89 2d ec a7 00 b4 cd 43 d2 b4 d6 bc 7d 1b 8e f1 0a 0d 5f bf 7a 0b db 67 e8 3c f2 11 81 85 5b 92 10 33 e6 67 0c 04 09 7e c4 60 98 e0 83 4e 18 24 7c 80 65 91 04 68 5f 7c ef de 78 34 d9 42 46 91 d3 04 a2 2d 7a fc 2c df b4 40 73 9a 89 06 af af 27 c2 8f Data Ascii: >:"J%=H\|je3ZXlhnCv?^Mxc$jP&I:yM].-5PF)Q?=TF]QC//<A6 #"B}9tO~~WiQV;v,d}<x-C}_zg<[3g~`N$\|eh_\|x4BF-z,@s'
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: d7 41 fc d2 c2 10 fb cb 62 de ee bc 7f 48 61 72 e3 f4 c0 96 92 b3 79 32 c5 20 e0 08 ab 36 6c e0 60 a9 99 55 5a 17 5a f6 6b 64 61 64 d1 da 96 99 e4 ba 45 aa 78 6b 18 90 4a c7 19 01 5d 7d cf 51 69 31 bd e0 75 63 26 c6 ce 5a 88 55 35 01 dd 8d 4f c7 e7 90 f8 4f af b7 1f 7f 7a 7a 8c 76 c9 c7 7a ad ef f7 4c bb b1 c7 20 6b bf fe 94 4f 8a 72 ee 25 d1 e3 2d 71 6f a6 96 9f ad e5 6f e2 a2 f1 fa 20 ca 0d c5 bd 84 3c 0f 29 3a 93 15 2d 09 b9 b7 a0 69 eb e8 b5 58 dd d0 27 c2 f8 4c 88 7f bc a7 60 c6 b2 55 38 1d 87 f7 dc 2d aa a9 df e1 8d 22 7f 5f 01 2d be 48 26 5e 55 bd 94 d6 1a 3d 4f ae 3f 7a 9c db 9d 61 8c 89 60 08 ea 1f 15 9f 4b 89 55 af f9 91 87 0c ee 0e f8 39 17 e4 72 46 cd 01 59 b4 ba a6 5c 87 a3 5e c3 38 37 21 92 30 6b 97 7a 2a 9c 2a 1d df 90 e9 70 d7 8f d9 e4 e1 Data Ascii: AbHary2 6l`UZZkdadExkJ]}Qi1uc&ZU5OOzzvzL kOr%-qoo <):-iX'L`U8-"_-H&^U=O?za`KU9rFY\^87!0kz**p
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: 57 58 39 51 3e 6a 30 80 bb 20 f8 79 a7 2e 06 95 66 d0 45 c8 9e 46 49 67 5e 7f 7a 5d 96 a8 26 88 ef 68 2b 41 4f f8 0b 93 6c 9c 88 6c d2 84 c0 6b 98 04 83 2c ed bb 0b 74 29 a8 cf e8 45 3b be ed 9a 47 10 eb 1c 76 b4 e5 01 f4 7f 5a ed 36 f3 ca cb 6b ff ed 5a 4a d2 27 46 d6 14 d5 78 1b c5 c7 59 c9 97 77 eb a8 ee af db 14 3f c8 7f 80 05 3c ad d9 72 ea f5 21 8e 4f 9c 6e d0 50 bd dc e7 90 84 f3 fa f0 d5 cd 80 42 b0 3a 8d 6f b7 4c 67 29 3c ef dc b1 4d 1d 99 9a 62 3a fe 5c 66 a0 78 ec 5f 7a 5d 92 6b 31 92 0d 4a 03 b9 dc 92 2b 98 40 39 0b 67 ec e4 cc f8 d3 05 fe 2f 83 52 4a dc c3 d3 49 6a 53 9d 82 97 e8 9d 31 59 54 b2 86 e0 2c e9 50 0a 43 be 9f 28 ff c7 a5 75 ce cc ff 85 61 92 15 4b b2 53 fd 32 41 71 d1 a1 87 2a da 5a f6 63 6c 86 ba 49 bf 82 aa 8c 2d 50 ef dc 76 6d Data Ascii: WX9Q>j0 y.fEFIg^z]&h+AOllk,t)E;GvZ6kZJ'FxYw?<r!OnPB:oLg)<Mb:\fx_z]k1J+@9g/RJIjS1YT,PC(uaKS2Aq*ZclI-Pvm
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: b9 50 87 41 b5 70 9a 85 ec 24 ef 72 89 ab 81 a4 a3 ff 18 a4 a1 2a b9 5c c0 22 ae 3b 71 c0 ff 9d f1 80 c0 64 12 7c 4b 43 d0 7d 83 6f 39 6f f7 5f de b7 ef f2 fe af 7b bf 32 bb 2c 4b 5f de 39 1b 31 48 d0 84 18 75 87 4f 59 b0 c7 93 04 76 50 47 0e d0 3d ef 1b 48 c7 fd ad d6 7e a2 95 02 f0 a3 77 13 1a c1 6e 95 dc 93 21 c3 28 b7 a6 e9 12 5a fa 69 74 1c 33 57 ca 0e 1a d6 24 5d ab 5e 29 90 3f 55 c8 d8 08 3a b0 0c fb 78 f3 6c 34 d3 a9 b1 8c 01 57 cd ba 21 0c 9f cf 9f f0 31 e6 de 13 31 af 76 49 de 46 bb 36 2f ea 3b 3e a7 43 e0 79 49 4c 44 53 7b 9e bc 8d ed b0 06 79 9b ad 32 4f e1 79 62 d6 67 ca 1a be 64 f7 1e 64 04 07 33 48 2b 9e eb 82 32 11 8e 88 24 44 a1 a8 10 77 44 6a 90 35 a9 ba 17 2b 30 c7 10 77 61 b7 52 84 47 91 31 59 54 a3 e3 52 d6 d6 93 11 28 41 c3 5e 3f 3f Data Ascii: PAp$r*\";qd\|KC}o9o_{2,K_91HuOYvPG=H~wn!(Zit3W$]^)?U:xl4W!11vIF6/;>CyILDS{y2Oybgdd3H+2$DwDj5+0waRG1YTR(A^??
2024-05-24 15:46:32 UTC	8192	IN	Data Raw: 05 09 5e e5 7a 8a 0b 0a f6 67 0f 30 59 29 6a 41 29 a9 54 54 57 61 0e d4 a5 b0 04 ea 48 52 24 28 00 eb af 21 da 81 1e f8 af 6d 38 c9 75 e0 8a ae d8 63 90 25 77 e7 18 38 94 bf 37 2b fe 3d aa ff 01 79 ce 8d 55 57 b7 5f 5d ed bd cd a7 52 a0 52 84 67 98 23 66 65 f6 e0 75 d4 d6 df eb 86 52 4a 40 68 9e 60 54 b0 2a c9 32 d0 2b e8 a4 1e 8a 99 d2 e9 fe f0 95 7b 6b 13 09 32 38 b2 70 37 05 01 1f aa 75 55 91 a7 23 11 5b 5c 4c 8c 97 c2 35 db 4e 7c dd 14 f5 47 a7 b9 93 74 d5 3c ac 53 37 03 36 84 23 c0 3f 83 dd 71 e0 53 dc 9f f9 4a ae f8 d0 99 6e b5 f0 77 10 c9 88 36 a9 76 64 a0 de f6 31 58 f1 09 db 95 e0 a4 bc 07 59 c8 d1 59 3f ce 2c b8 e1 68 ab 17 54 ac f5 8a d4 78 aa ec e7 10 ea 35 a2 8a 64 1a f8 3d d4 b4 82 a7 eb e7 5f 3a 8e 2d 2d b2 4d c2 8b fb 24 7d 62 87 45 31 1a Data Ascii: ^zg0Y)jA)TTWaHR$(!m8uc%w87+=yUW_]RRg#feuRJ@h`T*2+{k28p7uU#[\L5N\|Gt<S76#?qSJnw6vd1XYY?,hTx5d=_:--M$}bE1
2024-05-24 15:46:32 UTC	5011	IN	Data Raw: 54 1a 9d c1 64 b1 39 5c 1e 5f 20 14 89 25 d2 90 1c cb 15 e1 e8 4f a5 d6 68 75 7a 83 d1 64 b6 58 6d 76 87 93 b3 8b ab 9b bb 87 a7 17 00 42 30 82 62 38 41 52 34 c3 72 bc 20 4a b2 a2 6a ba 61 5a b6 e3 7a 7e 10 46 71 92 66 79 51 56 75 d3 76 fd 30 4e f3 b2 6e fb 71 5e f7 e3 f9 7a 3f 00 88 30 a1 8c 0b 49 56 54 4d 37 4c cb 76 5c cf 0f c2 28 76 5f 51 86 33 92 77 55 58 98 b4 67 44 27 2d 38 30 a2 4b 7f 31 ce 7d 64 ff 42 c9 ec a4 bf 39 24 81 9b 53 91 0c c1 54 22 f2 62 32 1f 13 75 63 b2 51 57 6f 70 60 eb f7 78 b3 15 37 02 4a 07 a4 f1 7e 0f aa 8f 12 7d 1e 53 c2 9f 90 f8 cc eb df 89 87 fb dd 37 06 6c f3 91 db d2 33 ba b2 4f 23 80 85 3a 0f 1c 5e 0f 30 34 4c a3 25 9b f3 ab 59 92 f5 60 02 2a ad 6f 9b 32 51 76 3f 33 67 ef c7 9e 88 41 b3 13 8c c7 8c 28 c4 69 cb 86 06 92 ad Data Ascii: Td9\_ %OhuzdXmvB0b8AR4r JjaZz~FqfyQVuv0Nnq^z?0IVTM7Lv\(v_Q3wUXgD'-80K1}dB9$ST"b2ucQWop`x7J~}S7l3O#:^04L%Y`*o2Qv?3gA(i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 15:46:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174158 Date: Fri, 24 May 2024 15:46:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-24 15:46:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	710	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:33 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:32 GMT Content-Type: font/woff2 Content-Length: 96924 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "2540cb6-17a9c-618fad42a62ac" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:46:33 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 7a 9c 00 0f 00 00 00 03 55 3c 00 01 7a 3f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 b4 7c 08 0e 09 9c 0c 11 08 0a 8c 81 14 8a a9 24 0b 8e 24 00 01 36 02 24 03 8e 20 04 20 05 85 35 07 b0 41 0c 81 1c 5b 21 e1 72 27 0c 91 bb a8 d9 c2 d7 b0 6d 04 c2 d0 53 f5 fa aa 6c 6c 60 81 dc 3c 4b 7a b3 18 54 94 e0 d7 d6 30 6e 7f 0a a0 3b b8 02 51 6f e7 52 f6 ff ff ff bf 24 59 c8 d8 ee 9f 79 ff 1b 6c 0c 80 44 21 8c 2c 2d 50 35 86 a0 46 d5 c3 45 78 6a 63 97 5b 11 51 88 8c be 28 16 eb 30 56 24 c9 4c 61 3d 92 4b 9f 94 01 46 44 69 79 5e e0 e2 a3 e8 d6 fc 4a 75 d6 c7 06 bd e6 58 d5 e1 76 97 43 8a 97 37 37 29 b7 8f 22 53 30 32 d8 86 9d b3 28 17 fc b9 d3 92 74 61 94 2e 29 29 49 e1 24 4c 18 e5 d1 b0 a8 8f Data Ascii: wOF2zU<z?T`\|$$6$ 5A[!r'mSll`<KzT0n;QoR$YylD!,-P5FExjc[Q(0V$La=KFDiy^JuXvC77)"S02(ta.))I$L
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 37 ab ee b2 73 52 fe c2 44 c7 bb f4 8a c3 e7 1a 1b de e6 60 59 b8 dd 51 6c 6b 41 38 e4 7b 2a c7 2b 0c 80 41 e6 24 aa a6 af 75 5b 06 c5 30 43 a0 16 4e 78 73 8f 58 96 ac 2e a0 a7 62 ed fa 27 11 e0 21 c6 29 06 9c f5 7b 81 a0 07 b8 6b 48 e8 2c eb e0 45 3d 63 51 65 a2 71 4b 6d 0d fd 65 18 db 4d 34 d2 69 b8 46 ae 78 6f d5 2b d8 3b 91 fd e6 e1 a5 b1 68 6c 8d 1e 3d 74 82 53 c8 e6 9b 90 43 e3 21 8b 94 a4 c6 9d 06 41 c6 90 14 8a d5 e0 58 07 01 1e ba 79 66 d0 a7 de a4 d0 eb 90 64 5a a1 24 a9 0b c5 5f 0c 42 d6 a7 ab 18 c2 a4 24 ed 36 89 90 ed 0c b9 7c 98 ef af 10 aa d2 81 7f b4 4e 59 cf 07 c4 06 59 75 c7 1c d7 bf 44 d2 45 e0 36 b2 2e b7 69 fa a0 15 c5 fd 13 72 2b b5 26 0a a2 82 ce 34 8e 70 8b 77 74 cb 78 71 9c b0 0d fc 4e b8 28 8f f7 44 5e 00 f0 c2 e3 24 6e 74 d1 e9 Data Ascii: 7sRD`YQlkA8{*+A$u[0CNxsX.b'!){kH,E=cQeqKmeM4iFxo+;hl=tSC!AXyfdZ$_B$6\|NYYuDE6.ir+&4pwtxqN(D^$nt
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 3c a5 66 17 1c 18 b4 a9 73 e3 de 35 f9 af b1 7b 7f d7 8b 36 e3 a3 6f b5 59 76 5f dd 8e 40 90 ab 94 87 23 b9 7a c3 c7 2f d6 33 e9 71 a5 e3 5d f9 e9 3e 8f b9 f4 2b 74 08 b3 a9 c3 28 a9 20 d2 ef ec f9 e6 99 96 46 eb f7 9e 47 8c fb 1e a1 6c bb 17 7f 7b e9 13 9f 33 a1 ee cb 2a 90 be 9d a4 7c ce d0 5e 54 80 17 6a 39 4f 4d 3a b4 d4 bd 2b df 2c 86 90 95 2c 53 0f 1d d5 88 3b cf cd 6e ad 80 6a 51 87 7f 84 df 5f fa 5d 2c 9c 46 35 31 bc df 27 92 4c fa 0b 1e 61 6f 59 dc 76 a6 d2 fb ad 9c 88 d4 4c b1 e2 ef 2d 58 41 24 be 62 b5 28 71 51 f9 16 ba be 64 58 d2 45 e7 dc 2d 8c 56 01 79 d5 3f ca 75 bf 05 6f 7c 84 5e 9a f6 99 cb 78 32 5c d4 f2 7d af a3 6b f5 c7 51 0f 4b 39 e7 1b 3e d1 52 81 91 19 0b 3c 8f 8d 6d cb bd eb 60 e0 d8 82 f3 83 c1 1d 96 02 20 60 4b ed ca 06 61 5f e0 Data Ascii: <fs5{6oYv_@#z/3q]>+t( FGl{3*\|^Tj9OM:+,,S;njQ_],F51'LaoYvL-XA$b(qQdXE-Vy?uo\|^x2\}kQK9>R<m` `Ka_
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: f4 c5 e2 c4 88 4b e8 f8 b1 51 37 37 42 4e 71 0e 84 f6 b2 e6 15 d8 8a d3 92 12 72 42 c1 a4 b1 1c 5a e9 0a e3 a4 ae e9 d9 bc 5d 30 97 f5 76 1e e0 52 41 bc 02 28 b8 f7 a3 59 c7 2e 0c 28 7f 48 c2 7b 69 92 78 99 d1 29 eb 54 eb 1d 40 a7 c8 50 d1 92 ab b1 ef ad d6 1c 2d 05 32 d8 a8 43 3d f8 93 c0 30 d4 51 91 9c 22 c9 c0 79 04 a9 14 5f 6b ef 44 cc 29 d4 c7 cd 79 e1 17 66 1b 6e c8 d0 8c 7c 54 8a 31 5a 6a 33 83 9a 2d fe b6 59 d1 53 e7 7a b2 45 04 af d1 cb 76 c0 5d 76 5a 2e 3d c6 5c f0 7b a0 a6 a4 e5 3b 95 30 53 54 92 61 00 a6 52 4d e2 28 80 02 11 49 83 44 93 40 50 ba 50 62 fb eb d6 c5 01 bd e1 e1 f5 4f c5 e6 bb 40 85 59 70 0c 90 e3 46 1d 3e 24 e7 80 8b 09 89 30 80 d9 56 0b 38 48 05 5c e9 2d 77 ed 7a 20 13 71 3c 05 7e 0f 9a ce 98 1e ca 62 34 52 fc 55 40 7f 1c ae f9 Data Ascii: KQ77BNqrBZ]0vRA(Y.(H{ix)T@P-2C=0Q"y_kD)yfn\|T1Zj3-YSzEv]vZ.=\{;0STaRM(ID@PPbO@YpF>$0V8H\-wz q<~b4RU@
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 51 dc ef 1e 13 31 a4 c6 fe 62 eb fa f7 78 06 17 ab 7d 58 16 dc 36 7d 05 0f 01 54 d9 41 9d 93 5e 3f ec 0e 5e 9f c7 ba 32 82 ac e6 50 07 72 6d 65 3e f5 1d df eb 9e 08 e5 74 86 3e ed 88 6a 45 7f 62 3d e2 76 7a cd 65 0b dd 55 f2 f5 d7 1d d1 6e 97 42 7a 4a 75 83 a7 88 c1 c2 40 75 42 9d 98 4b f7 b0 2d ac d0 00 d6 d1 15 5b c1 ea d1 76 8e 2d 10 6c a9 72 d3 85 0b 6f 76 5f 7f fb a2 01 b4 d7 ec d5 a4 a6 e3 66 4d 88 c7 a3 48 d5 2a 22 36 df 3e f9 78 bf ee 60 b0 27 d2 d5 39 ab f3 7d 13 79 60 fd 7a 1a 7d a0 90 5b 37 eb 07 62 fb af 14 e3 56 d2 45 38 3b 04 92 85 01 63 88 40 1d dc 3d f3 ba 29 03 96 75 56 b8 f3 6c 1f 9a 19 da 94 4e 7f 5d be 6d 34 cc 50 05 33 d6 d8 cb 8b 9c 6b 4c 95 fa 40 da 7b c2 ba 90 01 5f b9 bb 6c 69 f4 b9 06 1a 9e 0f 13 96 06 b4 66 fb 7b 95 91 da d2 d6 Data Ascii: Q1bx}X6}TA^?^2Prme>t>jEb=vzeUnBzJu@uBK-[v-lrov_fMH*"6>x`'9}y`z}[7bVE8;c@=)uVlN]m4P3kL@{_lif{
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 6b 5a 39 3a 44 d2 82 5f 30 72 7a 9a 65 b9 13 4b 6b aa fe 5e e2 e6 8c 28 5d 81 10 4d 4e 10 99 5e e5 3f 46 9d ee b9 9b fe d5 e3 c0 b4 46 57 7f 6a c1 2a e5 fa a0 e0 ca 56 56 6b 20 eb 2f 76 b1 7c 65 93 3e 7a 49 48 50 59 ab fc da 63 cb 60 87 d1 d1 59 e8 eb 77 50 27 f7 9d 8a a1 7e 9a e5 72 2c 59 02 98 2f bf 50 0c 6c 74 57 09 00 04 4a 00 81 03 a3 10 1c 0e 9d f5 b2 1e b9 36 d9 11 d9 e6 17 11 28 02 24 fa fd c7 6e 66 2b b0 cd ec ff 8d 75 ba 28 8e 53 8b 2a e3 71 29 8e c8 4f ec ae 3c c2 fc ae f4 16 86 52 03 a6 f8 30 b2 c3 de 5a c2 9d d8 5d 7d 65 e8 92 bc f9 30 d4 81 d2 51 07 6b 49 5a 03 bc ac af 0b 63 0d 6f c7 3b 16 fe be e2 6d 9f 82 96 45 95 c7 99 aa a9 07 e4 59 bc f3 84 8a a7 c5 2d f4 ff 89 a4 28 22 f1 3f cb 28 90 00 a8 76 c1 66 2a ea 4f 0a e5 70 f7 7a 5a b7 c7 11 Data Ascii: kZ9:D_0rzeKk^(]MN^?FFWjVVk /v\|e>zIHPYc`YwP'~r,Y/PltWJ6($nf+u(Sq)O<R0Z]}e0QkIZco;mEY-("?(vf*OpzZ
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 6e b3 7a 4b aa 5b 64 25 39 68 77 94 20 35 55 80 16 a0 c9 18 c3 04 f3 9c 39 3e f0 f0 63 95 fe a5 a9 e6 15 0d 56 56 68 3a 90 8c c8 96 8d 92 a2 73 72 08 f8 ae 4e 24 22 3b c3 04 0a 47 e2 49 69 a4 e4 00 bf a7 3f af 31 84 86 f2 bb 5f 5d b6 82 90 10 c1 81 63 08 5d 4c ff 62 25 e1 12 59 fb f8 b8 7c fd 55 f1 32 8c 83 98 11 73 01 85 78 13 5d 53 07 3d 10 16 ed 01 2e f9 58 37 23 cf 5a 9a 9d e9 3d bb 4d 63 37 70 9b ec 06 b1 c3 22 01 04 f3 53 c2 fd 42 6e 2c c3 1d c4 66 98 9c 8a 06 1b 41 02 91 44 20 a2 e4 80 e0 06 ff 45 b7 fb 2b 73 13 5f 4e bb ad 64 9a 44 4f 40 20 95 de 60 9b ad 0f 86 73 e5 4b 3b 5c 48 c3 e3 20 77 4a ad df b4 b3 ca 57 ff d9 9b 93 ec 12 e1 e4 14 e1 12 75 c2 f5 3a 85 47 38 f3 4a 5c cf 45 1c 3f 16 8a 1d a7 96 7e 7a 03 19 76 2c d9 27 66 c5 c5 c2 f3 e2 95 ed Data Ascii: nzK[d%9hw 5U9>cVVh:srN$";GIi?1_]c]Lb%Y\|U2sx]S=.X7#Z=Mc7p"SBn,fAD E+s_NdDO@ `sK;\H wJWu:G8J\E?~zv,'f
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: a4 0f 8d 49 7b 09 48 1b dd 73 13 10 ca 73 ed 6d 9d ca c7 de 3f c8 20 b6 9c b8 ea 3a ab a2 5b ad 5e c7 36 7e 01 45 dd ac 46 85 85 06 d0 34 b6 5e 85 70 80 8b 95 be 31 61 11 ce c6 fa 93 64 bb c7 f5 43 0c a7 50 7f c7 6d ce 87 be 9d cd bd f3 84 6e 4f 51 f4 45 df 2d 3d a4 38 04 50 55 92 4d b4 d1 ad f2 26 4d 4b e0 b1 6e db b6 e9 b1 b6 16 13 18 63 05 26 d1 a1 2f b0 fa bf 1a 12 de 1e 4e 22 eb e6 08 18 32 89 34 73 27 58 a4 5f 9b 42 0d 8a e7 2c cb 73 35 a8 7d 84 ac 96 5a 00 db 19 7d c4 7e 6f 90 fb 45 b5 d6 a5 01 f7 03 23 e5 69 96 48 1f db b8 3e 34 fd 33 a6 dd 32 a9 eb a8 4b 93 9a 75 b5 10 92 77 6b 6e b0 7f 56 68 7c 4c ad 84 b8 44 f8 c2 3a 14 20 36 a1 76 21 62 80 68 3c b8 e4 72 f0 24 ae 36 83 ab a1 bb 7f 25 72 45 84 76 dd 9a b0 08 67 eb cb 3c ec a0 32 8f 56 d0 52 64 Data Ascii: I{Hssm? :[^6~EF4^p1adCPmnOQE-=8PUM&MKnc&/N"24s'X_B,s5}Z}~oE#iH>432KuwknVh\|LD: 6v!bh<r$6%rEvg<2VRd
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 70 20 bc f6 74 de 0d 7d 59 40 b8 f3 f9 c8 03 df ac 2e 79 44 8c 5b 05 d7 68 1e 69 c9 d6 d7 08 0b 6d 53 cd 44 91 74 e7 fc cf ec d2 c6 60 ca d6 0c 1a 50 50 a5 59 6c 4d b1 42 a7 e0 53 39 9e 1f 47 e1 53 8b a6 f0 0c 6a fb 87 ee 97 dc af ac 9d b0 8d 5a db 62 1a fc 0c 19 22 69 d0 12 dd b3 54 f4 24 3e c5 e4 8e 2d 33 0a 07 26 23 fe 18 cd cc 38 71 ce 35 83 63 9a 5e db 90 fe 5f 4b 9f bf 69 c4 56 ac 88 8c ce e9 04 ee 7d 80 3e f3 cd 9b 63 7b cc d2 b0 8e ea 11 a0 ec fc 47 cf bf 77 dd 73 fa 3c 6a ec 35 19 d3 1f fa 3e b0 7a 3e fe ec 10 50 df 8c 82 8e 30 24 34 9a a1 7d a4 fd 27 90 fb d9 bc cd 27 38 c4 90 e5 27 bc ed c0 92 02 ff 42 92 36 a0 aa 54 2f e0 4f 60 87 9e a7 81 09 d9 0e a2 31 4e f5 36 1c 74 18 9e f5 d1 33 26 a0 80 96 46 81 20 29 4c 35 e0 aa 25 59 00 9f fa 44 f0 43 Data Ascii: p t}Y@.yD[himSDt`PPYlMBS9GSjZb"iT$>-3&#8q5c^_KiV}>c{Gws<j5>z>P0$4}''8'B6T/O`1N6t3&F )L5%YDC
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 21 d8 6c 1d a0 57 2e 68 c7 4b 85 8c 9e 76 3c 9d 93 07 2d 0e db e4 96 25 bc 91 31 bb b6 a9 51 98 2a be 67 72 c6 85 a9 29 ad 73 3e 33 18 2b 5f 40 12 84 c2 0c 46 8f e8 33 60 70 09 38 11 e5 4e 91 1e 5a af a1 fa ac f1 60 1c b9 58 66 be c1 dd 4e 31 b7 e3 43 b8 bd 6b 1b 93 be bf 1c bf 60 d9 86 b7 7b b5 7f 35 ac 9b 6d bb ad 8a 94 fb 0e ad cd 7a 8c f8 68 34 6d 15 ee b7 27 c0 41 7d a1 6c ad 15 06 0b 56 72 74 ec 4a 12 2a 58 9d 03 75 95 97 5f 85 0f 51 bb 8e 27 28 8b a4 2f d2 49 39 4f cc 2c 75 32 0b e2 20 a4 d3 95 11 70 80 41 a8 20 25 bf 25 d1 53 1b 25 13 d3 85 2b 82 4a d4 89 0e f3 6e 80 56 40 f8 ed 28 ae 3f 15 de 75 c0 71 59 3a c4 37 e4 93 f5 6d 25 27 cb b9 fd f4 9c 34 28 7d 18 d4 5b b7 36 4b 91 c1 cf 8b ab 64 1e 62 5c d7 64 09 b6 a4 81 e9 ea ed a0 5e 5d e9 32 5b fa Data Ascii: !lW.hKv<-%1Qgr)s>3+_@F3`p8NZ`XfN1Ck`{5mzh4m'A}lVrtJXu_Q'(/I9O,u2 pA %%S%+JnV@(?uqY:7m%'4(}[6Kdb\d^]2[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	720	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:44 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:44 GMT Content-Type: font/woff2 Content-Length: 13276 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "2540ce7-33dc-618fad42b0e8c" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:46:44 UTC	7650	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 33 dc 00 0d 00 00 00 00 83 c8 00 00 33 83 01 4b 85 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 87 5a 11 08 0a 81 da 5c 81 ab 22 01 36 02 24 03 84 54 0b 82 36 00 04 20 05 8a 5b 07 8f 2b 1b f1 69 55 47 7c 8f 03 80 d9 c6 10 45 09 d9 d4 65 ff 9f 71 9c 8c 21 23 61 53 b3 ea f9 28 c1 48 47 a9 dc 93 19 62 c3 26 a9 a9 53 eb ea 63 2c df 0b cf 7b 41 71 3e c9 66 38 1d b2 eb 47 14 44 14 44 14 44 84 55 a4 e8 44 7e d5 fa 13 3d 75 38 f7 53 85 8e 42 b6 48 6a ea e6 3d f4 1d 05 8b 0c 37 b3 9a 8d 37 8d 11 de b5 36 c9 3d 2f f2 87 58 fa 68 1d 28 7e 48 52 34 87 48 b7 9a b4 dd 4d b2 d9 24 24 24 21 89 a4 02 a1 25 c4 24 a0 08 26 10 4a 4f 48 a1 d8 08 2d 41 d1 03 69 01 51 c1 06 c1 72 80 e5 14 f1 24 78 Data Ascii: wOF233K?FFTM`Z\"6$T6 [+iUG\|Eeq!#aS(HGb&Sc,{Aq>f8GDDDUD~=u8SBHj=776=/Xh(~HR4HM$$$!%$&JOH-AiQr$x
2024-05-24 15:46:44 UTC	5626	IN	Data Raw: e4 2b f8 15 86 e5 32 ca 7c ce b1 68 93 aa 53 99 6e 5a d2 84 bb f8 a0 d4 11 bf f9 01 81 01 06 72 dc 40 67 82 6d cf f1 48 af 3d bc c3 97 b2 e4 f2 16 ae 4e 16 2e b8 32 2c eb ff b8 05 ee f1 91 1f 6b 40 5b a9 f4 1b 49 ac f0 bc fb 4d a9 a2 ce 31 fe b7 c3 95 ed 35 2d f4 67 e4 62 d8 2b f8 2b e4 7d 53 e7 00 39 ce 10 10 38 3f c0 6f 84 8a fa d4 ba 27 68 49 6e 66 6a f5 24 1a eb 9c 0f f8 e1 89 20 54 30 44 4b d2 be 7f 6f 4c a2 35 1e 0f 3d d8 d8 a3 8c e3 3a 5a e2 50 24 3f 6e ee 72 20 ec 00 d6 ae 15 59 9a a1 cd d0 30 67 cc 60 6a ae 9a 8c 9b 9e c0 68 d1 30 67 d2 fe e1 df 73 2e d9 fb 9a 8b 94 a0 07 47 3f 6f d3 a6 9b 7a 0c f3 78 c5 46 4b 6b f0 93 4c b9 de 61 ba 4f e2 a5 c6 b8 d4 d1 63 39 0d 0d 7b ed 7b 90 13 61 53 9c b4 d2 57 cc b7 4f 56 5b 37 4b 01 5d da ca a7 7f 7f 42 8e Data Ascii: +2\|hSnZr@gmH=N.2,k@[IM15-gb++}S98?o'hInfj$ T0DKoL5=:ZP$?nr Y0g`jh0gs.G?ozxFKkLaOc9{{aSWOV[7K]B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	719	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:33 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:32 GMT Content-Type: font/woff2 Content-Length: 81612 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "2540ce2-13ecc-618fad42b02d4" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:46:33 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 3e cc 00 0b 00 00 00 02 4f 48 00 01 3e 78 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 be 50 0a 88 8b 14 86 96 19 0b 8e 3c 00 01 36 02 24 03 8e 38 04 20 05 88 53 07 ab 2f 5b d0 cc 91 44 cf 9f ec de 1f 5b 90 84 b2 9b 54 d5 16 60 8f a3 5e 77 c2 8d 4d 76 3b 50 48 b3 fe 65 05 dc 18 ae 3d 0e 44 90 2f 98 fd ff ff ff ff bf 23 41 c8 88 6d 1b 70 1b c0 ff bf aa 6a 6a 7d 66 55 b9 41 40 23 ee 96 07 0e a0 5c 47 55 4d 22 4b 1f e2 86 bb 09 52 65 9a 46 55 2e 41 60 cf 32 16 45 d2 9a 82 85 60 21 58 48 dd 8d fd 74 98 ca 39 66 1a 95 9a 72 52 8b 9c 55 b3 2e 49 61 a0 30 50 18 48 5f 91 4a a4 5c 13 de 6e fb 7e d1 ad bc 9b 39 df c7 18 63 55 ad bc 6e 7a c9 bd 27 7a 91 f4 9e 25 0a 7b 78 82 17 34 e7 a9 91 c7 b3 Data Ascii: wOF2>OH>xT`P<6$8 S/[D[T`^wMv;PHe=D/#Ampjj}fUA@#\GUM"KReFU.A`2E`!XHt9frRU.Ia0PH_J\n~9cUnz'z%{x4
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: bf f2 be 27 8d 9d 33 91 fb 85 9e ec fb c1 ef ea a3 20 3c 68 a6 7a ea 7d ae c5 7b 35 df 16 c9 30 01 37 a4 3a 0b b4 24 97 20 ba ad 74 49 24 c8 98 04 24 62 4d ec 54 3d 31 66 d3 07 f7 1f a1 34 5e 56 55 2c 9b ae 49 ed 67 6e 2f ea 79 b1 e5 f8 19 7e aa df e6 32 00 5c 2e 48 a4 98 7d 37 cd ee fe 8b 4d 7e 50 28 11 8a 8b 45 22 80 48 93 66 c1 07 f3 65 b2 f2 34 60 25 48 60 06 b4 3d 15 6e fe 42 85 ee 70 a3 66 8f d9 90 a0 61 1b 22 5b 9c 55 44 58 2c 03 8f 82 54 68 e5 6c 80 b9 65 e6 d8 fc 88 65 02 47 62 6d 41 0a 19 8d cf 7f f6 83 6c 27 a5 8a 54 20 d5 a1 5a e1 6b c3 cb c6 7b 40 b7 a2 f7 a6 1f d2 9d 5c 7d 5e ec 34 6b 7f 93 dd 8d 99 79 7f dd 56 b3 91 bf fa c7 8f bc 67 d7 55 bb 0d db df 78 55 0b b6 f2 13 6a 7e c7 f1 bf 1d 89 4d 73 3c c6 9a 7a 95 14 c5 e7 a2 30 f3 51 71 c9 07 Data Ascii: '3 <hz}{507:$ tI$$bMT=1f4^VU,Ign/y~2\.H}7M~P(E"Hfe4`%H`=nBpfa"[UDX,ThleeGbmAl'T Zk{@\}^4kyVgUxUj~Ms<z0Qq
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: a8 05 00 88 81 55 3e b6 ff 9a 3b e3 9d 7f ef 7d 4e ba b3 71 33 72 13 64 51 5c bb 30 17 06 ba 1b 46 fb c1 ff 6c 40 a9 52 6d 05 e7 dd ea 3c 2f 57 f5 25 ce 3f eb 6f 15 8a e7 92 33 24 0e 6d 48 1e df 76 de e7 5e c4 2b 6f ba 90 cc 39 2e 8e 3d 9d 2b f6 c2 5c ec 13 85 bd 68 f1 e9 30 30 c7 0b 5e be 4c 6d 62 45 b5 e6 fc f1 a6 98 0b 17 17 d6 32 cf 9c d9 26 91 58 74 d4 4d 6c e6 19 21 c5 7e a7 d0 32 24 4a ee 75 f8 cb c1 8b 3c fc 25 74 e0 d6 b0 2b 0b 5d 5e 05 2f 20 06 b6 3a 89 01 6b b9 70 65 a8 71 a4 77 86 2f 56 4e b0 97 ce 57 49 cd ac 36 34 cf 6a 95 eb 96 2b b6 74 c3 fa 96 7a 7a 71 a0 cc b5 37 28 4b d1 40 24 75 68 9d 17 be 76 34 7d 46 c8 a8 54 bb bf 82 be fa 8c 0a 52 34 cb fa 1d 7b 56 66 01 15 6b 6b 82 0a 88 2b 2a e6 ef 02 cd 22 ed 33 f8 e9 f1 35 b0 6e 21 f1 14 76 00 Data Ascii: U>;}Nq3rdQ\0Fl@Rm</W%?o3$mHv^+o9.=+\h00^LmbE2&XtMl!~2$Ju<%t+]^/ :kpeqw/VNWI64j+tzzq7(K@$uhv4}FTR4{Vfkk+*"35n!v
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: d5 ca 16 de 7e a1 57 7a 69 5b 55 59 99 0c 7f cd 12 be e2 05 2d 28 7a f7 55 08 55 4c e8 c8 a2 e5 e3 db 67 d8 30 6a f8 d1 0f 5d 70 ad d0 00 37 48 01 18 a5 20 5b 6d 3f 6c 9c 02 b9 6a 65 6c e3 47 52 80 3b 54 f1 3f e5 65 bc 02 62 35 37 e7 90 5e a9 ec 2b 89 69 ae f5 4d 73 5e ba fb 6d 04 e1 43 da ec 02 fb 3e 50 45 97 38 a0 ee 14 8a df fe b3 80 23 1c 88 4b 02 f7 c2 6b 37 c2 8b 0a d3 53 02 4b 5c 20 41 ea e4 43 1b 9b 0a 58 fe 1f 0e 41 66 4b 69 10 f9 27 b1 09 b5 c0 f3 52 71 74 0b 0c cc 13 d9 13 67 20 ee ba 92 d7 54 83 94 98 66 43 8d ec e7 2a cb f6 d4 91 d9 02 b2 89 1c 2d c3 ef 64 7b 82 b5 93 fa 45 8a 08 85 d4 25 20 ef 0d b7 ba ce 68 fa 36 32 de e7 5e a1 fd d9 75 fa 94 a1 f2 8b 7d 9b fa d2 fb c3 4a 60 ac fa 08 c6 b9 22 76 b3 8e 14 f4 e4 d7 e5 58 ed 61 fe 96 3e f3 00 Data Ascii: ~Wzi[UY-(zUULg0j]p7H [m?ljelGR;T?eb57^+iMs^mC>PE8#Kk7SK\ ACXAfKi'Rqtg TfC*-d{E% h62^u}J`"vXa>
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 4d 34 34 84 78 d6 59 36 d2 08 9b 12 e5 d5 2c 46 26 39 0f b8 9a 02 54 d0 57 fb cb 93 4a 34 e1 0b 0d 52 b4 c6 91 22 d1 5d 4c 1c 96 15 db 93 68 b3 21 28 7c 5c 33 38 c9 f6 46 2f 10 a6 ce d3 aa 0d d7 a4 1c 92 64 37 5b 49 bd d1 1d ac d5 44 41 a3 af 86 17 53 a2 66 10 b8 19 0b f5 b4 0b 05 d2 4c 37 2f b6 51 2d b2 b8 fa 43 0d 74 54 15 ad 23 51 f0 7a d8 20 c7 a8 c0 c2 45 c9 e0 a8 40 cc 33 30 c8 9e 7e 3b 8b 66 2c bd 8e 25 50 3f 05 88 34 e3 0b 55 63 c1 14 76 12 6c e4 82 b7 2c 49 5d b4 80 59 c6 a0 75 3d d9 29 a8 2a f6 f2 37 4b 33 a4 88 52 a8 20 a7 5c c2 9f 57 d3 01 74 84 e8 2d d2 95 f4 17 39 81 0a 26 3e 60 ea 2c a3 81 5d d5 51 50 68 5d 1b 39 03 d3 a7 19 d3 f6 51 3b 48 61 ea 22 34 13 82 75 8b 00 82 f4 79 f0 72 c5 f8 24 4f 92 ac cf cb 3b 02 91 3b 98 51 a4 22 89 50 0a de Data Ascii: M44xY6,F&9TWJ4R"]Lh!(\|\38F/d7[IDASfL7/Q-CtT#Qz E@30~;f,%P?4Ucvl,I]Yu=)*7K3R \Wt-9&>`,]QPh]9Q;Ha"4uyr$O;;Q"P
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 41 b0 3b e6 8b e7 18 4c a9 6f 3c 37 b2 b8 a9 fd 16 83 fd c7 f5 50 07 5f c1 0a e2 84 35 f5 b9 46 b8 b8 44 b8 6a 3c e3 af c2 c3 3a 03 97 b7 34 44 0a 2a 7a 5d e4 51 cf e4 ea 50 bf e5 db d2 3d 57 7c f0 5c b3 ff f4 ea 9b 60 07 df 70 a8 7e db 5c ee fe fb ed fa 53 4e 83 46 2f 3a dd cb 38 e8 74 4a df 7e 7f 3f 77 ee b6 fa 43 06 78 a0 5e b9 aa b1 a8 c3 8e 04 85 94 4e 4a 77 82 c4 be 0b 8b 1a 57 29 a5 72 d0 cc 76 0d 57 3a 07 39 31 e2 63 08 b2 94 1e b3 c4 29 52 1f e5 aa 0b 4f 76 d6 bb c7 4b e7 d6 c6 54 eb 08 be 72 3b f6 38 6b 7c 81 3b fe 2e 0b 18 3b 3b 5b fa 85 6e bc 97 ef d3 45 21 34 b7 70 b9 b3 31 c2 d9 a0 c4 cd 39 3e 07 57 c3 1d 22 fe 22 f9 3c 1e 7d 54 7c b4 59 b1 00 a3 72 9e 48 a5 d6 aa 55 aa 8d 3c 15 b1 ba 63 48 f6 a6 e4 0d d9 e9 3f 55 9c 88 fa da 95 5b 13 1f 14 Data Ascii: A;Lo<7P_5FDj<:4D*z]QP=W\|\`p~\SNF/:8tJ~?wCx^NJwW)rvW:91c)ROvKTr;8k\|;.;;[nE!4p19>W""<}T\|YrHU<cH?U[
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 9a cd 88 63 a7 d8 dd 1f 2c b9 d2 d1 bf 1f 7c e0 9d 00 00 26 a5 36 8b 9b 7b 9b 9d 4b 66 3b 37 0b 6c f8 3c 19 3e bf 40 89 a4 75 9d c7 9c 38 24 35 cb 16 3c 6b a1 db 0d e4 c8 28 f2 60 bb 7a 27 61 b3 3d 7a a6 3a c4 a3 26 4c 8d 20 8d 44 1e 61 20 dc 7e 62 18 26 c7 60 4e 8a 42 18 5a 86 81 6f 6f 00 80 59 00 95 aa f3 9b 72 f3 d5 9f d1 be f8 8e b3 b9 91 fb 1b b2 ca 45 10 24 cc ea 79 c6 df af be 77 e4 71 fb 39 6f 37 2e 86 d2 95 17 9c c0 81 6b 8d b6 91 00 f3 a6 ed 59 22 08 a0 7c 6d d0 b6 77 6c 9b b6 6f 76 d8 ca 4c 19 8b bc 19 77 aa 8f e4 8a 42 8f 84 66 d2 8a 8a 19 98 11 90 b5 4a 59 e8 00 33 d5 28 61 3e bb 96 f1 60 24 f2 e7 cd 4b be b7 f4 5b a7 f1 f6 fa a3 df 0e f6 bd 58 ff 8f af 53 2e dd f3 df d4 3d cd 83 53 3d fe 96 bc 2c 39 de 52 e2 35 2d e6 f5 36 1f f6 ae 5a a8 25 Data Ascii: c,\|&6{Kf;7l<>@u8$5<k(`z'a=z:&L Da ~b&`NBZooYrE$ywq9o7.kY"\|mwlovLwBfJY3(a>`$K[XS.=S=,9R5-6Z%
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 32 35 ef 55 86 27 61 67 3b 0d 86 4c 8a 4a 87 23 51 1c 25 6c 22 55 0c 1e fa e2 5b 6f 2e ac 7c 76 8a 2a 7e 23 12 8d 14 4b e0 b7 10 1b 11 8b 63 0e 11 e2 16 5c ec a7 9c 4b ba 0e d3 c2 0a 6d eb ba dd 05 1e 2e 7b e0 3b be 7d 00 7f 8b e5 b4 6f 62 35 ab 9a 0d 4e ac 1b f8 9e 1e c7 53 5d 57 ec 3f b8 78 d6 88 04 b0 48 58 81 f2 fc c8 6d a9 60 05 99 98 79 e8 d8 02 5e ba f7 45 a5 cb 45 11 4c 8f 28 11 de 39 cd 7b 43 0d 9e 68 5f 7d fc 06 2e 1c 08 57 89 0c 22 61 e0 98 48 d4 2c 1a 18 5b 25 6c 6e 36 64 89 44 5d d5 d4 3c 50 6b 37 3c 6c 1a 33 86 a0 0a 0a 77 f2 28 f7 46 3e 0f 59 c3 d4 a0 3e 10 eb 15 e5 03 28 12 1a 01 b0 9f 67 8a a0 cd 34 ea ab 88 27 b7 c9 21 63 d2 72 59 14 dd 86 2e c8 4d 10 3f 5f 6f c3 aa 0f c2 90 dd 9a 7c 0a 1f e7 8e b1 0d 66 63 cf 30 31 c6 41 6d b7 31 69 32 Data Ascii: 25U'ag;LJ#Q%l"U[o.\|v*~#Kc\Km.{;}ob5NS]W?xHXm`y^EEL(9{Ch_}.W"aH,[%ln6dD]<Pk7<l3w(F>Y>(g4'!crY.M?_o\|fc01Am1i2
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: 36 2a 9c 68 9d 28 c9 0c f4 53 84 20 57 43 60 09 cb d3 23 2d cd c3 53 97 a4 de 1f 26 7a e9 2c a1 23 da 02 1a fe 5c 3d 5d 98 9b d5 33 c2 bf 7c 3a 85 c2 c3 8e e4 0e 60 7d 62 ba f4 a5 52 25 ef 55 35 5e 9a 95 51 aa 71 a3 34 5e 93 f2 5d a4 5d 81 26 e2 f6 21 b2 6f f0 5a 7e b9 b4 f8 a2 29 e8 6f 55 4c 9d 7a f7 bf 6f 0c eb 83 4d 76 4b fc 03 18 f9 2e 10 dc 14 e6 5a e1 d6 d0 14 9d 95 ac 73 3e e6 1c e7 97 4b d7 ae ef ac 5f 25 71 7b b1 e0 e8 b0 bd e4 de fb c1 a7 4e f2 5d 21 b9 01 ae 3a d6 47 bd b3 ae f5 ac 17 dd 58 30 cb d4 61 f6 eb a9 85 0e 87 b4 68 12 6f 52 9b b8 a8 9b cd 2a d5 46 ee 68 9d 9c 2d 8f f2 16 0c cd f9 16 33 5e be 84 2a 95 76 0e 4c 4c e4 55 29 2a 6b 17 e8 e0 13 c5 a5 a2 59 6d 92 44 33 af e3 40 4d 72 3b 17 b3 aa 15 8d 27 98 36 c9 8c 88 42 cf f0 77 b2 3f f4 Data Ascii: 6h(S WC`#-S&z,#\=]3\|:`}bR%U5^Qq4^]]&!oZ~)oULzoMvK.Zs>K_%q{N]!:GX0ahoRFh-3^vLLU)kYmD3@Mr;'6Bw?
2024-05-24 15:46:33 UTC	8192	IN	Data Raw: e9 ab 4f 43 5d e6 51 11 68 e3 f8 5a d2 5f 22 fd 15 57 24 c7 41 b3 2e 6a 51 13 93 fe dd ba d5 37 63 b5 35 15 95 ea 17 8a 9a b0 44 1f 87 fa 23 d2 27 af bb da 27 83 37 ad 23 23 93 7a 30 09 fc 97 0e c5 8c c7 43 ee 44 e8 5f 8f 28 58 ad 0e 07 86 e4 81 3c f1 21 08 01 5b a8 45 10 88 43 45 f0 e2 70 f0 f8 f3 fb 74 21 88 6b 84 dc 63 a0 2b 87 20 30 61 28 cd 50 94 7c 9d 90 ac c2 2b 39 85 0d 2f ca ae 73 5a b2 f0 e5 63 1e 51 6a 89 54 ef 2b 73 f4 e3 79 72 f6 f8 37 cc 9e 6d fa c9 60 1f 86 d2 d7 aa bc 28 75 49 49 01 9f 9d dc f9 a1 a1 8b fd 28 87 2f 09 2f 5d dc 4b b3 f7 72 f1 b2 f3 94 78 09 27 ac 47 c7 85 73 38 2e 5e 5d e2 15 8e 57 8f 29 96 2f 57 5e bd aa 00 8f 56 f9 17 f8 f9 14 34 f8 15 e4 fb fa 0f b3 fe b0 00 b8 c7 df 2f bf c0 f7 c5 72 42 70 0d 84 c5 b3 34 66 62 fe e5 d7 Data Ascii: OC]QhZ_"W$A.jQ7c5D#''7##z0CD_(X<![ECEpt!kc+ 0a(P\|+9/sZcQjT+syr7m`(uII(//]Krx'Gs8.^]W)/W^V4/rBp4fb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:32 UTC	772	OUT	GET /wp-content/plugins/gtranslate/js/float.js?ver=6.5.3 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:42 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:46:41 GMT Content-Type: text/javascript Content-Length: 22878 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:18:49 GMT ETag: "26012d4-595e-618fad97bf2b6" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:46:42 UTC	7645	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 67 74 20 3d 20 77 69 6e 64 6f 77 2e 67 74 72 61 6e 73 6c 61 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 67 74 20 3d 20 67 74 5b 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 77 69 64 67 65 74 2d 69 64 27 29 5d 20 7c 7c 20 67 74 3b 0a 0a 20 20 20 20 76 61 72 20 6c 61 6e 67 5f 61 72 72 61 79 5f 65 6e 67 6c 69 73 68 20 3d 20 7b 22 61 66 22 3a 22 41 66 72 69 6b 61 61 6e 73 22 2c 22 73 71 22 3a 22 41 6c 62 61 6e 69 61 6e 22 2c 22 61 6d 22 3a 22 41 6d 68 61 72 69 63 22 2c 22 61 72 22 3a 22 41 72 61 62 69 63 22 2c 22 68 79 22 3a 22 41 72 6d 65 6e 69 61 6e 22 2c 22 61 7a 22 3a 22 41 7a 65 72 Data Ascii: (function(){ var gt = window.gtranslateSettings \|\| {}; gt = gt[document.currentScript.getAttribute('data-gt-widget-id')] \|\| gt; var lang_array_english = {"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","az":"Azer
2024-05-24 15:46:42 UTC	8192	IN	Data Raw: 75 72 69 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 28 75 72 6c 5f 73 74 72 75 63 74 75 72 65 20 3d 3d 20 27 73 75 62 5f 64 6f 6d 61 69 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 67 74 5f 72 65 71 75 65 73 74 5f 75 72 69 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 6f 72 69 67 2d 75 72 6c 27 29 20 7c 7c 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 Data Ascii: uri; } else if(url_structure == 'sub_domain') { var gt_request_uri = (document.currentScript.getAttribute('data-gt-orig-url') \|\| location.pathname) + location.search + location.hash; var domain = document.currentScript.getA
2024-05-24 15:46:42 UTC	7041	IN	Data Raw: 7d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 6f 47 54 72 61 6e 73 6c 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 5f 70 61 69 72 29 7b 69 66 28 6c 61 6e 67 5f 70 61 69 72 2e 76 61 6c 75 65 29 6c 61 6e 67 5f 70 61 69 72 3d 6c 61 6e 67 5f 70 61 69 72 2e 76 61 6c 75 65 3b 69 66 28 6c 61 6e 67 5f 70 61 69 72 3d 3d 27 27 29 72 65 74 75 72 6e 3b 76 61 72 20 6c 61 6e 67 3d 6c 61 6e 67 5f 70 61 69 72 2e 73 70 6c 69 74 28 27 7c 27 29 5b 31 5d 3b 69 66 28 67 65 74 5f 63 75 72 72 65 6e 74 5f 6c 61 6e 67 28 29 20 3d 3d 20 6e 75 6c 6c 20 26 26 20 6c 61 6e 67 20 3d 3d 20 6c 61 6e 67 5f 70 61 69 72 2e 73 70 6c 69 74 28 27 7c 27 29 5b 30 5d 29 72 65 74 75 72 6e 3b 76 61 72 20 74 65 43 6f 6d 62 6f 3b 76 61 72 20 73 65 6c 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: } window.doGTranslate = function(lang_pair){if(lang_pair.value)lang_pair=lang_pair.value;if(lang_pair=='')return;var lang=lang_pair.split('\|')[1];if(get_current_lang() == null && lang == lang_pair.split('\|')[0])return;var teCombo;var sel=document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49760	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:36 UTC	1392	OUT	GET /pagead/viewthroughconversion/11423436062/?random=1716565592441&cv=11&fst=1716565592441&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:36 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 16:01:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:36 UTC	548	IN	Data Raw: 61 65 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: aef(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:46:36 UTC	1390	IN	Data Raw: 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 Data Ascii: g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Ed
2024-05-24 15:46:36 UTC	868	IN	Data Raw: 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 25 32 46 61 70 70 6c 79 2d 6e 6f 77 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 45 6d 61 69 6c 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 42 6c 61 6b 65 2d 4d 61 73 73 45 6d 61 69 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 6c 61 6b 65 2d 45 6d 61 69 6c 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 25 32 46 61 70 70 6c 79 2d 6e 6f 77 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 45 6d 61 69 6c 25 32 36 75 74 6d 5f Data Ascii: 0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_
2024-05-24 15:46:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49761	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:37 UTC	1516	OUT	GET /td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:37 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 16:01:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:37 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:46:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:39 UTC	1552	OUT	GET /td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 15:46:39 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlGR0IoSBVNiQnJhesDwas_aMWhu3LueDZV28cgYzYxC7WOsMysGqXjjJqA; expires=Sun, 24-May-2026 15:46:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:39 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:46:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:39 UTC	979	OUT	GET /td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 15:46:39 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY; expires=Sun, 24-May-2026 15:46:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:39 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:46:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49767	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:40 UTC	1520	OUT	GET /pagead/1p-user-list/11423436062/?random=1716565592441&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLFJiyLI-J8GgiJlSeir7NaIY9KZ4wHw&random=3592456305&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:40 UTC	1615	OUT	GET /td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:46:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:46:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:41 UTC	1466	OUT	GET /pagead/viewthroughconversion/11272802727/?random=1716565597065&cv=11&fst=1716565597065&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:46:41 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:41 UTC	687	IN	Data Raw: 61 66 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: af7(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:46:41 UTC	1390	IN	Data Raw: 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 30 3c 3d 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 Data Ascii: z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if
2024-05-24 15:46:41 UTC	737	IN	Data Raw: 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 42 6c 61 6b 65 2d 4d 61 73 73 45 6d 61 69 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 6c 61 6b 65 2d 45 6d 61 69 6c 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 25 32 46 61 70 70 6c 79 2d 6e 6f 77 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 45 6d 61 69 6c 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 42 6c 61 6b 65 2d 4d 61 73 73 45 6d 61 69 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 6c 61 6b 65 2d 45 6d 61 69 6c 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 47 65 74 74 69 6e 67 Data Ascii: utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dGetting
2024-05-24 15:46:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49772	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:41 UTC	1277	OUT	GET /pagead/1p-user-list/11423436062/?random=1716565592441&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLFJiyLI-J8GgiJlSeir7NaIY9KZ4wHw&random=3592456305&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:42 UTC	1491	OUT	GET /pagead/viewthroughconversion/11272802727/?random=1716565598683&cv=11&fst=1716565598683&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:46:42 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:46:42 UTC	687	IN	Data Raw: 62 31 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: b16(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:46:42 UTC	1390	IN	Data Raw: 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 30 3c 3d 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 Data Ascii: z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if
2024-05-24 15:46:42 UTC	768	IN	Data Raw: 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 42 6c 61 6b 65 2d 4d 61 73 73 45 6d 61 69 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 6c 61 6b 65 2d 45 6d 61 69 6c 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 25 32 46 61 70 70 6c 79 2d 6e 6f 77 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 45 6d 61 69 6c 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 42 6c 61 6b 65 2d 4d 61 73 73 45 6d 61 69 6c 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 6c 61 6b 65 2d 45 6d 61 69 6c 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 47 65 74 74 69 6e 67 Data Ascii: utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dGetting
2024-05-24 15:46:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49777	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:43 UTC	1534	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565597065&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLlnLwH4GQ6FqxzMImrCeaCSrXcJDaCjYrVyKn63037n9Xb5yK&random=2950629753&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:43 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49778	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:43 UTC	1440	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=0&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=12041 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:43 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:46:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:44 UTC	1559	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565598683&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL6ezzgUQy5mUQpOtu9cM_pgujao6mZpcwqzZG4gIw3-Hhujpl&random=1627328665&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:44 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49781	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:44 UTC	1291	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565597065&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLlnLwH4GQ6FqxzMImrCeaCSrXcJDaCjYrVyKn63037n9Xb5yK&random=2950629753&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:44 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49782	142.251.5.155	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:44 UTC	888	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&cid=2069642792.1716565597&gtm=45je45m0v892801163za201&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:46:44 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:46:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49783	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:44 UTC	1400	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163z8893682453za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=page_view&_c=1&tfd=13600 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:45 UTC	658	IN	HTTP/1.1 302 Found Location: https://www.google-analytics.com/privacy-sandbox/register-conversion?_c=1&cid=2069642792.1716565597&dbk=7841457143601130012&dma=0&en=page_view&gtm=45be45m0v892801163z8893682453za200&npa=0&tid=G-58PX1N3KV2&dl=https%3A%2F%2Fwww.daystarpayments.com%3F Access-Control-Allow-Origin: * Date: Fri, 24 May 2024 15:46:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 477 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:45 UTC	477	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 73 61 6e 64 62 6f 78 2f 72 65 67 69 73 74 65 72 2d 63 6f 6e 76 65 72 73 69 6f 6e 3f 5f 63 3d 31 26 61 6d 70 3b 63 69 64 3d 32 30 36 39 36 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google-analytics.com/privacy-sandbox/register-conversion?_c=1&cid=20696

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49784	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:45 UTC	1316	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565598683&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL6ezzgUQy5mUQpOtu9cM_pgujao6mZpcwqzZG4gIw3-Hhujpl&random=1627328665&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:46:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:46:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49785	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:46:45 UTC	1420	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=scroll&epn.percent_scrolled=90&_et=32&tfd=18643 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:46:45 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:46:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49789	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	548	OUT	OPTIONS /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-lucky-referrer,x-lucky-uid Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:15 UTC	545	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST,GET,PUT,PATCH,DELETE,OPTIONS Access-Control-Allow-Headers: Access-Control-Allow-Origin,Authorization,Content-Type,X-Lucky-Uid,X-Lucky-Site-Id,X-Lucky-Impersonate,X-Lucky-Session-Id,X-Lucky-Referrer Access-Control-Max-Age: 86400 Date: Fri, 24 May 2024 15:47:15 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49788	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	548	OUT	OPTIONS /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-lucky-referrer,x-lucky-uid Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:15 UTC	545	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST,GET,PUT,PATCH,DELETE,OPTIONS Access-Control-Allow-Headers: Access-Control-Allow-Origin,Authorization,Content-Type,X-Lucky-Uid,X-Lucky-Site-Id,X-Lucky-Impersonate,X-Lucky-Session-Id,X-Lucky-Referrer Access-Control-Max-Age: 86400 Date: Fri, 24 May 2024 15:47:15 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49790	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	959	OUT	GET /wp-content/plugins/gtranslate/flags/svg/en-us.svg HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0
2024-05-24 15:47:15 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:15 GMT Content-Type: image/svg+xml Content-Length: 6080 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:18:49 GMT ETag: "260126d-17c0-618fad97b94f6" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:15 UTC	6080	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 3c 64 65 73 63 3e 54 68 65 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 20 66 6c 61 67 2c 20 70 72 6f 64 75 63 65 64 20 62 79 20 44 61 6e 69 65 6c 20 4d 63 52 61 65 3c 2f 64 65 73 63 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 36 37 22 20 64 3d 22 4d 30 20 30 68 36 38 32 2e 36 37 76 35 31 32 48 30 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 70 61 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 480"><desc>The United States of America flag, produced by Daniel McRae</desc><defs><clipPath id="a"><path fill-opacity=".67" d="M0 0h682.67v512H0z"/></clipPath></defs><g fill-rule="evenodd" clip-pat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49792	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	620	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-lucky-referrer: sec-ch-ua-mobile: ?0 x-lucky-uid: undefined User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:15 UTC	343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:15 UTC	1047	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:15 UTC	1390	IN	Data Raw: 64 76 61 6e 63 65 64 22 3a 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 4d 65 74 72 69 63 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 22 3a 22 22 7d 2c 22 61 76 65 72 61 67 65 43 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d Data Ascii: dvanced":{"conversionMetric":{"active":false,"metric":""},"averageConversion":{"active":false,"value":0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}
2024-05-24 15:47:15 UTC	1362	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 22 7d 2c 22 63 6f 6e 74 61 63 74 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 65 6d 61 69 6c 22 7d 2c 22 71 75 65 73 74 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 Data Ascii: e":true,"label":"Your first name"},"contact":{"active":true,"label":"Your email"},"question":{"active":false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTit
2024-05-24 15:47:15 UTC	179	IN	Data Raw: 72 73 22 3a 5b 7b 22 69 64 22 3a 22 64 39 61 66 62 35 66 35 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 69 7a 69 6e 22 7d 5d 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 62 6f 74 22 3a 66 61 6c 73 65 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: rs":[{"id":"d9afb5f5","displayName":"Faizin"}],"visitor":{"bot":false,"browser":{"name":"Chrome","version":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49794	142.250.184.238	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	629	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:16 UTC	2229	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 24 May 2024 15:47:16 GMT Date: Fri, 24 May 2024 15:47:16 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=lPkBZp0Aznk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=rTht96_vpS8; Domain=.youtube.com; Expires=Wed, 20-Nov-2024 15:47:16 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D; Domain=.youtube.com; Expires=Wed, 20-Nov-2024 15:47:16 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: PREF=f7=4000; Domain=.youtube.com; Expires=Thu, 23-Jan-2025 03:40:16 GMT; Path=/; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:16 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 62 63 36 35 37 32 34 33 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-05-24 15:47:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49793	157.240.252.13	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:15 UTC	544	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:16 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 15:47:16 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 15:47:16 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-24 15:47:16 UTC	14632	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-24 15:47:16 UTC	16384	IN	Data Raw: 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 Data Ascii: ctor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|(t
2024-05-24 15:47:16 UTC	16384	IN	Data Raw: 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 Data Ascii: ntsUtils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("SignalsFBEventsResolveLink");s=f.get
2024-05-24 15:47:16 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 61 3d 6e 65 77 20 55 52 4c 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 63 61 74 63 68 28 61 29 7b 72 Data Ascii: ;return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try{a=new URL(a);return a}catch(a){r
2024-05-24 15:47:16 UTC	1751	IN	Data Raw: 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d Data Ascii: thFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode:b.allowNull(b.string()),eventNam
2024-05-24 15:47:16 UTC	14633	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-24 15:47:16 UTC	16384	IN	Data Raw: 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e Data Ascii: s.append(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a}))return;f=h.trigger(b);if(l(f,fun
2024-05-24 15:47:16 UTC	16384	IN	Data Raw: 2c 74 3d 73 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 Data Ascii: ,t=s.length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49795	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	1023	OUT	GET /wp-content/plugins/gtranslate/flags/svg/en-us.svg HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:23 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:23 GMT Content-Type: image/svg+xml Content-Length: 6080 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:18:49 GMT ETag: "260126d-17c0-618fad97b94f6" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:23 UTC	6080	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 3c 64 65 73 63 3e 54 68 65 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 20 66 6c 61 67 2c 20 70 72 6f 64 75 63 65 64 20 62 79 20 44 61 6e 69 65 6c 20 4d 63 52 61 65 3c 2f 64 65 73 63 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 36 37 22 20 64 3d 22 4d 30 20 30 68 36 38 32 2e 36 37 76 35 31 32 48 30 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 70 61 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 480"><desc>The United States of America flag, produced by Daniel McRae</desc><defs><clipPath id="a"><path fill-opacity=".67" d="M0 0h682.67v512H0z"/></clipPath></defs><g fill-rule="evenodd" clip-pat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49799	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	1430	OUT	GET /wp-content/plugins/elementor-pro/assets/js/form.72b77b99d67b130634d2.bundle.min.js HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:16 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:16 GMT Content-Type: text/javascript Content-Length: 19245 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 23 Dec 2023 10:12:07 GMT ETag: "2843768-4b2d-60d2a90b1969c" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:16 UTC	7645	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 31 36 2e 30 20 2d 20 32 30 2d 30 39 2d 32 30 32 33 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 30 5d 2c 7b 32 36 37 39 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 44 61 74 61 54 69 6d 65 46 69 65 6c 64 42 61 73 65 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e Data Ascii: /! elementor-pro - v3.16.0 - 20-09-2023 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[680],{2679:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class DataTimeFieldBase extends elemen
2024-05-24 15:47:16 UTC	8192	IN	Data Raw: 62 6a 65 63 74 54 61 67 73 3a 5b 5d 7d 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 63 75 72 72 65 6e 74 53 74 65 70 3a 30 2c 73 74 65 70 73 54 79 70 65 3a 22 22 2c 73 74 65 70 73 53 68 61 70 65 3a 22 22 7d 2c 74 68 69 73 2e 62 75 69 6c 64 53 74 65 70 73 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3d 7b 2e 2e 2e 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2c 2e 2e 2e 74 68 69 73 2e 63 72 65 61 74 65 53 74 65 70 73 49 6e 64 69 63 61 74 6f 72 73 28 29 2c 2e 2e 2e 74 68 69 73 2e 63 72 65 61 74 65 53 74 65 70 73 42 75 74 74 6f 6e 73 28 29 7d 2c 74 68 69 73 2e 69 6e 69 74 50 72 6f 67 72 65 73 73 42 61 72 28 29 2c 74 68 69 73 2e 65 78 74 72 61 63 74 52 65 73 70 6f 6e 73 69 76 65 53 69 7a 65 46 72 6f 6d 53 75 62 6d 69 74 57 72 61 70 70 65 72 28 29 29 7d 62 69 6e 64 45 Data Ascii: bjectTags:[]},this.state={currentStep:0,stepsType:"",stepsShape:""},this.buildSteps(),this.elements={...this.elements,...this.createStepsIndicators(),...this.createStepsButtons()},this.initProgressBar(),this.extractResponsiveSizeFromSubmitWrapper())}bindE
2024-05-24 15:47:16 UTC	3408	IN	Data Raw: 61 74 6f 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2e 63 75 72 72 65 6e 74 2e 72 65 6d 6f 76 65 29 2e 61 64 64 43 6c 61 73 73 28 73 2e 63 75 72 72 65 6e 74 2e 61 64 64 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 63 75 72 72 65 6e 74 49 6e 64 69 63 61 74 6f 72 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 65 71 28 74 68 69 73 2e 73 74 61 74 65 2e 63 75 72 72 65 6e 74 53 74 65 70 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 63 75 72 72 65 6e 74 49 6e 64 69 63 61 74 6f 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2e 6e 65 78 74 2e 72 65 6d 6f 76 65 29 2e 61 64 64 43 6c 61 73 73 28 73 2e 6e 65 78 74 2e 61 64 64 29 2c 74 68 69 73 2e 64 61 74 61 2e 69 6e 64 69 63 61 74 6f 72 73 57 69 74 68 4f 62 6a 65 63 74 54 Data Ascii: ator.removeClass(s.current.remove).addClass(s.current.add),this.elements.$currentIndicator=this.elements.$indicators.eq(this.state.currentStep),this.elements.$currentIndicator.removeClass(s.next.remove).addClass(s.next.add),this.data.indicatorsWithObjectT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49796	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	620	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-lucky-referrer: sec-ch-ua-mobile: ?0 x-lucky-uid: undefined User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:16 UTC	343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:16 UTC	1047	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:16 UTC	1390	IN	Data Raw: 64 76 61 6e 63 65 64 22 3a 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 4d 65 74 72 69 63 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 22 3a 22 22 7d 2c 22 61 76 65 72 61 67 65 43 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d Data Ascii: dvanced":{"conversionMetric":{"active":false,"metric":""},"averageConversion":{"active":false,"value":0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}
2024-05-24 15:47:16 UTC	1362	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 22 7d 2c 22 63 6f 6e 74 61 63 74 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 65 6d 61 69 6c 22 7d 2c 22 71 75 65 73 74 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 Data Ascii: e":true,"label":"Your first name"},"contact":{"active":true,"label":"Your email"},"question":{"active":false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTit
2024-05-24 15:47:16 UTC	179	IN	Data Raw: 72 73 22 3a 5b 7b 22 69 64 22 3a 22 64 39 61 66 62 35 66 35 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 69 7a 69 6e 22 7d 5d 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 62 6f 74 22 3a 66 61 6c 73 65 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: rs":[{"id":"d9afb5f5","displayName":"Faizin"}],"visitor":{"bot":false,"browser":{"name":"Chrome","version":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49798	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	1431	OUT	GET /wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:16 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:16 GMT Content-Type: text/javascript Content-Length: 759 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 23 Dec 2023 10:12:07 GMT ETag: "2843949-2f7-60d2a90b1e0d4" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:16 UTC	759	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 31 36 2e 30 20 2d 20 32 30 2d 30 39 2d 32 30 32 33 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 38 38 37 32 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 Data Ascii: /! elementor-pro - v3.16.0 - 20-09-2023 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[50],{8872:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=elementorModules.frontend.handler

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49797	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	1396	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:16 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:16 GMT Content-Type: text/javascript Content-Length: 18726 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 08 Apr 2024 16:23:20 GMT ETag: "2842cc2-4926-61598394357a8" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:16 UTC	7645	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-05-24 15:47:16 UTC	8192	IN	Data Raw: 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 Data Ascii: d\udc8b\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d[\udc68\udc69]\|\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c[\udffc-\udfff]\|\ud83e\udef1\ud83c\udffc\u200d\ud83e\udef2\ud83c[\udffb\udffd-\udfff]\|\ud83e\udef1\ud83c\u
2024-05-24 15:47:17 UTC	2889	IN	Data Raw: 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 29 7b 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 63 2e 77 70 2e 65 6d 6f 6a 69 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 Data Ascii: e: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp\|\|{},c.wp.emoji=new function(){var n,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49800	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:16 UTC	356	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:16 UTC	241	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:16 UTC	1149	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:16 UTC	1390	IN	Data Raw: 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 22 3a 7b 22 67 72 65 65 74 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 63 6f 6e 22 3a 22 75 73 65 72 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 Data Ascii: 0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}},"chat":{"messaging":{"greeting":{"active":false,"icon":"user","headline":"Welcome to Daystar Payment
2024-05-24 15:47:16 UTC	1362	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 6c 65 22 3a 22 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 73 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 2c 22 70 65 72 73 6f 6e 61 6c 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 70 72 6f 66 69 6c 65 50 68 6f 74 6f 22 2c 22 74 69 74 6c 65 22 3a 22 Data Ascii: :false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTitle":"Daystar Payments","backgroundColor":"default"},"personal":{"headerImage":"profilePhoto","title":"
2024-05-24 15:47:16 UTC	77	IN	Data Raw: 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: ion":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49801	13.32.27.6	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:17 UTC	545	OUT	GET /core/core.js?v=0b59897 HTTP/1.1 Host: tools.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:17 UTC	697	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 65337 Connection: close Date: Fri, 24 May 2024 15:47:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Wed, 22 May 2024 18:57:14 GMT ETag: "20eed4291a9f01572fb51567a0879237" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 93b0598b43d63761f1a129690721f888.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: xJu6ijpYgoosNFk4uBW2i2-jODjS6cigYYStJ5t3e-zUBMNw1d3mXQ==
2024-05-24 15:47:17 UTC	15666	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd eb 7a db 48 b2 20 f8 2a 14 ba 0e 0d 98 29 88 94 64 5b 02 0d 73 5d be 74 b9 8f 6f 6d b9 ba ce 59 9a e5 81 c8 a4 08 1b 04 d8 b8 48 56 91 9c af 66 77 67 af df b7 0f b0 7f 76 fe ce af 7d 87 f3 26 5b fb 22 1b 11 79 41 02 04 29 b9 da dd df cc 54 b7 45 20 91 d7 c8 cc c8 88 c8 b8 d8 d3 22 1e e7 61 12 db 9c e5 ce 72 9a a4 f6 65 90 b6 e2 56 18 b7 72 87 0f e3 91 9f c3 9f b5 63 e7 b3 30 63 65 6e c8 2b 9f 5b b9 6d 96 64 09 0b a1 4c 77 c4 02 f8 e9 8d 58 e6 77 59 e1 0f 47 fd ec 61 e8 46 3c be c8 67 fd ac d3 71 12 3f 1c 66 23 f6 e6 fc 13 1f e7 ee 22 4d f2 24 bf 5e 70 77 16 64 6f ae e2 b7 69 b2 e0 69 7e ed 8e 83 28 b2 53 96 38 ed 76 3a 4c 46 ed 76 e1 2e 8a 6c 66 e3 0b b4 e2 30 7c f0 bb 7d ec 00 75 3b 70 6e 55 65 c0 62 a8 d2 a6 21 06 f0 Data Ascii: zH *)d[s]tomYHVfwgv}&["yA)TE "areVrc0cen+[mdLwXwYGaF<gq?f#"M$^pwdoii~(S8v:LFv.lf0\|}u;pnUeb!
2024-05-24 15:47:17 UTC	16384	IN	Data Raw: 75 a6 e1 45 18 07 11 16 f3 b4 66 ad ea 0d 9f 50 7a c2 52 14 b6 7b c9 81 76 59 a5 06 1b 08 1b b2 67 ba 29 16 ba aa 5d 66 fd 18 97 35 b5 d0 3a 99 be 9b 6d 32 0d 76 33 47 b5 7d 66 bd 43 21 6c 4e 46 19 0c 90 dd be 5d f6 e4 2e 46 e6 86 25 fc 3c fc c2 27 f6 21 50 82 ff 84 6a 22 74 82 56 80 d2 30 8b dd 3e aa e1 a3 46 f1 f9 75 ce 5f ca 3b 77 72 31 0c 78 8a c6 04 6b d1 2a f2 e9 fe 89 e5 88 71 61 34 65 05 04 a1 b2 8f 7e 48 f4 35 70 79 5d 2c 6c a3 b2 ed e7 f8 03 9c b9 83 3f ac 3e 94 67 e6 07 f7 80 85 8d a2 af 6c 88 f6 03 a6 7e 5f 01 3d dd 23 31 53 13 75 31 48 51 b7 6c 6f 2f a7 20 8e 21 1c b9 e9 3c 88 50 b4 d7 80 b3 b4 cd 8f c6 26 09 b1 47 55 cc b0 26 62 1e 79 75 71 2e 85 ee eb c7 ef 5f fc e5 99 8f 01 c1 50 07 f6 ed 9b 97 ff fa fc c5 cb 97 be f5 d6 32 08 8e 70 0b 08 Data Ascii: uEfPzR{vYg)]f5:m2v3G}fC!lNF].F%<'!Pj"tV0>Fu_;wr1xk*qa4e~H5py],l?>gl~_=#1Su1HQlo/ !<P&GU&byuq._P2p
2024-05-24 15:47:17 UTC	9973	IN	Data Raw: b6 3e d1 1c 2b 90 2f f4 57 4e db 7a f3 9a e0 7f f2 97 56 b3 4e 4a be 6b 21 8b ea e8 c9 7f 63 43 ae 78 04 99 8e d3 2c 5d 12 79 8e 4f cb 5d 7c 1a c7 27 df 13 a3 bf 31 c1 a7 d2 a5 7f 1a 71 34 42 c2 81 ff 72 0c 8c c1 6a fb b7 ee c4 db 9c f8 d7 9d 21 f9 03 66 e7 cd e9 f7 67 ef a6 37 87 7f 3b 7c 7b 78 7c c8 ff f7 71 73 73 f3 f1 87 9d b7 87 3d fa fc c0 53 df 1e d2 f7 f1 db f3 c3 c3 3d 03 89 62 d1 51 e2 27 53 4f 74 45 bf 9d c7 46 f6 e6 a5 59 16 8f a4 3c c4 37 0f 56 10 d5 b8 1a ae 65 1a 97 91 e7 9d f8 88 f8 20 af b5 e1 16 bd df e7 95 97 d0 ed 93 32 be d6 55 f6 ba fa 87 ad 6c dc 93 62 0b ad d2 16 5a 7a 0b 2d b4 af eb 24 79 0e 94 24 32 6d 0c a7 3b 09 c2 88 58 44 fc d7 61 02 73 1e ce 31 7e 9d 4a 23 6e 1e bc 58 5a d2 a5 3b 21 ee 1e a6 24 70 a3 63 38 69 b7 04 d9 39 c7 Data Ascii: >+/WNzVNJk!cCx,]yO]\|'1q4Brj!fg7;\|{x\|qss=S=bQ'SOtEFY<7Ve 2UlbZz-$y$2m;XDas1~J#nXZ;!$pc8i9
2024-05-24 15:47:17 UTC	11259	IN	Data Raw: 19 23 49 b5 1d 4f bc d2 25 29 8d 6b 8d a0 f7 18 d6 e4 28 41 f5 f0 57 8d f1 86 57 a0 0b 8c 16 e4 52 6b ca 3c c1 c0 e5 cf 96 ce 2a ff 96 30 de aa 5a 08 03 6c 83 c4 f0 eb eb 2f 28 64 3e d1 1f 1b 30 05 f6 55 ab a5 86 9a 59 ac fc b1 cd a0 50 e9 2d 00 b0 19 8c 22 c2 75 f0 22 9e 45 e3 ec 6a 72 5e a7 99 bb 4b 33 59 14 a3 53 36 ad 7a 4b c2 dd b4 5c 9c 2d c7 3c 52 4e cb 74 06 64 d7 4d b1 af 77 f2 b9 c1 a3 68 a2 9f 98 92 ce 3f 12 b6 8a 86 51 5d 33 59 2c d0 f1 e6 46 4a 8a 5a b6 b7 62 40 54 17 43 bf 06 4b a6 75 55 1c c9 17 8e 94 89 27 16 ae dc 47 37 4a 62 53 11 b3 c2 26 ee d0 b4 28 74 15 6a 74 a2 d5 bd 58 f7 4f 81 0f 2f c7 b3 f3 53 8e 0c 2b 67 b9 58 00 02 af 85 47 c3 a7 e1 5c e2 06 c5 f6 bf 3d 86 7b 02 63 cb 0d 1f c6 f7 ae 51 d8 34 02 26 c5 73 63 4a 6e 49 6e 2a f0 46 Data Ascii: #IO%)k(AWWRk<0Zl/(d>0UYP-"u"Ejr^K3YS6zK\-<RNtdMwh?Q]3Y,FJZb@TCKuU'G7JbS&(tjtXO/S+gXG\={cQ4&scJnInF
2024-05-24 15:47:17 UTC	12055	IN	Data Raw: 01 55 49 1f 64 b2 b5 96 43 da dc bc ad 86 48 03 84 9d 55 e0 73 c9 4a 7b c1 6b 32 04 4e db 12 2c be 7a e2 3e 89 65 c0 ca a8 bb 76 11 aa 2c 58 49 c8 db 41 a7 75 1d cd a2 a5 2b 26 d7 10 91 02 5a 0b 67 6e e6 c6 79 db 75 9e b7 5d fb bc ed e2 79 63 79 54 67 30 88 db 4d bb 48 39 c7 fc a5 9c 13 ed 58 52 e8 fd 41 a7 61 95 8b 98 92 21 6f d4 16 40 f2 fa d2 2b be 9b a4 c3 f1 0c 90 ab ef 6d 79 c1 40 30 b2 a7 c8 8d 71 36 07 e4 32 1a c6 f9 08 d3 8a 00 d7 ed b1 82 5f e0 10 11 55 02 62 cb 4b f1 62 00 52 6a 48 99 c4 8b 5f 41 ba f4 bd ff a0 d0 1b 59 84 3f 58 ed f3 d1 7c 1a 97 98 cd 12 70 ad f0 08 05 06 e3 18 13 bd 46 6e 00 a0 a3 79 25 13 ef 2a 96 8c c9 35 91 bc d8 d2 70 89 f6 b7 ba ea 03 d2 ed 0e 33 f0 32 7b ad 1c 9c e6 46 7d bd e0 c0 d6 8e b7 8b 3f c5 cc d1 52 da 8f 2c f5 Data Ascii: UIdCHUsJ{k2N,z>ev,XIAu+&Zgnyu]ycyTg0MH9XRAa!o@+my@0q62_UbKbRjH_AY?X\|pFny%*5p32{F}?R,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49802	142.250.184.238	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:17 UTC	778	OUT	GET /s/player/bc657243/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:17 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 42729 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:16:45 GMT Expires: Sat, 24 May 2025 15:16:45 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 1832 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:17 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: (function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var r="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 72 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 6b 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6b 2c 66 29 7b 74 68 69 73 2e 67 3d 6b 3b 72 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 Data Ascii: ;b=b(d);b!=d&&null!=b&&r(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+e++,k)}function c(k,f){this.g=k;r(this,"descript
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 64 61 7d 29 3b 0a 76 61 72 20 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 0a 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 66 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 66 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 68 61 3b 61 3a 7b 76 61 72 20 69 61 3d 7b 61 3a 21 30 7d 2c 6a 61 3d 7b 7d 3b 74 72 79 7b 6a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f Data Ascii: on(a){return a\|\|da});var ea="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},fa;if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ja={};try{ja.__proto__
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 29 2c 79 28 61 29 7d 61 2e 67 2e 67 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 6b 29 3b 72 65 74 75 72 6e 20 79 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 6c 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 69 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 73 3d 76 6f 69 64 20 30 2c 71 61 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 69 3d 21 31 3b 69 66 28 61 2e 67 2e 68 29 7b 62 3d 61 2e 67 2e 68 3b 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 69 66 28 62 2e 55 29 74 68 72 6f 77 20 62 2e 54 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 Data Ascii: ),y(a)}a.g.g=null;d.call(a.g,k);return y(a)}function y(a){for(;a.g.l;)try{var b=a.h(a.g);if(b)return a.g.i=!1,{value:b.value,done:!1}}catch(c){a.g.s=void 0,qa(a.g,c)}a.g.i=!1;if(a.g.h){b=a.g.h;a.g.h=null;if(b.U)throw b.T;return{value:b.return,done:!0}}re
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 66 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 68 7c 7c 28 68 3d 21 30 2c 6c 2e 63 61 6c 6c 28 67 2c 6d 29 29 7d 7d 0a 76 61 72 20 67 3d 74 68 69 73 2c 68 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 66 28 74 68 69 73 2e 4e 29 2c 72 65 6a 65 63 74 3a 66 28 74 68 69 73 2e 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6c 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 Data Ascii: s.i(function(){throw f;})};b.prototype.j=function(){function f(l){return function(m){h\|\|(h=!0,l.call(g,m))}}var g=this,h=!1;return{resolve:f(this.N),reject:f(this.l)}};b.prototype.N=function(f){if(f===this)this.l(new TypeError("A Promise cannot resolve
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 67 74 68 3b 2b 2b 66 29 6b 2e 68 28 74 68 69 73 2e 67 5b 66 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 6b 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6a 28 29 3b 66 2e 42 28 67 2e 72 65 73 6f 6c 76 65 2c 67 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6a 28 29 3b 74 72 79 7b 66 2e 63 61 6c 6c 28 67 2c 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 68 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 66 75 6e 63 74 69 6f Data Ascii: gth;++f)k.h(this.g[f]);this.g=null}};var k=new c;b.prototype.P=function(f){var g=this.j();f.B(g.resolve,g.reject)};b.prototype.R=function(f,g){var h=this.j();try{f.call(g,h.resolve,h.reject)}catch(l){h.reject(l)}};b.prototype.then=function(f,g){functio
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 68 29 7b 68 3d 77 28 68 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 68 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 68 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 69 66 28 21 78 28 68 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 72 28 68 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 28 68 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 68 5d 3b 6c 26 26 28 4f 62 Data Ascii: h){h=w(h);for(var l;!(l=h.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(h){var l=typeof h;return"object"===l&&null!==h\|\|"function"===l}function e(h){if(!x(h,f)){var l=new c;r(h,f,{value:l})}}function k(h){var l=Object[h];l&&(Ob
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 68 29 3f 6c 3d 6b 2e 67 65 74 28 68 29 3a 28 6c 3d 22 22 2b 20 2b 2b 66 2c 6b 2e 73 65 74 28 68 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 68 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 78 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 67 5d 3b 69 66 28 68 21 3d 3d 68 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 68 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 6d 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 Data Ascii: h)?l=k.get(h):(l=""+ ++f,k.set(h,l)):l="p_"+h;var m=g[0][l];if(m&&x(g[0],l))for(g=0;g<m.length;g++){var p=m[g];if(h!==h&&p.key!==p.key\|\|h===p.key)return{id:l,list:m,index:g,m:p}}return{id:l,list:m,index:-1,m:void 0}}function e(g){this[0]={};this[1]=b();t
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 67 29 2e 6d 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 28 67 3d 64 28 74 68 69 73 2c 67 29 2e 6d 29 26 26 67 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 5b 67 2e 6b 65 79 2c 67 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 6b 65 79 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 Data Ascii: {return!!d(this,g).m};e.prototype.get=function(g){return(g=d(this,g).m)&&g.value};e.prototype.entries=function(){return c(this,function(g){return[g.key,g.value]})};e.prototype.keys=function(){return c(this,function(g){return g.key})};e.prototype.value
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 6b 2c 61 5b 6b 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 0a 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 0a 72 65 74 75 72 6e 20 65 7d 0a 76 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 Data Ascii: eturn{value:b(k,a[k]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e}v("Array.prototype.values",function(a){return a?a:function(){return wa(this,function(b,c){return c})}});v("Set",function(a){function b(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49803	157.240.252.13	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:17 UTC	1326	OUT	GET /signals/config/1423059381965053?v=2.9.156&r=stable&domain=www.daystarpayments.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:18 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 15:47:18 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-24 15:47:18 UTC	900	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 6c 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 5f 66 65 61 74 75 72 65 73 3d 7b 7d 7d 68 28 61 2c 5b 7b 6b 65 79 3a 22 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 66 65 61 74 75 72 65 73 5b 61 5d 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 5f 66 65 61 74 75 72 Data Ascii: EventsFeatureCounter",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=function(){function a(){l(this,a),this._features={}}h(a,[{key:"incrementAndGet",value:function(a){this._features[a]==null&&(this._featur
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 64 2e 73 6c 69 63 65 28 30 2c 62 29 2b 22 40 22 2b 64 2e 73 6c 69 63 65 28 61 2b 31 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 76 61 72 20 6a 3d 2f 5b 5c 64 5d 2b 28 5c 2e 5b 5c 64 5d 2b 29 3f 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 61 3d 61 3b 77 68 69 6c 65 28 2f 5c 64 5c 2e 5c 64 2f 2e 74 65 73 74 28 61 29 29 61 3d 61 2e 72 65 70 6c 61 63 65 28 6a 2c 22 30 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 6a 2c 22 30 22 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 7b 73 61 66 65 3a 6c 28 69 Data Ascii: l));c(a.reverse(),function(a){var b=a.start;a=a.end;if(a==null)return;d=d.slice(0,b)+"@"+d.slice(a+1)});return d}var j=/[\d]+(\.[\d]+)?/g;function l(a){a=a;while(/\d\.\d/.test(a))a=a.replace(j,"0");a=a.replace(j,"0");return a}function m(a){return{safe:l(i
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 6e 3d 62 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 6f 3d 62 2e 73 69 67 6e 61 6c 73 45 78 74 72 61 63 74 46 6f 72 6d 2c 70 3d 62 2e 73 69 67 6e 61 6c 73 49 73 49 57 4c 45 6c 65 6d 65 6e 74 2c 71 3d 62 2e 73 69 67 6e 61 6c 73 45 78 74 72 61 63 74 42 75 74 74 6f 6e 46 65 61 74 75 72 65 73 2c 72 3d 62 2e 73 69 67 6e 61 6c 73 47 65 74 54 72 75 6e 63 61 74 65 64 42 75 74 74 6f 6e 54 65 78 74 2c 73 3d 62 2e 73 69 67 6e 61 6c 73 47 65 74 57 72 61 70 70 69 6e 67 42 75 74 74 6f 6e 3b 62 3d 66 2e Data Ascii: ting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEventsShared");var n=b.signalsConvertNodeToHTMLElement,o=b.signalsExtractForm,p=b.signalsIsIWLElement,q=b.signalsExtractButtonFeatures,r=b.signalsGetTruncatedButtonText,s=b.signalsGetWrappingButton;b=f.
2024-05-24 15:47:18 UTC	1500	IN	Data Raw: 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 29 72 65 74 75 72 6e 3b 62 2e 74 72 61 63 6b 53 69 6e 67 6c 65 53 79 73 74 65 6d 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 63 2c 22 53 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 43 6c 69 63 6b 22 2c 6c 29 7d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 65 2c 66 29 7b 69 66 28 61 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 61 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 29 3b 69 66 28 21 67 29 72 65 74 75 72 6e 3b 67 3d 61 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 3b 69 66 28 21 67 29 72 65 74 Data Ascii: ).length===0))return;b.trackSingleSystem("automatic",c,"SubscribedButtonClick",l)})}}}function G(a,b,c,e,f){if(a.disableAutoConfig)return;var g=a.optIns.isOptedIn(b.id,"InferredEvents");if(!g)return;g=a.optIns.isOptedIn(b.id,"AutomaticMatching");if(!g)ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49805	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:17 UTC	356	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:17 UTC	241	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:17 UTC	1149	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:17 UTC	1390	IN	Data Raw: 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 22 3a 7b 22 67 72 65 65 74 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 63 6f 6e 22 3a 22 75 73 65 72 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 Data Ascii: 0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}},"chat":{"messaging":{"greeting":{"active":false,"icon":"user","headline":"Welcome to Daystar Payment
2024-05-24 15:47:17 UTC	1362	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 6c 65 22 3a 22 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 73 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 2c 22 70 65 72 73 6f 6e 61 6c 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 70 72 6f 66 69 6c 65 50 68 6f 74 6f 22 2c 22 74 69 74 6c 65 22 3a 22 Data Ascii: :false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTitle":"Daystar Payments","backgroundColor":"default"},"personal":{"headerImage":"profilePhoto","title":"
2024-05-24 15:47:17 UTC	77	IN	Data Raw: 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: ion":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49806	35.244.167.102	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:19 UTC	545	OUT	GET /mqtt HTTP/1.1 Host: realtime.luckyorange.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: FAf/pBdxoBmgrQIA+uP9Qw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqtt
2024-05-24 15:47:19 UTC	248	IN	HTTP/1.1 426 Upgrade Required content-length: 0 date: Fri, 24 May 2024 15:47:19 GMT sec-websocket-protocol: mqtt server: Cowboy upgrade: websocket Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49807	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:19 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: CLK1vO02ZlzwLAiOTZbq3g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:19 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:19 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:19 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49809	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:19 UTC	1004	OUT	GET /embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:20 UTC	1805	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 24 May 2024 15:47:20 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: PREF=f7=4000; Domain=.youtube.com; Expires=Thu, 23-Jan-2025 03:40:20 GMT; Path=/; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 48 32 70 36 48 73 4e 64 4f 74 62 68 76 67 4c 36 69 34 37 36 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="HH2p6HsNdOtbhvgL6i476g">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 Data Ascii: 60-2C7F,U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 Data Ascii: 113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 54 69 6d 65 28 29 7d 2c 74 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 74 2c 6e 29 7b 76 61 72 20 74 69 63 6b 73 3d 79 74 63 73 69 2e 67 74 28 6e 29 2e 74 69 63 6b 3b 76 61 72 20 76 3d 74 7c 7c 79 74 63 73 69 2e 6e 6f 77 28 29 3b 69 66 28 74 69 63 6b 73 5b 6c 5d 29 7b 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 3d 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 7c 7c 5b 74 69 63 6b 73 5b 6c 5d 5d 3b 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 2e 70 75 73 68 28 76 29 7d 74 69 63 6b 73 5b 6c 5d 3d 0a 76 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 2c 6e 29 7b 79 74 63 73 69 2e 67 74 28 6e 29 2e 69 6e 66 6f 5b 6b 5d 3d 76 7d 2c 69 6e 66 6f 47 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 70 2c 6e 29 7b 79 74 63 73 69 2e 67 74 28 6e 29 2e 67 65 6c 2e 70 72 65 4c 6f 67 67 65 64 47 65 Data Ascii: Time()},tick:function(l,t,n){var ticks=ytcsi.gt(n).tick;var v=t\|\|ytcsi.now();if(ticks[l]){ticks["_"+l]=ticks["_"+l]\|\|[ticks[l]];ticks["_"+l].push(v)}ticks[l]=v},info:function(k,v,n){ytcsi.gt(n).info[k]=v},infoGel:function(p,n){ytcsi.gt(n).gel.preLoggedGe
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3a 6f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 31 29 79 74 63 66 67 2e 64 28 29 5b 61 5b 30 5d 5d 3d 61 5b 31 5d 3b 65 6c 73 65 7b 76 61 72 20 6b 3b 66 6f 72 28 6b 20 69 6e 20 61 5b 30 5d 29 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3d 61 5b 30 5d 5b 6b 5d 7d 7d 7d 3b 0a 79 74 63 66 67 2e 73 65 74 28 7b 22 45 56 45 4e 54 5f 49 44 22 3a 22 Data Ascii: eturn window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}};ytcfg.set({"EVENT_ID":"
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 64 65 6e 74 69 74 79 5f 61 74 74 72 69 62 75 74 65 73 5f 66 6f 72 5f 6c 69 76 65 5f 63 68 61 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 70 73 5f 67 61 74 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 73 5f 65 78 74 65 6e 64 65 64 5f 6d 6f 6e 69 74 6f 72 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 69 6e 66 65 65 64 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 70 6c 61 79 65 72 5f 62 79 74 65 5f 68 35 22 3a 74 72 75 Data Ascii: h5_client":true,"enable_identity_attributes_for_live_chat":true,"enable_ips_gating":true,"enable_is_extended_monitoring":true,"enable_mixed_direction_formatted_strings":true,"enable_pacf_slot_asde_infeed_h5":true,"enable_pacf_slot_asde_player_byte_h5":tru
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 6f 64 65 6c 5f 6c 6f 67 67 69 6e 67 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 69 73 5f 62 72 6f 77 73 65 72 5f 73 75 70 70 6f 72 74 5f 66 6f 72 5f 77 65 62 63 61 6d 5f 73 74 72 65 61 6d 69 6e 67 22 3a 74 72 75 65 2c 22 6a 73 6f 6e 5f 63 6f 6e 64 65 6e 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 Data Ascii: odel_logging_context":true,"is_browser_support_for_webcam_streaming":true,"json_condensed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 6f 67 65 6c 5f 65 61 72 6c 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 69 6e 5f 6d 65 6d 6f 72 79 5f 73 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 Data Ascii: ogel_early_logging":true,"use_new_in_memory_storage":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":tru
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 Data Ascii: eam_optimization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":38
2024-05-24 15:47:20 UTC	1805	IN	Data Raw: 59 45 52 22 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 6f 73 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 22 2c 22 6f 72 69 67 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 48 58 4a 45 61 6b 6d 36 35 46 49 3f 63 6f 6e 74 72 6f 6c 73 5c 75 30 30 33 64 30 5c 75 30 30 32 36 72 65 6c 5c 75 30 30 33 64 30 5c 75 30 30 32 36 70 6c 61 79 73 69 6e 6c 69 6e 65 5c 75 30 30 33 64 31 5c 75 30 30 32 36 65 6e 61 62 6c 65 6a 73 61 70 69 5c 75 30 30 33 64 31 5c 75 30 30 32 36 6f 72 69 67 69 6e 5c 75 30 30 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 74 Data Ascii: YER","clientVersion":"1.20240521.01.00","osName":"Windows","osVersion":"10.0","originalUrl":"https://www.youtube.com/embed/HXJEakm65FI?controls\u003d0\u0026rel\u003d0\u0026playsinline\u003d1\u0026enablejsapi\u003d1\u0026origin\u003dhttps%3A%2F%2Fwww.dayst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49808	13.32.27.6	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:19 UTC	546	OUT	GET /core/frame.js?v=0b59897 HTTP/1.1 Host: tools.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49812	35.244.167.102	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	549	OUT	GET /mqtt HTTP/1.1 Host: realtime.luckyorange.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: FC6UbPci33CQqlty6LItnw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqttv3.1
2024-05-24 15:47:20 UTC	193	IN	HTTP/1.1 400 Bad Request content-length: 0 date: Fri, 24 May 2024 15:47:19 GMT server: Cowboy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49810	157.240.251.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	1388	OUT	GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:20 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 15:47:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49811	157.240.251.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	1480	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:20 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x5fad5d17b6805ca3","source_keys":["1","2"]},{"key_piece":"0x8c3e35cdc701ae2c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 15:47:20 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 15:47:20 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 15:47:20 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49813	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	495	OUT	OPTIONS /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:20 UTC	405	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type date: Fri, 24 May 2024 15:47:20 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49814	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	495	OUT	OPTIONS /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:20 UTC	405	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type date: Fri, 24 May 2024 15:47:20 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49816	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	880	OUT	GET /s/player/bc657243/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:21 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 376389 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 13:51:11 GMT Expires: Sat, 24 May 2025 13:51:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 6970 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	710	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d Data Ascii: -ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-m
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e Data Ascii: tainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 Data Ascii: ext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-player-content:not(.ytp-up
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 37 2c 31 32 37 2c 32 30 34 2c 2e 38 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 Data Ascii: er .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,127,204,.8);box-shadow:inset 0 0 0 2
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 Data Ascii: x}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e Data Ascii: button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{padding-top:9px;height:63px}.ytp-chrome-controls .ytp-button{height:100%}.
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: trols .ytp-button[aria-pressed]:after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transition
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 35 70 78 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 Data Ascii: .ytp-chrome-controls .ytp-button[aria-pressed=true]:after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]:after{left:15px}.ytp-color-white .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.yt
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 29 20 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 76 Data Ascii: ex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bottom-control-flexbox) .ytp-right-controls{float:right}.ytp-right-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49817	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:20 UTC	584	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:21 UTC	365	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 1043 etag: W/"413-OejJ8h+QKnoQJAV6R+nNg/v8Cao" date: Fri, 24 May 2024 15:47:21 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	1025	IN	Data Raw: 7b 22 61 63 63 65 73 73 5f 74 6f 6b 65 6e 22 3a 22 79 61 32 39 2e 63 2e 63 30 41 59 5f 56 70 5a 68 72 65 74 74 6f 41 37 68 4d 54 75 4f 43 53 4f 46 70 55 57 64 46 55 64 46 72 58 78 6b 61 41 35 69 41 54 66 37 34 44 48 6b 72 50 34 68 51 4c 4d 6f 57 65 67 68 38 39 43 39 33 73 6c 68 42 46 62 57 74 4e 5f 33 70 44 7a 5a 5f 77 7a 35 43 4d 39 52 4f 5f 57 73 57 49 58 59 77 56 33 63 46 57 56 49 46 48 49 76 4e 38 52 37 6b 4b 6a 79 50 79 43 4d 44 77 50 7a 61 5f 6a 77 72 66 52 36 34 39 31 59 73 36 50 62 4d 35 4f 57 65 62 47 43 50 43 37 5a 77 70 74 48 52 6c 4d 65 49 47 59 48 55 69 6d 4c 46 44 34 35 42 62 6e 4e 78 34 6c 73 31 41 45 47 77 76 4b 65 4d 6a 67 77 33 4d 57 42 72 59 54 4b 77 74 4f 47 64 67 75 5a 6d 2d 76 45 74 5f 74 38 48 32 6b 71 43 5f 6c 73 47 71 77 45 77 54 Data Ascii: {"access_token":"ya29.c.c0AY_VpZhrettoA7hMTuOCSOFpUWdFUdFrXxkaA5iATf74DHkrP4hQLMoWegh89C93slhBFbWtN_3pDzZ_wz5CM9RO_WsWIXYwV3cFWVIFHIvN8R7kKjyPyCMDwPza_jwrfR6491Ys6PbM5OWebGCPC7ZwptHRlMeIGYHUimLFD45BbnNx4ls1AEGwvKeMjgw3MWBrYTKwtOGdguZm-vEt_t8H2kqC_lsGqwEwT
2024-05-24 15:47:21 UTC	18	IN	Data Raw: 74 57 4d 55 33 49 38 5a 34 5f 42 37 51 56 4a 6b 22 7d Data Ascii: tWMU3I8Z4_B7QVJk"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49818	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: vW4rCbEObFt/n+8SYYPYPg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:21 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:21 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49821	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	884	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:21 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 64047 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:10:31 GMT Expires: Sat, 24 May 2025 15:10:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2210 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d 32 2e 37 20 2e 36 38 2c 2d 38 2e 33 31 20 2e 36 38 2c 2d 38 2e 33 31 20 30 2c 30 20 2e 31 31 2c 2d 35 2e 36 31 20 2d 30 2e 36 38 2c 2d 38 2e 33 31 20 2d 30 2e 34 2c 2d 31 2e 35 20 2d 31 2e 35 39 2c 2d 32 2e 36 20 2d 32 2e 39 39 2c 2d 33 20 43 20 32 39 2e 31 31 2c 2e 39 38 20 31 38 2e 34 30 2c 2e 39 39 20 31 38 2e 34 30 2c 2e 39 39 20 63 20 30 2c 30 20 2d 30 2e 36 37 2c 2d 30 2e 30 31 20 2d 31 2e 37 31 2c 30 Data Ascii: 68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 20 2d 32 2e 36 38 2c 2d 30 2e 35 39 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 30 39 20 63 20 2d 31 2e 30 39 2c 30 20 2d 32 2e 30 31 2c 2e 31 38 20 2d 32 2e 37 31 2c 2e 36 38 20 2d 30 2e 37 2c 2e 34 20 2d 31 2e 32 2c 31 2e 31 32 20 2d 31 2e 34 39 2c 32 2e 31 32 20 2d 30 2e 33 2c 31 20 2d 30 2e 35 2c 32 2e 32 37 20 2d 30 2e 35 2c 33 2e 38 37 20 6c 20 30 2c 32 2e 32 31 20 63 20 30 2c 31 2e 35 20 2e 31 30 2c 32 2e 37 38 20 2e 34 30 2c 33 2e 37 38 20 2e 32 2c 2e 39 20 2e 37 30 2c 31 2e 36 32 20 31 2e 34 30 2c 32 2e 31 32 20 2e 36 39 2c 2e 35 20 31 2e 37 31 2c 2e 36 38 20 32 2e 38 31 2c 2e 37 38 20 31 2e 31 39 2c 30 20 32 2e 30 38 2c 2d 30 2e 32 38 20 32 2e 37 38 2c 2d 30 2e 36 38 20 2e 36 39 2c 2d 30 2e 34 20 31 2e 30 39 2c 2d 31 2e 30 39 20 31 2e 34 39 2c 2d 32 Data Ascii: -2.68,-0.59 z m -50.49,.09 c -1.09,0 -2.01,.18 -2.71,.68 -0.7,.4 -1.2,1.12 -1.49,2.12 -0.3,1 -0.5,2.27 -0.5,3.87 l 0,2.21 c 0,1.5 .10,2.78 .40,3.78 .2,.9 .70,1.62 1.40,2.12 .69,.5 1.71,.68 2.81,.78 1.19,0 2.08,-0.28 2.78,-0.68 .69,-0.4 1.09,-1.09 1.49,-2
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 2c 2d 34 2e 36 38 20 63 20 30 2c 2d 31 2e 31 20 2e 31 31 2c 2d 31 2e 39 30 20 2e 33 31 2c 2d 32 2e 34 30 20 2e 32 2c 2d 30 2e 35 20 2e 34 39 2c 2d 30 2e 36 38 20 2e 39 39 2c 2d 30 2e 36 38 20 7a 20 6d 20 33 39 2e 36 38 2c 2e 30 39 20 63 20 2e 33 2c 30 20 2e 36 31 2c 2e 31 30 20 2e 38 31 2c 2e 34 30 20 2e 32 2c 2e 33 20 2e 32 37 2c 2e 36 37 20 2e 33 37 2c 31 2e 33 37 20 2e 31 2c 2e 36 20 2e 31 32 2c 31 2e 35 31 20 2e 31 32 2c 32 2e 37 31 20 6c 20 2e 30 39 2c 31 2e 39 30 20 63 20 30 2c 31 2e 31 20 2e 30 30 2c 31 2e 39 39 20 2d 30 2e 30 39 2c 32 2e 35 39 20 2d 30 2e 31 2c 2e 36 20 2d 30 2e 31 39 2c 31 2e 30 38 20 2d 30 2e 34 39 2c 31 2e 32 38 20 2d 30 2e 32 2c 2e 33 20 2d 30 2e 35 30 2c 2e 34 30 20 2d 30 2e 39 30 2c 2e 34 30 20 2d 30 2e 33 2c 30 20 2d 30 2e Data Ascii: ,-4.68 c 0,-1.1 .11,-1.90 .31,-2.40 .2,-0.5 .49,-0.68 .99,-0.68 z m 39.68,.09 c .3,0 .61,.10 .81,.40 .2,.3 .27,.67 .37,1.37 .1,.6 .12,1.51 .12,2.71 l .09,1.90 c 0,1.1 .00,1.99 -0.09,2.59 -0.1,.6 -0.19,1.08 -0.49,1.28 -0.2,.3 -0.50,.40 -0.90,.40 -0.3,0 -0.
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 32 35 20 31 30 35 2e 39 37 20 32 38 2e 38 33 20 31 30 38 2e 39 33 20 33 31 2e 30 33 43 31 31 31 2e 38 39 20 33 33 2e 32 33 20 31 31 33 2e 35 35 20 33 34 2e 35 33 20 31 31 33 2e 35 35 20 33 36 2e 32 33 43 31 31 33 2e 35 35 20 33 37 2e 37 35 20 31 31 32 2e 35 31 20 33 38 2e 36 31 20 31 31 31 2e 30 31 20 33 38 2e 36 31 43 31 30 39 2e 31 33 20 33 38 2e 36 31 20 31 30 38 2e 31 31 20 33 36 2e 39 37 20 31 30 38 2e 32 39 20 33 34 2e 34 31 4c 31 30 34 2e 32 31 20 33 34 2e 34 39 43 31 30 33 2e 35 31 20 33 39 2e 32 35 20 31 30 35 2e 38 39 20 34 31 2e 38 39 20 31 31 30 2e 37 39 20 34 31 2e 38 39 5a 22 2c 0a 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 49 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 31 32 32 2e 35 20 31 34 2e 35 39 43 31 32 34 2e 32 32 20 31 34 2e Data Ascii: 25 105.97 28.83 108.93 31.03C111.89 33.23 113.55 34.53 113.55 36.23C113.55 37.75 112.51 38.61 111.01 38.61C109.13 38.61 108.11 36.97 108.29 34.41L104.21 34.49C103.51 39.25 105.89 41.89 110.79 41.89Z",fill:"white"}},{I:"path",X:{d:"M122.5 14.59C124.22 14.
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 20 32 39 2e 39 34 20 31 33 2e 31 30 20 33 32 2e 30 32 20 31 34 2e 34 38 43 33 34 2e 31 30 20 31 35 2e 38 37 20 33 35 2e 37 32 20 31 37 2e 38 34 20 33 36 2e 36 38 20 32 30 2e 31 35 43 33 37 2e 36 34 20 32 32 2e 34 36 20 33 37 2e 38 39 20 32 35 2e 30 31 20 33 37 2e 34 31 20 32 37 2e 34 36 43 33 36 2e 39 32 20 32 39 2e 39 31 20 33 35 2e 37 32 20 33 32 2e 31 37 20 33 33 2e 39 35 20 33 33 2e 39 34 43 33 32 2e 31 38 20 33 35 2e 37 30 20 32 39 2e 39 33 20 33 36 2e 39 31 20 32 37 2e 34 38 20 33 37 2e 34 30 43 32 35 2e 30 32 20 33 37 2e 38 39 20 32 32 2e 34 38 20 33 37 2e 36 34 20 32 30 2e 31 37 20 33 36 2e 36 38 43 31 37 2e 38 36 20 33 35 2e 37 32 20 31 35 2e 38 38 20 33 34 2e 31 30 20 31 34 2e 35 30 20 33 32 2e 30 32 43 31 33 2e 31 31 20 32 39 2e 39 34 20 31 32 Data Ascii: 29.94 13.10 32.02 14.48C34.10 15.87 35.72 17.84 36.68 20.15C37.64 22.46 37.89 25.01 37.41 27.46C36.92 29.91 35.72 32.17 33.95 33.94C32.18 35.70 29.93 36.91 27.48 37.40C25.02 37.89 22.48 37.64 20.17 36.68C17.86 35.72 15.88 34.10 14.50 32.02C13.11 29.94 12
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 74 79 28 65 2c 66 29 3a 62 5b 65 5d 3d 66 7d 7d 7d 2c 6c 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 63 3b 0a 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 64 3f 61 5b 62 5d 3d 63 3a 69 73 62 28 61 2c 62 2c 63 29 7d 2c 6d 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 73 62 3b 0a 61 2e 5f 5f 64 65 66 61 75 6c 74 3d 6c 73 62 3b 61 2e 73 74 79 6c 65 3d 6b 73 62 3b 72 65 74 75 72 6e 20 61 7d 2c 6e 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 64 5b 62 5d 7c 7c 64 2e 5f 5f 64 65 66 61 75 6c 74 29 28 61 2c 62 2c 63 29 7d 2c 6f 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 72 65 61 74 65 64 3d 5b 5d 3b 0a 74 68 Data Ascii: ty(e,f):b[e]=f}}},lsb=function(a,b,c){var d=typeof c;"object"===d\|\|"function"===d?a[b]=c:isb(a,b,c)},msb=function(){var a=new gsb;a.__default=lsb;a.style=ksb;return a},nsb=function(a,b,c,d){(d[b]\|\|d.__default)(a,b,c)},osb=function(a){this.created=[];th
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6e 74 28 61 29 2c 71 73 62 28 63 2c 61 2c 62 29 2c 61 3d 63 29 2c 66 35 2e 63 72 65 61 74 65 64 2e 70 75 73 68 28 61 29 2c 63 3d 61 29 3b 61 3d 63 3b 69 66 28 61 21 3d 3d 68 35 29 7b 69 66 28 30 3c 3d 6b 35 2e 69 6e 64 65 78 4f 66 28 61 29 29 66 6f 72 28 62 3d 64 35 2c 63 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 0a 64 3d 68 35 3b 6e 75 6c 6c 21 3d 3d 64 26 26 64 21 3d 3d 61 3b 29 65 3d 64 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 62 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 63 29 2c 64 3d 65 3b 65 6c 73 65 20 64 35 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 68 35 29 3b 68 35 3d 61 7d 7d 2c 74 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 73 62 28 61 2c 62 29 3b 0a 64 35 3d 68 35 3b 68 35 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 64 35 7d Data Ascii: nt(a),qsb(c,a,b),a=c),f5.created.push(a),c=a);a=c;if(a!==h5){if(0<=k5.indexOf(a))for(b=d5,c=a.nextSibling,d=h5;null!==d&&d!==a;)e=d.nextSibling,b.insertBefore(d,c),d=e;else d5.insertBefore(a,h5);h5=a}},tsb=function(a,b){ssb(a,b);d5=h5;h5=null;return d5}
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 3d 3d 3d 62 2e 6c 65 6e 67 74 68 7c 7c 61 5b 41 73 62 5d 7c 7c 28 62 3d 62 2e 73 6c 69 63 65 28 2d 32 30 29 2e 72 65 76 65 72 73 65 28 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 6e 61 6d 65 7d 29 2e 6a 6f 69 6e 28 22 20 3e 20 22 29 2c 62 3d 61 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 5c 6e 43 6f 6d 70 6f 6e 65 6e 74 20 73 74 61 63 6b 3a 20 22 2b 62 2c 61 2e 73 74 61 63 6b 26 26 28 61 2e 73 74 61 63 6b 3d 61 2e 73 74 61 63 6b 2e 72 65 70 6c 61 63 65 28 61 2e 6d 65 73 73 61 67 65 2c 62 29 29 2c 61 2e 6d 65 73 73 61 67 65 3d 62 2c 61 5b 41 73 62 5d 3d 21 30 29 7d 2c 73 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 61 3b 0a 74 68 69 73 2e 43 3d 21 31 7d 2c 75 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: ===b.length\|\|a[Asb]\|\|(b=b.slice(-20).reverse().map(function(c){return c.name}).join(" > "),b=a.message+"\n\nComponent stack: "+b,a.stack&&(a.stack=a.stack.replace(a.message,b)),a.message=b,a[Asb]=!0)},s5=function(a){this.props=a;this.C=!1},u5=function(a,
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6e 67 74 68 29 3f 63 3a 30 29 7d 2c 78 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 75 6c 6c 21 3d 61 2e 7a 6b 7c 7c 28 61 2e 7a 6b 3d 5b 5d 29 3b 0a 6e 75 6c 6c 21 3d 61 2e 54 72 7c 7c 28 61 2e 54 72 3d 5b 5d 29 3b 6e 75 6c 6c 21 3d 61 2e 7a 42 7c 7c 28 61 2e 7a 42 3d 5b 5d 29 7d 2c 4d 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 66 29 7b 65 2e 6b 7a 3d 66 7d 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 4a 73 62 29 3b 63 26 26 28 65 2e 6c 4f 3d 21 30 29 3b 65 2e 76 74 3d 61 3b 65 2e 73 63 68 65 64 75 6c 65 3d 62 3b 61 3d 7b 7d 3b 65 2e 46 42 3d 28 61 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 73 62 28 65 29 7d 2c 61 2e 4d 42 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ngth)?c:0)},x5=function(a){null!=a.zk\|\|(a.zk=[]);null!=a.Tr\|\|(a.Tr=[]);null!=a.zB\|\|(a.zB=[])},Msb=function(a,b,c){function d(f){e.kz=f}var e=Object.create(Jsb);c&&(e.lO=!0);e.vt=a;e.schedule=b;a={};e.FB=(a.notify=function(){return Dsb(e)},a.MB=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49820	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	895	OUT	GET /s/player/bc657243/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:21 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 330937 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 13:08:31 GMT Expires: Sat, 24 May 2025 13:08:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 9530 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 Data Ascii: c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;ba(this,"de
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6d 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6f 61 7d 29 3b 0a 76 61 72 20 70 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 Data Ascii: nction"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)ma(d,e)&&(a[e]=d[e])}return a};u("Object.assign",function(a){return a\|\|oa});var pa="function"==typeof Object.create?Obje
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 79 61 28 61 29 7b 69 66 28 61 2e 76 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 76 3d 21 30 7d 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 68 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6c 7c 7c 61 2e 41 7d 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 68 3d 74 68 69 73 2e 41 7d 3b 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 79 69 65 Data Ascii: nction ya(a){if(a.v)throw new TypeError("Generator is already running");a.v=!0}xa.prototype.F=function(a){this.i=a};function za(a,b){a.j={exception:b,hd:!0};a.h=a.l\|\|a.A}xa.prototype.return=function(a){this.j={return:a};this.h=this.A};xa.prototype.yie
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 79 61 28 61 2e 68 29 3b 61 2e 68 2e 6d 3f 62 3d 46 61 28 61 2c 61 2e 68 2e 6d 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 46 29 3a 28 7a 61 28 61 2e 68 2c 62 29 2c 62 3d 47 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 45 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 Data Ascii: ow=function(b){ya(a.h);a.h.m?b=Fa(a,a.h.m["throw"],b,a.h.F):(za(a.h,b),b=Ga(a));return b};this.return=function(b){return Ea(a,b)};this[Symbol.iterator]=function(){return this}}function Ia(a){function b(d){return a.next(d)}function c(d){return a.throw(
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 64 61 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 41 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 41 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 69 61 28 67 29 3b Data Ascii: (){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.da),reject:g(this.A)}};b.prototype.da=function(g){if(g===this)this.A(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.ia(g);
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 59 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: var f=new c;b.prototype.ia=function(g){var h=this.l();g.Yb(h.resolve,h.reject)};b.prototype.xa=function(g,h){var k=this.l();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return"function"==typeof
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 65 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 Data Ascii: l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof c)return n;Object.isExtensible(n)&&e(n);return l(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),n=new a([[k,2
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 77 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 Data Ascii: turn{id:l,list:n,index:-1,entry:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=w(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3b 21 Data Ascii: n c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),n;!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49819	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	883	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:21 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2583437 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 10:22:04 GMT Expires: Sat, 24 May 2025 10:22:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 19517 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	701	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c Data Ascii: ice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 0a 20 20 20 20 20 20 69 6e 20 61 20 70 72 6f 64 75 63 74 2c 20 61 6e 20 61 63 6b 6e 6f 77 6c 65 64 67 6d 65 6e 74 20 69 6e 20 74 68 65 20 70 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 6f 75 6c 64 20 62 65 0a 20 20 20 20 20 20 61 70 70 72 65 63 69 61 74 65 64 20 62 75 74 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 0a 20 20 20 32 2e 20 41 6c 74 65 72 65 64 20 73 6f 75 72 63 65 20 76 65 72 73 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 70 6c 61 69 6e 6c 79 20 6d 61 72 6b 65 64 20 61 73 20 73 75 63 68 2c 20 61 6e 64 20 6d 75 73 74 20 Data Ascii: claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation would be appreciated but is not required. 2. Altered source versions must be plainly marked as such, and must
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 0a 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 0a 20 41 55 54 48 4f 52 53 20 4f 52 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 Data Ascii: T WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTH
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 41 64 61 2c 52 68 2c 53 68 2c 54 68 2c 55 68 2c 56 68 2c 58 68 2c 42 64 61 2c 70 69 2c 43 64 61 2c 45 64 61 2c 71 69 2c 72 69 2c 74 69 2c 0a 75 69 2c 46 64 61 2c 47 64 61 2c 76 69 2c 48 64 61 2c 49 64 61 2c 78 69 2c 79 69 2c 4a 64 61 2c 4b 64 61 2c 4c 64 61 2c 4d 64 61 2c 7a 69 2c 41 69 2c 42 69 2c 43 69 2c 44 69 2c 45 69 2c 46 69 2c 50 64 61 2c 49 69 2c 5a 69 2c 51 64 61 2c 52 64 61 2c 48 69 2c 24 69 2c 4f 64 61 2c 47 69 2c 61 6a 2c 53 64 61 2c 54 64 61 2c 62 6a 2c 63 6a 2c 64 6a 2c 65 6a 2c 67 6a 2c 69 6a 2c 6b 6a 2c 50 2c 6c 6a 2c 57 64 61 2c 6e 6a 2c 6f 6a 2c 24 64 61 2c 5a 64 61 2c 58 64 61 2c 59 64 61 2c 61 65 61 2c 63 65 61 2c 62 65 61 2c 64 65 61 2c 47 6a 2c 46 6a 2c 66 65 61 2c 65 65 61 2c 48 6a 2c 4a 6a 2c 45 6a 2c 68 65 61 2c 4c 6a 2c 69 65 61 Data Ascii: Ada,Rh,Sh,Th,Uh,Vh,Xh,Bda,pi,Cda,Eda,qi,ri,ti,ui,Fda,Gda,vi,Hda,Ida,xi,yi,Jda,Kda,Lda,Mda,zi,Ai,Bi,Ci,Di,Ei,Fi,Pda,Ii,Zi,Qda,Rda,Hi,$i,Oda,Gi,aj,Sda,Tda,bj,cj,dj,ej,gj,ij,kj,P,lj,Wda,nj,oj,$da,Zda,Xda,Yda,aea,cea,bea,dea,Gj,Fj,fea,eea,Hj,Jj,Ej,hea,Lj,iea
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 56 72 2c 72 68 61 2c 70 68 61 2c 57 72 2c 58 72 2c 74 68 61 2c 59 72 2c 75 68 61 2c 5a 72 2c 77 68 61 2c 76 68 61 2c 78 68 61 2c 79 68 61 2c 63 73 2c 64 73 2c 7a 68 61 2c 41 68 61 2c 42 68 61 2c 65 73 2c 66 73 2c 43 68 61 2c 67 73 2c 44 68 61 2c 45 68 61 2c 47 68 61 2c 4b 68 61 2c 68 73 2c 4c 68 61 2c 4d 68 61 2c 4e 68 61 2c 4f 68 61 2c 50 68 61 2c 6b 73 2c 51 68 61 2c 52 68 61 2c 53 68 61 2c 72 73 2c 71 73 2c 70 73 2c 54 68 61 2c 55 68 61 2c 56 68 61 2c 74 73 2c 75 73 2c 76 73 2c 58 68 61 2c 0a 41 73 2c 42 73 2c 43 73 2c 59 68 61 2c 44 73 2c 24 68 61 2c 61 69 61 2c 62 69 61 2c 45 73 2c 47 73 2c 48 73 2c 4d 73 2c 4e 73 2c 51 73 2c 64 69 61 2c 66 69 61 2c 65 69 61 2c 67 69 61 2c 68 69 61 2c 57 73 2c 69 69 61 2c 6a 69 61 2c 58 73 2c 6b 69 61 2c 6c 69 61 2c Data Ascii: Vr,rha,pha,Wr,Xr,tha,Yr,uha,Zr,wha,vha,xha,yha,cs,ds,zha,Aha,Bha,es,fs,Cha,gs,Dha,Eha,Gha,Kha,hs,Lha,Mha,Nha,Oha,Pha,ks,Qha,Rha,Sha,rs,qs,ps,Tha,Uha,Vha,ts,us,vs,Xha,As,Bs,Cs,Yha,Ds,$ha,aia,bia,Es,Gs,Hs,Ms,Ns,Qs,dia,fia,eia,gia,hia,Ws,iia,jia,Xs,kia,lia,
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 2c 64 6d 61 2c 65 6d 61 2c 66 6d 61 2c 74 78 2c 67 6d 61 2c 75 78 2c 68 6d 61 2c 69 6d 61 2c 6a 6d 61 2c 6b 6d 61 2c 6c 6d 61 2c 6d 6d 61 2c 6e 6d 61 2c 6f 6d 61 2c 70 6d 61 2c 71 6d 61 2c 76 78 2c 72 6d 61 2c 73 6d 61 2c 77 78 2c 78 78 2c 79 78 2c 7a 78 2c 41 78 2c 74 6d 61 2c 42 78 2c 43 78 2c 75 6d 61 2c 44 78 2c 45 78 2c 76 6d 61 2c 46 78 2c 47 78 2c 48 78 2c 77 6d 61 2c 78 6d 61 2c 49 78 2c 79 6d 61 2c 7a 6d 61 2c 41 6d 61 2c 42 6d 61 2c 43 6d 61 2c 4a 78 2c 44 6d 61 2c 45 6d 61 2c 46 6d 61 2c 4b 78 2c 47 6d 61 2c 48 6d 61 2c 49 6d 61 2c 4c 78 2c 4a 6d 61 2c 4d 78 2c 4b 6d 61 2c 4e 78 2c 4f 78 2c 57 78 2c 58 78 2c 59 78 2c 5a 78 2c 4c 6d 61 2c 4d 6d 61 2c 24 78 2c 4e 6d 61 2c 61 79 2c 62 79 2c 63 79 2c 64 79 2c 65 79 2c 66 79 2c 67 79 2c 68 79 2c 4f Data Ascii: ,dma,ema,fma,tx,gma,ux,hma,ima,jma,kma,lma,mma,nma,oma,pma,qma,vx,rma,sma,wx,xx,yx,zx,Ax,tma,Bx,Cx,uma,Dx,Ex,vma,Fx,Gx,Hx,wma,xma,Ix,yma,zma,Ama,Bma,Cma,Jx,Dma,Ema,Fma,Kx,Gma,Hma,Ima,Lx,Jma,Mx,Kma,Nx,Ox,Wx,Xx,Yx,Zx,Lma,Mma,$x,Nma,ay,by,cy,dy,ey,fy,gy,hy,O
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 71 61 2c 75 42 2c 72 71 61 2c 73 71 61 2c 76 42 2c 77 42 2c 78 42 2c 79 42 2c 75 71 61 2c 44 42 2c 77 71 61 2c 76 71 61 2c 79 71 61 2c 46 42 2c 7a 71 61 2c 44 71 61 2c 42 71 61 2c 43 71 61 2c 45 71 61 2c 46 71 61 2c 48 71 61 2c 49 71 61 2c 47 71 61 2c 4c 71 61 2c 48 42 2c 4d 71 61 2c 4b 42 2c 4e 71 61 2c 4f 71 61 2c 4a 42 2c 4c 42 2c 51 71 61 2c 52 71 61 2c 56 71 61 2c 55 71 61 2c 57 71 61 2c 50 42 2c 51 42 2c 52 42 2c 53 42 2c 55 42 2c 59 71 61 2c 24 71 61 2c 61 72 61 2c 62 72 61 2c 24 42 2c 63 72 61 2c 6c 72 61 2c 6d 72 61 2c 70 72 61 2c 71 72 61 2c 72 72 61 2c 6f 72 61 2c 73 72 61 2c 75 72 61 2c 77 72 61 2c 67 43 2c 78 72 61 2c 6a 43 2c 68 43 2c 6d 43 2c 6e 43 2c 7a 72 61 2c 43 72 61 2c 73 43 2c 74 43 2c 75 43 2c 76 43 2c 47 72 61 2c 78 43 2c 49 72 61 Data Ascii: qa,uB,rqa,sqa,vB,wB,xB,yB,uqa,DB,wqa,vqa,yqa,FB,zqa,Dqa,Bqa,Cqa,Eqa,Fqa,Hqa,Iqa,Gqa,Lqa,HB,Mqa,KB,Nqa,Oqa,JB,LB,Qqa,Rqa,Vqa,Uqa,Wqa,PB,QB,RB,SB,UB,Yqa,$qa,ara,bra,$B,cra,lra,mra,pra,qra,rra,ora,sra,ura,wra,gC,xra,jC,hC,mC,nC,zra,Cra,sC,tC,uC,vC,Gra,xC,Ira
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 78 61 2c 42 78 61 2c 43 78 61 2c 46 78 61 2c 47 78 61 2c 73 46 2c 74 46 2c 0a 48 78 61 2c 75 46 2c 49 78 61 2c 77 46 2c 4b 78 61 2c 4a 78 61 2c 79 46 2c 7a 46 2c 41 46 2c 42 46 2c 4c 78 61 2c 43 46 2c 4d 78 61 2c 4e 78 61 2c 4f 78 61 2c 44 46 2c 50 78 61 2c 54 78 61 2c 51 78 61 2c 53 78 61 2c 52 78 61 2c 45 46 2c 46 46 2c 55 78 61 2c 56 78 61 2c 57 78 61 2c 58 78 61 2c 47 46 2c 5a 78 61 2c 62 79 61 2c 61 79 61 2c 48 46 2c 63 79 61 2c 49 46 2c 4a 46 2c 4b 46 2c 4d 46 2c 4e 46 2c 64 79 61 2c 65 79 61 2c 66 79 61 2c 4f 46 2c 67 79 61 2c 68 79 61 2c 6a 79 61 2c 6b 79 61 2c 69 79 61 2c 6c 79 61 2c 50 46 2c 51 46 2c 54 46 2c 56 46 2c 6e 79 61 2c 6d 79 61 2c 58 46 2c 6f 79 61 2c 70 79 61 2c 59 46 2c 5a 46 2c 24 46 2c 61 47 2c 64 47 2c 72 79 61 2c 65 47 2c 73 79 Data Ascii: xa,Bxa,Cxa,Fxa,Gxa,sF,tF,Hxa,uF,Ixa,wF,Kxa,Jxa,yF,zF,AF,BF,Lxa,CF,Mxa,Nxa,Oxa,DF,Pxa,Txa,Qxa,Sxa,Rxa,EF,FF,Uxa,Vxa,Wxa,Xxa,GF,Zxa,bya,aya,HF,cya,IF,JF,KF,MF,NF,dya,eya,fya,OF,gya,hya,jya,kya,iya,lya,PF,QF,TF,VF,nya,mya,XF,oya,pya,YF,ZF,$F,aG,dG,rya,eG,sy
2024-05-24 15:47:21 UTC	1390	IN	Data Raw: 2c 46 43 61 2c 47 43 61 2c 48 43 61 2c 49 43 61 2c 4a 43 61 2c 4b 43 61 2c 4c 43 61 2c 4d 43 61 2c 4e 43 61 2c 4f 43 61 2c 50 43 61 2c 51 43 61 2c 52 43 61 2c 44 4a 2c 45 4a 2c 53 43 61 2c 46 4a 2c 47 4a 2c 54 43 61 2c 55 43 61 2c 56 43 61 2c 57 43 61 2c 58 43 61 2c 59 43 61 2c 5a 43 61 2c 48 4a 2c 24 43 61 2c 61 44 61 2c 62 44 61 2c 63 44 61 2c 49 4a 2c 64 44 61 2c 65 44 61 2c 66 44 61 2c 67 44 61 2c 68 44 61 2c 4a 4a 2c 0a 69 44 61 2c 6a 44 61 2c 6b 44 61 2c 4b 4a 2c 6c 44 61 2c 4e 4a 2c 6e 44 61 2c 4f 4a 2c 50 4a 2c 6f 44 61 2c 70 44 61 2c 71 44 61 2c 72 44 61 2c 73 44 61 2c 74 44 61 2c 75 44 61 2c 53 4a 2c 54 4a 2c 77 44 61 2c 78 44 61 2c 79 44 61 2c 7a 44 61 2c 41 44 61 2c 76 44 61 2c 42 44 61 2c 43 44 61 2c 55 4a 2c 56 4a 2c 57 4a 2c 58 4a 2c 46 44 Data Ascii: ,FCa,GCa,HCa,ICa,JCa,KCa,LCa,MCa,NCa,OCa,PCa,QCa,RCa,DJ,EJ,SCa,FJ,GJ,TCa,UCa,VCa,WCa,XCa,YCa,ZCa,HJ,$Ca,aDa,bDa,cDa,IJ,dDa,eDa,fDa,gDa,hDa,JJ,iDa,jDa,kDa,KJ,lDa,NJ,nDa,OJ,PJ,oDa,pDa,qDa,rDa,sDa,tDa,uDa,SJ,TJ,wDa,xDa,yDa,zDa,ADa,vDa,BDa,CDa,UJ,VJ,WJ,XJ,FD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49825	157.240.0.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	1145	OUT	GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:21 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 15:47:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49826	157.240.0.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	1182	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:21 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 15:47:21 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49827	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	636	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-OejJ8h+QKnoQJAV6R+nNg/v8Cao"
2024-05-24 15:47:21 UTC	365	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 1043 etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:21 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	1025	IN	Data Raw: 7b 22 61 63 63 65 73 73 5f 74 6f 6b 65 6e 22 3a 22 79 61 32 39 2e 63 2e 63 30 41 59 5f 56 70 5a 67 4a 73 38 34 67 30 33 68 4a 31 44 33 75 7a 48 64 6d 79 63 69 35 75 44 56 4a 5a 37 6c 63 31 69 4f 64 59 58 61 72 69 53 6e 71 7a 78 48 4c 59 47 4d 46 69 5a 69 70 34 58 61 43 58 48 35 6f 73 4d 74 63 2d 71 37 43 30 41 4a 6a 51 6b 69 6f 5a 67 64 30 53 4b 35 6d 4d 78 4c 6d 33 7a 39 6b 73 39 5f 4c 5a 66 4b 61 30 73 58 35 4a 58 46 55 70 44 48 74 77 41 66 4a 66 66 2d 53 4c 42 42 6d 31 34 34 36 42 63 56 32 4a 4d 54 44 61 69 64 43 47 36 49 45 49 4d 45 58 6f 48 4d 56 36 62 66 79 6d 69 79 74 42 53 7a 65 61 5a 6f 51 76 76 58 6a 4a 45 4d 39 43 50 51 44 79 70 35 6a 33 44 62 4d 47 7a 76 5a 5a 48 38 78 4a 46 7a 48 41 52 79 49 38 70 45 51 6d 64 78 4e 70 5f 65 73 6f 36 62 62 34 Data Ascii: {"access_token":"ya29.c.c0AY_VpZgJs84g03hJ1D3uzHdmyci5uDVJZ7lc1iOdYXariSnqzxHLYGMFiZip4XaCXH5osMtc-q7C0AJjQkioZgd0SK5mMxLm3z9ks9_LZfKa0sX5JXFUpDHtwAfJff-SLBBm1446BcV2JMTDaidCG6IEIMEXoHMV6bfymiytBSzeaZoQvvXjJEM9CPQDyp5j3DbMGzvZZH8xJFzHARyI8pEQmdxNp_eso6bb4
2024-05-24 15:47:21 UTC	18	IN	Data Raw: 74 4f 77 6d 59 75 70 4a 4d 59 56 72 6b 33 75 39 22 7d Data Ascii: tOwmYupJMYVrk3u9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49829	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:21 UTC	362	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:21 UTC	365	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 1043 etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:21 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:21 UTC	1025	IN	Data Raw: 7b 22 61 63 63 65 73 73 5f 74 6f 6b 65 6e 22 3a 22 79 61 32 39 2e 63 2e 63 30 41 59 5f 56 70 5a 67 4a 73 38 34 67 30 33 68 4a 31 44 33 75 7a 48 64 6d 79 63 69 35 75 44 56 4a 5a 37 6c 63 31 69 4f 64 59 58 61 72 69 53 6e 71 7a 78 48 4c 59 47 4d 46 69 5a 69 70 34 58 61 43 58 48 35 6f 73 4d 74 63 2d 71 37 43 30 41 4a 6a 51 6b 69 6f 5a 67 64 30 53 4b 35 6d 4d 78 4c 6d 33 7a 39 6b 73 39 5f 4c 5a 66 4b 61 30 73 58 35 4a 58 46 55 70 44 48 74 77 41 66 4a 66 66 2d 53 4c 42 42 6d 31 34 34 36 42 63 56 32 4a 4d 54 44 61 69 64 43 47 36 49 45 49 4d 45 58 6f 48 4d 56 36 62 66 79 6d 69 79 74 42 53 7a 65 61 5a 6f 51 76 76 58 6a 4a 45 4d 39 43 50 51 44 79 70 35 6a 33 44 62 4d 47 7a 76 5a 5a 48 38 78 4a 46 7a 48 41 52 79 49 38 70 45 51 6d 64 78 4e 70 5f 65 73 6f 36 62 62 34 Data Ascii: {"access_token":"ya29.c.c0AY_VpZgJs84g03hJ1D3uzHdmyci5uDVJZ7lc1iOdYXariSnqzxHLYGMFiZip4XaCXH5osMtc-q7C0AJjQkioZgd0SK5mMxLm3z9ks9_LZfKa0sX5JXFUpDHtwAfJff-SLBBm1446BcV2JMTDaidCG6IEIMEXoHMV6bfymiytBSzeaZoQvvXjJEM9CPQDyp5j3DbMGzvZZH8xJFzHARyI8pEQmdxNp_eso6bb4
2024-05-24 15:47:21 UTC	18	IN	Data Raw: 74 4f 77 6d 59 75 70 4a 4d 59 56 72 6b 33 75 39 22 7d Data Ascii: tOwmYupJMYVrk3u9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49831	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:22 UTC	414	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
2024-05-24 15:47:22 UTC	325	IN	HTTP/1.1 304 Not Modified x-powered-by: Express access-control-allow-origin: * etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:22 GMT x-envoy-upstream-service-time: 0 server: envoy content-length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49833	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:22 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Q1PwVcibM8CZwrrRT74+/Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:23 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:23 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:23 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49836	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:23 UTC	1367	OUT	GET / HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:29 UTC	844	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-DNS-Prefetch-Control: on Link: <https://www.daystarpayments.com/wp-json/>; rel="https://api.w.org/", <https://www.daystarpayments.com/wp-json/wp/v2/pages/2576>; rel="alternate"; type="application/json", <https://www.daystarpayments.com/>; rel=shortlink X-LiteSpeed-Tag: e9f_HTTP.200,e9f_front,e9f_URL.6666cd76f96956469e7be39d750cc7d9,e9f_F,e9f_Po.2576,e9f_PGS,e9f_,e9f_MIN.ddff27af406bf1e999a008f17424e3cc.css,e9f_MIN.1d4bf4c17bc68ec761951d45626a34b9.js Vary: Accept-Encoding X-Sucuri-Cache: BYPASS
2024-05-24 15:47:29 UTC	7348	IN	Data Raw: 31 64 34 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 6f 70 74 69 6d 69 7a 65 64 3d 22 32 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 6c 69 74 65 73 70 65 65 64 2f 63 73 73 2f 64 64 66 66 32 37 61 66 34 30 36 62 66 31 65 39 39 39 61 30 30 38 66 31 37 34 32 34 65 33 63 63 2e 63 73 73 3f 76 65 72 3d 34 61 31 63 32 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 Data Ascii: 1d4c<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><link data-optimized="2" rel="stylesheet" href="https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2" /><meta name='robots' content='ind
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 32 2f 63 72 6f 70 70 65 64 2d 31 2d 35 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 0d 0a 36 32 62 34 0d 0a 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 32 2f 63 72 6f 70 70 65 64 2d 31 2d 35 2d 31 38 30 78 31 38 30 2e 70 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 Data Ascii: //www.daystarpayments.com/wp-content/uploads/2023/12/cropped-1-5-192x192.png" sizes="192x192" /><link rel="apple-touch-icon" href="https://www.daystarpayments62b4.com/wp-content/uploads/2023/12/cropped-1-5-180x180.png" /><meta name="msapplication-Tile
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 39 31 31 30 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 68 69 67 68 2d 74 69 63 6b 65 74 2d 6d 65 72 63 68 61 6e 74 2d 73 65 72 76 69 63 65 73 2f 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 75 62 2d 69 74 65 6d 22 3e 48 69 67 68 20 54 69 63 6b 65 74 20 4d 65 72 63 68 61 6e 74 20 53 65 72 76 69 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d Data Ascii: _type menu-item-object-page menu-item-9110"><a href="https://www.daystarpayments.com/high-ticket-merchant-services/" class="elementor-sub-item">High Ticket Merchant Services</a></li><li class="menu-item menu-item-type-post_type menu-item-object-page menu-
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 65 73 73 2d 77 69 74 68 2d 64 61 79 73 74 61 72 2d 70 61 79 6d 65 6e 74 2d 73 79 73 74 65 6d 73 2f 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 75 62 2d 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 50 61 79 6d 65 6e 74 20 50 72 6f 63 65 73 73 69 6e 67 20 66 6f 72 20 53 75 62 73 63 72 69 70 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 39 31 31 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 Data Ascii: ess-with-daystar-payment-systems/" class="elementor-sub-item" tabindex="-1">Payment Processing for Subscriptions</a></li><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9114"><a href="https://www.daystarpayments.com/payment-p
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 31 2f 70 68 6f 6e 65 32 2d 33 37 30 78 33 31 38 2e 77 65 62 70 20 33 37 30 77 2c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 31 2f 70 68 6f 6e 65 32 2d 33 36 30 78 33 31 30 2e 77 65 62 70 20 33 36 30 77 22 20 73 69 7a 65 73 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 37 35 70 78 29 20 31 30 30 76 77 2c 20 38 37 35 70 78 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 69 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 Data Ascii: wp-content/uploads/2024/01/phone2-370x318.webp 370w, https://www.daystarpayments.com/wp-content/uploads/2024/01/phone2-360x310.webp 360w" sizes="(max-width: 875px) 100vw, 875px" /></noscript></div></div></div></div></div></section></div></div></div></sect
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 68 32 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 64 65 66 61 75 6c 74 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 65 2d 63 6f 6d 6d 65 72 63 65 2d 70 61 79 6d 65 6e 74 2d 70 72 6f 63 65 73 73 69 6e 67 2f 22 3e 45 2d 43 6f 6d 6d 65 72 63 65 3c 2f 61 3e 3c 2f 68 32 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 30 32 33 33 Data Ascii: div class="elementor-widget-container"><h2 class="elementor-heading-title elementor-size-default"><a href="https://www.daystarpayments.com/e-commerce-payment-processing/">E-Commerce</a></h2></div></div><div class="elementor-element elementor-element-50233
2024-05-24 15:47:29 UTC	8192	IN	Data Raw: 77 72 61 70 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 30 39 30 39 34 66 20 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 22 20 64 61 74 61 2d 69 64 3d 22 38 30 39 30 39 34 66 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 77 69 64 67 65 74 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 68 65 61 64 69 6e 67 2e 64 65 66 61 75 6c 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 68 Data Ascii: wrap elementor-element-populated"><div class="elementor-element elementor-element-809094f elementor-widget elementor-widget-heading" data-id="809094f" data-element_type="widget" data-widget_type="heading.default"><div class="elementor-widget-container"><h
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 65 66 61 75 6c 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 35 30 20 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 70 2d 63 6f 6c 75 6d 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 66 37 61 37 39 33 22 20 64 61 74 61 2d 69 64 3d 22 38 66 37 61 37 39 33 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 Data Ascii: efault"><div class="elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-8f7a793" data-id="8f7a793" data-element_type="column"><div class="elementor-widget-wrap elementor-element-populated"><div class="elementor-eleme
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 36 33 30 33 20 42 6c 75 65 20 4c 61 67 6f 6f 6e 20 44 72 69 76 65 2c 20 53 75 69 74 65 20 34 30 30 2c 20 4d 69 61 6d 69 20 46 4c 2c 20 33 33 31 32 36 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 22 3e 0a 3c 61 20 68 72 65 66 3d 22 74 65 6c 3a 2b 31 37 38 36 36 30 30 34 38 33 36 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 22 3e 0a 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 70 68 6f 6e 65 2d 61 6c 74 22 3e 3c 2f 69 3e 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: 6303 Blue Lagoon Drive, Suite 400, Miami FL, 33126</span></li><li class="elementor-icon-list-item"><a href="tel:+17866004836"><span class="elementor-icon-list-icon"><i aria-hidden="true" class="fas fa-phone-alt"></i></span><span class="elementor-
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 74 65 78 74 22 3e 53 75 62 6d 69 74 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 69 6f 6e 3e 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 69 6e 6e 65 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 66 34 38 35 36 37 66 20 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6d 6f 62 69 6c 65 20 65 6c 65 6d 65 6e 74 Data Ascii: elementor-button-text">Submit Request</span></span></button></div></div></form></div></div></div></div></div></section><section class="elementor-section elementor-inner-section elementor-element elementor-element-f48567f elementor-reverse-mobile element

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49842	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:25 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: VvtuiNUHZZNFXtipp5AJtg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:25 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:25 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:25 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49844	142.250.185.98	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:25 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:25 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 24 May 2024 15:47:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:25 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 6a 50 71 4a 31 55 30 54 33 42 5f 7a 51 4b 44 47 6b 76 30 57 57 33 58 36 73 6c 4b 4d 6a 4f 4b 48 6f 72 75 36 75 2d 4c 62 53 6a 35 78 65 75 61 75 68 31 79 52 78 59 79 69 53 67 6f 6d 72 69 56 6a 36 4d 64 44 65 37 6a 37 46 7a 53 5f 6f 4d 71 54 79 42 57 49 6e 51 6c 53 70 33 67 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g"}
2024-05-24 15:47:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49845	142.250.74.198	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:25 UTC	717	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:25 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:34 GMT Expires: Fri, 24 May 2024 15:51:34 GMT Cache-Control: public, max-age=900 Age: 651 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:25 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49847	142.250.185.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:25 UTC	662	OUT	GET /js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:26 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 53485 Date: Fri, 24 May 2024 15:47:26 GMT Expires: Sat, 24 May 2025 15:47:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 14 May 2024 11:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:26 UTC	591	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 61 74 65 50 6f 6c 69 63 79 28 70 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 4b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 4b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 4b 7d 29 2c 61 3d 36 30 3b 65 6c 73 65 7b 69 66 28 61 3d 3d 76 29 72 65 74 75 72 6e 20 4d 3b 61 3d 3d 68 26 26 28 61 3d 4c 26 26 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 65 3a 76 29 7d 7d 7d 63 61 74 63 68 28 4f 29 7b 69 66 28 35 34 3d 3d 46 29 74 68 72 6f 77 20 4f 3b 31 30 3d 3d 46 26 26 28 42 3d 4f 2c 61 3d 38 32 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 52 2c 65 29 7b 72 65 74 75 72 6e 28 65 3d 55 28 32 30 2c 37 38 2c 36 2c 39 36 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 31 3d 3d 3d 52 2e 65 76 61 6c 28 65 2e 63 72 65 61 74 65 53 63 Data Ascii: atePolicy(p,{createHTML:K,createScript:K,createScriptURL:K}),a=60;else{if(a==v)return M;a==h&&(a=L&&L.createPolicy?e:v)}}}catch(O){if(54==F)throw O;10==F&&(B=O,a=82)}};(0,eval)(function(R,e){return(e=U(20,78,6,96,"error","ad",null))&&1===R.eval(e.createSc
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 31 3a 33 3b 65 6c 73 65 20 69 66 28 38 35 3d 3d 6d 29 6d 3d 46 20 69 6e 20 54 2e 56 26 26 67 28 52 2c 54 2e 56 5b 46 5d 2c 30 2c 36 29 3f 38 33 3a 33 30 3b 65 6c 73 65 20 69 66 28 33 32 3d 3d 6d 29 6b 28 33 34 2c 22 6f 62 6a 65 63 74 22 2c 30 2c 54 2c 46 2c 4d 2c 76 5b 68 5d 2c 42 29 2c 6d 3d 35 3b 65 6c 73 65 20 69 66 28 36 30 3d 3d 6d 29 46 3d 52 2e 74 79 70 65 2c 6d 3d 38 35 3b 65 6c 73 65 20 69 66 28 31 36 3d 3d 6d 29 77 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 52 7c 7c 6d 5f 2e 6c 32 28 29 2c 54 29 2c 6d 3d 37 37 3b 65 6c 73 65 20 69 66 28 35 3d 3d 6d 29 68 2b 2b 2c 6d 3d 38 37 3b 65 6c 73 65 7b 69 66 28 32 39 3d 3d 6d 29 72 65 74 75 72 6e 20 4c 3b 33 3d 3d 6d 3f 28 54 3d 4f 33 28 35 35 2c 39 2c 54 29 2c 46 26 26 46 5b 24 49 5d 3f 46 2e 55 2e 61 64 64 Data Ascii: 1:3;else if(85==m)m=F in T.V&&g(R,T.V[F],0,6)?83:30;else if(32==m)k(34,"object",0,T,F,M,v[h],B),m=5;else if(60==m)F=R.type,m=85;else if(16==m)w.call(this,a,R\|\|m_.l2(),T),m=77;else if(5==m)h++,m=87;else{if(29==m)return L;3==m?(T=O3(55,9,T),F&&F[$I]?F.U.add
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 38 35 3d 3d 4c 29 4c 3d 76 3f 38 39 3a 34 35 3b 65 6c 73 65 20 69 66 28 37 39 3d 3d 4c 29 73 33 2e 63 61 6c 6c 28 74 68 69 73 2c 46 29 2c 4c 3d 33 36 3b 65 6c 73 65 20 69 66 28 33 36 3d 3d 4c 29 4c 3d 28 6d 3d 52 29 3f 39 33 3a 39 32 3b 65 6c 73 65 20 69 66 28 36 35 3d 3d 4c 29 4c 3d 35 3e 28 28 54 7c 39 29 26 37 29 26 26 34 3c 3d 28 54 2b 36 26 31 31 29 3f 31 36 3a 32 3b 65 6c 73 65 20 69 66 28 37 32 3d 3d 4c 29 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 52 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 4b 2c 70 29 7b 66 6f 72 28 70 3d 31 39 3b 33 21 3d 70 3b 29 31 39 3d 3d 70 3f 70 3d 61 2e 63 6c 61 73 73 4c 69 73 74 3f 38 38 3a 35 31 3a 35 31 3d 3d 70 3f 70 3d 54 39 28 35 34 2c 31 36 2c 61 2c 31 2c 30 2c 63 29 3f 33 3a Data Ascii: 85==L)L=v?89:45;else if(79==L)s3.call(this,F),L=36;else if(36==L)L=(m=R)?93:92;else if(65==L)L=5>((T\|9)&7)&&4<=(T+6&11)?16:2;else if(72==L)Array.prototype.forEach.call(R,function(c,K,p){for(p=19;3!=p;)19==p?p=a.classList?88:51:51==p?p=T9(54,16,a,1,0,c)?3:
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 36 39 3d 3d 4b 29 4b 3d 28 61 5e 31 37 29 3e 3e 34 3f 33 33 3a 32 36 3b 65 6c 73 65 20 69 66 28 38 34 3d 3d 4b 29 4b 3d 33 31 3b 65 6c 73 65 20 69 66 28 35 30 3d 3d 4b 29 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 65 2c 74 68 69 73 2e 70 72 6f 78 79 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 72 63 3d 46 2c 74 68 69 73 2e 74 79 70 65 3d 54 2c 74 68 69 73 2e 63 61 70 74 75 72 65 3d 21 21 4d 2c 74 68 69 73 2e 4f 61 3d 52 2c 74 68 69 73 2e 6b 65 79 3d 2b 2b 78 49 2c 74 68 69 73 2e 47 59 3d 74 68 69 73 2e 71 44 3d 66 61 6c 73 65 2c 4b 3d 31 37 3b 65 6c 73 65 20 69 66 28 31 3d 3d 4b 29 4b 3d 28 61 7c 38 38 29 3d 3d 61 3f 35 30 3a 31 37 3b 65 6c 73 65 20 69 66 28 31 33 3d 3d 4b 29 7b 69 66 28 52 2e 69 32 2b 3d 28 52 2e 50 3d 28 28 4c 3d 28 68 3d 28 42 3d 28 4f 3d 34 3d Data Ascii: 69==K)K=(a^17)>>4?33:26;else if(84==K)K=31;else if(50==K)this.listener=e,this.proxy=null,this.src=F,this.type=T,this.capture=!!M,this.Oa=R,this.key=++xI,this.GY=this.qD=false,K=17;else if(1==K)K=(a\|88)==a?50:17;else if(13==K){if(R.i2+=(R.P=((L=(h=(B=(O=4=
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 31 35 3d 3d 4c 3f 4c 3d 31 3c 3d 65 2b 34 3e 3e 33 26 26 36 3e 65 3e 3e 31 3f 38 35 3a 33 32 3a 37 33 3d 3d 4c 3f 28 68 3d 6e 53 2c 54 20 69 6e 20 68 3f 46 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 42 2c 68 5b 54 5d 29 3a 46 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 42 29 2c 4c 3d 39 38 29 3a 31 37 3d 3d 4c 3f 4c 3d 31 35 3a 34 33 3d 3d 4c 3f 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 4d 29 26 26 28 4d 3d 4d 2e 6a 6f 69 6e 28 61 29 29 2c 42 3d 52 2b 54 2c 4c 3d 36 33 29 3a 33 32 3d 3d 4c 3f 4c 3d 28 65 26 31 30 38 29 3d 3d 65 3f 34 33 3a 39 38 3a 34 34 3d 3d 4c 3f 4c 3d 28 65 2b 38 5e 32 32 29 3c 65 26 26 28 65 2d 32 5e 38 29 3e 3d 65 3f 38 39 3a 33 37 3a 34 3d 3d 4c 3f 28 46 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 42 2c 4d 29 2c 4c 3d 39 38 Data Ascii: 15==L?L=1<=e+4>>3&&6>e>>1?85:32:73==L?(h=nS,T in h?F.setAttribute(B,h[T]):F.removeAttribute(B),L=98):17==L?L=15:43==L?(Array.isArray(M)&&(M=M.join(a)),B=R+T,L=63):32==L?L=(e&108)==e?43:98:44==L?L=(e+8^22)<e&&(e-2^8)>=e?89:37:4==L?(F.setAttribute(B,M),L=98
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 32 38 29 2b 28 52 5e 31 32 38 29 26 26 28 52 5e 3d 31 32 38 2c 54 3d 4e 48 28 74 72 75 65 2c 61 2c 36 2c 32 29 2c 52 3d 28 52 3c 3c 32 29 2b 28 54 7c 30 29 29 2c 68 3d 52 29 29 2c 68 7d 2c 4d 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 52 2c 54 2c 46 2c 4d 2c 76 29 7b 66 6f 72 28 76 3d 33 39 3b 36 37 21 3d 76 3b 29 69 66 28 38 35 3d 3d 76 29 76 3d 61 2b 35 3e 3e 32 3c 61 26 26 28 61 2d 39 7c 31 34 29 3e 3d 61 3f 35 35 3a 65 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 76 29 76 3d 38 35 3b 65 6c 73 65 20 69 66 28 38 34 3d 3d 76 29 4d 3d 52 26 26 52 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 52 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 52 29 3a 6e 75 6c 6c 2c 76 3d 33 30 3b 65 6c 73 65 7b 69 66 28 32 3d 3d 76 29 72 65 74 75 72 6e 20 4d 3b Data Ascii: 28)+(R^128)&&(R^=128,T=NH(true,a,6,2),R=(R<<2)+(T\|0)),h=R)),h},MH=function(e,a,R,T,F,M,v){for(v=39;67!=v;)if(85==v)v=a+5>>2<a&&(a-9\|14)>=a?55:e;else if(39==v)v=85;else if(84==v)M=R&&R.parentNode?R.parentNode.removeChild(R):null,v=30;else{if(2==v)return M;
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 42 2d 61 2a 76 2a 76 2a 42 2b 54 5b 4c 2b 34 33 26 37 5d 2a 76 2a 70 2d 70 2a 42 2d 20 2d 34 30 37 30 2a 42 2c 54 29 5b 55 5d 2c 76 6f 69 64 20 30 29 2c 54 5b 28 4c 2b 34 35 26 37 29 2b 28 2d 7e 28 46 7c 52 29 2d 28 7e 46 26 52 29 2b 28 7e 46 7c 52 29 29 5d 3d 4b 2c 54 29 5b 4c 2b 28 2d 7e 28 46 26 52 29 2b 28 46 26 2d 33 29 2b 28 7e 46 5e 52 29 2b 28 7e 46 26 52 29 29 5d 3d 36 30 2c 4b 7d 2c 63 3d 6d 29 2c 63 7d 2c 4f 33 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 52 2c 54 2c 46 2c 4d 2c 76 2c 42 2c 68 2c 6d 2c 4c 29 7b 66 6f 72 28 4c 3d 65 3b 38 38 21 3d 4c 3b 29 7b 69 66 28 34 39 3d 3d 4c 29 72 65 74 75 72 6e 20 6d 3b 69 66 28 33 37 3d 3d 4c 29 4c 3d 31 3d 3d 28 61 7c 34 29 3e 3e 33 3f 31 34 3a 34 39 3b 65 6c 73 65 20 69 66 28 31 34 3d 3d 4c 29 22 66 75 Data Ascii: B-avvB+T[L+43&7]vp-pB- -4070*B,T)[U],void 0),T[(L+45&7)+(-~(F\|R)-(~F&R)+(~F\|R))]=K,T)[L+(-~(F&R)+(F&-3)+(~F^R)+(~F&R))]=60,K},c=m),c},O3=function(e,a,R,T,F,M,v,B,h,m,L){for(L=e;88!=L;){if(49==L)return m;if(37==L)L=1==(a\|4)>>3?14:49;else if(14==L)"fu
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 46 2c 4d 2c 76 2c 42 2c 68 2c 6d 2c 4c 2c 4f 2c 63 2c 4b 2c 70 2c 55 29 7b 66 6f 72 28 70 3d 36 39 3b 32 21 3d 70 3b 29 69 66 28 35 37 3d 3d 70 29 70 3d 33 3d 3d 28 65 3e 3e 32 26 31 35 29 3f 39 38 3a 32 34 3b 65 6c 73 65 20 69 66 28 36 32 3d 3d 70 29 4c 3d 48 28 31 37 2c 52 2c 54 29 3f 21 21 54 2e 63 61 70 74 75 72 65 3a 21 21 54 2c 28 4f 3d 70 53 28 36 31 2c 42 2c 35 29 29 7c 7c 28 42 5b 4b 53 5d 3d 4f 3d 6e 65 77 20 63 66 28 42 29 29 2c 6d 3d 4f 2e 61 64 64 28 68 2c 46 2c 76 2c 4c 2c 4d 29 2c 70 3d 31 30 3b 65 6c 73 65 20 69 66 28 38 36 3d 3d 70 29 6b 28 31 30 2c 74 72 75 65 2c 54 2c 42 2e 55 29 2c 70 3d 35 37 3b 65 6c 73 65 20 69 66 28 35 36 3d 3d 70 29 46 2e 73 72 63 3d 61 2c 42 5b 4b 53 5d 3d 61 2c 70 3d 35 37 3b 65 6c 73 65 20 69 66 28 37 39 3d 3d Data Ascii: F,M,v,B,h,m,L,O,c,K,p,U){for(p=69;2!=p;)if(57==p)p=3==(e>>2&15)?98:24;else if(62==p)L=H(17,R,T)?!!T.capture:!!T,(O=pS(61,B,5))\|\|(B[KS]=O=new cf(B)),m=O.add(h,F,v,L,M),p=10;else if(86==p)k(10,true,T,B.U),p=57;else if(56==p)F.src=a,B[KS]=a,p=57;else if(79==
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 55 2e 73 72 63 2c 55 2e 6c 69 73 74 65 6e 65 72 2c 7a 29 7d 2c 61 3d 52 73 2c 4b 3d 55 2c 70 3d 32 34 29 3a 31 3d 3d 70 3f 70 3d 46 3f 31 31 3a 33 39 3a 31 37 3d 3d 70 3f 28 63 3d 46 6b 28 31 32 29 2c 6d 2e 70 72 6f 78 79 3d 63 2c 63 2e 73 72 63 3d 42 2c 63 2e 6c 69 73 74 65 6e 65 72 3d 6d 2c 70 3d 36 29 3a 39 34 3d 3d 70 3f 28 42 2e 61 74 74 61 63 68 45 76 65 6e 74 28 62 49 28 36 2c 35 2c 22 6f 6e 22 2c 68 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 63 29 2c 70 3d 34 31 29 3a 35 33 3d 3d 70 3f 70 3d 32 3d 3d 28 28 65 5e 36 35 29 26 32 33 29 3f 31 34 3a 34 36 3a 31 34 3d 3d 70 3f 70 3d 68 3f 36 32 3a 35 3a 33 30 3d 3d 70 3f 28 42 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 63 29 2c 70 3d Data Ascii: function(z){return a.call(U.src,U.listener,z)},a=Rs,K=U,p=24):1==p?p=F?11:39:17==p?(c=Fk(12),m.proxy=c,c.src=B,c.listener=m,p=6):94==p?(B.attachEvent(bI(6,5,"on",h.toString()),c),p=41):53==p?p=2==((e^65)&23)?14:46:14==p?p=h?62:5:30==p?(B.addListener(c),p=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49824	172.217.18.118	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:25 UTC	802	OUT	GET /vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:26 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 75176 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:06:56 GMT Expires: Fri, 24 May 2024 16:06:56 GMT Cache-Control: public, max-age=7200 Age: 6030 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:26 UTC	741	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 19 09 09 09 09 1d 1a 1f 1e 1d 1a 1c 1c 20 19 2b 2b 20 2b 2c 2b 1c 1c 2b 35 2b 2c 2b 2b 28 35 36 1f 2b 3b 3d 36 2b 3c 2b 33 34 2b 01 09 09 09 05 05 05 0c 05 05 0c 26 15 10 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 08 ff c4 00 41 10 00 02 02 01 03 03 02 05 03 02 04 04 05 03 04 03 01 02 00 03 11 04 12 21 13 31 41 22 51 05 14 32 61 71 23 42 81 52 a1 15 33 62 91 72 b1 c1 d1 24 Data Ascii: JFIF ++ +,++5+,++(56+;=6+<+34+&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&"A!1A"Q2aq#BR3br$
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 Data Ascii:
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 27 12 62 03 11 88 88 0c 46 22 20 46 23 12 62 04 62 31 26 20 46 24 4b 44 0a c4 b4 62 05 62 4e 23 10 22 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 Data Ascii: 'bF" F#bb1& F$KDbbN#"" """ """ """ """
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 5c 48 c4 be d9 04 40 ae 23 12 71 18 81 18 8c 49 c4 62 04 48 96 c4 8c 40 88 93 88 c4 0a e2 31 2d 88 c4 0a c4 b4 88 15 c4 62 5f 12 b8 81 18 95 c4 be 23 10 2b 89 12 d8 8c 40 a6 23 12 e4 48 c4 0a e2 25 b1 18 81 58 93 10 22 33 18 8c 40 44 62 20 22 33 26 02 22 20 44 46 22 02 24 e2 00 81 18 93 27 6c b0 10 29 89 6d b2 71 26 05 31 18 96 c4 62 03 11 89 6c 46 20 57 12 71 18 93 88 11 88 c4 b6 23 10 23 12 25 b1 18 81 58 96 c4 62 04 62 31 27 11 88 11 18 93 88 81 18 8c 49 88 11 88 c4 9c c6 60 46 23 12 73 19 81 18 91 89 68 81 5c 44 b4 62 05 62 4e 23 10 2b 88 c4 b6 23 10 2b 88 c4 b6 23 10 2b 23 12 d8 91 88 15 db 1b 65 a2 05 22 5b 11 88 15 89 38 8c 40 88 93 89 10 12 31 26 20 22 22 04 44 98 81 11 27 11 88 08 96 88 15 89 68 81 5c 44 b6 24 e2 04 44 9c 46 20 46 23 12 f8 8c 40 Data Ascii: \H@#qIbH@1-b_#+@#H%X"3@Db "3&" DF"$'l)mq&1blF Wq##%Xbb1'I`F#sh\DbbN#+#+#+#e"[8@1& ""D'h\D$DF F#@
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 1b bc 4b 04 73 d8 4f 5b f4 47 6d b2 a6 ca c7 6f f9 40 f3 d6 9b 0c d5 74 cd e6 75 1d 42 81 c7 fc a6 4d aa 80 5a 48 ee 66 a8 31 e6 72 b6 a6 50 ea 0c 0f 5a bb 17 cc e9 4e 93 0e 76 cf 9c 3a a6 f7 91 f3 6c 3c c0 fa 46 d2 d2 dc e1 66 2f f0 ea 1b f6 ff 00 b4 f1 d3 5e eb 8e 73 fc ce 94 f8 9e 7b f0 7f 30 3a 5f e1 14 9e c2 60 ff 00 04 af c7 12 e9 ad 5f ea fe f3 4f 9b 1f d5 03 85 fe 0b 8e c6 64 7e 10 de ff 00 da 7a bf 33 9e c6 51 ee 6f 06 07 97 fe 12 df d5 fd a4 ff 00 86 63 b9 9d 6f 7d 83 ef 32 6d 4b 79 18 81 8f c9 28 8f 94 59 af 57 3d e5 4b 8f 78 19 fc aa c9 f9 55 f7 96 36 19 1d 43 02 3e 4c 7b c8 3a 41 ef 27 a8 7d e3 a8 60 66 74 9f 79 43 a7 c4 e8 16 18 ef 03 93 a4 63 64 eb c4 8d 90 39 76 46 c9 d3 d3 3f fc 11 b3 ed 03 98 a7 da 46 c9 d5 b3 ed 1b 3e d0 39 36 46 27 67 Data Ascii: KsO[Gmo@tuBMZHf1rPZNv:l<Ff/^s{0:_`_Od~z3Qoco}2mKy(YW=KxU6C>L{:A'}`ftyCcd9vF?F>96F'g
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 2f 88 c4 0a 63 ed 18 97 db 18 81 5c 46 25 f6 c6 d8 14 c4 62 69 b6 02 c0 a6 23 12 f8 8c 40 ae 23 13 4d b1 b6 06 5b 63 6c be 24 e2 05 31 18 97 db 27 6c 0c f1 18 96 c4 9d b0 29 88 c4 b6 23 10 29 88 c4 be 23 10 33 c4 62 5f 11 88 14 c4 8c 4b e2 46 20 53 12 31 34 c4 8c 40 a6 24 62 5c 89 18 81 4c 48 c4 be 23 10 29 89 18 97 c4 88 14 c4 8c 4b e2 31 03 3c 48 c4 be 23 10 29 23 12 e4 4a e2 05 64 62 5f 12 31 02 b8 8c 4b 62 57 10 29 88 32 d2 0f 63 f8 81 f4 3a 3d 12 b5 35 31 6e f5 a1 fe d3 a0 7c 39 7c 19 d9 f0 ed 2e 9c 69 74 ec cd ea 6a 6a 2c 37 79 c4 ea 0f 4a 7d 2b 98 1c 2b f0 b5 9a 2f c2 56 74 1d 72 8f d9 29 fe 24 be cd 02 47 c2 97 de 68 3e 16 be f3 3f 9f 53 e6 41 d4 e7 b1 81 b8 f8 5d 3e 4c 9f 90 d3 8e e6 71 fc e0 1d e3 e6 d7 c1 81 da 34 ba 61 fb 73 fc 4b 84 d3 0f d9 Data Ascii: /c\F%bi#@#M[cl$1'l)#)#3b_KF S14@$b\LH#)K1<H#)#Jdb_1KbW)2c:=51n\|9\|.itjj,7yJ}++/Vtr)$Gh>?SA]>Lq4asK
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: f0 0f 71 23 a7 8e d3 a8 d2 7d a3 e5 db c0 81 c9 8f 71 23 67 b7 79 d9 f2 ef fd 12 3e 51 8f ec 61 03 93 d4 3b ae 64 ed 53 f6 33 b0 69 6c f6 ff 00 79 61 a1 66 ee ab fc 18 1c 21 58 76 e4 49 fc 8c 4e e1 f0 f6 1f 69 a0 f8 79 81 e7 4b 03 3b ff 00 c3 fd c4 8f 92 10 38 c6 3d a5 c6 df 22 74 1d 1f de 66 fa 56 10 20 1a bd f1 2e 3a 5f fa 98 9c ed 4b 0e dc cc 8a 91 f5 08 1d c0 27 fe a4 b8 0b fd 4a 7f 99 e5 ed 53 fe 93 19 75 fd d9 10 3d 42 17 c6 d9 05 57 da 79 a1 f3 e7 06 68 2d 61 e7 22 07 51 55 f6 91 95 13 01 a8 1f b8 62 58 32 98 1a 65 23 72 cc 88 12 a6 b1 03 7c af fa 65 b7 2f 90 b3 90 d7 28 50 fb ff 00 78 1d db ab f2 b1 be a9 c1 b5 a3 9f 22 07 7f 52 a9 1d 6a 87 ed 9c 1b 47 e2 36 9f 0d 03 b4 ea 94 76 59 91 d4 9f 13 0c 37 f4 e6 4e df e0 c0 96 b9 8c cf 33 4d 87 c1 91 b5 Data Ascii: q#}q#gy>Qa;dS3ilyaf!XvINiyK;8="tfV .:_K'JSu=BWyh-a"QUbX2e#r\|e/(Px"RjG6vY7N3M
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 93 b2 8f 68 1e 47 4f ed 99 6e 98 f2 b3 d3 3a 4a 9b b3 63 f9 95 3a 0f e9 6c c0 f3 82 49 0b 3b 1b 41 60 f1 99 8b 69 2c 1d d5 bf da 06 38 1e d2 32 26 86 96 1d d7 fb 4a 95 3e 55 a0 46 44 ae 4c b9 41 fe a1 23 a6 7c 40 a1 63 ed fd a0 30 3f 69 6f 50 ee 23 83 dc 62 05 71 ec 64 e0 f9 12 db 07 83 18 61 f7 10 2b 8f 68 fc cd 30 23 07 db 22 05 36 fb 46 0c be c1 27 6b 0e dc c0 cf 9f 22 07 e2 69 ea f6 93 83 ed 02 80 fb 09 60 5b da 4e 18 fd a3 61 f7 80 c9 f7 91 9f bc 9d 9f 78 d8 3d e0 47 7f 3f de 46 1b f3 34 14 e7 b4 b8 d3 31 81 8f 3e 44 91 3a 17 4a de ff 00 ef 34 1a 61 e5 96 07 28 24 4d 52 c1 d8 89 bf cb 27 f5 40 d3 27 f5 c0 cf a0 1f 95 3c 99 46 d3 3a f8 c8 9d 03 4e 07 d2 ff 00 de 6a 9b 87 05 b2 20 79 e5 1b da 41 4f b4 f4 8d 64 f2 25 1a bf 75 e6 07 9a 6b 91 b0 fe 67 79 Data Ascii: hGOn:Jc:lI;A`i,82&J>UFDLA#\|@c0?ioP#bqda+h0#"6F'k"i`[Nax=G?F41>D:J4a($MR'@'<F:Nj yAOd%ukgy
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: d5 8f a5 b1 ea c7 3e d2 7a 4c 00 c7 39 04 0c 40 75 5c 70 c2 54 b0 3f b9 87 f3 24 33 0e e3 83 cf f1 2d e9 3d d7 19 39 fe 20 50 ef f0 d9 f3 2b 96 f2 bf 99 a0 51 e1 bd fb f8 12 c1 5b df 39 e6 06 18 5f 23 1e 38 f7 92 00 f0 cd 36 db 9e eb f7 90 2b 1e d0 29 86 f0 65 b0 df fc 32 76 2f f5 49 d8 3f ab da 04 6e 71 db f3 2c 2d b4 7f 12 3a 60 f6 6f 38 93 d3 6f 0d 9e 71 f9 80 1a b7 1f ff 00 99 aa 7c 41 c7 71 e7 cc c4 87 19 f4 e7 2d 8f e6 09 3c 65 7c e6 07 6a fc 49 4f 0c 8b fe d2 c3 53 4b f7 45 1e 67 9f 80 71 91 8e f1 b0 71 83 8f 49 81 e8 1a e9 7c 63 ef 33 6d 3a fe de 78 9c e9 91 d8 fe cf ef 35 5b 18 67 3c e1 56 01 e9 03 39 af 23 8e 41 94 34 54 dd 86 d3 9c 60 f1 89 d2 2d 04 10 47 95 12 db 55 bb ff 00 5e 33 e7 30 38 ce 94 70 54 af 99 3d 05 1f 54 ec 14 21 23 1c 65 99 64 Data Ascii: >zL9@u\pT?$3-=9 P+Q[9_#86+)e2v/I?nq,-:`o8oq\|Aq-<e\|jIOSKEgqqI\|c3m:x5[g<V9#A4T`-GU^308pT=T!#ed
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 0f 97 1e 8c 60 7b fe 60 59 be 19 77 3b a9 60 05 62 d2 df fe df bc 1f 84 da 77 61 18 74 c2 96 04 63 68 3d a7 4f f8 ca b0 b3 75 4b 97 d3 d7 40 da 70 54 8f 32 4f c4 e9 61 66 6b 61 ba ba d4 0e a6 47 50 79 30 39 4f c2 b5 4b b8 74 fe 87 5a cf ab b3 1e c2 6a 7e 13 6e 48 71 5a ed b1 6a 6f 5f 67 9d 07 e2 3a 57 6b 0e db 06 76 32 fe a6 7f 53 cc 33 e8 d8 b9 47 75 c0 0e bb 8e 77 d9 03 9b fc 1b 07 3d 4a f8 b7 a4 7d c1 94 3f 0a 23 05 99 87 ad eb 72 17 38 7f 02 76 35 0c 03 35 56 54 e2 ba 45 ae db b3 92 7e df 69 5b 1f 57 5f 0e 19 4a a2 3e 00 fd 87 b1 81 ca ba 26 1c 16 65 c2 13 60 75 e5 1b c0 96 1f 0f 67 ee 14 fa 03 be 0e 36 7d a7 40 d6 b9 f4 d8 ea cb d4 0c ea dc 86 6f 19 90 6d d3 59 91 69 d8 cf 7e eb 2c 46 e5 13 d8 08 1c 6f f0 b6 18 fd 3b 06 41 6c 77 c2 ce 66 d1 e3 f7 63 Data Ascii: `{`Yw;`bwatch=OuK@pT2OafkaGPy09OKtZj~nHqZjo_g:Wkv2S3Guw=J}?#r8v55VTE~i[W_J>&e`ug6}@omYi~,Fo;Alwfc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49850	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:26 UTC	1132	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3396 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240521.01.00 X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:26 UTC	3396	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 48 58 4a 45 61 6b 6d 36 35 46 49 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 79 56 47 68 30 4f 54 5a 66 64 6e 42 54 4f 43 69 48 37 63 4b 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 5a 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"HXJEakm65FI","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-05-24 15:47:26 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:26 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:26 UTC	958	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 77 68 5f 70 61 75 73 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"ipcc","value":"0"},{"key":"is_alc_surface","value":"false"},{"key":"is_viewed_live","value":"False"},{"key":"wh_paused","value":"0"},{"key":"logged_in","value":"0"
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 31 34 2c 35 31 31 35 38 35 33 35 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 37 32 32 2c 35 31 31 36 35 34 36 36 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 35 35 39 32 2c 35 31 31 36 36 35 36 32 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 38 32 30 37 2c 35 31 31 36 38 32 32 35 2c 35 31 31 36 38 32 35 36 2c 35 31 31 36 38 33 38 35 2c 35 31 31 36 38 34 31 39 2c 35 31 31 36 38 35 35 37 2c 35 31 31 36 38 39 31 38 2c 35 31 31 36 38 39 36 37 2c 35 31 31 36 38 39 37 30 2c 35 31 31 36 39 30 33 34 2c 35 31 31 36 39 31 33 30 2c 35 31 31 36 39 32 35 38 2c 35 31 31 36 39 32 36 30 2c 35 31 31 36 39 39 34 37 2c 35 31 31 37 30 33 37 33 2c 35 31 31 37 31 34 33 39 2c 35 31 31 37 32 39 36 33 2c 35 31 31 37 32 39 37 31 2c 35 31 31 37 33 31 33 32 2c Data Ascii: 14,51158535,51160545,51162170,51162722,51165466,51165568,51165592,51166562,51166922,51168207,51168225,51168256,51168385,51168419,51168557,51168918,51168967,51168970,51169034,51169130,51169258,51169260,51169947,51170373,51171439,51172963,51172971,51173132,
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 75 25 32 43 6f 6e 72 26 6d 76 3d 75 26 6d 76 69 3d 32 26 70 6c 3d 32 35 26 62 75 69 3d 41 57 52 57 6a 32 51 31 4f 5a 6e 4a 72 75 4b 6d 66 67 65 51 76 6f 34 67 52 2d 39 34 41 6a 2d 61 37 59 54 38 72 4e 4d 76 46 38 72 2d 47 75 4a 6f 4a 41 50 6e 39 45 71 71 53 42 72 63 70 46 36 55 62 55 6c 74 63 57 7a 73 57 69 4d 76 79 77 4e 78 26 73 70 63 3d 55 57 46 39 66 34 37 7a 72 57 4d 72 41 33 32 77 48 51 77 74 5f 4e 71 4d 47 6f 42 59 51 30 4a 45 63 4c 49 4c 47 55 6b 35 34 64 54 48 36 67 4e 71 70 45 6e 43 7a 64 56 42 65 41 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 68 47 35 4f 36 66 50 4b 47 4e 5a 64 51 44 32 76 6e 78 57 76 54 4e 34 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 31 31 37 Data Ascii: u%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Q1OZnJruKmfgeQvo4gR-94Aj-a7YT8rNMvF8r-GuJoJAPn9EqqSBrcpF6UbUltcWzsWiMvywNx&spc=UWF9f47zrWMrA32wHQwt_NqMGoBYQ0JEcLILGUk54dTH6gNqpEnCzdVBeA&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hG5O6fPKGNZdQD2vnxWvTN4Q&rqh=1&gir=yes&clen=117
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 31 33 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 4d 42 26 6d 6d 3d 33 31 25 32 43 32 36 26 6d 6e 3d 73 6e 2d 70 35 71 73 37 6e 7a 72 25 32 43 73 6e 2d 61 62 35 73 7a 6e 6c 64 26 6d 73 3d 61 75 25 32 43 6f 6e 72 26 6d 76 3d 75 26 6d Data Ascii: 13&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qs7nzr%2Csn-ab5sznld&ms=au%2Conr&mv=u&m
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 65 73 22 3a 22 43 4f 4c 4f 52 5f 50 52 49 4d 41 52 49 45 53 5f 42 54 37 30 39 22 2c 22 74 72 61 6e 73 66 65 72 43 68 61 72 61 63 74 65 72 69 73 74 69 63 73 22 3a 22 43 4f 4c 4f 52 5f 54 52 41 4e 53 46 45 52 5f 43 48 41 52 41 43 54 45 52 49 53 54 49 43 53 5f 42 54 37 30 39 22 2c 22 6d 61 74 72 69 78 43 6f 65 66 66 69 63 69 65 6e 74 73 22 3a 22 43 4f 4c 4f 52 5f 4d 41 54 52 49 58 5f 43 4f 45 46 46 49 43 49 45 4e 54 53 5f 42 54 37 30 39 22 7d 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 35 34 34 38 22 7d 2c 7b 22 69 74 61 67 22 3a 34 30 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 32 2d 2d 2d 73 6e 2d 70 35 71 73 37 6e 7a 72 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 Data Ascii: es":"COLOR_PRIMARIES_BT709","transferCharacteristics":"COLOR_TRANSFER_CHARACTERISTICS_BT709","matrixCoefficients":"COLOR_MATRIX_COEFFICIENTS_BT709"},"approxDurationMs":"15448"},{"itag":401,"url":"https://rr2---sn-p5qs7nzr.googlevideo.com/videoplayback?exp
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 5f 6c 51 56 5a 71 6e 4e 55 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 30 31 2e 30 2e 31 32 4d 2e 30 38 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 35 33 35 37 31 36 30 2c 22 77 69 64 74 68 22 3a 33 38 34 30 2c 22 68 65 69 67 68 74 22 3a 32 31 36 30 2c 22 69 6e 69 74 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 30 22 2c 22 65 6e 64 22 3a 22 37 30 30 22 7d 2c 22 69 6e 64 65 78 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 37 30 31 22 2c 22 65 6e 64 22 3a 22 37 36 38 22 7d 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 37 31 34 35 36 38 31 39 33 37 36 35 33 33 34 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 39 33 37 32 30 35 36 22 2c 22 71 75 61 6c 69 74 79 Data Ascii: _lQVZqnNU%3D","mimeType":"video/mp4; codecs=\"av01.0.12M.08\"","bitrate":5357160,"width":3840,"height":2160,"initRange":{"start":"0","end":"700"},"indexRange":{"start":"701","end":"768"},"lastModified":"1714568193765334","contentLength":"9372056","quality
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 43 65 69 25 32 43 69 70 25 32 43 69 64 25 32 43 61 69 74 61 67 73 25 32 43 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 72 71 68 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 41 49 67 53 4c 64 47 4e 6f 6a 5f 52 67 72 32 57 36 57 74 58 66 50 5f 41 36 6b 58 54 78 30 72 6c 75 38 72 66 76 36 74 53 53 31 4f 73 69 73 43 49 48 69 59 65 62 63 73 75 38 44 7a 78 59 4d 68 72 51 31 6c 4c 51 63 75 6c 47 52 6e 4c 50 2d 75 56 4c 4b 4c 68 5f 33 33 62 72 64 45 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 Data Ascii: Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgSLdGNoj_Rgr2W6WtXfP_A6kXTx0rlu8rfv6tSS1OsisCIHiYebcsu8DzxYMhrQ1lLQculGRnLP-uVLKLh_33brdE&lsparams=mh%2Cmm%2Cmn%2Cms%2C
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 51 5a 4e 74 4b 30 6d 47 4f 4a 72 43 78 74 34 75 37 49 63 52 54 55 6c 71 58 73 59 45 71 5a 47 55 37 65 6a 59 31 75 71 49 6a 62 72 4b 4e 57 6e 44 72 50 63 5a 55 31 37 71 50 47 35 53 63 30 6f 26 73 70 63 3d 55 57 46 39 66 34 37 7a 72 57 4d 72 41 33 32 77 48 51 77 74 5f 4e 71 4d 47 6f 42 59 51 30 4a 45 63 4c 49 4c 47 55 6b 35 34 64 54 48 36 67 4e 71 70 45 6e 43 7a 64 56 42 65 41 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 73 7a 73 48 68 61 63 34 46 37 6f 30 46 6e 43 6c 61 65 4d 63 30 6a 34 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 34 37 37 34 36 31 30 26 64 75 72 3d 31 35 2e 34 34 38 26 6c 6d 74 3d 31 37 31 34 35 36 37 30 38 30 38 36 33 36 30 36 26 6d 74 3d 31 37 31 36 35 36 Data Ascii: QZNtK0mGOJrCxt4u7IcRTUlqXsYEqZGU7ejY1uqIjbrKNWnDrPcZU17qPG5Sc0o&spc=UWF9f47zrWMrA32wHQwt_NqMGoBYQ0JEcLILGUk54dTH6gNqpEnCzdVBeA&vprv=1&svpuc=1&mime=video%2Fmp4&ns=szsHhac4F7o0FnClaeMc0j4Q&rqh=1&gir=yes&clen=4774610&dur=15.448&lmt=1714567080863606&mt=171656
2024-05-24 15:47:26 UTC	1390	IN	Data Raw: 4a 74 2d 36 36 64 73 50 6b 37 43 59 38 41 4d 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 69 64 3d 6f 2d 41 46 42 36 61 33 4b 68 5f 41 2d 44 58 39 55 76 64 6c 77 57 42 30 47 76 30 4f 43 67 46 62 65 38 39 76 57 75 63 52 4c 66 33 50 5a 37 26 69 74 61 67 3d 31 33 37 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 Data Ascii: Jt-66dsPk7CY8AM&ip=8.46.123.175&id=o-AFB6a3Kh_A-DX9UvdlwWB0Gv0OCgFbe89vWucRLf3PZ7&itag=137&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49851	142.250.184.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:26 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:27 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 24 May 2024 15:47:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:27 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 2d 41 70 57 5f 77 76 32 74 56 6e 4c 74 48 76 6b 6b 36 79 4a 6d 76 6b 32 66 2d 73 50 4f 67 58 38 49 58 79 6e 35 36 53 4b 69 7a 6a 75 54 36 75 35 4a 44 2d 32 6f 74 70 2d 44 53 4a 53 49 5f 51 68 66 58 71 76 4b 50 42 34 6a 4b 58 49 33 64 48 50 38 55 39 32 6c 6e 79 69 52 64 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKr-ApW_wv2tVnLtHvkk6yJmvk2f-sPOgX8IXyn56SKizjuT6u5JD-2otp-DSJSI_QhfXqvKPB4jKXI3dHP8U92lnyiRdw"}
2024-05-24 15:47:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49854	142.250.181.246	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:27 UTC	567	OUT	GET /vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:27 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 75176 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:06:56 GMT Expires: Fri, 24 May 2024 16:06:56 GMT Cache-Control: public, max-age=7200 Age: 6031 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:27 UTC	741	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 19 09 09 09 09 1d 1a 1f 1e 1d 1a 1c 1c 20 19 2b 2b 20 2b 2c 2b 1c 1c 2b 35 2b 2c 2b 2b 28 35 36 1f 2b 3b 3d 36 2b 3c 2b 33 34 2b 01 09 09 09 05 05 05 0c 05 05 0c 26 15 10 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 08 ff c4 00 41 10 00 02 02 01 03 03 02 05 03 02 04 04 05 03 04 03 01 02 00 03 11 04 12 21 13 31 41 22 51 05 14 32 61 71 23 42 81 52 a1 15 33 62 91 72 b1 c1 d1 24 Data Ascii: JFIF ++ +,++5+,++(56+;=6+<+34+&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&"A!1A"Q2aq#BR3br$
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 Data Ascii:
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 27 12 62 03 11 88 88 0c 46 22 20 46 23 12 62 04 62 31 26 20 46 24 4b 44 0a c4 b4 62 05 62 4e 23 10 22 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 Data Ascii: 'bF" F#bb1& F$KDbbN#"" """ """ """ """
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 5c 48 c4 be d9 04 40 ae 23 12 71 18 81 18 8c 49 c4 62 04 48 96 c4 8c 40 88 93 88 c4 0a e2 31 2d 88 c4 0a c4 b4 88 15 c4 62 5f 12 b8 81 18 95 c4 be 23 10 2b 89 12 d8 8c 40 a6 23 12 e4 48 c4 0a e2 25 b1 18 81 58 93 10 22 33 18 8c 40 44 62 20 22 33 26 02 22 20 44 46 22 02 24 e2 00 81 18 93 27 6c b0 10 29 89 6d b2 71 26 05 31 18 96 c4 62 03 11 89 6c 46 20 57 12 71 18 93 88 11 88 c4 b6 23 10 23 12 25 b1 18 81 58 96 c4 62 04 62 31 27 11 88 11 18 93 88 81 18 8c 49 88 11 88 c4 9c c6 60 46 23 12 73 19 81 18 91 89 68 81 5c 44 b4 62 05 62 4e 23 10 2b 88 c4 b6 23 10 2b 88 c4 b6 23 10 2b 23 12 d8 91 88 15 db 1b 65 a2 05 22 5b 11 88 15 89 38 8c 40 88 93 89 10 12 31 26 20 22 22 04 44 98 81 11 27 11 88 08 96 88 15 89 68 81 5c 44 b6 24 e2 04 44 9c 46 20 46 23 12 f8 8c 40 Data Ascii: \H@#qIbH@1-b_#+@#H%X"3@Db "3&" DF"$'l)mq&1blF Wq##%Xbb1'I`F#sh\DbbN#+#+#+#e"[8@1& ""D'h\D$DF F#@
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 1b bc 4b 04 73 d8 4f 5b f4 47 6d b2 a6 ca c7 6f f9 40 f3 d6 9b 0c d5 74 cd e6 75 1d 42 81 c7 fc a6 4d aa 80 5a 48 ee 66 a8 31 e6 72 b6 a6 50 ea 0c 0f 5a bb 17 cc e9 4e 93 0e 76 cf 9c 3a a6 f7 91 f3 6c 3c c0 fa 46 d2 d2 dc e1 66 2f f0 ea 1b f6 ff 00 b4 f1 d3 5e eb 8e 73 fc ce 94 f8 9e 7b f0 7f 30 3a 5f e1 14 9e c2 60 ff 00 04 af c7 12 e9 ad 5f ea fe f3 4f 9b 1f d5 03 85 fe 0b 8e c6 64 7e 10 de ff 00 da 7a bf 33 9e c6 51 ee 6f 06 07 97 fe 12 df d5 fd a4 ff 00 86 63 b9 9d 6f 7d 83 ef 32 6d 4b 79 18 81 8f c9 28 8f 94 59 af 57 3d e5 4b 8f 78 19 fc aa c9 f9 55 f7 96 36 19 1d 43 02 3e 4c 7b c8 3a 41 ef 27 a8 7d e3 a8 60 66 74 9f 79 43 a7 c4 e8 16 18 ef 03 93 a4 63 64 eb c4 8d 90 39 76 46 c9 d3 d3 3f fc 11 b3 ed 03 98 a7 da 46 c9 d5 b3 ed 1b 3e d0 39 36 46 27 67 Data Ascii: KsO[Gmo@tuBMZHf1rPZNv:l<Ff/^s{0:_`_Od~z3Qoco}2mKy(YW=KxU6C>L{:A'}`ftyCcd9vF?F>96F'g
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 2f 88 c4 0a 63 ed 18 97 db 18 81 5c 46 25 f6 c6 d8 14 c4 62 69 b6 02 c0 a6 23 12 f8 8c 40 ae 23 13 4d b1 b6 06 5b 63 6c be 24 e2 05 31 18 97 db 27 6c 0c f1 18 96 c4 9d b0 29 88 c4 b6 23 10 29 88 c4 be 23 10 33 c4 62 5f 11 88 14 c4 8c 4b e2 46 20 53 12 31 34 c4 8c 40 a6 24 62 5c 89 18 81 4c 48 c4 be 23 10 29 89 18 97 c4 88 14 c4 8c 4b e2 31 03 3c 48 c4 be 23 10 29 23 12 e4 4a e2 05 64 62 5f 12 31 02 b8 8c 4b 62 57 10 29 88 32 d2 0f 63 f8 81 f4 3a 3d 12 b5 35 31 6e f5 a1 fe d3 a0 7c 39 7c 19 d9 f0 ed 2e 9c 69 74 ec cd ea 6a 6a 2c 37 79 c4 ea 0f 4a 7d 2b 98 1c 2b f0 b5 9a 2f c2 56 74 1d 72 8f d9 29 fe 24 be cd 02 47 c2 97 de 68 3e 16 be f3 3f 9f 53 e6 41 d4 e7 b1 81 b8 f8 5d 3e 4c 9f 90 d3 8e e6 71 fc e0 1d e3 e6 d7 c1 81 da 34 ba 61 fb 73 fc 4b 84 d3 0f d9 Data Ascii: /c\F%bi#@#M[cl$1'l)#)#3b_KF S14@$b\LH#)K1<H#)#Jdb_1KbW)2c:=51n\|9\|.itjj,7yJ}++/Vtr)$Gh>?SA]>Lq4asK
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: f0 0f 71 23 a7 8e d3 a8 d2 7d a3 e5 db c0 81 c9 8f 71 23 67 b7 79 d9 f2 ef fd 12 3e 51 8f ec 61 03 93 d4 3b ae 64 ed 53 f6 33 b0 69 6c f6 ff 00 79 61 a1 66 ee ab fc 18 1c 21 58 76 e4 49 fc 8c 4e e1 f0 f6 1f 69 a0 f8 79 81 e7 4b 03 3b ff 00 c3 fd c4 8f 92 10 38 c6 3d a5 c6 df 22 74 1d 1f de 66 fa 56 10 20 1a bd f1 2e 3a 5f fa 98 9c ed 4b 0e dc cc 8a 91 f5 08 1d c0 27 fe a4 b8 0b fd 4a 7f 99 e5 ed 53 fe 93 19 75 fd d9 10 3d 42 17 c6 d9 05 57 da 79 a1 f3 e7 06 68 2d 61 e7 22 07 51 55 f6 91 95 13 01 a8 1f b8 62 58 32 98 1a 65 23 72 cc 88 12 a6 b1 03 7c af fa 65 b7 2f 90 b3 90 d7 28 50 fb ff 00 78 1d db ab f2 b1 be a9 c1 b5 a3 9f 22 07 7f 52 a9 1d 6a 87 ed 9c 1b 47 e2 36 9f 0d 03 b4 ea 94 76 59 91 d4 9f 13 0c 37 f4 e6 4e df e0 c0 96 b9 8c cf 33 4d 87 c1 91 b5 Data Ascii: q#}q#gy>Qa;dS3ilyaf!XvINiyK;8="tfV .:_K'JSu=BWyh-a"QUbX2e#r\|e/(Px"RjG6vY7N3M
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 93 b2 8f 68 1e 47 4f ed 99 6e 98 f2 b3 d3 3a 4a 9b b3 63 f9 95 3a 0f e9 6c c0 f3 82 49 0b 3b 1b 41 60 f1 99 8b 69 2c 1d d5 bf da 06 38 1e d2 32 26 86 96 1d d7 fb 4a 95 3e 55 a0 46 44 ae 4c b9 41 fe a1 23 a6 7c 40 a1 63 ed fd a0 30 3f 69 6f 50 ee 23 83 dc 62 05 71 ec 64 e0 f9 12 db 07 83 18 61 f7 10 2b 8f 68 fc cd 30 23 07 db 22 05 36 fb 46 0c be c1 27 6b 0e dc c0 cf 9f 22 07 e2 69 ea f6 93 83 ed 02 80 fb 09 60 5b da 4e 18 fd a3 61 f7 80 c9 f7 91 9f bc 9d 9f 78 d8 3d e0 47 7f 3f de 46 1b f3 34 14 e7 b4 b8 d3 31 81 8f 3e 44 91 3a 17 4a de ff 00 ef 34 1a 61 e5 96 07 28 24 4d 52 c1 d8 89 bf cb 27 f5 40 d3 27 f5 c0 cf a0 1f 95 3c 99 46 d3 3a f8 c8 9d 03 4e 07 d2 ff 00 de 6a 9b 87 05 b2 20 79 e5 1b da 41 4f b4 f4 8d 64 f2 25 1a bf 75 e6 07 9a 6b 91 b0 fe 67 79 Data Ascii: hGOn:Jc:lI;A`i,82&J>UFDLA#\|@c0?ioP#bqda+h0#"6F'k"i`[Nax=G?F41>D:J4a($MR'@'<F:Nj yAOd%ukgy
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: d5 8f a5 b1 ea c7 3e d2 7a 4c 00 c7 39 04 0c 40 75 5c 70 c2 54 b0 3f b9 87 f3 24 33 0e e3 83 cf f1 2d e9 3d d7 19 39 fe 20 50 ef f0 d9 f3 2b 96 f2 bf 99 a0 51 e1 bd fb f8 12 c1 5b df 39 e6 06 18 5f 23 1e 38 f7 92 00 f0 cd 36 db 9e eb f7 90 2b 1e d0 29 86 f0 65 b0 df fc 32 76 2f f5 49 d8 3f ab da 04 6e 71 db f3 2c 2d b4 7f 12 3a 60 f6 6f 38 93 d3 6f 0d 9e 71 f9 80 1a b7 1f ff 00 99 aa 7c 41 c7 71 e7 cc c4 87 19 f4 e7 2d 8f e6 09 3c 65 7c e6 07 6a fc 49 4f 0c 8b fe d2 c3 53 4b f7 45 1e 67 9f 80 71 91 8e f1 b0 71 83 8f 49 81 e8 1a e9 7c 63 ef 33 6d 3a fe de 78 9c e9 91 d8 fe cf ef 35 5b 18 67 3c e1 56 01 e9 03 39 af 23 8e 41 94 34 54 dd 86 d3 9c 60 f1 89 d2 2d 04 10 47 95 12 db 55 bb ff 00 5e 33 e7 30 38 ce 94 70 54 af 99 3d 05 1f 54 ec 14 21 23 1c 65 99 64 Data Ascii: >zL9@u\pT?$3-=9 P+Q[9_#86+)e2v/I?nq,-:`o8oq\|Aq-<e\|jIOSKEgqqI\|c3m:x5[g<V9#A4T`-GU^308pT=T!#ed
2024-05-24 15:47:27 UTC	1390	IN	Data Raw: 0f 97 1e 8c 60 7b fe 60 59 be 19 77 3b a9 60 05 62 d2 df fe df bc 1f 84 da 77 61 18 74 c2 96 04 63 68 3d a7 4f f8 ca b0 b3 75 4b 97 d3 d7 40 da 70 54 8f 32 4f c4 e9 61 66 6b 61 ba ba d4 0e a6 47 50 79 30 39 4f c2 b5 4b b8 74 fe 87 5a cf ab b3 1e c2 6a 7e 13 6e 48 71 5a ed b1 6a 6f 5f 67 9d 07 e2 3a 57 6b 0e db 06 76 32 fe a6 7f 53 cc 33 e8 d8 b9 47 75 c0 0e bb 8e 77 d9 03 9b fc 1b 07 3d 4a f8 b7 a4 7d c1 94 3f 0a 23 05 99 87 ad eb 72 17 38 7f 02 76 35 0c 03 35 56 54 e2 ba 45 ae db b3 92 7e df 69 5b 1f 57 5f 0e 19 4a a2 3e 00 fd 87 b1 81 ca ba 26 1c 16 65 c2 13 60 75 e5 1b c0 96 1f 0f 67 ee 14 fa 03 be 0e 36 7d a7 40 d6 b9 f4 d8 ea cb d4 0c ea dc 86 6f 19 90 6d d3 59 91 69 d8 cf 7e eb 2c 46 e5 13 d8 08 1c 6f f0 b6 18 fd 3b 06 41 6c 77 c2 ce 66 d1 e3 f7 63 Data Ascii: `{`Yw;`bwatch=OuK@pT2OafkaGPy09OKtZj~nHqZjo_g:Wkv2S3Guw=J}?#r8v55VTE~i[W_J>&e`ug6}@omYi~,Fo;Alwfc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49853	142.250.185.97	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:27 UTC	750	OUT	GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:27 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 384 X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:06:34 GMT Expires: Sat, 25 May 2024 14:06:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 6053 ETag: "v113" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:27 UTC	384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifII1GoogleDD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49855	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:27 UTC	913	OUT	GET /generate_204?DW3D_Q HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:27 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:27 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49856	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:27 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: nHXYsaZ4iRZiPQqEMXHp4g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:27 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:27 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:27 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49837	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:27 UTC	1550	OUT	GET /wp-content/uploads/2023/12/cropped-1-5-32x32.png HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:27 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:27 GMT Content-Type: image/png Content-Length: 843 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Dec 2023 15:33:25 GMT ETag: "27a0a11-34b-60c65e354c606" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-05-24 15:47:27 UTC	843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 12 49 44 41 54 58 c3 ed d4 cd 6f 54 55 18 c7 f1 ef 73 5e e6 dc 79 69 a7 14 68 43 a5 ad 0b 69 25 29 18 d3 19 46 49 d0 68 24 24 1a 91 b8 70 d1 b8 70 a7 7f 01 1b fc 0b 5c 89 0a 31 ae 4c 5c 18 93 ba f0 25 ae 0c 6e 30 a1 d2 15 0a 0b 03 22 da 12 07 4b 19 a6 9d b9 9d 7b e7 de c7 85 0d 0b 23 09 2e 5c 31 9f dd 39 8b 27 bf f3 4b 9e 03 03 03 03 03 0f 3b f9 e7 45 63 be 6e 11 ca 93 8f 4e b7 17 17 17 ff f7 00 ee 5f 22 8d 03 27 80 b3 ff 75 d8 8f 9f cd 3b 81 80 48 77 ee b5 65 7d e0 06 86 86 86 d8 3f 33 6b 00 11 91 19 e0 f9 34 cb ce 38 63 2c 90 df 58 f9 fd de b0 66 b3 09 c0 f8 d8 38 df 9d 99 b2 02 25 31 92 5b 63 93 7e 96 bd 2c 70 c2 58 73 32 f2 7e cd 85 08 63 4c d1 Data Ascii: PNGIHDR szzIDATXoTUs^yihCi%)FIh$$pp\1L\%n0"K{#.\19'K;EcnN_"'u;Hwe}?3k48c,Xf8%1[c~,pXs2~cL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49860	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:28 UTC	1116	OUT	GET /wp-content/uploads/2023/12/cropped-1-5-32x32.png HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:28 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:28 GMT Content-Type: image/png Content-Length: 843 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Dec 2023 15:33:25 GMT ETag: "27a0a11-34b-60c65e354c606" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-05-24 15:47:28 UTC	843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 12 49 44 41 54 58 c3 ed d4 cd 6f 54 55 18 c7 f1 ef 73 5e e6 dc 79 69 a7 14 68 43 a5 ad 0b 69 25 29 18 d3 19 46 49 d0 68 24 24 1a 91 b8 70 d1 b8 70 a7 7f 01 1b fc 0b 5c 89 0a 31 ae 4c 5c 18 93 ba f0 25 ae 0c 6e 30 a1 d2 15 0a 0b 03 22 da 12 07 4b 19 a6 9d b9 9d 7b e7 de c7 85 0d 0b 23 09 2e 5c 31 9f dd 39 8b 27 bf f3 4b 9e 03 03 03 03 03 0f 3b f9 e7 45 63 be 6e 11 ca 93 8f 4e b7 17 17 17 ff f7 00 ee 5f 22 8d 03 27 80 b3 ff 75 d8 8f 9f cd 3b 81 80 48 77 ee b5 65 7d e0 06 86 86 86 d8 3f 33 6b 00 11 91 19 e0 f9 34 cb ce 38 63 2c 90 df 58 f9 fd de b0 66 b3 09 c0 f8 d8 38 df 9d 99 b2 02 25 31 92 5b 63 93 7e 96 bd 2c 70 c2 58 73 32 f2 7e cd 85 08 63 4c d1 Data Ascii: PNGIHDR szzIDATXoTUs^yihCi%)FIh$$pp\1L\%n0"K{#.\19'K;EcnN_"'u;Hwe}?3k48c,Xf8%1[c~,pXs2~cL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49859	142.250.186.65	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:28 UTC	515	OUT	GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:28 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 384 X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:16:18 GMT Expires: Sat, 25 May 2024 15:16:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 1870 ETag: "v113" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:28 UTC	384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifII1GoogleDD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49861	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:28 UTC	1610	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 15687 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565641293&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1716565646551 Content-Type: application/json X-Goog-Event-Time: 1716565646551 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:28 UTC	15687	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 49 6a 74 77 72 49 47 45 4a 72 77 72 77 55 51 72 4e 69 77 42 52 43 43 6f 76 38 53 45 49 6a 6a 72 77 55 51 33 65 6a 2d 45 68 44 6a 72 66 38 53 45 50 72 77 73 41 55 51 6e 75 53 77 42 52 43 57 6c 62 41 46 45 4e 50 67 73 41 55 51 6f 75 69 77 42 52 43 74 34 37 41 46 45 50 61 72 73 41 55 51 38 2d 75 77 42 52 43 41 35 62 41 46 45 4f 50 52 73 41 55 51 5f 49 57 77 42 52 43 67 36 4c 41 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240521.01.00","configInfo":{"appInstallData":"CIjtwrIGEJrwrwUQrNiwBRCCov8SEIjjrwUQ3ej-EhDjrf8SEPrwsAUQnuSwBRCWlbAFENPgsAUQouiwBRCt47AFEParsAUQ8-uwBRCA5bAFEOPRsAUQ_IWwBRCg6LAFEK
2024-05-24 15:47:28 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:28 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:28 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-24 15:47:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49867	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:29 UTC	1337	OUT	GET /wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:30 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:29 GMT Content-Type: text/css Content-Length: 1178681 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:31:54 GMT ETag: "2480432-11fc39-618fb083b0158" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:30 UTC	7648	IN	Data Raw: 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 69 6d 67 2e 65 6d 6f 6a 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2f 2a 21 20 54 68 69 Data Ascii: img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:0 0 !important;padding:0 !important}/*! Thi
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 76 65 72 79 2d Data Ascii: d{background:var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background:var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important}.has-very-
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 31 22 7d 2e 65 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 32 22 7d 2e 65 69 63 6f 6e 2d 73 68 6f 72 74 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 33 22 7d 2e 65 69 63 6f 6e 2d 6e 65 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 34 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 35 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 38 36 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ore{content:"\e881"}.eicon-zoom-in:before{content:"\e882"}.eicon-shortcode:before{content:"\e883"}.eicon-nerd:before{content:"\e884"}.eicon-device-desktop:before{content:"\e885"}.eicon-device-tablet:before{content:"\e886"}.eicon-device-mobile:before{conte
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 39 34 38 22 7d 2e 65 69 63 6f 6e 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 39 22 7d 2e 65 69 63 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 61 22 7d 2e 65 69 63 6f 6e 2d 6d 61 70 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 62 22 7d 2e 65 69 63 6f 6e 2d 6d 65 65 74 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 63 22 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 73 68 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 64 22 7d 2e 65 69 63 6f 6e 2d 74 2d 6c 65 74 74 65 72 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 65 22 7d 2e 65 69 63 6f 6e Data Ascii: 948"}.eicon-cloud-upload:before{content:"\e949"}.eicon-search-bold:before{content:"\e94a"}.eicon-map-pin:before{content:"\e94b"}.eicon-meetup:before{content:"\e94c"}.eicon-slideshow:before{content:"\e94d"}.eicon-t-letter-bold:before{content:"\e94e"}.eicon
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 64 69 73 61 62 6c 65 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: -wrapper .dialog-button:disabled,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button:disabled{background-color:var(--e-a-btn-bg-disabled);color:var(--e-a-btn-color-disabled)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button:not(.elementor-
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 67 6f 2d 70 72 6f 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 67 6f 2d 70 72 6f 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 3a 66 6f 63 75 Data Ascii: s-wrapper .dialog-button.e-accent:hover,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.go-pro:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.go-pro:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-accent:focu
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 28 2d 2d 6f 72 64 65 72 29 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 62 73 6f 6c 75 74 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 3a 77 68 65 72 65 28 2e 65 2d 63 6f 6e 2d 66 75 6c 6c 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 29 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 29 3b 66 6c 65 78 2d 77 72 61 70 3a 76 61 72 28 2d 2d 66 6c 65 78 2d 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 Data Ascii: (--order);align-self:var(--align-self)}.elementor-element.elementor-absolute,.elementor-element.elementor-fixed{z-index:1}.elementor-element:where(.e-con-full,.elementor-widget){flex-direction:var(--flex-direction);flex-wrap:var(--flex-wrap);justify-conte
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 22 5d 7b 77 69 64 74 68 3a 36 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 36 36 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 36 36 22 5d 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 37 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 37 30 22 5d 7b 77 69 64 74 68 3a 37 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 37 35 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 37 35 22 5d 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 65 Data Ascii: "]{width:60%}.elementor-column.elementor-col-66,.elementor-column[data-col="66"]{width:66.666%}.elementor-column.elementor-col-70,.elementor-column[data-col="70"]{width:70%}.elementor-column.elementor-col-75,.elementor-column[data-col="75"]{width:75%}.ele
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 7b 6f 72 64 65 72 3a 33 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c Data Ascii: blet>.elementor-container>:nth-child(8){order:3}.elementor-reverse-tablet>.elementor-container>:nth-child(9){order:2}.elementor-reverse-tablet>.elementor-container>:nth-child(10){order:1}}@media (min-width:768px) and (max-width:-1){.elementor-reverse-tabl
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 33 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 34 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 35 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 35 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 74 61 62 6c 65 74 2d 36 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 36 2c 31 66 72 Data Ascii: ate-columns:repeat(3,1fr)}.elementor-grid-tablet-4 .elementor-grid{grid-template-columns:repeat(4,1fr)}.elementor-grid-tablet-5 .elementor-grid{grid-template-columns:repeat(5,1fr)}.elementor-grid-tablet-6 .elementor-grid{grid-template-columns:repeat(6,1fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49870	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:29 UTC	1538	OUT	GET /wp-content/uploads/2024/01/logo.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:30 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:30 GMT Content-Type: image/webp Content-Length: 17452 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 09 Jan 2024 19:57:50 GMT ETag: "27a0fb1-442c-60e88baaad422" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:30 UTC	7650	IN	Data Raw: 52 49 46 46 24 44 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 a9 01 00 b6 00 00 41 4c 50 48 7e 34 00 00 01 19 85 6d db 36 b0 b3 d0 e8 ff 8f 83 de 10 d1 ff 09 88 08 74 77 db 2f 10 08 34 63 97 c1 42 b0 b6 73 ba 25 38 32 6b 5a e7 ae 53 9f bb e6 18 48 db a6 bd 7f d7 db 7f 0b 11 31 01 a8 98 98 b3 ff 30 b7 33 0f 45 48 6e 1b 49 92 62 fe ff 68 5d c2 72 74 cf 4c 2f b7 88 09 70 20 49 6a dc 6c 4e 30 92 87 15 95 fc c1 77 24 49 8e 6d db b6 15 be 30 c6 04 ac bf 45 df e2 61 b1 b9 18 c0 18 03 17 d9 3d c3 dd 23 2a ab cf fd 19 11 b4 20 49 b2 db 46 43 19 c0 2e 16 40 75 f7 02 a4 1e 71 f7 ef 0f db b6 55 4f a3 ff 3b af 7b ad 3c 44 20 09 94 04 48 a0 40 29 14 a9 61 15 4a 15 ab bb 7b 3b 7d eb ee 3a 3e 53 a1 ee 36 56 1b 6d 87 a9 8c 54 a6 a5 46 dd 29 56 8a 94 20 09 84 78 Data Ascii: RIFF$DWEBPVP8XALPH~4m6tw/4cBs%82kZSH103EHnIbh]rtL/p IjlN0w$Im0Ea=#* IFC.@uqUO;{<D H@)aJ{;}:>S6VmTF)V x
2024-05-24 15:47:30 UTC	8192	IN	Data Raw: 71 61 a6 ff d2 6e d1 17 88 30 8d 63 e7 48 88 27 f2 c6 e3 02 2f 3c 20 9f d3 11 07 8e 4f 0e b1 ae 84 ce e2 ce 97 22 d1 f0 1f 2e 1e 6b 8d d1 8c 1e 4c 6b 92 3f d8 ea 2a bb 7f 60 ca 5c ff cf bf 5e 78 c4 93 9a ae 26 0a 72 15 e2 60 f4 43 47 a6 c4 f6 5e 30 46 59 e7 85 85 91 bb da 83 4b 27 97 54 f3 4c eb 53 b4 06 f6 98 9b b7 b5 d6 2a 3a 10 16 3b 1c b7 2b 57 dd cc 1a 58 eb 7c e1 61 5a 1f fb 69 92 98 39 73 7f b3 48 35 8a 0f 18 7f f8 5e a8 bb 05 ca fd cd 69 f6 1a bc 0b 83 e9 65 47 87 79 b3 e0 23 b1 be a8 98 5b 1b 07 1e e7 e2 40 dc 63 a9 c9 4b 78 dd 86 20 76 20 ff 74 53 a0 21 f5 92 d8 84 04 71 c9 55 c4 71 a7 e8 63 ad 49 cf 47 dd 43 13 e9 11 da d0 2e 40 d8 97 1e e1 f5 69 b9 eb d5 17 25 27 b7 ef f8 a8 30 12 4c 7f c3 18 7f ff 4f 18 c1 d8 dd 1e b9 6e 6a 6d 11 68 61 ca 07 Data Ascii: qan0cH'/< O".kLk?`\^x&r`CG^0FYK'TLS:;+WX\|aZi9sH5^ieGy#[@cKx v tS!qUqcIGC.@i%'0LOnjmha
2024-05-24 15:47:30 UTC	1610	IN	Data Raw: 7c bc a7 99 8b 1d 82 c4 2f b7 ff 3c 35 95 b4 84 23 10 2d ae 67 ce 0a 0c 70 73 c5 5e 49 7c ad b4 47 51 31 0b 8e 2b 54 b4 0a e2 1e 8a 5c 24 84 11 8d 11 3f 39 40 f0 9f d5 c4 3d 76 fc f9 c1 7b 34 d8 6b 52 7d 8f 0d 89 20 51 c0 19 5f 0e 65 b2 40 c6 54 67 e1 da 70 9b 9b 7d 09 30 27 ae 85 a1 58 c8 e8 b5 a9 24 83 77 9f a9 bf 5a a6 5e ed 27 07 14 3a 80 b2 41 89 5e f0 b8 52 1b c1 79 8f ef 9a 81 fb 7f b2 42 ba 94 2f 32 be 8b 06 ae 8d 97 5d 78 cf c8 45 ba a4 3e 26 07 a9 ba 4e 56 77 18 aa 0b c2 19 c9 ab 0d 6f 6a 5a b5 76 d5 ae 7c e1 78 32 1c da 1b 32 2d b1 c0 ec c1 a5 f9 84 63 16 26 e2 a0 2d 96 37 f9 f5 2e 3f 73 fd af 02 b1 1c 86 ef 76 50 91 25 4f 86 ee 4c 18 0f 22 03 75 bf 9b 00 11 30 69 74 3e 28 fd 3f e7 fe 19 73 87 aa fe 73 b0 d0 55 e5 6a ad e2 5f 79 81 15 58 2e c9 Data Ascii: \|/<5#-gps^I\|GQ1+T\$?9@=v{4kR} Q_e@Tgp}0'X$wZ^':A^RyB/2]xE>&NVwojZv\|x22-c&-7.?svP%OL"u0it>(?ssUj_yX.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49868	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:29 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:30 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 24 May 2024 15:47:30 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:30 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:30 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49872	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:31 UTC	1321	OUT	GET /wp-content/litespeed/js/1d4bf4c17bc68ec761951d45626a34b9.js?ver=4a1c2 HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:39 UTC	549	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:37 GMT Content-Type: text/javascript Content-Length: 566003 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 24 May 2024 15:47:28 GMT ETag: "24812c2-8a2f3-6193515b399f4" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:39 UTC	7643	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 3d 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 64 61 79 73 74 61 72 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: window._wpemojiSettings={"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.daystarpayments.com\/wp-inclu
2024-05-24 15:47:39 UTC	8192	IN	Data Raw: 73 2c 22 74 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 5b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 74 79 70 65 22 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 22 6a 51 75 65 72 79 2e 69 73 Data Ascii: s,"type",function(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?f[Object.prototype.toString.call(e)]\|\|"object":typeof e},"type","jQuery.type is deprecated"),c(s,"isFunction",function(e){return"function"==typeof e},"isFunction","jQuery.is
2024-05-24 15:47:39 UTC	8192	IN	Data Raw: 65 6c 66 22 2c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 2c 22 61 6e 64 53 65 6c 66 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 2c 20 75 73 65 20 6a 51 75 65 72 79 2e 66 6e 2e 61 64 64 42 61 63 6b 28 29 22 29 2c 73 2e 44 65 66 65 72 72 65 64 26 26 28 57 3d 73 2e 44 65 66 65 72 72 65 64 2c 5f 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 Data Ascii: elf",s.fn.addBack,"andSelf","jQuery.fn.andSelf() is deprecated and removed, use jQuery.fn.addBack()"),s.Deferred&&(W=s.Deferred,_=[["resolve","done",s.Callbacks("once memory"),s.Callbacks("once memory"),"resolved"],["reject","fail",s.Callbacks("once memor
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 73 45 6e 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 6f 61 64 50 69 78 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 69 72 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 64 61 74 61 29 7b 72 65 74 75 72 6e 21 31 7d 2c 6f 6e 41 64 53 65 6e 73 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 43 6c 69 63 6b 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 70 61 72 61 6d 73 29 7b 7d 2c 6f 6e 57 61 74 63 68 56 69 64 65 6f 3a 66 75 6e 63 74 69 6f 6e 28 70 61 72 61 6d 73 29 7b 7d 2c 6f 6e 43 6f 6d 6d 65 6e 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 46 6f 72 6d 45 Data Ascii: ng=function(){return{isEnabled:function(){},disable:function(){},loadPixel:function(){},fireEvent:function(name,data){return!1},onAdSenseEvent:function(){},onClickEvent:function(params){},onWatchVideo:function(params){},onCommentEvent:function(){},onFormE
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 69 72 65 73 2c 70 61 74 68 3a 27 2f 27 7d 29 7d 65 6c 73 65 7b 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 75 72 6c 3a 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 55 72 6c 2c 64 61 74 61 54 79 70 65 3a 27 6a 73 6f 6e 27 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 27 70 79 73 5f 67 65 74 5f 70 62 69 64 27 7d 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 72 65 73 29 7b 69 66 28 72 65 73 2e 64 61 74 61 26 26 72 65 73 2e 64 61 74 61 2e 70 62 69 64 21 3d 21 31 26 26 6f 70 74 69 6f 6e 73 2e 73 65 6e 64 5f 65 78 74 65 72 6e 61 6c 5f 69 64 29 7b 69 66 28 21 28 6f 70 74 69 6f 6e 73 2e 63 6f 6f 6b 69 65 2e 64 69 73 61 62 6c 65 64 5f 61 6c 6c 5f 63 6f 6f 6b 69 65 7c 7c 6f 70 74 69 6f 6e 73 2e 63 6f 6f 6b 69 65 2e 65 78 74 65 72 6e 61 6c 49 44 5f 64 69 73 61 62 6c 65 64 5f Data Ascii: ires,path:'/'})}else{jQuery.ajax({url:options.ajaxUrl,dataType:'json',data:{action:'pys_get_pbid'},success:function(res){if(res.data&&res.data.pbid!=!1&&options.send_external_id){if(!(options.cookie.disabled_all_cookie\|\|options.cookie.externalID_disabled_
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 61 6e 61 6c 79 74 69 63 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 67 6f 6f 67 6c 65 5f 61 64 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 67 6f 6f 67 6c 65 5f 61 64 73 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 70 69 6e 74 65 72 65 73 74 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 70 69 6e 74 65 72 65 73 74 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3b 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 62 69 6e 67 5f 64 69 73 61 62 6c 65 64 5f 62 79 5f 61 70 69 3d 72 65 73 2e 64 61 74 61 2e 62 69 6e 67 5f 64 69 73 61 62 6c 65 64 Data Ascii: sabled_by_api=res.data.analytics_disabled_by_api;options.gdpr.google_ads_disabled_by_api=res.data.google_ads_disabled_by_api;options.gdpr.pinterest_disabled_by_api=res.data.pinterest_disabled_by_api;options.gdpr.bing_disabled_by_api=res.data.bing_disabled
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 27 2e 63 6e 2d 73 65 74 2d 63 6f 6f 6b 69 65 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 63 6f 6f 6b 69 65 2d 73 65 74 27 29 3d 3d 3d 27 61 63 63 65 70 74 27 29 7b 46 61 63 65 62 6f 6f 6b 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 41 6e 61 6c 79 74 69 63 73 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 50 69 6e 74 65 72 65 73 74 2e 6c 6f 61 64 50 69 78 65 6c 28 29 3b 42 69 6e 67 2e 6c 6f 61 64 50 69 78 65 6c 28 29 7d 65 6c 73 65 7b 46 61 63 65 62 6f 6f 6b 2e 64 69 73 61 62 6c 65 28 29 3b 41 6e 61 6c 79 74 69 63 73 2e 64 69 73 61 62 6c 65 28 29 3b 50 69 6e 74 65 72 65 73 74 2e 64 69 73 61 62 6c 65 28 29 3b 42 69 6e 67 2e 64 69 73 61 62 6c 65 28 29 7d 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 46 69 72 73 74 28 27 Data Ascii: '.cn-set-cookie',function(){if($(this).data('cookie-set')==='accept'){Facebook.loadPixel();Analytics.loadPixel();Pinterest.loadPixel();Bing.loadPixel()}else{Facebook.disable();Analytics.disable();Pinterest.disable();Bing.disable()}});$(document).onFirst('
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 28 29 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 67 64 70 72 2e 63 6f 6e 73 65 6e 74 5f 6d 61 67 69 63 5f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 26 26 74 79 70 65 6f 66 20 43 53 5f 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 21 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 29 7b 66 62 71 28 27 69 6e 69 74 27 2c 70 69 78 65 6c 49 64 29 7d 65 6c 73 65 7b 76 61 72 20 74 65 73 74 5f 70 72 65 66 69 78 3d 43 53 5f 44 61 74 61 2e 74 65 73 74 5f 70 72 65 66 69 78 3b 76 61 72 20 63 73 5f 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 3d 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 63 73 5f 65 6e 61 62 6c 65 64 5f 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 27 2b 74 65 73 74 Data Ascii: advancedMatching();if(options.gdpr.consent_magic_integration_enabled&&typeof CS_Data!=="undefined"){if(!advancedMatching){fbq('init',pixelId)}else{var test_prefix=CS_Data.test_prefix;var cs_advanced_matching=Cookies.get('cs_enabled_advanced_matching'+test
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 66 69 72 65 45 76 65 6e 74 28 6e 61 6d 65 2c 64 61 74 61 2e 70 61 72 61 6d 73 29 7d 65 6c 73 65 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 70 61 72 61 6d 73 29 7b 66 69 72 65 45 76 65 6e 74 28 6e 61 6d 65 2c 70 61 72 61 6d 73 29 7d 2c 64 61 74 61 2e 64 65 6c 61 79 2a 31 30 30 30 2c 6e 61 6d 65 2c 64 61 74 61 2e 70 61 72 61 6d 73 29 7d 0a 72 65 74 75 72 6e 21 30 7d 2c 6f 6e 43 6f 6d 6d 65 6e 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 74 68 69 73 2e 66 69 72 65 45 76 65 6e 74 28 65 76 65 6e 74 2e 6e 61 6d 65 2c 65 76 65 6e 74 29 7d 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 74 68 69 73 2e 66 69 72 65 45 76 65 6e 74 28 65 76 65 6e 74 2e 6e 61 Data Ascii: fireEvent(name,data.params)}else{setTimeout(function(name,params){fireEvent(name,params)},data.delay*1000,name,data.params)}return!0},onCommentEvent:function(event){this.fireEvent(event.name,event)},onDownloadEvent:function(event){this.fireEvent(event.na
2024-05-24 15:47:43 UTC	8192	IN	Data Raw: 6d 65 28 68 72 65 66 29 3b 67 65 74 50 69 78 65 6c 42 79 53 6c 61 67 28 70 69 78 65 6c 73 5b 69 5d 29 2e 6f 6e 44 6f 77 6e 6c 6f 61 64 45 76 65 6e 74 28 65 76 65 6e 74 29 7d 0a 69 73 46 69 72 65 64 3d 21 30 7d 7d 7d 7d 7d 0a 69 66 28 69 73 46 69 72 65 64 29 7b 72 65 74 75 72 6e 7d 7d 7d 29 7d 0a 24 2e 65 61 63 68 28 6f 70 74 69 6f 6e 73 2e 74 72 69 67 67 65 72 45 76 65 6e 74 54 79 70 65 73 2c 66 75 6e 63 74 69 6f 6e 28 74 72 69 67 67 65 72 54 79 70 65 2c 65 76 65 6e 74 73 29 7b 24 2e 65 61 63 68 28 65 76 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 49 64 2c 74 72 69 67 67 65 72 73 29 7b 73 77 69 74 63 68 28 74 72 69 67 67 65 72 54 79 70 65 29 7b 63 61 73 65 20 27 75 72 6c 5f 63 6c 69 63 6b 27 3a 62 72 65 61 6b 3b 63 61 73 65 20 27 63 73 73 5f Data Ascii: me(href);getPixelBySlag(pixels[i]).onDownloadEvent(event)}isFired=!0}}}}}if(isFired){return}}})}$.each(options.triggerEventTypes,function(triggerType,events){$.each(events,function(eventId,triggers){switch(triggerType){case 'url_click':break;case 'css_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49873	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:31 UTC	1104	OUT	GET /wp-content/uploads/2024/01/logo.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:31 UTC	541	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:31 GMT Content-Type: image/webp Content-Length: 17452 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 09 Jan 2024 19:57:50 GMT ETag: "27a0fb1-442c-60e88baaad422" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-05-24 15:47:31 UTC	7651	IN	Data Raw: 52 49 46 46 24 44 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 a9 01 00 b6 00 00 41 4c 50 48 7e 34 00 00 01 19 85 6d db 36 b0 b3 d0 e8 ff 8f 83 de 10 d1 ff 09 88 08 74 77 db 2f 10 08 34 63 97 c1 42 b0 b6 73 ba 25 38 32 6b 5a e7 ae 53 9f bb e6 18 48 db a6 bd 7f d7 db 7f 0b 11 31 01 a8 98 98 b3 ff 30 b7 33 0f 45 48 6e 1b 49 92 62 fe ff 68 5d c2 72 74 cf 4c 2f b7 88 09 70 20 49 6a dc 6c 4e 30 92 87 15 95 fc c1 77 24 49 8e 6d db b6 15 be 30 c6 04 ac bf 45 df e2 61 b1 b9 18 c0 18 03 17 d9 3d c3 dd 23 2a ab cf fd 19 11 b4 20 49 b2 db 46 43 19 c0 2e 16 40 75 f7 02 a4 1e 71 f7 ef 0f db b6 55 4f a3 ff 3b af 7b ad 3c 44 20 09 94 04 48 a0 40 29 14 a9 61 15 4a 15 ab bb 7b 3b 7d eb ee 3a 3e 53 a1 ee 36 56 1b 6d 87 a9 8c 54 a6 a5 46 dd 29 56 8a 94 20 09 84 78 Data Ascii: RIFF$DWEBPVP8XALPH~4m6tw/4cBs%82kZSH103EHnIbh]rtL/p IjlN0w$Im0Ea=#* IFC.@uqUO;{<D H@)aJ{;}:>S6VmTF)V x
2024-05-24 15:47:31 UTC	8192	IN	Data Raw: 61 a6 ff d2 6e d1 17 88 30 8d 63 e7 48 88 27 f2 c6 e3 02 2f 3c 20 9f d3 11 07 8e 4f 0e b1 ae 84 ce e2 ce 97 22 d1 f0 1f 2e 1e 6b 8d d1 8c 1e 4c 6b 92 3f d8 ea 2a bb 7f 60 ca 5c ff cf bf 5e 78 c4 93 9a ae 26 0a 72 15 e2 60 f4 43 47 a6 c4 f6 5e 30 46 59 e7 85 85 91 bb da 83 4b 27 97 54 f3 4c eb 53 b4 06 f6 98 9b b7 b5 d6 2a 3a 10 16 3b 1c b7 2b 57 dd cc 1a 58 eb 7c e1 61 5a 1f fb 69 92 98 39 73 7f b3 48 35 8a 0f 18 7f f8 5e a8 bb 05 ca fd cd 69 f6 1a bc 0b 83 e9 65 47 87 79 b3 e0 23 b1 be a8 98 5b 1b 07 1e e7 e2 40 dc 63 a9 c9 4b 78 dd 86 20 76 20 ff 74 53 a0 21 f5 92 d8 84 04 71 c9 55 c4 71 a7 e8 63 ad 49 cf 47 dd 43 13 e9 11 da d0 2e 40 d8 97 1e e1 f5 69 b9 eb d5 17 25 27 b7 ef f8 a8 30 12 4c 7f c3 18 7f ff 4f 18 c1 d8 dd 1e b9 6e 6a 6d 11 68 61 ca 07 8e Data Ascii: an0cH'/< O".kLk?`\^x&r`CG^0FYK'TLS:;+WX\|aZi9sH5^ieGy#[@cKx v tS!qUqcIGC.@i%'0LOnjmha
2024-05-24 15:47:31 UTC	1609	IN	Data Raw: bc a7 99 8b 1d 82 c4 2f b7 ff 3c 35 95 b4 84 23 10 2d ae 67 ce 0a 0c 70 73 c5 5e 49 7c ad b4 47 51 31 0b 8e 2b 54 b4 0a e2 1e 8a 5c 24 84 11 8d 11 3f 39 40 f0 9f d5 c4 3d 76 fc f9 c1 7b 34 d8 6b 52 7d 8f 0d 89 20 51 c0 19 5f 0e 65 b2 40 c6 54 67 e1 da 70 9b 9b 7d 09 30 27 ae 85 a1 58 c8 e8 b5 a9 24 83 77 9f a9 bf 5a a6 5e ed 27 07 14 3a 80 b2 41 89 5e f0 b8 52 1b c1 79 8f ef 9a 81 fb 7f b2 42 ba 94 2f 32 be 8b 06 ae 8d 97 5d 78 cf c8 45 ba a4 3e 26 07 a9 ba 4e 56 77 18 aa 0b c2 19 c9 ab 0d 6f 6a 5a b5 76 d5 ae 7c e1 78 32 1c da 1b 32 2d b1 c0 ec c1 a5 f9 84 63 16 26 e2 a0 2d 96 37 f9 f5 2e 3f 73 fd af 02 b1 1c 86 ef 76 50 91 25 4f 86 ee 4c 18 0f 22 03 75 bf 9b 00 11 30 69 74 3e 28 fd 3f e7 fe 19 73 87 aa fe 73 b0 d0 55 e5 6a ad e2 5f 79 81 15 58 2e c9 c0 Data Ascii: /<5#-gps^I\|GQ1+T\$?9@=v{4kR} Q_e@Tgp}0'X$wZ^':A^RyB/2]xE>&NVwojZv\|x22-c&-7.?svP%OL"u0it>(?ssUj_yX.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49877	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:32 UTC	1417	OUT	GET /wp-content/uploads/2023/11/bg3.png HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:32 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:32 GMT Content-Type: image/png Content-Length: 87280 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 11 Nov 2023 18:58:12 GMT ETag: "27a15f5-154f0-609e504be3900" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:32 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 a0 08 06 00 00 00 4b de 7a ca 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 54 a2 49 44 41 54 78 9c ec fd dd 8f 5c 49 b6 e5 89 99 7b 7c b8 7b 04 99 4c 92 41 32 48 46 90 55 ba e8 db e8 db 5d 83 41 43 68 60 20 08 42 03 c2 3c 0c 1a 10 84 41 63 d0 c0 48 68 34 46 4f 7a 93 46 90 04 41 6a a0 d1 0f 92 a0 7f 72 ee cd 9b 55 95 55 59 99 4c 32 dc 3d 3e 5d 0f 8c 75 e2 e7 2b f6 71 f7 20 99 59 75 e3 ae 05 04 22 c2 fd 1c b3 6d db b6 6d b3 b3 97 6d 3b 83 c5 62 d1 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 7f f8 18 fe b9 05 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 be 0c 42 00 07 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 Data Ascii: PNGIHDRKzpHYsTIDATx\I{\|{LA2HFU]ACh` B<AcHh4FOzFAjrUUYL2=>]u+q Yu"mmm;b BAAAAAAA
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 27 93 cf e2 22 3e 7c f8 d0 9d 24 77 7a 7a 7a 75 72 72 f2 7f 9b 7d 64 94 3f b2 ca b3 d9 c9 74 3a 3d b9 fe 7f 36 9f cf e7 27 27 27 27 b3 d9 ec e4 e2 e2 e2 fc f2 63 f6 f3 15 fc f1 d5 60 30 b8 38 3f 3f ff 8f ac 4f fe 67 dd f3 e1 75 19 e5 e7 8e 4d e7 b1 9f 03 9f 52 36 9f 2d aa 39 a1 6f 2d 5d d5 5b 3d 3b b2 1e 8f 8d 79 2c 89 1b 0f 19 57 f1 e7 f3 d6 6e 62 c2 ad 2d 6f 42 f4 e7 78 81 b1 26 b6 69 d3 67 25 d7 c7 97 46 55 ee ad 0c e0 b3 b3 b3 5b 41 46 5f 3c 73 22 75 82 d0 15 53 19 7e 65 0c 7d 81 20 05 3c f8 40 a8 72 b5 70 d1 8f 1e 12 79 64 9e 2f e8 b8 f8 6f ed 66 b1 b3 2a 38 25 59 9c cc 96 51 7a b6 a8 16 7f 1c fc 1e 0c 91 e1 f5 3d 78 7b b6 00 bf f3 ff b9 28 54 1d 0c e0 aa 2e 2e 66 a5 4f be eb 8b 01 5b d5 c1 40 b8 07 5a 48 ae 68 01 c9 2c 9f c5 62 d1 65 6c e9 e1 c9 df Data Ascii: '">\|$wzzzurr}d?t:=6''''c`08??OguMR6-9o-][=;y,Wnb-oBx&ig%FU[AF_<s"uS~e} <@rpyd/of*8%YQz=x{(T..fO[@ZHh,bel
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: ef 4e 4e 4e 4e 16 8b c5 d5 70 38 1c 5e af 53 fe af 8c 2b 31 9e 50 71 4d fe 1c fd 4b a2 6f 1d b7 49 6c 9f 71 cb ea 7b ad 83 98 50 d4 da f2 89 9d 8c 01 dc 3a 02 da 05 f5 87 56 65 63 28 e8 a3 a0 11 89 3e 0a 52 35 80 41 72 92 14 0c a4 69 01 a9 07 09 06 58 3c 78 52 65 8a f5 05 c2 aa 00 8f 82 96 3a 06 92 01 42 b5 cf 03 3d 0c 2c 29 98 c1 a3 45 25 a7 07 5b 18 c8 63 80 48 b2 8b b9 f7 23 d7 a4 07 05 1d 98 e6 5e 3d ec aa a3 19 30 63 5f 70 d1 ef 7d 4c 59 f9 0e 64 0f 6e 28 c0 c4 9d c3 55 10 b4 4f 3e 5e a3 80 88 88 05 d9 97 be 57 fb 19 8c 63 40 5f 81 dd 55 84 a0 fe 56 5d 7c a7 95 7e 64 8f 0c 68 57 0f 32 ec 1b ea 98 75 4b 3f 0a 92 52 b7 0c fe f0 28 6e ca d8 07 f6 e1 e5 e5 65 67 33 7c 60 57 fd 7c a8 f3 e0 12 f5 a2 f6 70 6c 56 f5 51 c6 75 0f 5a 7e 8f ea 21 39 c0 fa fa c6 Data Ascii: NNNNp8^S+1PqMKoIlq{P:Vec(>R5AriX<xRe:B=,)E%[cH#^=0c_p}LYdn(UO>^Wc@_UV]\|~dhW2uK?R(neg3\|`W\|plVQuZ~!9
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 6f bf fd e6 bb ef be fb dd e9 e9 e9 e9 f5 b3 c6 d5 62 b1 f8 7f 28 ee c4 e7 83 ea d9 55 58 22 80 15 80 14 a1 a9 c2 3c 6b ca 1f b0 fd a1 d8 2b e6 75 0a 64 32 f0 c8 ef ce ce ce ba 23 36 f5 39 ef 57 b0 87 01 57 06 5c f8 fe 47 29 61 3e 9f 77 19 2e 0c 3c 79 c0 c9 83 4e 1e c8 63 10 5a 0f 64 0c 28 eb 7a 06 3b 25 87 07 d8 78 bd 77 96 ee 11 bc 03 3d 60 d9 da cd b1 4e 92 4b 0f 8b 3c c6 90 44 3c 83 c3 0c c4 aa 3e 05 42 fd c1 b0 7a 88 ae 1e 94 f8 99 82 cd ca 40 63 00 44 99 d8 0a 6e 33 f8 ba aa 3e ea c4 49 10 d5 c7 ec 50 3e 70 0e 87 c3 2e c0 aa 0c 4c 96 5b 05 58 d4 5f fc 5b c4 b5 1f 6b ad 7e 51 3d 55 00 d6 e1 81 27 c9 ad 07 64 66 ae 51 7f 3c 56 9a 0f f9 7d 0f e2 55 90 97 fd 2d 1d b5 b6 9c d9 a2 be f1 63 da ab b2 37 09 64 f1 9e 4f 09 70 52 0f 5e 9e da e4 9b 11 aa fb fb Data Ascii: ob(UX"<k+ud2#69WW\G)a>w.<yNcZd(z;%xw=`NK<D<>Bz@cDn3>IP>p.L[X_[k~Q=U'dfQ<V}U-c7dOpR^
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: fe bd 7f ee f2 f5 f9 67 fd 2d 1b 93 1f 62 c6 bc cf 09 55 dd ac 4b be 94 9b 4f b9 49 92 f5 fa fd 2a 9f be de ed a8 9a b3 bd 8d 7d 73 5e a5 8b 4d b0 e9 da e4 4b dd f7 a9 a8 d6 5e f2 33 9c 37 7c a3 4f 6b b7 df 0f cc e7 5c 7f de 5a d5 ae ca 5f 7c 4e 5b aa 39 b3 af 6e da 98 fc 71 df 06 6b 2f ef 2e df 6d 8a 6a 6d 4f df c5 d7 36 7c 8a 6d ad d2 bf ff bf ae fc 55 e3 fc ae 32 f4 c9 e4 6b 04 c1 fd d5 a6 32 2c 16 8b 7f 35 18 0c b6 16 8b 45 9b 4c 26 e3 97 2f 5f 1e 2b 63 17 99 bb af 5e bc 78 71 f8 f2 e5 cb fd e7 cf 9f 77 af 6c 08 82 20 08 82 20 08 82 e0 1f 1f 96 08 60 05 26 15 b0 53 96 17 33 1c 98 51 d0 da 72 36 1f 03 69 1e 48 aa 02 d8 d5 43 90 67 0d 29 68 c8 ec 61 27 b3 aa 07 27 06 c6 15 a4 76 52 59 c1 01 66 7f 30 b8 c8 6b 3d f8 a7 07 6c cf 48 62 50 df e5 52 00 57 d9 Data Ascii: g-bUKOI*}s^MK^37\|Ok\Z_\|N[9nqk/.mjmO6\|mU2k2,5EL&/_+c^xqwl `&S3Qr6iHCg)ha''vRYf0k=lHbPRW
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 2a 2a 5b f6 75 7a 7a da d9 21 ed 9d 27 28 0c 06 83 b6 bb bb db 65 75 d3 17 d0 1e a6 d3 e9 ad f7 fe 6a d3 9d 48 e2 f3 f3 f3 6e 3d 34 18 dc 64 fe 56 ef bb 25 d4 2e ae 1f 64 4b cc 1e a6 7f 73 5f a9 7e e1 46 36 e9 8e c4 71 1f e8 0b 7c ac d3 be 7c ae 12 49 2c 12 9c c7 4c 57 47 56 57 f3 bc af 81 b9 8e d0 86 09 df 98 41 7f 45 dd 6d 4a 42 f9 26 aa ca bf fb 67 44 35 47 f8 dc 21 dd 53 de 3e 79 bc 9c be eb fa be df e4 bb 55 6b 86 ea 5e f7 cf ae 0b fa 4f 5f 07 f2 fb 55 1b 94 74 bf 9f ae e3 19 9a 95 dd 10 f2 5b 9c 8f 56 c1 e5 e8 6b e3 26 eb 9d 75 a0 5d fc 12 f8 12 f5 f9 58 a2 cf 53 1f f3 1a 7d be 69 d9 2a f3 e7 86 64 d5 9a 94 27 09 10 f4 7b 36 5e 45 ee b6 67 cf 9e 1d be 7e fd fa e8 d5 ab 57 47 af 5f bf 3e 7e fd fa f5 9b 97 2f 5f 26 73 37 08 82 20 08 82 20 08 82 e0 2f Data Ascii: *[uzz!'(eujHn=4dV%.dKs_~F6q\|\|I,LWGVWAEmJB&gD5G!S>yUk^O_Ut[Vk&u]XS}id'{6^Eg~WG_>~/_&s7 /
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: f7 f5 a5 d0 37 1f aa 1e 27 f1 25 7b 45 22 ca de 59 ae fb 60 da a7 64 f4 79 56 36 e6 f3 bb af a1 2b df 5e cd e9 5c 7f b4 b6 fc 5e 56 8d 2f 1d b3 4d 7b a0 6f e4 ff 0e f6 1f af ef 83 cb 4b 1b e1 26 40 ce 41 ee 83 d9 4f 7d 73 70 df 7c ed 1b 0e 56 e9 93 3a f4 cf 2a 3d 54 75 ae bb cf e5 5d 25 07 af ed eb 0b ff 7b 9d 4c 55 d9 f4 a1 ab d6 8e 7d 6b 0c 81 27 43 b9 2f 59 25 67 5f db 36 68 cb 3f 69 ad b5 9d 9d 9d 11 8f 64 7e fb f6 ed af 5f bf 7e fd e6 3a 73 f7 d5 db b7 6f 73 34 73 10 04 41 10 04 41 10 04 41 10 18 96 08 60 1d c7 ca a0 10 83 98 9e cd e1 04 19 03 01 bc c7 1f f0 19 b8 f3 e0 bb 07 a4 18 80 52 10 97 e5 b6 76 73 14 b2 02 4b 0c ea 29 58 ca ec 51 91 6d 24 97 18 68 55 f9 aa 5f 50 9b f9 ee 46 7d 2e 79 15 fc 55 20 b8 b5 b6 24 33 cb a1 be 3c e0 25 dd 8b 50 25 e9 Data Ascii: 7'%{E"Y`dyV6+^\^V/M{oK&@AO}sp\|V:*=Tu]%{LU}k'C/Y%g_6h?id~_~:sos4sAAA`RvsK)XQm$hU_PF}.yU $3<%P%
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 95 2c d5 35 3e d6 39 37 78 7d 7d 50 39 7c 67 39 7d b5 af 29 56 41 65 70 e3 58 6b cb 7e dd db 40 1d 68 a3 18 fd 87 cf 39 68 d3 db d6 5a db dd dd dd 7d fd fa 75 f7 be dd 5f fd ea 57 39 9a 39 08 82 20 08 82 20 08 82 20 08 82 7f d0 58 22 80 95 a5 a3 60 1c b3 3f 45 32 90 20 a8 48 3e fd cd cf 18 6c 21 89 c4 2c 01 05 2e 2b 72 ca c1 80 a1 02 3c 9e 65 25 82 8e a4 9e 07 b7 14 20 14 d8 26 0f 76 31 63 d1 89 61 06 ca 44 98 88 a8 60 e0 d5 8f 04 66 3d 3c 0e 93 01 7b ea 80 6d 54 db 78 b4 29 f5 a9 32 59 be 02 a9 aa 8b 04 96 74 29 02 58 d9 48 d2 91 97 cd 23 66 25 1b b3 57 3d 43 cd 49 4f e9 41 ef 36 66 a0 4f 6d 26 61 40 42 83 e4 88 ea 52 06 93 82 c7 ec 7b 12 58 22 d4 48 16 aa ff 44 aa 2a d0 ce 00 36 7f eb 5e 12 1c 24 46 f9 de 57 05 7a 19 74 66 db 2a a2 80 3a 57 20 9d a4 17 Data Ascii: ,5>97x}}P9\|g9})VAepXk~@h9hZ}u_W99 X"`?E2 H>l!,.+r<e% &v1caD`f=<{mTx)2Yt)XH#f%W=CIOA6fOm&a@BR{X"HD6^$FWztf:W
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 0d f7 93 e7 2f a7 63 66 7f 4d 5b b1 8a 38 53 e8 b2 0f 72 a0 0b a7 cb ae d7 53 f6 79 ca 76 d4 29 e3 fb da 26 c7 b4 3e 83 b7 ce 7a 50 03 c8 aa 86 7b dc 6e 7e 36 e7 18 83 af df 0b e8 eb f5 36 cb 49 a0 cc a0 35 61 6a de 9b be 91 76 09 7e 86 c7 37 6d 97 76 60 bf 61 9f e6 77 61 fd 0c db 81 55 ca 5c 66 b6 87 d7 a5 ec 33 9f 7b ca ed e6 74 d0 fc ee 49 5f e3 be a6 1d b3 bd 9c 71 20 a1 2f df 13 39 ee 7d d5 96 d9 df 04 c9 79 e6 72 06 61 b4 d6 36 a6 33 66 08 ca 8a ea be 76 7a 7a 7a ea 66 27 a8 83 89 f8 dd 90 e3 c6 6b 32 07 c4 30 2c 4e bb d5 47 56 e4 f1 06 69 ef da 47 53 9d 9d 6d 7e 78 78 68 77 77 77 dd f7 0d fb 43 0d b6 73 ad 7c 7a 7a ea 66 5d e0 ef 08 1c 0c c0 e7 c9 73 00 00 67 4a 48 65 74 be 23 ef ef ef 37 a6 87 ae e7 62 5f b8 9a 63 bd 5a ad da ed ed 6d 5b ad 56 1b Data Ascii: /cfM[8SrSyv)&>zP{n~66I5ajv~7mv`awaU\f3{tI_q /9}yra63fvzzzf'k20,NGViGSm~xxhwwwCs\|zzf]sgJHet#7b_cZm[V
2024-05-24 15:47:32 UTC	8192	IN	Data Raw: 7f cf 40 87 6c 0b 03 c2 bc 27 41 7f ed 3b 3c ff 58 35 cb 6b 26 bf 77 18 6c e7 ff 9c 36 9f 15 f7 d9 e6 7c 9f b1 0f b3 6f d5 ef 3b 06 8f f5 58 a6 0f f4 9d 7b 69 ab ec 53 ae d3 f3 f9 7c e3 1a c4 b6 e5 f6 66 3b 26 93 c9 c6 cf d2 3e 99 f2 9d d7 34 b6 17 af c9 1c 60 c0 ca fd bc 97 cb 4b bb a5 2d 9f 9e 9e ba 6b 67 6b 2f a1 7a fa 51 1d 3c 93 75 64 d0 55 96 57 ab 88 b9 0d 09 7e f3 1d 97 e0 37 eb a9 bf 0f f4 fd de 91 bf b3 5d 1c ac 96 36 4e c0 9e 63 33 1e 8f ff f7 a7 a7 a7 f9 e3 e3 e3 d3 78 3c 1e 9e 9e 9e 9e 5f 5d 5d 5d 7f fc f8 f1 f2 fa fa fa e6 fc fc fc e2 fa fa fa f3 f9 f9 f9 c5 d5 d5 d5 97 8b 8b 8b d1 f9 f9 f9 c6 ef 0a 92 24 49 92 24 49 92 f4 ef 69 f4 d6 0b bc 19 ca 00 b2 be 5e 6f b0 b2 42 2c 21 42 9d ae b9 b5 d7 d3 22 a7 aa 27 37 94 79 43 96 d5 4e b9 c9 db 17 Data Ascii: @l'A;<X5k&wl6\|o;X{iS\|f;&>4`K-kgk/zQ<udUW~7]6Nc3x<_]]]$I$Ii^oB,!B"'7yCN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49876	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:32 UTC	1421	OUT	GET /wp-content/uploads/2024/01/bg-1-1.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:44 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:41 GMT Content-Type: image/webp Content-Length: 201054 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 09 Jan 2024 21:00:48 GMT ETag: "27a0fc3-3115e-60e899bd7a6fb" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:44 UTC	7648	IN	Data Raw: 52 49 46 46 56 11 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 05 00 2b 03 00 41 4c 50 48 ff b0 02 00 01 19 48 6e 1b 49 92 a0 ee 99 d1 00 ea ff 7f 38 b3 73 99 e5 1e d1 ff 09 e0 f0 37 4f 78 f2 33 1f fc 83 fd 9c c7 17 de 51 9c 3e 14 7d d3 e0 e9 72 44 ca bc 58 b6 7d ee e0 a9 d7 01 0f 22 b0 e3 a7 8b 28 cb 2b ae 03 bc 00 5e 3b 2e 73 56 07 97 39 e8 bc 5c 67 59 70 75 e9 d3 bb 4b b7 ab 9f 11 67 4a 4d 0b 94 6a 50 ab 37 95 ef 9b 53 d8 68 1b 44 2c ea 00 43 3e aa 99 c5 f9 8d c6 2b 8f 49 5d 7a 64 33 73 4a 1b cd e2 30 6c db 36 8c 65 e7 ff a7 93 a6 dd 2e 88 88 09 d0 63 66 9f 93 f0 de c7 cc 75 e7 7d 96 55 52 65 f2 36 e7 da c6 97 39 d6 43 56 e9 f5 3a 8b 8c f5 34 95 24 3e 66 ac eb 6c 6f b2 ca ec c4 3b 4f d7 b6 9d f9 94 5b db ce e5 b3 97 43 9c df 7c ec fe 8d 1f Data Ascii: RIFFVWEBPVP8X+ALPHHnI8s7Ox3Q>}rDX}"(+^;.sV9\gYpuKgJMjP7ShD,C>+I]zd3sJ0l6e.cfu}URe69CV:4$>flo;O[C\|
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: b0 88 06 e1 fd 30 f9 17 79 8b ee 57 63 e4 1a 18 04 00 44 fb 57 73 62 c5 11 63 9f 57 79 ba 8e ce b9 19 5b 80 56 60 43 11 c8 0e a6 34 dc da 1f ff 27 3c 35 ad 11 79 67 a8 1a 86 81 6b 69 fb b4 76 40 55 78 2d fc a5 a6 04 3a 0b 13 43 19 2e 28 37 ed 57 1a 4b d6 44 f5 d8 d5 c3 9c 60 ef 7b 2f 48 7d 11 5e 89 d9 8f b8 68 39 45 ee da 3a 84 5b b4 e7 c2 cb dc 9f 19 41 df c4 30 80 24 16 1e ea 35 50 bc b4 c8 18 e1 12 38 a6 1d 5f d1 40 4c fc fa 03 ee 98 88 70 f4 80 fc df 7a ab 6a f7 e3 56 f2 15 c1 dc a4 09 98 17 45 53 80 41 8d 43 f5 5f f3 b5 7e f2 54 b7 ee e4 c0 8b ae b7 81 1b 8b c3 72 f3 32 70 ec bf f9 32 8a 40 56 ea b4 92 0a 57 19 b1 21 02 5a e8 0e 1c 1c c4 9a df 80 d3 29 3b 26 13 90 16 c6 d1 f2 71 03 53 73 10 e0 fe 6d 1a 62 31 1c c6 2d 90 38 45 ea b9 b4 f0 ce c6 45 4a Data Ascii: 0yWcDWsbcWy[V`C4'<5ygkiv@Ux-:C.(7WKD`{/H}^h9E:[A0$5P8_@LpzjVESAC_~Tr2p2@VW!Z);&qSsmb1-8EEJ
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: 51 d5 bf a1 8b d7 83 58 dc 8d de cb ac 1e 2c 72 e5 aa 3a 78 cd 62 c9 65 e9 50 5d 58 60 6d ef d9 52 0b e7 ea 28 22 90 40 54 78 0a a9 a4 f4 39 a7 92 61 a4 45 cb 5c f2 44 47 16 67 12 10 5b 7e c8 21 2c bc 72 6f e4 35 1c ae 8a 03 2c 91 26 24 d7 07 ab 48 c7 eb 3a 95 5f 27 32 8a fc c3 d5 87 84 e1 8c 72 0c e8 30 4b 34 da 69 51 ac bc 5e db cf cc ac b6 22 54 86 6d ce ee 05 b9 5f fe 08 da ca d2 da d6 96 05 69 4a 51 9d f2 d7 5f 3e 4d f0 b4 d7 5d 2b 46 fe d2 87 00 66 f3 02 43 da 3a ef 17 9b 67 40 37 38 04 b3 6c 1a a7 8a 15 4f 01 88 fc dc 1d 09 18 55 57 69 eb ff 38 59 02 5a 46 41 4b a1 27 6c 13 88 8a 05 5b b0 5e fe ba 0f cf e4 2c f7 b2 65 fd b8 2e ca a5 7a fe cb 7c 73 f3 a9 90 53 ac c5 a7 2a d1 72 61 28 30 c6 ce cb f1 94 de fa f1 33 9c ce eb d0 eb 8c b7 65 ec 9f a0 17 Data Ascii: QX,r:xbeP]X`mR("@Tx9aE\DGg[~!,ro5,&$H:_'2r0K4iQ^"Tm_iJQ_>M]+FfC:g@78lOUWi8YZFAK'l[^,e.z\|sS*ra(03e
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: 64 4a 76 78 33 92 66 8a 14 da 16 57 ac e0 dd 26 3d f5 3d be da 27 90 c2 5e 5a d3 e2 6d 70 cf 88 ff 8d 7d 1c 4a 02 4c 20 1a 25 aa b1 49 c4 2b cb 88 b1 04 34 18 e5 59 62 47 41 73 40 3d d4 27 5e 78 d0 bb 58 59 fc 9d 31 3a 09 d8 0d 13 6e 2b c8 78 11 9f 5e 13 d4 f4 33 19 f8 35 62 9a 57 a0 e6 d7 a3 81 7d 25 55 e2 2b 22 0c 44 89 47 ba d9 01 79 d1 3a 0b 20 d1 fb 3e 4d 85 c5 96 31 4a d8 4b b8 5c a2 49 3b e9 2f 2d 7c 3b e6 bf ff 3e d6 f3 9f 6f 58 ff 4d fc 62 b7 92 91 a2 d0 2d 18 51 a2 06 32 78 ba 9d a1 7b c0 63 54 43 09 2d aa e9 70 98 a6 82 ff db 4f 79 31 06 a3 cf ab 38 b5 ad 42 58 cf 85 85 93 85 14 c3 55 0e e7 94 03 e4 66 2a dd ec 54 ae b1 e8 36 3d b2 12 54 e0 cf af 84 23 4d ab c5 a2 f6 7f 8c a1 4d 38 e0 bb ef 28 ff 47 15 d8 6b dc e3 80 9f 85 8a c7 67 5e ea d3 5f Data Ascii: dJvx3fW&=='^Zmp}JL %I+4YbGAs@='^xXY1:n+x^35bW}%U+"DGy: >M1JK\I;/-\|;>oXMb-Q2x{cTC-pOy18BXUf*T6=T#MM8(Gkg^_
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: 18 47 60 16 b6 84 6f 59 6f aa ef 27 1f e6 da 0a 29 98 8a 54 de f8 89 dd 23 4a 76 e5 5b bc 6f 2f 1d a4 c0 44 be de 6a af 5e 0f 3d d6 4f 3f 22 42 55 5b 10 61 db b9 70 fe b0 c2 be e7 74 12 a0 f6 0a b2 60 eb a7 dc 05 49 3e d8 09 10 df 62 12 80 0d 7f 00 c9 6e 4d 7e df 55 5a 5c 61 e4 7e 49 79 51 0f 31 86 70 b6 5a 61 45 99 69 ec 7a 39 c1 61 d7 a2 fa f5 ae 2e 1c 13 c3 38 9e 14 f2 bb 22 ee c9 38 81 39 33 27 4b 02 52 a9 93 44 3d 75 1c b0 93 7b e6 20 a4 18 26 4e b5 35 4d 41 fc de 10 a5 3a 99 4a f4 5d 07 95 5a 4e 05 e6 80 38 f7 f2 7c 81 68 85 2b 29 21 51 32 b0 f6 2c 8e 42 a5 ad 00 9a 85 ad eb 09 73 3e 4f 84 6c 9f 47 50 01 5c 3d e8 aa a6 1a 5c dc 3a f8 2f 43 b0 e0 30 e0 de 72 ff d7 9c 36 9e 36 93 72 81 2f e1 af fe bb 31 62 85 7c 37 21 a9 f0 b6 76 b9 01 6a 6e 00 b6 7c Data Ascii: G`oYo')T#Jv[o/Dj^=O?"BU[apt`I>bnM~UZ\a~IyQ1pZaEiz9a.8"893'KRD=u{ &N5MA:J]ZN8\|h+)!Q2,Bs>OlGP\=\:/C0r66r/1b\|7!vjn\|
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: 67 a4 f4 4a 4f 4b 9f 27 f6 6f 69 6f ff dd 7e 1f b6 ed fe ca 96 08 59 37 6c 2f 4b 93 02 e7 1e b9 6f 2e be 5b d3 54 13 41 3b 96 71 5a 3f 98 9f 13 08 96 85 5f 1a 23 13 e3 ad 41 f7 ff 0a d6 7d 2d 92 df 0e f6 e2 e6 67 f2 dc 43 cf ba c0 07 ea c0 b9 75 b4 af 66 5d 17 56 ce 33 e5 b7 29 ab aa b4 f4 6b 19 bc ab 3a d7 44 bf d3 fb a8 e7 66 7c 09 55 e8 4d 60 1d a1 22 73 38 51 00 9a 34 ce d1 1e 86 2a 97 14 7e 18 2b e9 19 ca 15 8b b6 8c a5 9b 82 51 9e 05 1a bc aa 84 84 4d a9 4e 36 38 cb 91 d0 01 94 50 43 84 33 c6 84 2a 5d 1a 9a 72 82 a9 67 25 b5 38 ef 3b 05 31 78 5a d9 10 3b 58 cf 67 19 25 16 84 38 7a 74 09 36 0c c9 09 c7 29 12 ed 1f 00 af 15 88 13 4a 7a 66 33 42 2b 48 2f be 0d 5e 19 aa 6d a8 1b b7 cb 13 92 a0 1f fe 67 7b de fd 99 81 91 21 07 50 39 93 4b 69 62 d6 f5 17 Data Ascii: gJOK'oio~Y7l/Ko.[TA;qZ?_#A}-gCuf]V3)k:Df\|UM`"s8Q4~+QMN68PC3]rg%8;1xZ;Xg%8zt6)Jzf3B+H/^mg{!P9Kib
2024-05-24 15:47:44 UTC	8192	IN	Data Raw: 72 31 f2 8f b6 2e 44 a4 98 0f a4 93 f4 0a ad ee 6c 00 53 61 d2 07 26 92 ef d5 79 61 92 da d1 d5 1a ef b2 03 e6 94 ec 02 91 f9 96 b7 f5 26 78 01 85 e6 e7 b3 df d4 d2 8f 11 2c 1e 6f d1 18 15 f8 54 07 0b 59 19 2c 25 1c e3 4d bc 01 63 4a e4 01 be a0 e8 a0 23 f6 09 8f 38 cd d3 29 77 92 84 ce 02 61 bd df 97 5a 8c 02 c8 c4 bf e2 d6 2d fd 9a 20 d2 4c 09 ea 54 af 04 fc d2 00 d4 56 3d 65 c2 48 de f8 31 de 0b bb 7e 6d 60 4d 1d a2 66 a4 13 ba 01 51 4c 39 3b 93 01 b2 c7 27 29 f8 38 16 af f7 e3 cf a9 c4 19 a8 bb 8a f3 7b 5d 04 9d 1a cb f2 0d 32 c7 a6 57 78 88 86 48 01 a4 74 6b f1 b9 bd ff ee 09 57 a9 af fa d2 52 b2 92 24 a5 4d cc b8 f8 73 c9 42 20 59 89 5f 8e 4a 08 18 bc 28 a1 d3 43 90 c1 30 73 80 c0 84 e5 0c be 9f c8 05 96 05 41 32 2f c0 47 b9 c8 28 f9 23 0b 3f 56 a0 Data Ascii: r1.DlSa&ya&x,oTY,%McJ#8)waZ- LTV=eH1~m`MfQL9;')8{]2WxHtkWR$MsB Y_J(C0sA2/G(#?V
2024-05-24 15:47:45 UTC	8192	IN	Data Raw: bf d3 04 63 bd e4 b5 18 20 4f 3a 8c fa dd ed 7c 4c 2b 13 08 7e 60 0d 51 54 62 e3 81 3b 60 9a 16 6c 0d 58 e0 e9 e3 2e 59 20 3e 9c 69 ce 31 92 90 d9 b8 fd 29 f5 a5 06 e1 f1 b7 f5 ff f0 60 a7 f2 33 f5 46 2a 74 ed df d2 14 77 03 d6 3e b2 9c c3 85 53 2e 27 dc de d2 81 0c 28 8b 9f e3 f8 b8 43 0b 60 68 fd 90 cb 63 20 b4 cc 25 e5 14 e8 aa 14 e5 38 9b 20 f7 fe eb ea 49 38 e7 b2 ce 54 49 39 46 9c 8b 91 73 a3 72 4f 95 94 40 0e 1e 45 22 01 aa ee 68 8e 30 a6 51 44 e0 67 d5 a4 a0 44 2e af 8a 73 11 03 34 55 f0 28 78 01 be 40 73 5e c5 97 0b c0 6c d8 12 6a 48 24 59 e6 15 ba 52 01 a8 e4 33 4b 51 9c 88 73 e9 6a 01 a1 d5 12 80 a4 b3 5b 2c 89 30 5c b5 08 87 73 69 3e cf fb c4 ab a4 40 ec cf 4a c9 f7 4b 95 9e 4f bd 35 a4 18 c8 f3 11 3e 53 5a bd 2c d4 bb fb 7d 48 fb f1 e0 3e 7f Data Ascii: c O:\|L+~`QTb;`lX.Y >i1)`3F*tw>S.'(C`hc %8 I8TI9FsrO@E"h0QDgD.s4U(x@s^ljH$YR3KQsj[,0\si>@JKO5>SZ,}H>
2024-05-24 15:47:45 UTC	8192	IN	Data Raw: 21 4b 8e a6 75 c6 e5 50 a8 38 c0 1a 84 66 1c 62 73 af f4 a6 de 03 c5 d2 26 68 d2 3f 62 dd 1b de e2 16 24 32 f0 e0 c4 ef 7b 2e 70 60 1e 6e a1 96 97 38 a3 8f 6b a0 ca de c0 0b ae 43 83 e0 69 24 19 70 5a ce 0f 87 72 be 51 23 dd b1 2f 53 77 f8 53 00 08 97 32 48 4e c7 31 14 aa 53 c3 a7 dd 26 ae 87 3c 87 59 f4 90 a9 6c 00 91 69 77 ef ed 9e e2 75 a1 68 31 63 c7 e3 87 a3 6f 5f 45 f1 33 d5 a6 7a 10 54 a6 8e b7 50 11 9a ec 12 cf d9 c3 40 64 5a 3d c4 06 a1 86 4e ad 41 28 cc 05 10 14 c6 0c 39 9f 22 90 21 16 14 d4 32 c2 38 09 7e 03 26 41 0f 6d 05 28 46 54 82 c7 cb 4a 23 84 d4 14 f1 7c e4 6c 23 82 18 43 92 03 8e 4c c8 c6 84 59 f0 94 85 63 21 04 3c 9d 29 f0 73 c1 00 7d 09 a0 49 73 2d e0 4a f4 12 55 61 2f cc 61 c3 37 9c 2f ab 75 f4 0b 8a a8 f3 4a 55 fe fb 38 71 c0 59 58 Data Ascii: !KuP8fbs&h?b$2{.p`n8kCi$pZrQ#/SwS2HN1S&<Yliwuh1co_E3zTP@dZ=NA(9"!28~&Am(FTJ#\|l#CLYc!<)s}Is-JUa/a7/uJU8qYX
2024-05-24 15:47:45 UTC	8192	IN	Data Raw: 50 c5 34 f8 38 96 29 1f 67 b8 90 b2 65 b9 a8 7e 80 3d f2 63 7d e2 22 e5 ea db 16 d8 4d 2f 99 39 6d 73 d6 91 f7 57 1a a6 41 02 1c aa 50 5a 9c 73 b6 31 65 1d 3d ff 81 fa 62 50 e5 3e b7 8f 31 de b8 1e db cb b3 aa fc 9b 3f eb 9c 55 7f e1 bb d0 b9 7f 01 eb b1 60 63 09 88 72 f9 3c 19 0c 3a 60 db d6 93 67 58 08 49 24 80 11 e3 65 8a bc 85 bb 98 5b 3a 90 1b 90 10 e8 37 3b a9 36 63 85 09 e0 2b 4d 4e 44 a5 52 a9 22 64 69 36 03 b5 4b e6 59 3e 2e fa 12 f8 f7 6a 4a 84 86 63 e7 16 09 40 11 2f 86 bb c5 fe 1d 7d ea ef 1a c1 96 53 09 41 50 aa 75 d2 8b 46 05 81 71 a5 58 ca 29 4a 31 02 61 9d d4 52 11 69 e1 5b 60 54 75 44 5b 52 f0 29 ca 32 ec 0c 70 35 77 61 da 43 08 d2 02 b7 c6 61 5e e9 02 07 25 17 e5 58 4f 5e 16 f9 4b 38 a3 ce cd 9c d1 7a 41 e6 d7 7e ca 73 29 c1 28 b7 71 b3 Data Ascii: P48)ge~=c}"M/9msWAPZs1e=bP>1?U`cr<:`gXI$e[:7;6c+MNDR"di6KY>.jJc@/}SAPuFqX)J1aRi[`TuD[R)2p5waCa^%XO^K8zA~s)(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49878	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:32 UTC	1421	OUT	GET /wp-content/uploads/2024/01/image2.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
2024-05-24 15:47:32 UTC	541	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:32 GMT Content-Type: image/webp Content-Length: 4746 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 10 Jan 2024 18:00:37 GMT ETag: "27a0e25-128a-60e9b354ee173" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:32 UTC	4746	IN	Data Raw: 52 49 46 46 82 12 00 00 57 45 42 50 56 50 38 20 76 12 00 00 30 37 01 9d 01 2a 4a 03 fb 01 3e 51 28 90 46 23 a2 a1 a1 22 b4 89 38 70 0a 09 69 6e ff ff bd ef 87 50 e2 fb 59 e8 16 e9 b8 ff 4f fb 9d 64 f7 40 eb f4 7f 3e 3f 4a ff 33 cc df 87 f4 f0 b3 57 30 af d1 ff f0 ce 57 fd be 0f df 67 ff 8e 81 23 7f af fe cd 77 ff fe ce bf a4 01 80 6d 97 9f f8 6b 85 6f 93 5a c6 eb 5b 06 b5 8d d6 b1 ba d6 37 5a c6 eb 58 dd 6b 1b b0 4b a1 01 d7 1b ac 80 20 77 6c bc ff c3 5c 2b 7c 9a d6 37 5a c6 eb 58 dd 6b 1b d5 92 4b 8b 47 cc 0f 0d 70 ad f2 6b 58 dd 6b 1b ad 63 75 ac 6e b5 8d d6 b1 f5 56 8a c9 71 ba d6 37 5a c6 eb 58 dd 6b 1b ad 63 75 ac 6e b5 8d d6 b1 af a4 55 a5 c2 b7 c9 ad 63 5f 49 83 6b 4d 75 aa 64 e8 bc 35 c2 b7 49 1a 2f 0d 70 95 99 19 35 ac 6e b5 8d d6 b1 ba d6 37 5a Data Ascii: RIFFWEBPVP8 v07*J>Q(F#"8pinPYOd@>?J3W0Wg#wmkoZ[7ZXkK wl\+\|7ZXkKGpkXkcunVq7ZXkcunUc_IkMud5I/p5n7Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49879	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:32 UTC	1407	OUT	GET /td/rul/11423436062?random=1716565650394&cv=11&fst=1716565650394&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:32 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:32 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:47:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49881	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:32 UTC	1609	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2936 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565641293&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1716565650988 Content-Type: application/json X-Goog-Event-Time: 1716565650988 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:32 UTC	2936	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 49 6a 74 77 72 49 47 45 4a 72 77 72 77 55 51 72 4e 69 77 42 52 43 43 6f 76 38 53 45 49 6a 6a 72 77 55 51 33 65 6a 2d 45 68 44 6a 72 66 38 53 45 50 72 77 73 41 55 51 6e 75 53 77 42 52 43 57 6c 62 41 46 45 4e 50 67 73 41 55 51 6f 75 69 77 42 52 43 74 34 37 41 46 45 50 61 72 73 41 55 51 38 2d 75 77 42 52 43 41 35 62 41 46 45 4f 50 52 73 41 55 51 5f 49 57 77 42 52 43 67 36 4c 41 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240521.01.00","configInfo":{"appInstallData":"CIjtwrIGEJrwrwUQrNiwBRCCov8SEIjjrwUQ3ej-EhDjrf8SEPrwsAUQnuSwBRCWlbAFENPgsAUQouiwBRCt47AFEParsAUQ8-uwBRCA5bAFEOPRsAUQ_IWwBRCg6LAFEK
2024-05-24 15:47:33 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:32 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:33 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-24 15:47:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49883	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:33 UTC	1283	OUT	GET /pagead/viewthroughconversion/11423436062/?random=1716565650394&cv=11&fst=1716565650394&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:33 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:33 UTC	687	IN	Data Raw: 61 34 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a46(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:47:33 UTC	1390	IN	Data Raw: 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 30 3c 3d 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 Data Ascii: z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if
2024-05-24 15:47:33 UTC	560	IN	Data Raw: 64 4d 65 72 63 68 61 6e 74 25 32 30 50 61 79 6d 65 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 25 32 30 25 37 43 25 32 30 4e 6f 25 32 30 46 65 65 25 32 30 4d 65 72 63 68 61 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 32 38 33 36 35 39 36 35 2e 31 37 31 36 35 36 35 35 39 32 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 Data Ascii: dMerchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d28365965.1716565592\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B1
2024-05-24 15:47:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49884	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:33 UTC	1213	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163z8893682453za200&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=page_view&_c=1&tfd=10210 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:34 UTC	659	IN	HTTP/1.1 302 Found Location: https://www.google-analytics.com/privacy-sandbox/register-conversion?_c=1&cid=2069642792.1716565597&dbk=15153440370317904731&dma=0&en=page_view&gtm=45be45m0v892801163z8893682453za200&npa=0&tid=G-58PX1N3KV2&dl=https%3A%2F%2Fwww.daystarpayments.com%3F Access-Control-Allow-Origin: * Date: Fri, 24 May 2024 15:47:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 478 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:34 UTC	478	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 73 61 6e 64 62 6f 78 2f 72 65 67 69 73 74 65 72 2d 63 6f 6e 76 65 72 73 69 6f 6e 3f 5f 63 3d 31 26 61 6d 70 3b 63 69 64 3d 32 30 36 39 36 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google-analytics.com/privacy-sandbox/register-conversion?_c=1&cid=20696

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49885	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1279	OUT	GET /pagead/viewthroughconversion/11272802727/?random=1716565651846&cv=11&fst=1716565651846&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:34 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:34 UTC	687	IN	Data Raw: 61 33 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a3c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 30 3c 3d 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 Data Ascii: z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if
2024-05-24 15:47:34 UTC	550	IN	Data Raw: 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4d 65 72 63 68 61 6e 74 25 32 30 50 61 79 6d 65 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 25 32 30 25 37 43 25 32 30 4e 6f 25 32 30 46 65 65 25 32 30 4d 65 72 63 68 61 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 32 38 33 36 35 39 36 35 2e 31 37 31 36 35 36 35 35 39 32 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 Data Ascii: 26frm\x3d0\x26tiba\x3dMerchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d28365965.1716565592\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8
2024-05-24 15:47:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49888	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1403	OUT	GET /td/rul/11272802727?random=1716565651846&cv=11&fst=1716565651846&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:34 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:47:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49886	142.250.185.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1428	OUT	GET /td/rul/11272802727?random=1716565652128&cv=11&fst=1716565652128&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:34 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:47:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49887	216.58.212.162	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1304	OUT	GET /pagead/viewthroughconversion/11272802727/?random=1716565652128&cv=11&fst=1716565652128&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:34 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:34 UTC	687	IN	Data Raw: 61 35 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a5b(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 30 3c 3d 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 Data Ascii: z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if
2024-05-24 15:47:34 UTC	581	IN	Data Raw: 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4d 65 72 63 68 61 6e 74 25 32 30 50 61 79 6d 65 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 25 32 30 25 37 43 25 32 30 4e 6f 25 32 30 46 65 65 25 32 30 4d 65 72 63 68 61 6e 74 25 32 30 50 72 6f 63 65 73 73 69 6e 67 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 32 38 33 36 35 39 36 35 2e 31 37 31 36 35 36 35 35 39 32 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 Data Ascii: 26frm\x3d0\x26tiba\x3dMerchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d28365965.1716565592\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8
2024-05-24 15:47:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49890	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: /i+8pTBPmdgCYZoyi5YYLA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:34 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:34 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:34 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49892	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1105	OUT	GET /wp-content/uploads/2024/01/image2.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565652.5.0.0
2024-05-24 15:47:34 UTC	541	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:34 GMT Content-Type: image/webp Content-Length: 4746 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 10 Jan 2024 18:00:37 GMT ETag: "27a0e25-128a-60e9b354ee173" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:34 UTC	4746	IN	Data Raw: 52 49 46 46 82 12 00 00 57 45 42 50 56 50 38 20 76 12 00 00 30 37 01 9d 01 2a 4a 03 fb 01 3e 51 28 90 46 23 a2 a1 a1 22 b4 89 38 70 0a 09 69 6e ff ff bd ef 87 50 e2 fb 59 e8 16 e9 b8 ff 4f fb 9d 64 f7 40 eb f4 7f 3e 3f 4a ff 33 cc df 87 f4 f0 b3 57 30 af d1 ff f0 ce 57 fd be 0f df 67 ff 8e 81 23 7f af fe cd 77 ff fe ce bf a4 01 80 6d 97 9f f8 6b 85 6f 93 5a c6 eb 5b 06 b5 8d d6 b1 ba d6 37 5a c6 eb 58 dd 6b 1b b0 4b a1 01 d7 1b ac 80 20 77 6c bc ff c3 5c 2b 7c 9a d6 37 5a c6 eb 58 dd 6b 1b d5 92 4b 8b 47 cc 0f 0d 70 ad f2 6b 58 dd 6b 1b ad 63 75 ac 6e b5 8d d6 b1 f5 56 8a c9 71 ba d6 37 5a c6 eb 58 dd 6b 1b ad 63 75 ac 6e b5 8d d6 b1 af a4 55 a5 c2 b7 c9 ad 63 5f 49 83 6b 4d 75 aa 64 e8 bc 35 c2 b7 49 1a 2f 0d 70 95 99 19 35 ac 6e b5 8d d6 b1 ba d6 37 5a Data Ascii: RIFFWEBPVP8 v07*J>Q(F#"8pinPYOd@>?J3W0Wg#wmkoZ[7ZXkK wl\+\|7ZXkKGpkXkcunVq7ZXkcunUc_IkMud5I/p5n7Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49893	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1101	OUT	GET /wp-content/uploads/2023/11/bg3.png HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565652.5.0.0
2024-05-24 15:47:46 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:43 GMT Content-Type: image/png Content-Length: 87280 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 11 Nov 2023 18:58:12 GMT ETag: "27a15f5-154f0-609e504be3900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:46 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 a0 08 06 00 00 00 4b de 7a ca 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 54 a2 49 44 41 54 78 9c ec fd dd 8f 5c 49 b6 e5 89 99 7b 7c b8 7b 04 99 4c 92 41 32 48 46 90 55 ba e8 db e8 db 5d 83 41 43 68 60 20 08 42 03 c2 3c 0c 1a 10 84 41 63 d0 c0 48 68 34 46 4f 7a 93 46 90 04 41 6a a0 d1 0f 92 a0 7f 72 ee cd 9b 55 95 55 59 99 4c 32 dc 3d 3e 5d 0f 8c 75 e2 e7 2b f6 71 f7 20 99 59 75 e3 ae 05 04 22 c2 fd 1c b3 6d db b6 6d b3 b3 97 6d 3b 83 c5 62 d1 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 7f f8 18 fe b9 05 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 be 0c 42 00 07 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 Data Ascii: PNGIHDRKzpHYsTIDATx\I{\|{LA2HFU]ACh` B<AcHh4FOzFAjrUUYL2=>]u+q Yu"mmm;b BAAAAAAA
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 27 93 cf e2 22 3e 7c f8 d0 9d 24 77 7a 7a 7a 75 72 72 f2 7f 9b 7d 64 94 3f b2 ca b3 d9 c9 74 3a 3d b9 fe 7f 36 9f cf e7 27 27 27 27 b3 d9 ec e4 e2 e2 e2 fc f2 63 f6 f3 15 fc f1 d5 60 30 b8 38 3f 3f ff 8f ac 4f fe 67 dd f3 e1 75 19 e5 e7 8e 4d e7 b1 9f 03 9f 52 36 9f 2d aa 39 a1 6f 2d 5d d5 5b 3d 3b b2 1e 8f 8d 79 2c 89 1b 0f 19 57 f1 e7 f3 d6 6e 62 c2 ad 2d 6f 42 f4 e7 78 81 b1 26 b6 69 d3 67 25 d7 c7 97 46 55 ee ad 0c e0 b3 b3 b3 5b 41 46 5f 3c 73 22 75 82 d0 15 53 19 7e 65 0c 7d 81 20 05 3c f8 40 a8 72 b5 70 d1 8f 1e 12 79 64 9e 2f e8 b8 f8 6f ed 66 b1 b3 2a 38 25 59 9c cc 96 51 7a b6 a8 16 7f 1c fc 1e 0c 91 e1 f5 3d 78 7b b6 00 bf f3 ff b9 28 54 1d 0c e0 aa 2e 2e 66 a5 4f be eb 8b 01 5b d5 c1 40 b8 07 5a 48 ae 68 01 c9 2c 9f c5 62 d1 65 6c e9 e1 c9 df Data Ascii: '">\|$wzzzurr}d?t:=6''''c`08??OguMR6-9o-][=;y,Wnb-oBx&ig%FU[AF_<s"uS~e} <@rpyd/of*8%YQz=x{(T..fO[@ZHh,bel
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: ef 4e 4e 4e 4e 16 8b c5 d5 70 38 1c 5e af 53 fe af 8c 2b 31 9e 50 71 4d fe 1c fd 4b a2 6f 1d b7 49 6c 9f 71 cb ea 7b ad 83 98 50 d4 da f2 89 9d 8c 01 dc 3a 02 da 05 f5 87 56 65 63 28 e8 a3 a0 11 89 3e 0a 52 35 80 41 72 92 14 0c a4 69 01 a9 07 09 06 58 3c 78 52 65 8a f5 05 c2 aa 00 8f 82 96 3a 06 92 01 42 b5 cf 03 3d 0c 2c 29 98 c1 a3 45 25 a7 07 5b 18 c8 63 80 48 b2 8b b9 f7 23 d7 a4 07 05 1d 98 e6 5e 3d ec aa a3 19 30 63 5f 70 d1 ef 7d 4c 59 f9 0e 64 0f 6e 28 c0 c4 9d c3 55 10 b4 4f 3e 5e a3 80 88 88 05 d9 97 be 57 fb 19 8c 63 40 5f 81 dd 55 84 a0 fe 56 5d 7c a7 95 7e 64 8f 0c 68 57 0f 32 ec 1b ea 98 75 4b 3f 0a 92 52 b7 0c fe f0 28 6e ca d8 07 f6 e1 e5 e5 65 67 33 7c 60 57 fd 7c a8 f3 e0 12 f5 a2 f6 70 6c 56 f5 51 c6 75 0f 5a 7e 8f ea 21 39 c0 fa fa c6 Data Ascii: NNNNp8^S+1PqMKoIlq{P:Vec(>R5AriX<xRe:B=,)E%[cH#^=0c_p}LYdn(UO>^Wc@_UV]\|~dhW2uK?R(neg3\|`W\|plVQuZ~!9
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 6f bf fd e6 bb ef be fb dd e9 e9 e9 e9 f5 b3 c6 d5 62 b1 f8 7f 28 ee c4 e7 83 ea d9 55 58 22 80 15 80 14 a1 a9 c2 3c 6b ca 1f b0 fd a1 d8 2b e6 75 0a 64 32 f0 c8 ef ce ce ce ba 23 36 f5 39 ef 57 b0 87 01 57 06 5c f8 fe 47 29 61 3e 9f 77 19 2e 0c 3c 79 c0 c9 83 4e 1e c8 63 10 5a 0f 64 0c 28 eb 7a 06 3b 25 87 07 d8 78 bd 77 96 ee 11 bc 03 3d 60 d9 da cd b1 4e 92 4b 0f 8b 3c c6 90 44 3c 83 c3 0c c4 aa 3e 05 42 fd c1 b0 7a 88 ae 1e 94 f8 99 82 cd ca 40 63 00 44 99 d8 0a 6e 33 f8 ba aa 3e ea c4 49 10 d5 c7 ec 50 3e 70 0e 87 c3 2e c0 aa 0c 4c 96 5b 05 58 d4 5f fc 5b c4 b5 1f 6b ad 7e 51 3d 55 00 d6 e1 81 27 c9 ad 07 64 66 ae 51 7f 3c 56 9a 0f f9 7d 0f e2 55 90 97 fd 2d 1d b5 b6 9c d9 a2 be f1 63 da ab b2 37 09 64 f1 9e 4f 09 70 52 0f 5e 9e da e4 9b 11 aa fb fb Data Ascii: ob(UX"<k+ud2#69WW\G)a>w.<yNcZd(z;%xw=`NK<D<>Bz@cDn3>IP>p.L[X_[k~Q=U'dfQ<V}U-c7dOpR^
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: fe bd 7f ee f2 f5 f9 67 fd 2d 1b 93 1f 62 c6 bc cf 09 55 dd ac 4b be 94 9b 4f b9 49 92 f5 fa fd 2a 9f be de ed a8 9a b3 bd 8d 7d 73 5e a5 8b 4d b0 e9 da e4 4b dd f7 a9 a8 d6 5e f2 33 9c 37 7c a3 4f 6b b7 df 0f cc e7 5c 7f de 5a d5 ae ca 5f 7c 4e 5b aa 39 b3 af 6e da 98 fc 71 df 06 6b 2f ef 2e df 6d 8a 6a 6d 4f df c5 d7 36 7c 8a 6d ad d2 bf ff bf ae fc 55 e3 fc ae 32 f4 c9 e4 6b 04 c1 fd d5 a6 32 2c 16 8b 7f 35 18 0c b6 16 8b 45 9b 4c 26 e3 97 2f 5f 1e 2b 63 17 99 bb af 5e bc 78 71 f8 f2 e5 cb fd e7 cf 9f 77 af 6c 08 82 20 08 82 20 08 82 e0 1f 1f 96 08 60 05 26 15 b0 53 96 17 33 1c 98 51 d0 da 72 36 1f 03 69 1e 48 aa 02 d8 d5 43 90 67 0d 29 68 c8 ec 61 27 b3 aa 07 27 06 c6 15 a4 76 52 59 c1 01 66 7f 30 b8 c8 6b 3d f8 a7 07 6c cf 48 62 50 df e5 52 00 57 d9 Data Ascii: g-bUKOI*}s^MK^37\|Ok\Z_\|N[9nqk/.mjmO6\|mU2k2,5EL&/_+c^xqwl `&S3Qr6iHCg)ha''vRYf0k=lHbPRW
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 2a 2a 5b f6 75 7a 7a da d9 21 ed 9d 27 28 0c 06 83 b6 bb bb db 65 75 d3 17 d0 1e a6 d3 e9 ad f7 fe 6a d3 9d 48 e2 f3 f3 f3 6e 3d 34 18 dc 64 fe 56 ef bb 25 d4 2e ae 1f 64 4b cc 1e a6 7f 73 5f a9 7e e1 46 36 e9 8e c4 71 1f e8 0b 7c ac d3 be 7c ae 12 49 2c 12 9c c7 4c 57 47 56 57 f3 bc af 81 b9 8e d0 86 09 df 98 41 7f 45 dd 6d 4a 42 f9 26 aa ca bf fb 67 44 35 47 f8 dc 21 dd 53 de 3e 79 bc 9c be eb fa be df e4 bb 55 6b 86 ea 5e f7 cf ae 0b fa 4f 5f 07 f2 fb 55 1b 94 74 bf 9f ae e3 19 9a 95 dd 10 f2 5b 9c 8f 56 c1 e5 e8 6b e3 26 eb 9d 75 a0 5d fc 12 f8 12 f5 f9 58 a2 cf 53 1f f3 1a 7d be 69 d9 2a f3 e7 86 64 d5 9a 94 27 09 10 f4 7b 36 5e 45 ee b6 67 cf 9e 1d be 7e fd fa e8 d5 ab 57 47 af 5f bf 3e 7e fd fa f5 9b 97 2f 5f 26 73 37 08 82 20 08 82 20 08 82 e0 2f Data Ascii: *[uzz!'(eujHn=4dV%.dKs_~F6q\|\|I,LWGVWAEmJB&gD5G!S>yUk^O_Ut[Vk&u]XS}id'{6^Eg~WG_>~/_&s7 /
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: f7 f5 a5 d0 37 1f aa 1e 27 f1 25 7b 45 22 ca de 59 ae fb 60 da a7 64 f4 79 56 36 e6 f3 bb af a1 2b df 5e cd e9 5c 7f b4 b6 fc 5e 56 8d 2f 1d b3 4d 7b a0 6f e4 ff 0e f6 1f af ef 83 cb 4b 1b e1 26 40 ce 41 ee 83 d9 4f 7d 73 70 df 7c ed 1b 0e 56 e9 93 3a f4 cf 2a 3d 54 75 ae bb cf e5 5d 25 07 af ed eb 0b ff 7b 9d 4c 55 d9 f4 a1 ab d6 8e 7d 6b 0c 81 27 43 b9 2f 59 25 67 5f db 36 68 cb 3f 69 ad b5 9d 9d 9d 11 8f 64 7e fb f6 ed af 5f bf 7e fd e6 3a 73 f7 d5 db b7 6f 73 34 73 10 04 41 10 04 41 10 04 41 10 18 96 08 60 1d c7 ca a0 10 83 98 9e cd e1 04 19 03 01 bc c7 1f f0 19 b8 f3 e0 bb 07 a4 18 80 52 10 97 e5 b6 76 73 14 b2 02 4b 0c ea 29 58 ca ec 51 91 6d 24 97 18 68 55 f9 aa 5f 50 9b f9 ee 46 7d 2e 79 15 fc 55 20 b8 b5 b6 24 33 cb a1 be 3c e0 25 dd 8b 50 25 e9 Data Ascii: 7'%{E"Y`dyV6+^\^V/M{oK&@AO}sp\|V:*=Tu]%{LU}k'C/Y%g_6h?id~_~:sos4sAAA`RvsK)XQm$hU_PF}.yU $3<%P%
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 95 2c d5 35 3e d6 39 37 78 7d 7d 50 39 7c 67 39 7d b5 af 29 56 41 65 70 e3 58 6b cb 7e dd db 40 1d 68 a3 18 fd 87 cf 39 68 d3 db d6 5a db dd dd dd 7d fd fa 75 f7 be dd 5f fd ea 57 39 9a 39 08 82 20 08 82 20 08 82 20 08 82 7f d0 58 22 80 95 a5 a3 60 1c b3 3f 45 32 90 20 a8 48 3e fd cd cf 18 6c 21 89 c4 2c 01 05 2e 2b 72 ca c1 80 a1 02 3c 9e 65 25 82 8e a4 9e 07 b7 14 20 14 d8 26 0f 76 31 63 d1 89 61 06 ca 44 98 88 a8 60 e0 d5 8f 04 66 3d 3c 0e 93 01 7b ea 80 6d 54 db 78 b4 29 f5 a9 32 59 be 02 a9 aa 8b 04 96 74 29 02 58 d9 48 d2 91 97 cd 23 66 25 1b b3 57 3d 43 cd 49 4f e9 41 ef 36 66 a0 4f 6d 26 61 40 42 83 e4 88 ea 52 06 93 82 c7 ec 7b 12 58 22 d4 48 16 aa ff 44 aa 2a d0 ce 00 36 7f eb 5e 12 1c 24 46 f9 de 57 05 7a 19 74 66 db 2a a2 80 3a 57 20 9d a4 17 Data Ascii: ,5>97x}}P9\|g9})VAepXk~@h9hZ}u_W99 X"`?E2 H>l!,.+r<e% &v1caD`f=<{mTx)2Yt)XH#f%W=CIOA6fOm&a@BR{X"HD6^$FWztf:W
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 0d f7 93 e7 2f a7 63 66 7f 4d 5b b1 8a 38 53 e8 b2 0f 72 a0 0b a7 cb ae d7 53 f6 79 ca 76 d4 29 e3 fb da 26 c7 b4 3e 83 b7 ce 7a 50 03 c8 aa 86 7b dc 6e 7e 36 e7 18 83 af df 0b e8 eb f5 36 cb 49 a0 cc a0 35 61 6a de 9b be 91 76 09 7e 86 c7 37 6d 97 76 60 bf 61 9f e6 77 61 fd 0c db 81 55 ca 5c 66 b6 87 d7 a5 ec 33 9f 7b ca ed e6 74 d0 fc ee 49 5f e3 be a6 1d b3 bd 9c 71 20 a1 2f df 13 39 ee 7d d5 96 d9 df 04 c9 79 e6 72 06 61 b4 d6 36 a6 33 66 08 ca 8a ea be 76 7a 7a 7a ea 66 27 a8 83 89 f8 dd 90 e3 c6 6b 32 07 c4 30 2c 4e bb d5 47 56 e4 f1 06 69 ef da 47 53 9d 9d 6d 7e 78 78 68 77 77 77 dd f7 0d fb 43 0d b6 73 ad 7c 7a 7a ea 66 5d e0 ef 08 1c 0c c0 e7 c9 73 00 00 67 4a 48 65 74 be 23 ef ef ef 37 a6 87 ae e7 62 5f b8 9a 63 bd 5a ad da ed ed 6d 5b ad 56 1b Data Ascii: /cfM[8SrSyv)&>zP{n~66I5ajv~7mv`awaU\f3{tI_q /9}yra63fvzzzf'k20,NGViGSm~xxhwwwCs\|zzf]sgJHet#7b_cZm[V
2024-05-24 15:47:46 UTC	8192	IN	Data Raw: 7f cf 40 87 6c 0b 03 c2 bc 27 41 7f ed 3b 3c ff 58 35 cb 6b 26 bf 77 18 6c e7 ff 9c 36 9f 15 f7 d9 e6 7c 9f b1 0f b3 6f d5 ef 3b 06 8f f5 58 a6 0f f4 9d 7b 69 ab ec 53 ae d3 f3 f9 7c e3 1a c4 b6 e5 f6 66 3b 26 93 c9 c6 cf d2 3e 99 f2 9d d7 34 b6 17 af c9 1c 60 c0 ca fd bc 97 cb 4b bb a5 2d 9f 9e 9e ba 6b 67 6b 2f a1 7a fa 51 1d 3c 93 75 64 d0 55 96 57 ab 88 b9 0d 09 7e f3 1d 97 e0 37 eb a9 bf 0f f4 fd de 91 bf b3 5d 1c ac 96 36 4e c0 9e 63 33 1e 8f ff f7 a7 a7 a7 f9 e3 e3 e3 d3 78 3c 1e 9e 9e 9e 9e 5f 5d 5d 5d 7f fc f8 f1 f2 fa fa fa e6 fc fc fc e2 fa fa fa f3 f9 f9 f9 c5 d5 d5 d5 97 8b 8b 8b d1 f9 f9 f9 c6 ef 0a 92 24 49 92 24 49 92 f4 ef 69 f4 d6 0b bc 19 ca 00 b2 be 5e 6f b0 b2 42 2c 21 42 9d ae b9 b5 d7 d3 22 a7 aa 27 37 94 79 43 96 d5 4e b9 c9 db 17 Data Ascii: @l'A;<X5k&wl6\|o;X{iS\|f;&>4`K-kgk/zQ<udUW~7]6Nc3x<_]]]$I$Ii^oB,!B"'7yCN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49889	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1132	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240521.01.00 X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:34 UTC	3584	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 48 58 4a 45 61 6b 6d 36 35 46 49 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 79 56 47 68 30 4f 54 5a 66 64 6e 42 54 4f 43 69 48 37 63 4b 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 5a 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"HXJEakm65FI","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-05-24 15:47:34 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:34 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:34 UTC	958	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 77 68 5f 70 61 75 73 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"is_alc_surface","value":"false"},{"key":"ipcc","value":"0"},{"key":"is_viewed_live","value":"False"},{"key":"wh_paused","value":"0"},{"key":"logged_in","value":"0"
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 31 34 2c 35 31 31 35 38 35 33 35 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 37 32 32 2c 35 31 31 36 35 34 36 36 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 35 35 39 32 2c 35 31 31 36 36 35 36 32 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 38 32 30 37 2c 35 31 31 36 38 32 32 35 2c 35 31 31 36 38 32 35 36 2c 35 31 31 36 38 33 38 35 2c 35 31 31 36 38 34 31 39 2c 35 31 31 36 38 35 35 37 2c 35 31 31 36 38 39 31 38 2c 35 31 31 36 38 39 36 37 2c 35 31 31 36 38 39 37 30 2c 35 31 31 36 39 30 33 34 2c 35 31 31 36 39 31 33 30 2c 35 31 31 36 39 32 35 38 2c 35 31 31 36 39 32 36 30 2c 35 31 31 36 39 39 34 37 2c 35 31 31 37 30 33 37 33 2c 35 31 31 37 31 34 33 39 2c 35 31 31 37 32 39 36 33 2c 35 31 31 37 32 39 37 31 2c 35 31 31 37 33 31 33 32 2c Data Ascii: 14,51158535,51160545,51162170,51162722,51165466,51165568,51165592,51166562,51166922,51168207,51168225,51168256,51168385,51168419,51168557,51168918,51168967,51168970,51169034,51169130,51169258,51169260,51169947,51170373,51171439,51172963,51172971,51173132,
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 75 25 32 43 6f 6e 72 26 6d 76 3d 75 26 6d 76 69 3d 32 26 70 6c 3d 32 35 26 62 75 69 3d 41 57 52 57 6a 32 51 52 43 72 72 49 63 5f 34 5f 4b 31 52 72 6a 46 6d 38 70 36 65 74 50 44 71 54 55 52 62 6e 38 56 7a 67 32 2d 53 64 49 58 61 71 35 69 6e 48 70 76 31 54 46 31 79 49 2d 5f 4f 35 6d 69 4f 43 67 64 50 43 31 6b 4e 6b 6f 55 34 56 26 73 70 63 3d 55 57 46 39 66 34 77 32 4f 35 63 53 7a 6d 32 46 4e 57 4e 52 6e 53 4a 58 78 47 64 70 39 47 59 50 55 6c 57 63 43 78 4b 4d 7a 64 41 73 36 42 6f 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 41 58 53 73 2d 44 57 72 78 6a 63 36 52 34 4d 79 47 44 61 59 62 34 67 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 31 31 37 30 37 38 33 26 72 61 74 65 62 79 Data Ascii: u%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2QRCrrIc_4_K1RrjFm8p6etPDqTURbn8Vzg2-SdIXaq5inHpv1TF1yI-_O5miOCgdPC1kNkoU4V&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=AXSs-DWrxjc6R4MyGDaYb4gQ&rqh=1&gir=yes&clen=1170783&rateby
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 4d 42 26 6d 6d 3d 33 31 25 32 43 32 36 26 6d 6e 3d 73 6e 2d 70 35 71 6c 73 6e 72 6c 25 32 43 73 6e 2d 61 62 35 6c 36 6e 6b 36 26 6d 73 3d 61 75 25 32 43 6f 6e 72 26 6d 76 3d 75 26 6d 76 69 3d 32 26 70 6c 3d 32 35 26 62 75 69 3d 41 57 Data Ascii: 34%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AW
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 22 2c 22 74 72 61 6e 73 66 65 72 43 68 61 72 61 63 74 65 72 69 73 74 69 63 73 22 3a 22 43 4f 4c 4f 52 5f 54 52 41 4e 53 46 45 52 5f 43 48 41 52 41 43 54 45 52 49 53 54 49 43 53 5f 42 54 37 30 39 22 2c 22 6d 61 74 72 69 78 43 6f 65 66 66 69 63 69 65 6e 74 73 22 3a 22 43 4f 4c 4f 52 5f 4d 41 54 52 49 58 5f 43 4f 45 46 46 49 43 49 45 4e 54 53 5f 42 54 37 30 39 22 7d 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 35 34 34 38 22 7d 2c 7b 22 69 74 61 67 22 3a 34 30 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 32 2d 2d 2d 73 6e 2d 70 35 71 6c 73 6e 72 6c 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 36 35 38 37 32 35 34 26 65 69 3d 6c 72 5a 51 5a 71 50 71 Data Ascii: ","transferCharacteristics":"COLOR_TRANSFER_CHARACTERISTICS_BT709","matrixCoefficients":"COLOR_MATRIX_COEFFICIENTS_BT709"},"approxDurationMs":"15448"},{"itag":401,"url":"https://rr2---sn-p5qlsnrl.googlevideo.com/videoplayback?expire=1716587254&ei=lrZQZqPq
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 3d 5c 22 61 76 30 31 2e 30 2e 31 32 4d 2e 30 38 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 35 33 35 37 31 36 30 2c 22 77 69 64 74 68 22 3a 33 38 34 30 2c 22 68 65 69 67 68 74 22 3a 32 31 36 30 2c 22 69 6e 69 74 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 30 22 2c 22 65 6e 64 22 3a 22 37 30 30 22 7d 2c 22 69 6e 64 65 78 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 37 30 31 22 2c 22 65 6e 64 22 3a 22 37 36 38 22 7d 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 37 31 34 35 36 38 31 39 33 37 36 35 33 33 34 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 39 33 37 32 30 35 36 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 68 64 32 31 36 30 22 2c 22 66 70 73 22 3a 33 30 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 32 31 36 30 70 22 2c Data Ascii: =\"av01.0.12M.08\"","bitrate":5357160,"width":3840,"height":2160,"initRange":{"start":"0","end":"700"},"indexRange":{"start":"701","end":"768"},"lastModified":"1714568193765334","contentLength":"9372056","quality":"hd2160","fps":30,"qualityLabel":"2160p",
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 72 71 68 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 51 49 68 41 4b 75 74 4b 67 77 42 6f 44 44 71 6c 48 77 4d 53 75 69 4e 58 33 2d 30 6a 76 72 73 6a 65 30 31 59 32 53 4d 6a 73 45 36 46 31 6d 4c 41 69 41 70 5a 73 7a 49 79 37 6a 46 51 7a 43 41 33 6b 5f 6d 50 66 6c 75 31 4a 48 4f 48 46 68 54 34 62 30 45 41 4d 43 57 73 6b 51 53 7a 51 25 33 44 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 26 6c 73 69 67 3d 41 48 57 61 59 65 6f 77 52 51 49 67 42 6c 69 55 6a 4b 39 4e 33 53 59 79 57 4f 4a Data Ascii: ui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKutKgwBoDDqlHwMSuiNX3-0jvrsje01Y2SMjsE6F1mLAiApZszIy7jFQzCA3k_mPflu1JHOHFhT4b0EAMCWskQSzQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJ
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 66 32 4c 5f 68 49 46 45 72 45 78 76 51 64 79 41 44 4b 45 26 73 70 63 3d 55 57 46 39 66 34 77 32 4f 35 63 53 7a 6d 32 46 4e 57 4e 52 6e 53 4a 58 78 47 64 70 39 47 59 50 55 6c 57 63 43 78 4b 4d 7a 64 41 73 36 42 6f 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 63 5f 4d 32 67 47 4f 41 67 35 65 6a 38 66 55 33 51 50 55 6c 77 78 30 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 34 37 37 34 36 31 30 26 64 75 72 3d 31 35 2e 34 34 38 26 6c 6d 74 3d 31 37 31 34 35 36 37 30 38 30 38 36 33 36 30 36 26 6d 74 3d 31 37 31 36 35 36 34 38 33 31 26 66 76 69 70 3d 32 26 6b 65 65 70 61 6c 69 76 65 3d 79 65 73 26 63 3d 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 26 73 65 66 63 3d 31 26 Data Ascii: f2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=4774610&dur=15.448&lmt=1714567080863606&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&
2024-05-24 15:47:34 UTC	1390	IN	Data Raw: 6b 73 32 50 73 34 31 30 78 51 47 4d 78 4b 39 33 34 75 45 31 4a 43 44 6a 4f 51 26 69 74 61 67 3d 31 33 37 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 4d 42 26 6d 6d 3d 33 31 25 32 43 32 36 26 6d 6e 3d 73 6e 2d 70 35 71 6c 73 6e 72 6c Data Ascii: ks2Ps410xQGMxK934uE1JCDjOQ&itag=137&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49891	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	1351	OUT	GET /pagead/1p-user-list/11423436062/?random=1716565650394&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLO7ADp7tozPge2DzKQvSatn_lAClJykAPo4sk0YKW2zeTbXWt&random=1853353537&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49894	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:34 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:34 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 24 May 2024 15:47:34 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:34 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:34 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49896	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	1347	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565651846&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLHej53Xq6Be13h1NukudYt7lAqpGLxJ1tCntL_eWSGKth4NrC&random=3020920566&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49898	216.58.206.68	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	1372	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565652128&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYSPUjCpnmGHC2KZJQg-fgS-ABE6Cs3y1Jc1EvOFaJ6hnh-49&random=1337554678&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49902	74.125.155.39	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	2082	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2C [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-05-24 15:47:35 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:35 GMT Expires: Fri, 24 May 2024 15:47:35 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:35 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2024-05-24 15:47:35 UTC	48	IN	Data Raw: 14 2e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 8e 03 20 c1 d1 a0 be bb ec 85 03 30 00 6a 0c 08 8e 03 10 c1 d1 a0 be bb ec 85 03 70 80 06 Data Ascii: .HXJEakm65FI 0jp
2024-05-24 15:47:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:35 UTC	5	IN	Data Raw: 33 30 34 0d 0a Data Ascii: 304
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 15 81 0c 00 Data Ascii:
2024-05-24 15:47:35 UTC	768	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 57 e3 4c e2 57 e3 4c 00 00 75 30 00 07 12 67 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 57 e3 4c e2 57 e3 4c 00 00 00 01 00 00 00 00 00 07 12 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhdWLWLu0g@(mvex trextrak\tkhdWLWLg
2024-05-24 15:47:35 UTC	2087	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2C [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:35 GMT Expires: Fri, 24 May 2024 15:47:35 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	2084	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn% [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49903	74.125.155.39	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	1965	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-05-24 15:47:35 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:35 GMT Expires: Fri, 24 May 2024 15:47:35 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:35 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 35 30 0d 0a Data Ascii: 50
2024-05-24 15:47:35 UTC	80	IN	Data Raw: 14 4e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 fa 01 20 8e ca dd cb b6 ec 85 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fa 01 10 8e ca dd cb b6 ec 85 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 ab 02 Data Ascii: NHXJEakm65FI *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2024-05-24 15:47:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:35 UTC	5	IN	Data Raw: 31 32 66 0d 0a Data Ascii: 12f
2024-05-24 15:47:35 UTC	4	IN	Data Raw: 15 ac 04 00 Data Ascii:
2024-05-24 15:47:35 UTC	299	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 00 1c 4d 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 46 71 e4 00 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 ba 10 b1 f1 74 9e ed 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSgMMtMSIfSDMSTkSMSSkSIf*B@DFqMgoogle/video-fileWAgoogle/video-fileTkst"engA_OPUScOpusHead8Vc.V
2024-05-24 15:47:36 UTC	1968	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	2090	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2C [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	2095	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn% [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:37 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:37 UTC	2095	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn% [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:37 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:37 GMT Expires: Fri, 24 May 2024 15:47:37 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:38 UTC	2096	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn% [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:38 GMT Expires: Fri, 24 May 2024 15:47:38 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:38 UTC	2099	OUT	POST /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn% [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:38 GMT Expires: Fri, 24 May 2024 15:47:38 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49900	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	1108	OUT	GET /pagead/1p-user-list/11423436062/?random=1716565650394&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLO7ADp7tozPge2DzKQvSatn_lAClJykAPo4sk0YKW2zeTbXWt&random=1853353537&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49901	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	2635	OUT	POST /api/stats/qoe?fmt=398&cpn=HhvLVt-RnKxTEP9r&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=1&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&event=streamingstats&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaHZMVnQtUm5LeFRFUDlyEAE&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.018:B,0.023:S,9.177:S,9.177:S&cat=streaming&vis=1.513:3,3.7 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 1344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:35 UTC	1344	OUT	Data Raw: 63 6d 74 3d 30 2e 30 31 38 25 33 41 30 2e 30 30 30 25 32 43 30 2e 30 32 33 25 33 41 32 2e 30 30 30 25 32 43 31 2e 35 31 33 25 33 41 32 2e 30 30 30 25 32 43 33 2e 37 36 37 25 33 41 32 2e 30 30 30 25 32 43 33 2e 37 36 38 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 30 35 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 31 32 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 31 37 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 31 37 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 32 30 25 33 41 32 2e 30 30 30 25 32 43 33 2e 38 32 30 25 33 41 32 2e 30 30 30 25 32 43 38 2e 31 34 31 25 33 41 32 2e 30 30 30 25 32 43 38 2e 31 34 31 25 33 41 32 2e 30 30 30 25 32 43 38 2e 33 30 32 25 33 41 32 2e 30 30 30 25 32 43 38 2e 33 30 33 25 33 41 32 2e 30 30 30 25 32 43 38 2e 33 31 37 25 33 41 32 2e 30 Data Ascii: cmt=0.018%3A0.000%2C0.023%3A2.000%2C1.513%3A2.000%2C3.767%3A2.000%2C3.768%3A2.000%2C3.805%3A2.000%2C3.812%3A2.000%2C3.817%3A2.000%2C3.817%3A2.000%2C3.820%3A2.000%2C3.820%3A2.000%2C8.141%3A2.000%2C8.141%3A2.000%2C8.302%3A2.000%2C8.303%3A2.000%2C8.317%3A2.0
2024-05-24 15:47:35 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49904	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	472	OUT	GET /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Fri, 24 May 2024 15:47:35 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:36 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:36 UTC	456	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49905	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:35 UTC	1130	OUT	POST /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240521.01.00 X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:35 UTC	3092	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 79 56 47 68 30 4f 54 5a 66 64 6e 42 54 4f 43 69 48 37 63 4b 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 5a 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-24 15:47:36 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:36 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:36 UTC	958	IN	Data Raw: 31 33 61 63 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 61 74 63 68 4e 65 78 74 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 31 64 38 61 30 34 36 37 35 62 38 33 35 30 63 31 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 Data Ascii: 13ac{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB_EMBEDDED_PLAYER"},{"key":"cver","value":"1.20240521.01.00"},{"key":"yt_li","value":"0"},{"key":"GetWatchNext_rid","value":"0x1d8a04675b8350c1"}]},{"servi
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 32 32 30 37 2c 35 31 31 35 35 31 34 31 2c 35 31 31 35 36 33 38 35 2c 35 31 31 35 37 34 31 31 2c 35 31 31 35 37 38 33 38 2c 35 31 31 35 37 38 39 37 2c 35 31 31 35 38 35 31 34 2c 35 31 31 35 38 35 33 35 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 37 32 32 2c 35 31 31 36 35 34 36 36 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 35 35 39 32 2c 35 31 31 36 36 35 36 32 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 38 32 30 37 2c 35 31 31 36 38 32 32 35 2c 35 31 31 36 38 32 35 36 2c 35 31 31 36 38 33 38 35 2c 35 31 31 36 38 34 31 39 2c 35 31 31 36 38 35 35 37 2c 35 31 31 36 38 39 31 38 2c 35 31 31 36 38 39 36 37 2c 35 31 31 36 38 39 37 30 2c 35 31 31 36 39 30 33 34 2c 35 31 31 36 39 31 33 30 2c 35 31 31 36 39 32 35 38 2c 35 31 31 36 39 32 36 Data Ascii: 2207,51155141,51156385,51157411,51157838,51157897,51158514,51158535,51160545,51162170,51162722,51165466,51165568,51165592,51166562,51166922,51168207,51168225,51168256,51168385,51168419,51168557,51168918,51168967,51168970,51169034,51169130,51169258,5116926
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 78 56 6a 63 6e 6f 46 48 62 38 4c 41 38 59 3d 22 2c 22 61 64 64 54 6f 54 6f 61 73 74 41 63 74 69 6f 6e 22 3a 7b 22 69 74 65 6d 22 3a 7b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 41 63 74 69 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 72 65 73 70 6f 6e 73 65 54 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 4c 69 6e 6b 20 63 6f 70 69 65 64 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 22 7d 5d 7d 2c 22 61 63 74 69 6f 6e 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 67 51 38 46 73 69 45 77 6a 31 76 4a 75 78 30 61 61 47 41 78 56 6a 63 6e 6f 46 48 62 38 4c 41 38 59 3d 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 63 51 75 57 6f 69 Data Ascii: xVjcnoFHb8LA8Y=","addToToastAction":{"item":{"notificationActionRenderer":{"responseText":{"runs":[{"text":"Link copied to clipboard"}]},"actionButton":{"buttonRenderer":{"trackingParams":"CAgQ8FsiEwj1vJux0aaGAxVjcnoFHb8LA8Y="}},"trackingParams":"CAcQuWoi
2024-05-24 15:47:36 UTC	1306	IN	Data Raw: 6c 61 79 56 69 64 65 6f 44 65 74 61 69 6c 73 45 78 70 61 6e 64 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 52 79 61 6e 20 57 61 6c 74 65 72 73 22 7d 5d 7d 2c 22 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 22 3a 7b 22 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 53 75 62 73 63 72 69 62 65 22 7d 5d 7d 2c 22 73 75 62 73 63 72 69 62 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 46 52 45 45 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 7a 59 34 52 6a 59 65 71 52 69 6f 65 78 59 63 62 56 62 37 56 2d 51 22 2c Data Ascii: layVideoDetailsExpandedRenderer":{"title":{"runs":[{"text":"Ryan Walters"}]},"subscribeButton":{"subscribeButtonRenderer":{"buttonText":{"runs":[{"text":"Subscribe"}]},"subscribed":false,"enabled":true,"type":"FREE","channelId":"UCzY4RjYeqRioexYcbVb7V-Q",
2024-05-24 15:47:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49907	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	1104	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565651846&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLHej53Xq6Be13h1NukudYt7lAqpGLxJ1tCntL_eWSGKth4NrC&random=3020920566&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49911	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: KczrkFanGDXhKA5FE9Pr5Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:36 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:36 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:36 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49909	216.58.212.164	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	1129	OUT	GET /pagead/1p-user-list/11272802727/?random=1716565652128&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYSPUjCpnmGHC2KZJQg-fgS-ABE6Cs3y1Jc1EvOFaJ6hnh-49&random=1337554678&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49912	74.125.155.39	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	1858	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cm [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2024-05-24 15:47:36 UTC	48	IN	Data Raw: 14 2e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 8e 03 20 c1 d1 a0 be bb ec 85 03 30 00 6a 0c 08 8e 03 10 c1 d1 a0 be bb ec 85 03 70 80 06 Data Ascii: .HXJEakm65FI 0jp
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	5	IN	Data Raw: 33 30 34 0d 0a Data Ascii: 304
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 15 81 0c 00 Data Ascii:
2024-05-24 15:47:36 UTC	768	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 57 e3 4c e2 57 e3 4c 00 00 75 30 00 07 12 67 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 57 e3 4c e2 57 e3 4c 00 00 00 01 00 00 00 00 00 07 12 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhdWLWLu0g@(mvex trextrak\tkhdWLWLg
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	1863	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cm [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	1866	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cm [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:37 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:35:12 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:37 GMT Expires: Fri, 24 May 2024 15:47:37 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:37 UTC	1871	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:37 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:37 GMT Expires: Fri, 24 May 2024 15:47:37 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:38 UTC	1871	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:38 GMT Expires: Fri, 24 May 2024 15:47:38 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:38 UTC	1872	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:38 GMT Expires: Fri, 24 May 2024 15:47:38 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49913	74.125.155.39	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	1741	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2h [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 35 30 0d 0a Data Ascii: 50
2024-05-24 15:47:36 UTC	80	IN	Data Raw: 14 4e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 fa 01 20 8e ca dd cb b6 ec 85 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fa 01 10 8e ca dd cb b6 ec 85 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 ab 02 Data Ascii: NHXJEakm65FI *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	5	IN	Data Raw: 31 32 66 0d 0a Data Ascii: 12f
2024-05-24 15:47:36 UTC	4	IN	Data Raw: 15 ac 04 00 Data Ascii:
2024-05-24 15:47:36 UTC	299	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 00 1c 4d 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 46 71 e4 00 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 ba 10 b1 f1 74 9e ed 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSgMMtMSIfSDMSTkSMSSkSIf*B@DFqMgoogle/video-fileWAgoogle/video-fileTkst"engA_OPUScOpusHead8Vc.V
2024-05-24 15:47:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:36 UTC	1860	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:36 UTC	1744	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2h [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:36 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:36 GMT Expires: Fri, 24 May 2024 15:47:36 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:39 UTC	1875	OUT	GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2 [TRUNCATED] Host: rr2---sn-p5qlsnrl.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:39 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:39 GMT Expires: Fri, 24 May 2024 15:47:39 GMT Cache-Control: private, max-age=21295 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49914	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:36 UTC	888	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/endscreen.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:36 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 34279 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 07:52:43 GMT Expires: Fri, 23 May 2025 07:52:43 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 114893 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:36 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 50 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 62 28 22 6f 6e 41 75 74 6f 6e 61 76 43 6f 75 6e 64 6f 77 6e 53 74 61 72 74 65 64 22 2c 62 29 7d 2c 6a 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4a 76 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 2d 73 65 74 22 2c 21 21 62 2e 76 69 64 65 6f 49 64 29 3b 0a 76 61 72 20 64 3d 62 2e 70 6c 61 79 6c 69 73 74 49 64 3b 63 3d 62 2e 64 68 28 63 3f 63 3a 22 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 29 3b 76 61 72 20 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 71 53 26 26 28 62 Data Ascii: (function(g){var window=this;'use strict';var Pub=function(a,b){a.jb("onAutonavCoundownStarted",b)},j6=function(a,b,c){g.Jv(a.element,"ytp-suggestion-set",!!b.videoId);var d=b.playlistId;c=b.dh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.qS&&(b
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 74 63 68 20 24 54 49 54 4c 45 22 2c 7b 54 49 54 4c 45 3a 62 2e 74 69 74 6c 65 7d 29 2c 64 75 72 61 74 69 6f 6e 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 66 2c 75 72 6c 3a 62 2e 56 6b 28 29 2c 69 73 5f 6c 69 76 65 3a 6c 2c 69 73 5f 75 70 63 6f 6d 69 6e 67 3a 6d 2c 69 73 5f 6c 69 73 74 3a 68 2c 69 73 5f 6d 69 78 3a 64 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 63 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2b 63 2b 22 29 22 3a 22 22 2c 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 3a 74 2e 6a 6f 69 6e 28 22 20 5c 75 32 30 32 32 20 22 29 2c 61 75 74 6f 70 6c 61 79 41 6c 74 65 72 6e 61 74 69 76 65 48 65 61 64 65 72 3a 62 2e 50 73 7d 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 70 53 26 26 28 63 2e 70 6c 61 79 6c 69 Data Ascii: tch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Vk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.Ps};b instanceof g.pS&&(c.playli
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 6b 29 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 6b 65 79 70 72 65 73 73 22 2c 74 68 69 73 2e 6f 6e 4b 65 79 50 72 65 73 73 29 7d 2c 6c 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 0a 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6f 76 65 72 6c 61 79 22 7d 29 3b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 4b 3d 62 3b 74 68 69 73 2e 63 61 6e 63 65 6c 43 6f 6d 6d 61 6e 64 3d 74 68 69 73 2e 47 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 43 3d 30 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e Data Ascii: k);this.listen("keypress",this.onKeyPress)},l6=function(a,b){b=void 0===b?!1:b;g.W.call(this,{I:"div",S:"ytp-autonav-endscreen-countdown-overlay"});var c=this;this.K=b;this.cancelCommand=this.G=void 0;this.C=0;this.container=new g.W({I:"div",S:"ytp-auton
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 61 75 74 68 6f 72 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 76 69 65 77 2d 61 6e 64 2d 64 61 74 65 22 2c 78 61 3a 22 7b 7b 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 61 75 74 68 6f 72 2d 61 6e 64 2d 76 69 65 77 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 5f 61 6e 64 5f 76 69 65 77 73 7d 7d 22 7d 5d 7d 5d 7d 5d 7d 29 3b 0a 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e Data Ascii: e",xa:"{{title}}"},{I:"div",S:"ytp-autonav-endscreen-upnext-author",xa:"{{author}}"},{I:"div",S:"ytp-autonav-view-and-date",xa:"{{views_and_publish_time}}"},{I:"div",S:"ytp-autonav-author-and-view",xa:"{{author_and_views}}"}]}]}]});g.N(this,this.j);this.
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 50 6c 61 79 20 6e 65 78 74 20 76 69 64 65 6f 22 7d 2c 78 61 3a 22 50 6c 61 79 20 4e 6f 77 22 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 4a 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 74 55 2c 74 68 69 73 29 3b 74 68 69 73 2e 4a 2e 4c 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 61 75 74 6f 6e 61 76 5f 6e 65 78 74 5f 62 75 74 74 6f 6e 5f 72 65 6e 64 65 72 65 72 22 29 3f 28 74 68 69 73 2e 4a 2e 63 72 65 61 74 65 53 65 72 76 65 72 56 65 28 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c Data Ascii: ","aria-label":"Play next video"},xa:"Play Now"});g.N(this,this.playButton);this.playButton.Ja(this.B.element);this.playButton.listen("click",this.tU,this);this.J.L("web_player_autonav_next_button_renderer")?(this.J.createServerVe(this.playButton.element,
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 73 22 2c 55 75 62 28 61 29 29 7d 7d 2c 52 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 54 75 62 28 61 29 2c 63 3d 4d 61 74 68 2c 64 3d 63 2e 6d 69 6e 3b 0a 76 61 72 20 65 3d 61 2e 43 3f 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2e 43 3a 30 3b 63 3d 64 2e 63 61 6c 6c 28 63 2c 65 2c 62 29 3b 53 75 62 28 61 2c 4d 61 74 68 2e 63 65 69 6c 28 28 62 2d 63 29 2f 31 45 33 29 29 3b 35 30 30 3e 3d 62 2d 63 26 26 61 2e 59 6b 28 29 3f 61 2e 73 65 6c 65 63 74 28 21 30 29 3a 61 2e 59 6b 28 29 26 26 61 2e 44 2e 73 74 61 72 74 28 29 7d 2c 54 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 4a 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7b 76 61 72 20 62 3b 0a 61 3d 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 4a 2e 67 65 74 56 69 Data Ascii: ransitions",Uub(a))}},Rub=function(a){var b=Tub(a),c=Math,d=c.min;var e=a.C?Date.now()-a.C:0;c=d.call(c,e,b);Sub(a,Math.ceil((b-c)/1E3));500>=b-c&&a.Yk()?a.select(!0):a.Yk()&&a.D.start()},Tub=function(a){if(a.J.isFullscreen()){var b;a=null==(b=a.J.getVi
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 72 69 61 2d 6c 61 62 65 6c 22 3a 22 7b 7b 61 72 69 61 5f 6c 61 62 65 6c 7d 7d 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 75 65 64 2d 74 68 75 6d 62 6e 61 69 6c 2d 6f 76 65 72 6c 61 79 2d 69 6d 61 67 65 22 2c 58 3a 7b 73 74 79 6c 65 3a 22 7b 7b 62 61 63 6b 67 72 6f 75 6e 64 7d 7d 22 7d 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 6f 70 22 2c 56 3a 5b 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 68 65 61 64 65 72 22 2c 78 61 3a 22 55 70 20 4e 65 78 74 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 69 74 6c 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d Data Ascii: ria-label":"{{aria_label}}"},V:[{I:"div",S:"ytp-cued-thumbnail-overlay-image",X:{style:"{{background}}"}},{I:"span",S:"ytp-upnext-top",V:[{I:"span",S:"ytp-upnext-header",xa:"Up Next"},{I:"span",S:"ytp-upnext-title",xa:"{{title}}"},{I:"span",S:"ytp-upnext-
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 79 34 2c 74 68 69 73 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 4a 61 28 62 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 26 26 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c 0a 74 68 69 73 2c 31 31 35 31 32 39 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2c 31 38 37 38 38 29 3b 62 3d 74 68 69 73 2e 46 61 28 22 79 74 70 2d 75 70 6e 65 78 74 2d 61 75 74 6f 70 6c 61 79 2d 69 63 6f 6e 22 29 3b 74 68 69 73 2e 54 28 62 2c 22 63 6c 69 63 6b 22 Data Ascii: isten("click",this.y4,this);this.cancelButton.Ja(b);this.cancelButton&&this.api.createClientVe(this.cancelButton.element,this,115129);g.N(this,this.D);this.api.createClientVe(this.element,this,18788);b=this.Fa("ytp-upnext-autoplay-icon");this.T(b,"click"
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 29 2e 50 66 3f 74 68 69 73 2e 6a 3d 74 68 69 73 2e 42 3a 28 74 68 69 73 2e 6a 3d 6e 65 77 20 6f 36 28 61 29 2c 67 2e 56 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 74 68 69 73 2e 6a 2e 65 6c 65 6d 65 6e 74 2c 34 29 2c 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 0a 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 6f 76 65 72 6c 61 79 2d 63 61 6e 63 65 6c 6c 65 64 2d 73 74 61 74 65 22 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6f 76 65 72 6c 61 79 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 2e 4a 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 44 3d 6e 65 77 20 67 2e 62 4b 28 74 68 69 73 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b Data Ascii: ).Pf?this.j=this.B:(this.j=new o6(a),g.VT(this.player,this.j.element,4),g.N(this,this.j));this.overlay=new g.W({I:"div",S:"ytp-autonav-overlay-cancelled-state"});g.N(this,this.overlay);this.overlay.Ja(this.element);this.D=new g.bK(this);g.N(this,this.D);
2024-05-24 15:47:36 UTC	1390	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 22 7d 5d 7d 5d 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e 6a 2e 4a 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 76 61 72 20 62 3d 61 2e 67 65 74 56 69 64 65 6f 44 61 74 61 28 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 3d 6e 65 77 20 67 2e 63 57 28 22 53 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 21 30 2c 21 31 2c 62 2e 44 6c 2c 62 2e 73 75 62 73 63 72 69 62 65 64 2c 22 74 72 61 69 6c 65 72 2d 65 6e 64 73 63 72 65 65 6e 22 2c 6e 75 6c 6c 2c 61 2c 21 31 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 2e Data Ascii: -container"}]}]});g.N(this,this.j);this.j.Ja(this.element);var b=a.getVideoData();this.subscribeButton=new g.cW("Subscribe",null,"Unsubscribe",null,!0,!1,b.Dl,b.subscribed,"trailer-endscreen",null,a,!1);g.N(this,this.subscribeButton);this.subscribeButton.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49917	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:37 UTC	470	OUT	GET /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:37 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1604 Date: Fri, 24 May 2024 15:47:37 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:37 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:37 UTC	454	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49919	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:37 UTC	2569	OUT	POST /api/stats/qoe?fmt=398&afmt=250&cpn=HhvLVt-RnKxTEP9r&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=2&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&event=streamingstats&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaHZMVnQtUm5LeFRFUDlyEAI&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&afs=9.185:250;CggKA2RyYxIBMQ::i&vps=10.986:S&bwm=10.986:188257:2 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 371 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:37 UTC	371	OUT	Data Raw: 63 74 6d 70 3d 70 65 72 66 64 62 25 33 41 74 2e 39 32 32 30 25 33 42 25 32 43 73 65 73 73 69 6f 6e 70 65 72 66 64 62 25 33 41 74 2e 39 32 32 30 25 33 42 25 32 43 70 6c 61 79 62 61 63 6b 70 65 72 66 64 62 25 33 41 74 2e 39 32 32 30 25 33 42 25 32 43 68 77 63 25 33 41 6e 63 68 2e 34 25 32 43 6d 63 64 62 25 33 41 74 2e 39 32 32 30 25 33 42 69 74 61 67 73 2e 25 32 43 6c 6f 75 64 6e 65 73 73 25 33 41 76 2e 2d 39 39 38 36 2e 30 30 30 26 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 48 4e 5a 4e 47 35 36 55 45 39 74 61 6d 56 44 53 30 31 76 51 6d 74 54 52 57 73 79 53 57 77 78 59 6b 46 70 55 58 78 42 51 33 4a 74 63 30 74 75 51 6c 4e 5a 54 44 46 54 56 32 74 44 61 30 63 7a 52 55 56 31 4c 56 68 55 56 48 4d 77 5a 6d 74 53 63 33 67 30 54 55 39 31 Data Ascii: ctmp=perfdb%3At.9220%3B%2Csessionperfdb%3At.9220%3B%2Cplaybackperfdb%3At.9220%3B%2Chwc%3Anch.4%2Cmcdb%3At.9220%3Bitags.%2Cloudness%3Av.-9986.000&session_token=QUFFLUhqbHNZNG56UE9tamVDS01vQmtTRWsySWwxYkFpUXxBQ3Jtc0tuQlNZTDFTV2tDa0czRUV1LVhUVHMwZmtSc3g0TU91
2024-05-24 15:47:37 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49920	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:37 UTC	2592	OUT	POST /api/stats/qoe?fmt=399&afmt=250&cpn=HhvLVt-RnKxTEP9r&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&event=streamingstats&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaHZMVnQtUm5LeFRFUDlyEAM&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vfs=11.205:399:399:398:r&view=11.205:1634:919&vps=11.205:S,11.20 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:37 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 48 4e 5a 4e 47 35 36 55 45 39 74 61 6d 56 44 53 30 31 76 51 6d 74 54 52 57 73 79 53 57 77 78 59 6b 46 70 55 58 78 42 51 33 4a 74 63 30 74 75 51 6c 4e 5a 54 44 46 54 56 32 74 44 61 30 63 7a 52 55 56 31 4c 56 68 55 56 48 4d 77 5a 6d 74 53 63 33 67 30 54 55 39 31 4e 6d 46 71 63 56 42 35 55 48 46 54 51 54 52 70 4e 6c 68 53 52 58 6c 48 4e 48 56 4b 4f 55 78 6c 5a 6e 68 5a 53 56 4e 58 55 32 4a 7a 55 6b 6f 78 57 6a 4e 74 55 33 64 4d 54 44 42 47 5a 33 70 73 59 7a 51 34 63 55 31 50 4e 6c 52 52 51 56 4a 71 4d 46 52 6d 4e 6c 64 7a 62 6b 4a 43 56 33 42 57 53 48 42 42 52 31 55 77 52 31 42 76 4e 41 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbHNZNG56UE9tamVDS01vQmtTRWsySWwxYkFpUXxBQ3Jtc0tuQlNZTDFTV2tDa0czRUV1LVhUVHMwZmtSc3g0TU91NmFqcVB5UHFTQTRpNlhSRXlHNHVKOUxlZnhZSVNXU2JzUkoxWjNtU3dMTDBGZ3psYzQ4cU1PNlRRQVJqMFRmNldzbkJCV3BWSHBBR1UwR1BvNA%3D%3D
2024-05-24 15:47:37 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49921	142.250.185.97	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	750	OUT	GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 414 X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:06:37 GMT Expires: Sat, 25 May 2024 14:06:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 6061 ETag: "v113" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:38 UTC	414	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifII1GoogleXX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49922	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Dlc288Nbq/cIkM0+KRAjDw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:38 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:38 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:38 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49924	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	2721	OUT	GET /api/stats/playback?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=12.135&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=8122&cl=635991227&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&hl=en_US&cr=US&len=15.481&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&rtn=22&afmt=250&size=1634%3A919&inview=0&muted=1&vis=3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsa [TRUNCATED] Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:38 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49923	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	1498	OUT	GET /ptracking?html5=1&video_id=HXJEakm65FI&cpn=HhvLVt-RnKxTEP9r&ei=lrZQZqPqHOvA6dsP94ee4Ak&ptk=youtube_none&pltype=contentugc HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:38 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49925	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	1227	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=1&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=scroll&epn.percent_scrolled=90&tfd=15004 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:38 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:47:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49926	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:38 UTC	1233	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565650054&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=scroll&epn.percent_scrolled=90&_et=69&tfd=15292 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:39 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:47:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49927	142.250.186.65	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:39 UTC	515	OUT	GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:39 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 414 X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:16:18 GMT Expires: Sat, 25 May 2024 15:16:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 1881 ETag: "v113" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:39 UTC	414	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 02 02 02 02 02 02 02 02 02 02 02 02 08 02 02 02 02 02 0a 07 07 06 08 02 0a 02 02 02 0a 02 02 02 02 06 05 02 02 05 02 02 02 05 0a 05 05 07 08 09 09 09 02 03 0b 0c 0a 08 0c 06 08 09 08 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifII1GoogleXX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49928	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:40 UTC	1610	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565641293&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1716565658507 Content-Type: application/json X-Goog-Event-Time: 1716565658507 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:40 UTC	10922	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 49 6a 74 77 72 49 47 45 4a 72 77 72 77 55 51 72 4e 69 77 42 52 43 43 6f 76 38 53 45 49 6a 6a 72 77 55 51 33 65 6a 2d 45 68 44 6a 72 66 38 53 45 50 72 77 73 41 55 51 6e 75 53 77 42 52 43 57 6c 62 41 46 45 4e 50 67 73 41 55 51 6f 75 69 77 42 52 43 74 34 37 41 46 45 50 61 72 73 41 55 51 38 2d 75 77 42 52 43 41 35 62 41 46 45 4f 50 52 73 41 55 51 5f 49 57 77 42 52 43 67 36 4c 41 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240521.01.00","configInfo":{"appInstallData":"CIjtwrIGEJrwrwUQrNiwBRCCov8SEIjjrwUQ3ej-EhDjrf8SEPrwsAUQnuSwBRCWlbAFENPgsAUQouiwBRCt47AFEParsAUQ8-uwBRCA5bAFEOPRsAUQ_IWwBRCg6LAFEK
2024-05-24 15:47:40 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:40 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:40 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-24 15:47:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49932	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:41 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:42 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 24 May 2024 15:47:41 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:42 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:42 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49934	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:42 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: WEB8iOA0BwbvQZH2SLsQgQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:42 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:42 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:42 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49936	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:43 UTC	2790	OUT	POST /api/stats/atr?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=17.022&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=13009&cl=635991227&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&hl=en_US&cr=US&len=15.481&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&afmt=250&muted=1&vis=3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%2 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 2153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:43 UTC	2153	OUT	Data Raw: 61 74 72 3d 61 25 33 44 36 25 32 36 61 32 25 33 44 31 25 32 36 63 25 33 44 31 37 31 36 35 36 35 36 34 30 25 32 36 64 25 33 44 35 36 25 32 36 65 25 33 44 48 58 4a 45 61 6b 6d 36 35 46 49 25 32 36 63 31 61 25 33 44 31 25 32 36 63 36 61 25 33 44 31 25 32 36 63 36 62 25 33 44 31 25 32 36 68 68 25 33 44 48 38 54 6e 53 59 32 4b 44 74 42 38 37 6b 6a 5f 39 49 42 42 49 31 4b 69 39 33 43 33 52 4d 48 47 4d 54 4c 6e 7a 32 73 75 42 59 51 25 32 36 72 31 61 25 33 44 25 32 34 58 38 41 35 77 4a 68 52 41 41 59 4b 41 34 75 2d 4b 67 50 65 55 4b 57 4b 4b 4a 6e 6b 54 39 36 6e 41 44 51 42 45 41 72 5a 31 4b 52 72 4c 77 46 51 6a 42 77 4e 63 59 39 48 43 64 54 56 4f 6e 72 64 35 39 39 75 46 66 4f 4a 47 32 62 4d 49 78 32 72 39 4d 57 6d 55 4a 63 50 42 58 4e 32 71 4c 39 4d 6b 6c 4d 50 Data Ascii: atr=a%3D6%26a2%3D1%26c%3D1716565640%26d%3D56%26e%3DHXJEakm65FI%26c1a%3D1%26c6a%3D1%26c6b%3D1%26hh%3DH8TnSY2KDtB87kj_9IBBI1Ki93C3RMHGMTLnz2suBYQ%26r1a%3D%24X8A5wJhRAAYKA4u-KgPeUKWKKJnkT96nADQBEArZ1KRrLwFQjBwNcY9HCdTVOnrd599uFfOJG2bMIx2r9MWmUJcPBXN2qL9MklMP
2024-05-24 15:47:43 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49940	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:44 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 1Z+PFy6T+jN82W4gG9k3Bg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:44 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:44 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:44 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49939	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:44 UTC	1618	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=44813&tfd=77426 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:44 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:47:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49938	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:44 UTC	1617	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45be45m0v892801163za200&_p=1716565590438&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=3&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&dt=Getting%20Started%20%7C%20Daystar&en=video_start&epn.video_current_time=2&epn.video_duration=15&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=false&_et=43220&tfd=77426 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:44 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:47:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49941	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:46 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: IT94b0bSOVVxXJK/R2RCkQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49943	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:47 UTC	2869	OUT	POST /api/stats/qoe?fmt=399&afmt=250&cpn=HhvLVt-RnKxTEP9r&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=4&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&event=streamingstats&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaHZMVnQtUm5LeFRFUDlyEAQ&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&bwm=12.034:268141:0.325,14.003:1085398:1.325&bwe=12.034:280581,1 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 466 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:47 UTC	466	OUT	Data Raw: 63 6d 74 3d 31 32 2e 30 33 34 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 30 33 34 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 30 35 32 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 30 35 32 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 31 34 35 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 31 34 37 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 31 34 38 25 33 41 32 2e 30 30 30 25 32 43 31 32 2e 33 32 34 25 33 41 32 2e 30 30 33 25 32 43 31 32 2e 35 37 37 25 33 41 32 2e 32 31 34 25 32 43 31 32 2e 39 38 33 25 33 41 32 2e 36 32 31 25 32 43 31 34 2e 30 30 33 25 33 41 32 2e 30 30 30 25 32 43 31 34 2e 30 30 37 25 33 41 32 2e 30 30 30 25 32 43 31 35 2e 32 33 39 25 33 41 32 2e 30 30 30 25 32 43 32 30 2e 39 38 38 25 33 41 32 2e 30 30 30 26 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 Data Ascii: cmt=12.034%3A2.000%2C12.034%3A2.000%2C12.052%3A2.000%2C12.052%3A2.000%2C12.145%3A2.000%2C12.147%3A2.000%2C12.148%3A2.000%2C12.324%3A2.003%2C12.577%3A2.214%2C12.983%3A2.621%2C14.003%3A2.000%2C14.007%3A2.000%2C15.239%3A2.000%2C20.988%3A2.000&session_token=Q
2024-05-24 15:47:47 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49944	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:47 UTC	1105	OUT	GET /wp-content/uploads/2024/01/bg-1-1.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
2024-05-24 15:47:48 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:47 GMT Content-Type: image/webp Content-Length: 201054 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 09 Jan 2024 21:00:48 GMT ETag: "27a0fc3-3115e-60e899bd7a6fb" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:48 UTC	7648	IN	Data Raw: 52 49 46 46 56 11 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 05 00 2b 03 00 41 4c 50 48 ff b0 02 00 01 19 48 6e 1b 49 92 a0 ee 99 d1 00 ea ff 7f 38 b3 73 99 e5 1e d1 ff 09 e0 f0 37 4f 78 f2 33 1f fc 83 fd 9c c7 17 de 51 9c 3e 14 7d d3 e0 e9 72 44 ca bc 58 b6 7d ee e0 a9 d7 01 0f 22 b0 e3 a7 8b 28 cb 2b ae 03 bc 00 5e 3b 2e 73 56 07 97 39 e8 bc 5c 67 59 70 75 e9 d3 bb 4b b7 ab 9f 11 67 4a 4d 0b 94 6a 50 ab 37 95 ef 9b 53 d8 68 1b 44 2c ea 00 43 3e aa 99 c5 f9 8d c6 2b 8f 49 5d 7a 64 33 73 4a 1b cd e2 30 6c db 36 8c 65 e7 ff a7 93 a6 dd 2e 88 88 09 d0 63 66 9f 93 f0 de c7 cc 75 e7 7d 96 55 52 65 f2 36 e7 da c6 97 39 d6 43 56 e9 f5 3a 8b 8c f5 34 95 24 3e 66 ac eb 6c 6f b2 ca ec c4 3b 4f d7 b6 9d f9 94 5b db ce e5 b3 97 43 9c df 7c ec fe 8d 1f Data Ascii: RIFFVWEBPVP8X+ALPHHnI8s7Ox3Q>}rDX}"(+^;.sV9\gYpuKgJMjP7ShD,C>+I]zd3sJ0l6e.cfu}URe69CV:4$>flo;O[C\|
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: b0 88 06 e1 fd 30 f9 17 79 8b ee 57 63 e4 1a 18 04 00 44 fb 57 73 62 c5 11 63 9f 57 79 ba 8e ce b9 19 5b 80 56 60 43 11 c8 0e a6 34 dc da 1f ff 27 3c 35 ad 11 79 67 a8 1a 86 81 6b 69 fb b4 76 40 55 78 2d fc a5 a6 04 3a 0b 13 43 19 2e 28 37 ed 57 1a 4b d6 44 f5 d8 d5 c3 9c 60 ef 7b 2f 48 7d 11 5e 89 d9 8f b8 68 39 45 ee da 3a 84 5b b4 e7 c2 cb dc 9f 19 41 df c4 30 80 24 16 1e ea 35 50 bc b4 c8 18 e1 12 38 a6 1d 5f d1 40 4c fc fa 03 ee 98 88 70 f4 80 fc df 7a ab 6a f7 e3 56 f2 15 c1 dc a4 09 98 17 45 53 80 41 8d 43 f5 5f f3 b5 7e f2 54 b7 ee e4 c0 8b ae b7 81 1b 8b c3 72 f3 32 70 ec bf f9 32 8a 40 56 ea b4 92 0a 57 19 b1 21 02 5a e8 0e 1c 1c c4 9a df 80 d3 29 3b 26 13 90 16 c6 d1 f2 71 03 53 73 10 e0 fe 6d 1a 62 31 1c c6 2d 90 38 45 ea b9 b4 f0 ce c6 45 4a Data Ascii: 0yWcDWsbcWy[V`C4'<5ygkiv@Ux-:C.(7WKD`{/H}^h9E:[A0$5P8_@LpzjVESAC_~Tr2p2@VW!Z);&qSsmb1-8EEJ
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 51 d5 bf a1 8b d7 83 58 dc 8d de cb ac 1e 2c 72 e5 aa 3a 78 cd 62 c9 65 e9 50 5d 58 60 6d ef d9 52 0b e7 ea 28 22 90 40 54 78 0a a9 a4 f4 39 a7 92 61 a4 45 cb 5c f2 44 47 16 67 12 10 5b 7e c8 21 2c bc 72 6f e4 35 1c ae 8a 03 2c 91 26 24 d7 07 ab 48 c7 eb 3a 95 5f 27 32 8a fc c3 d5 87 84 e1 8c 72 0c e8 30 4b 34 da 69 51 ac bc 5e db cf cc ac b6 22 54 86 6d ce ee 05 b9 5f fe 08 da ca d2 da d6 96 05 69 4a 51 9d f2 d7 5f 3e 4d f0 b4 d7 5d 2b 46 fe d2 87 00 66 f3 02 43 da 3a ef 17 9b 67 40 37 38 04 b3 6c 1a a7 8a 15 4f 01 88 fc dc 1d 09 18 55 57 69 eb ff 38 59 02 5a 46 41 4b a1 27 6c 13 88 8a 05 5b b0 5e fe ba 0f cf e4 2c f7 b2 65 fd b8 2e ca a5 7a fe cb 7c 73 f3 a9 90 53 ac c5 a7 2a d1 72 61 28 30 c6 ce cb f1 94 de fa f1 33 9c ce eb d0 eb 8c b7 65 ec 9f a0 17 Data Ascii: QX,r:xbeP]X`mR("@Tx9aE\DGg[~!,ro5,&$H:_'2r0K4iQ^"Tm_iJQ_>M]+FfC:g@78lOUWi8YZFAK'l[^,e.z\|sS*ra(03e
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 64 4a 76 78 33 92 66 8a 14 da 16 57 ac e0 dd 26 3d f5 3d be da 27 90 c2 5e 5a d3 e2 6d 70 cf 88 ff 8d 7d 1c 4a 02 4c 20 1a 25 aa b1 49 c4 2b cb 88 b1 04 34 18 e5 59 62 47 41 73 40 3d d4 27 5e 78 d0 bb 58 59 fc 9d 31 3a 09 d8 0d 13 6e 2b c8 78 11 9f 5e 13 d4 f4 33 19 f8 35 62 9a 57 a0 e6 d7 a3 81 7d 25 55 e2 2b 22 0c 44 89 47 ba d9 01 79 d1 3a 0b 20 d1 fb 3e 4d 85 c5 96 31 4a d8 4b b8 5c a2 49 3b e9 2f 2d 7c 3b e6 bf ff 3e d6 f3 9f 6f 58 ff 4d fc 62 b7 92 91 a2 d0 2d 18 51 a2 06 32 78 ba 9d a1 7b c0 63 54 43 09 2d aa e9 70 98 a6 82 ff db 4f 79 31 06 a3 cf ab 38 b5 ad 42 58 cf 85 85 93 85 14 c3 55 0e e7 94 03 e4 66 2a dd ec 54 ae b1 e8 36 3d b2 12 54 e0 cf af 84 23 4d ab c5 a2 f6 7f 8c a1 4d 38 e0 bb ef 28 ff 47 15 d8 6b dc e3 80 9f 85 8a c7 67 5e ea d3 5f Data Ascii: dJvx3fW&=='^Zmp}JL %I+4YbGAs@='^xXY1:n+x^35bW}%U+"DGy: >M1JK\I;/-\|;>oXMb-Q2x{cTC-pOy18BXUf*T6=T#MM8(Gkg^_
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 18 47 60 16 b6 84 6f 59 6f aa ef 27 1f e6 da 0a 29 98 8a 54 de f8 89 dd 23 4a 76 e5 5b bc 6f 2f 1d a4 c0 44 be de 6a af 5e 0f 3d d6 4f 3f 22 42 55 5b 10 61 db b9 70 fe b0 c2 be e7 74 12 a0 f6 0a b2 60 eb a7 dc 05 49 3e d8 09 10 df 62 12 80 0d 7f 00 c9 6e 4d 7e df 55 5a 5c 61 e4 7e 49 79 51 0f 31 86 70 b6 5a 61 45 99 69 ec 7a 39 c1 61 d7 a2 fa f5 ae 2e 1c 13 c3 38 9e 14 f2 bb 22 ee c9 38 81 39 33 27 4b 02 52 a9 93 44 3d 75 1c b0 93 7b e6 20 a4 18 26 4e b5 35 4d 41 fc de 10 a5 3a 99 4a f4 5d 07 95 5a 4e 05 e6 80 38 f7 f2 7c 81 68 85 2b 29 21 51 32 b0 f6 2c 8e 42 a5 ad 00 9a 85 ad eb 09 73 3e 4f 84 6c 9f 47 50 01 5c 3d e8 aa a6 1a 5c dc 3a f8 2f 43 b0 e0 30 e0 de 72 ff d7 9c 36 9e 36 93 72 81 2f e1 af fe bb 31 62 85 7c 37 21 a9 f0 b6 76 b9 01 6a 6e 00 b6 7c Data Ascii: G`oYo')T#Jv[o/Dj^=O?"BU[apt`I>bnM~UZ\a~IyQ1pZaEiz9a.8"893'KRD=u{ &N5MA:J]ZN8\|h+)!Q2,Bs>OlGP\=\:/C0r66r/1b\|7!vjn\|
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 67 a4 f4 4a 4f 4b 9f 27 f6 6f 69 6f ff dd 7e 1f b6 ed fe ca 96 08 59 37 6c 2f 4b 93 02 e7 1e b9 6f 2e be 5b d3 54 13 41 3b 96 71 5a 3f 98 9f 13 08 96 85 5f 1a 23 13 e3 ad 41 f7 ff 0a d6 7d 2d 92 df 0e f6 e2 e6 67 f2 dc 43 cf ba c0 07 ea c0 b9 75 b4 af 66 5d 17 56 ce 33 e5 b7 29 ab aa b4 f4 6b 19 bc ab 3a d7 44 bf d3 fb a8 e7 66 7c 09 55 e8 4d 60 1d a1 22 73 38 51 00 9a 34 ce d1 1e 86 2a 97 14 7e 18 2b e9 19 ca 15 8b b6 8c a5 9b 82 51 9e 05 1a bc aa 84 84 4d a9 4e 36 38 cb 91 d0 01 94 50 43 84 33 c6 84 2a 5d 1a 9a 72 82 a9 67 25 b5 38 ef 3b 05 31 78 5a d9 10 3b 58 cf 67 19 25 16 84 38 7a 74 09 36 0c c9 09 c7 29 12 ed 1f 00 af 15 88 13 4a 7a 66 33 42 2b 48 2f be 0d 5e 19 aa 6d a8 1b b7 cb 13 92 a0 1f fe 67 7b de fd 99 81 91 21 07 50 39 93 4b 69 62 d6 f5 17 Data Ascii: gJOK'oio~Y7l/Ko.[TA;qZ?_#A}-gCuf]V3)k:Df\|UM`"s8Q4~+QMN68PC3]rg%8;1xZ;Xg%8zt6)Jzf3B+H/^mg{!P9Kib
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 72 31 f2 8f b6 2e 44 a4 98 0f a4 93 f4 0a ad ee 6c 00 53 61 d2 07 26 92 ef d5 79 61 92 da d1 d5 1a ef b2 03 e6 94 ec 02 91 f9 96 b7 f5 26 78 01 85 e6 e7 b3 df d4 d2 8f 11 2c 1e 6f d1 18 15 f8 54 07 0b 59 19 2c 25 1c e3 4d bc 01 63 4a e4 01 be a0 e8 a0 23 f6 09 8f 38 cd d3 29 77 92 84 ce 02 61 bd df 97 5a 8c 02 c8 c4 bf e2 d6 2d fd 9a 20 d2 4c 09 ea 54 af 04 fc d2 00 d4 56 3d 65 c2 48 de f8 31 de 0b bb 7e 6d 60 4d 1d a2 66 a4 13 ba 01 51 4c 39 3b 93 01 b2 c7 27 29 f8 38 16 af f7 e3 cf a9 c4 19 a8 bb 8a f3 7b 5d 04 9d 1a cb f2 0d 32 c7 a6 57 78 88 86 48 01 a4 74 6b f1 b9 bd ff ee 09 57 a9 af fa d2 52 b2 92 24 a5 4d cc b8 f8 73 c9 42 20 59 89 5f 8e 4a 08 18 bc 28 a1 d3 43 90 c1 30 73 80 c0 84 e5 0c be 9f c8 05 96 05 41 32 2f c0 47 b9 c8 28 f9 23 0b 3f 56 a0 Data Ascii: r1.DlSa&ya&x,oTY,%McJ#8)waZ- LTV=eH1~m`MfQL9;')8{]2WxHtkWR$MsB Y_J(C0sA2/G(#?V
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: bf d3 04 63 bd e4 b5 18 20 4f 3a 8c fa dd ed 7c 4c 2b 13 08 7e 60 0d 51 54 62 e3 81 3b 60 9a 16 6c 0d 58 e0 e9 e3 2e 59 20 3e 9c 69 ce 31 92 90 d9 b8 fd 29 f5 a5 06 e1 f1 b7 f5 ff f0 60 a7 f2 33 f5 46 2a 74 ed df d2 14 77 03 d6 3e b2 9c c3 85 53 2e 27 dc de d2 81 0c 28 8b 9f e3 f8 b8 43 0b 60 68 fd 90 cb 63 20 b4 cc 25 e5 14 e8 aa 14 e5 38 9b 20 f7 fe eb ea 49 38 e7 b2 ce 54 49 39 46 9c 8b 91 73 a3 72 4f 95 94 40 0e 1e 45 22 01 aa ee 68 8e 30 a6 51 44 e0 67 d5 a4 a0 44 2e af 8a 73 11 03 34 55 f0 28 78 01 be 40 73 5e c5 97 0b c0 6c d8 12 6a 48 24 59 e6 15 ba 52 01 a8 e4 33 4b 51 9c 88 73 e9 6a 01 a1 d5 12 80 a4 b3 5b 2c 89 30 5c b5 08 87 73 69 3e cf fb c4 ab a4 40 ec cf 4a c9 f7 4b 95 9e 4f bd 35 a4 18 c8 f3 11 3e 53 5a bd 2c d4 bb fb 7d 48 fb f1 e0 3e 7f Data Ascii: c O:\|L+~`QTb;`lX.Y >i1)`3F*tw>S.'(C`hc %8 I8TI9FsrO@E"h0QDgD.s4U(x@s^ljH$YR3KQsj[,0\si>@JKO5>SZ,}H>
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 21 4b 8e a6 75 c6 e5 50 a8 38 c0 1a 84 66 1c 62 73 af f4 a6 de 03 c5 d2 26 68 d2 3f 62 dd 1b de e2 16 24 32 f0 e0 c4 ef 7b 2e 70 60 1e 6e a1 96 97 38 a3 8f 6b a0 ca de c0 0b ae 43 83 e0 69 24 19 70 5a ce 0f 87 72 be 51 23 dd b1 2f 53 77 f8 53 00 08 97 32 48 4e c7 31 14 aa 53 c3 a7 dd 26 ae 87 3c 87 59 f4 90 a9 6c 00 91 69 77 ef ed 9e e2 75 a1 68 31 63 c7 e3 87 a3 6f 5f 45 f1 33 d5 a6 7a 10 54 a6 8e b7 50 11 9a ec 12 cf d9 c3 40 64 5a 3d c4 06 a1 86 4e ad 41 28 cc 05 10 14 c6 0c 39 9f 22 90 21 16 14 d4 32 c2 38 09 7e 03 26 41 0f 6d 05 28 46 54 82 c7 cb 4a 23 84 d4 14 f1 7c e4 6c 23 82 18 43 92 03 8e 4c c8 c6 84 59 f0 94 85 63 21 04 3c 9d 29 f0 73 c1 00 7d 09 a0 49 73 2d e0 4a f4 12 55 61 2f cc 61 c3 37 9c 2f ab 75 f4 0b 8a a8 f3 4a 55 fe fb 38 71 c0 59 58 Data Ascii: !KuP8fbs&h?b$2{.p`n8kCi$pZrQ#/SwS2HN1S&<Yliwuh1co_E3zTP@dZ=NA(9"!28~&Am(FTJ#\|l#CLYc!<)s}Is-JUa/a7/uJU8qYX
2024-05-24 15:47:48 UTC	8192	IN	Data Raw: 50 c5 34 f8 38 96 29 1f 67 b8 90 b2 65 b9 a8 7e 80 3d f2 63 7d e2 22 e5 ea db 16 d8 4d 2f 99 39 6d 73 d6 91 f7 57 1a a6 41 02 1c aa 50 5a 9c 73 b6 31 65 1d 3d ff 81 fa 62 50 e5 3e b7 8f 31 de b8 1e db cb b3 aa fc 9b 3f eb 9c 55 7f e1 bb d0 b9 7f 01 eb b1 60 63 09 88 72 f9 3c 19 0c 3a 60 db d6 93 67 58 08 49 24 80 11 e3 65 8a bc 85 bb 98 5b 3a 90 1b 90 10 e8 37 3b a9 36 63 85 09 e0 2b 4d 4e 44 a5 52 a9 22 64 69 36 03 b5 4b e6 59 3e 2e fa 12 f8 f7 6a 4a 84 86 63 e7 16 09 40 11 2f 86 bb c5 fe 1d 7d ea ef 1a c1 96 53 09 41 50 aa 75 d2 8b 46 05 81 71 a5 58 ca 29 4a 31 02 61 9d d4 52 11 69 e1 5b 60 54 75 44 5b 52 f0 29 ca 32 ec 0c 70 35 77 61 da 43 08 d2 02 b7 c6 61 5e e9 02 07 25 17 e5 58 4f 5e 16 f9 4b 38 a3 ce cd 9c d1 7a 41 e6 d7 7e ca 73 29 c1 28 b7 71 b3 Data Ascii: P48)ge~=c}"M/9msWAPZs1e=bP>1?U`cr<:`gXI$e[:7;6c+MNDR"di6KY>.jJc@/}SAPuFqX)J1aRi[`TuD[R)2p5waCa^%XO^K8zA~s)(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49946	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:48 UTC	650	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-lucky-referrer: sec-ch-ua-mobile: ?0 x-lucky-uid: 0cce5631-1716565635899-af5311f42aca53fa User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:49 UTC	343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:49 UTC	1047	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:49 UTC	1390	IN	Data Raw: 64 76 61 6e 63 65 64 22 3a 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 4d 65 74 72 69 63 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 22 3a 22 22 7d 2c 22 61 76 65 72 61 67 65 43 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d Data Ascii: dvanced":{"conversionMetric":{"active":false,"metric":""},"averageConversion":{"active":false,"value":0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}
2024-05-24 15:47:49 UTC	1362	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 22 7d 2c 22 63 6f 6e 74 61 63 74 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 65 6d 61 69 6c 22 7d 2c 22 71 75 65 73 74 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 Data Ascii: e":true,"label":"Your first name"},"contact":{"active":true,"label":"Your email"},"question":{"active":false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTit
2024-05-24 15:47:49 UTC	179	IN	Data Raw: 72 73 22 3a 5b 7b 22 69 64 22 3a 22 64 39 61 66 62 35 66 35 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 69 7a 69 6e 22 7d 5d 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 62 6f 74 22 3a 66 61 6c 73 65 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: rs":[{"id":"d9afb5f5","displayName":"Faizin"}],"visitor":{"bot":false,"browser":{"name":"Chrome","version":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49948	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:48 UTC	1337	OUT	GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.70d63d6d093f3a45a0c6.bundle.min.js HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
2024-05-24 15:47:55 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:55 GMT Content-Type: text/javascript Content-Length: 4651 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 23 Dec 2023 10:12:07 GMT ETag: "28438d5-122b-60d2a90b1ae0c" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:55 UTC	4651	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 31 36 2e 30 20 2d 20 32 30 2d 30 39 2d 32 30 32 33 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 39 38 39 31 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 20 41 6e 63 68 6f 72 4c 69 6e 6b 73 7b 66 6f 6c 6c 6f 77 4d 65 6e 75 41 Data Ascii: /! elementor-pro - v3.16.0 - 20-09-2023 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[42],{9891:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=class AnchorLinks{followMenuA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49949	142.250.184.238	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:48 UTC	733	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:49 UTC	1794	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 24 May 2024 15:47:49 GMT Date: Fri, 24 May 2024 15:47:49 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: PREF=f7=4000; Domain=.youtube.com; Expires=Thu, 23-Jan-2025 03:40:49 GMT; Path=/; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:49 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 62 63 36 35 37 32 34 33 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-05-24 15:47:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49950	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	2368	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=22.989&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=18976&cl=635991227&state=paused&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&hl=en_US&cr=US&len=15.481&rtn=32&afmt=250&idpj=-1&ldpj=-19&rti=22&size=1634%3A919&inview=0&st=0%2C2.167&et=2%2C3.622&muted=1%2C1&vis=3%2C3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRMaExtbHJleTNGclpHWEhuNmRIZEQtZHNoVG95NzE2VjZVdWQ2TFJDWTYtZ2JmQVBta0tESlBrY29URW1LQmpsSGcyRkNpYWpKTVhXa1U2VHRaaVEtaXdkVHBpV2NCMFlKeS1uNmtGN3gxVzA5cWJ1V2tqaHVNTElYNTlaS1ZlWEJ6d1QyTTRMU2piZ1ZSZ3dmdkJRaAI HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:49 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49953	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	1336	OUT	GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
2024-05-24 15:47:49 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:49 GMT Content-Type: text/javascript Content-Length: 1360 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "25215b1-550-618fad42a0103" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:49 UTC	1360	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 30 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 37 5d 2c 7b 31 33 32 37 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 54 65 78 74 45 64 69 74 6f 72 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 Data Ascii: /! elementor - v3.21.0 - 20-05-2024 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[357],{1327:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class TextEditor extends elementorModules.frontend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49952	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	1329	OUT	GET /wp-content/plugins/elementor/assets/js/tabs.c2af5be7f9cb3cdcf3d5.bundle.min.js HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
2024-05-24 15:47:56 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:56 GMT Content-Type: text/javascript Content-Length: 3705 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 21 May 2024 18:17:20 GMT ETag: "25215b0-e79-618fad42a0103" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:56 UTC	3705	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 30 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 30 5d 2c 7b 39 37 32 38 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 62 61 73 65 54 61 62 73 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 Data Ascii: /! elementor - v3.21.0 - 20-05-2024 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[520],{9728:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class baseTabs extends elementorModules.frontend.h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49955	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	356	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:49 UTC	241	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:49 UTC	1149	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:49 UTC	1390	IN	Data Raw: 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 22 3a 7b 22 67 72 65 65 74 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 63 6f 6e 22 3a 22 75 73 65 72 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 Data Ascii: 0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}},"chat":{"messaging":{"greeting":{"active":false,"icon":"user","headline":"Welcome to Daystar Payment
2024-05-24 15:47:49 UTC	1362	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 6c 65 22 3a 22 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 73 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 2c 22 70 65 72 73 6f 6e 61 6c 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 70 72 6f 66 69 6c 65 50 68 6f 74 6f 22 2c 22 74 69 74 6c 65 22 3a 22 Data Ascii: :false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTitle":"Daystar Payments","backgroundColor":"default"},"personal":{"headerImage":"profilePhoto","title":"
2024-05-24 15:47:49 UTC	77	IN	Data Raw: 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: ion":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49951	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	650	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-lucky-referrer: sec-ch-ua-mobile: ?0 x-lucky-uid: 0cce5631-1716565635899-af5311f42aca53fa User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.daystarpayments.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:50 UTC	1047	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:50 UTC	1390	IN	Data Raw: 64 76 61 6e 63 65 64 22 3a 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 4d 65 74 72 69 63 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 69 63 22 3a 22 22 7d 2c 22 61 76 65 72 61 67 65 43 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d Data Ascii: dvanced":{"conversionMetric":{"active":false,"metric":""},"averageConversion":{"active":false,"value":0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}
2024-05-24 15:47:50 UTC	1362	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 22 7d 2c 22 63 6f 6e 74 61 63 74 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 65 6d 61 69 6c 22 7d 2c 22 71 75 65 73 74 69 6f 6e 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 Data Ascii: e":true,"label":"Your first name"},"contact":{"active":true,"label":"Your email"},"question":{"active":false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTit
2024-05-24 15:47:50 UTC	179	IN	Data Raw: 72 73 22 3a 5b 7b 22 69 64 22 3a 22 64 39 61 66 62 35 66 35 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 69 7a 69 6e 22 7d 5d 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 62 6f 74 22 3a 66 61 6c 73 65 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: rs":[{"id":"d9afb5f5","displayName":"Faizin"}],"visitor":{"bot":false,"browser":{"name":"Chrome","version":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49956	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 3mY2FwTNy887aGq3CNsGsg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:49 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:49 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:49 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49957	35.244.167.102	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	545	OUT	GET /mqtt HTTP/1.1 Host: realtime.luckyorange.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 2o1eJeCw30CHfY8hc14cPg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqtt
2024-05-24 15:47:49 UTC	248	IN	HTTP/1.1 426 Upgrade Required content-length: 0 date: Fri, 24 May 2024 15:47:48 GMT sec-websocket-protocol: mqtt server: Cowboy upgrade: websocket Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49954	157.240.251.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:49 UTC	1139	OUT	GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 15:47:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49958	157.240.251.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	1231	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x5fad5d17b6805ca3","source_keys":["1","2"]},{"key_piece":"0x8c3e35cdc701ae2c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 15:47:50 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 15:47:50 UTC	1787	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 15:47:50 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49959	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	495	OUT	OPTIONS /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	405	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type date: Fri, 24 May 2024 15:47:50 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49960	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	495	OUT	OPTIONS /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.daystarpayments.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	405	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type date: Fri, 24 May 2024 15:47:50 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49961	35.244.167.102	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	549	OUT	GET /mqtt HTTP/1.1 Host: realtime.luckyorange.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: /bgYa/MXHjjK47WoFNPXtA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqttv3.1
2024-05-24 15:47:50 UTC	193	IN	HTTP/1.1 400 Bad Request content-length: 0 date: Fri, 24 May 2024 15:47:50 GMT server: Cowboy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49963	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	356	OUT	GET /0cce5631 HTTP/1.1 Host: settings.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:50 UTC	241	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 3978 Vary: Accept-Encoding Date: Fri, 24 May 2024 15:47:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:50 UTC	1149	IN	Data Raw: 7b 22 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 65 76 65 6e 74 52 75 6c 65 73 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 76 65 72 74 62 61 63 6b 22 3a 74 72 75 65 2c 22 63 68 61 74 2e 70 72 65 51 75 61 6c 69 66 69 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 66 61 6c 73 65 2c 22 73 75 72 76 65 79 73 2e 6c 6f 6e 67 54 65 78 74 22 3a 74 72 75 65 2c 22 73 63 72 61 6d 62 6c 65 22 3a 74 72 75 65 2c 22 66 75 6e 6e 65 6c 73 2e 76 69 73 69 74 6f 72 73 22 3a 74 72 75 65 2c 22 67 63 73 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 43 6f 6e 73 65 6e 74 53 65 74 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 79 2d 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 2d 6e 65 77 2d 61 70 70 Data Ascii: {"announcements":[],"eventRules":[],"features":{"revertback":true,"chat.preQualification":true,"messenger":false,"surveys.longText":true,"scramble":true,"funnels.visitors":true,"gcs":true,"requireConsentSetting":true,"key-events":true,"bigcommerce-new-app
2024-05-24 15:47:50 UTC	1390	IN	Data Raw: 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 69 73 4c 69 66 65 74 69 6d 65 22 3a 66 61 6c 73 65 7d 2c 22 68 61 73 68 65 64 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 61 64 4d 65 74 68 6f 64 22 3a 22 6f 6e 6c 6f 61 64 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 72 61 74 65 22 3a 31 7d 2c 22 73 65 73 73 69 6f 6e 73 22 3a 7b 22 73 65 73 73 69 6f 6e 4c 65 6e 67 74 68 22 3a 39 30 30 30 30 30 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 22 3a 7b 22 67 72 65 65 74 69 6e 67 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 63 6f 6e 22 3a 22 75 73 65 72 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 Data Ascii: 0,"currency":"USD","isLifetime":false},"hashedPages":false,"loadMethod":"onload","sampling":{"active":false,"rate":1},"sessions":{"sessionLength":900000}},"chat":{"messaging":{"greeting":{"active":false,"icon":"user","headline":"Welcome to Daystar Payment
2024-05-24 15:47:50 UTC	1362	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 22 3a 22 51 75 65 73 74 69 6f 6e 2f 43 6f 6d 6d 65 6e 74 22 7d 7d 7d 7d 2c 22 73 74 79 6c 65 73 22 3a 7b 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 22 33 46 35 32 46 41 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 61 76 61 69 6c 61 62 6c 65 54 65 61 6d 22 2c 22 63 6f 6d 70 61 6e 79 54 69 74 6c 65 22 3a 22 44 61 79 73 74 61 72 20 50 61 79 6d 65 6e 74 73 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 2c 22 70 65 72 73 6f 6e 61 6c 22 3a 7b 22 68 65 61 64 65 72 49 6d 61 67 65 22 3a 22 70 72 6f 66 69 6c 65 50 68 6f 74 6f 22 2c 22 74 69 74 6c 65 22 3a 22 Data Ascii: :false,"label":"Question/Comment"}}}},"styles":{"accentColor":"3F52FA","accentColorGradient":"","introduction":{"headerImage":"availableTeam","companyTitle":"Daystar Payments","backgroundColor":"default"},"personal":{"headerImage":"profilePhoto","title":"
2024-05-24 15:47:50 UTC	77	IN	Data Raw: 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 7d 2c 22 77 68 69 74 65 4c 61 62 65 6c 22 3a 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 7d 7d Data Ascii: ion":"117.0.0.0"},"device":{"type":"desktop"}},"whiteLabel":{"active":false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49962	157.240.0.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:50 UTC	896	OUT	GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:51 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 15:47:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49964	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:51 UTC	636	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
2024-05-24 15:47:51 UTC	325	IN	HTTP/1.1 304 Not Modified x-powered-by: Express access-control-allow-origin: * etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:51 GMT x-envoy-upstream-service-time: 0 server: envoy content-length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49967	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:51 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: w4oi1PrxwaSNPNRc3f9Jbw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:51 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:51 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:51 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49965	157.240.0.35	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:51 UTC	933	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:51 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 15:47:51 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49966	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:51 UTC	1004	OUT	GET /embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:51 UTC	1805	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 24 May 2024 15:47:51 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: PREF=f7=4000; Domain=.youtube.com; Expires=Thu, 23-Jan-2025 03:40:51 GMT; Path=/; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 77 4c 6b 51 4f 55 64 4b 67 4e 64 67 7a 4a 67 64 4e 68 38 61 35 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="wLkQOUdKgNdgzJgdNh8a5g">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 Data Ascii: 60-2C7F,U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 Data Ascii: 113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 54 69 6d 65 28 29 7d 2c 74 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 74 2c 6e 29 7b 76 61 72 20 74 69 63 6b 73 3d 79 74 63 73 69 2e 67 74 28 6e 29 2e 74 69 63 6b 3b 76 61 72 20 76 3d 74 7c 7c 79 74 63 73 69 2e 6e 6f 77 28 29 3b 69 66 28 74 69 63 6b 73 5b 6c 5d 29 7b 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 3d 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 7c 7c 5b 74 69 63 6b 73 5b 6c 5d 5d 3b 74 69 63 6b 73 5b 22 5f 22 2b 6c 5d 2e 70 75 73 68 28 76 29 7d 74 69 63 6b 73 5b 6c 5d 3d 0a 76 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 76 2c 6e 29 7b 79 74 63 73 69 2e 67 74 28 6e 29 2e 69 6e 66 6f 5b 6b 5d 3d 76 7d 2c 69 6e 66 6f 47 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 70 2c 6e 29 7b 79 74 63 73 69 2e 67 74 28 6e 29 2e 67 65 6c 2e 70 72 65 4c 6f 67 67 65 64 47 65 Data Ascii: Time()},tick:function(l,t,n){var ticks=ytcsi.gt(n).tick;var v=t\|\|ytcsi.now();if(ticks[l]){ticks["_"+l]=ticks["_"+l]\|\|[ticks[l]];ticks["_"+l].push(v)}ticks[l]=v},info:function(k,v,n){ytcsi.gt(n).info[k]=v},infoGel:function(p,n){ytcsi.gt(n).gel.preLoggedGe
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3a 6f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 31 29 79 74 63 66 67 2e 64 28 29 5b 61 5b 30 5d 5d 3d 61 5b 31 5d 3b 65 6c 73 65 7b 76 61 72 20 6b 3b 66 6f 72 28 6b 20 69 6e 20 61 5b 30 5d 29 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3d 61 5b 30 5d 5b 6b 5d 7d 7d 7d 3b 0a 79 74 63 66 67 2e 73 65 74 28 7b 22 45 56 45 4e 54 5f 49 44 22 3a 22 Data Ascii: eturn window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}};ytcfg.set({"EVENT_ID":"
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 64 65 6e 74 69 74 79 5f 61 74 74 72 69 62 75 74 65 73 5f 66 6f 72 5f 6c 69 76 65 5f 63 68 61 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 70 73 5f 67 61 74 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 73 5f 65 78 74 65 6e 64 65 64 5f 6d 6f 6e 69 74 6f 72 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 69 6e 66 65 65 64 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 70 6c 61 79 65 72 5f 62 79 74 65 5f 68 35 22 3a 74 72 Data Ascii: _h5_client":true,"enable_identity_attributes_for_live_chat":true,"enable_ips_gating":true,"enable_is_extended_monitoring":true,"enable_mixed_direction_formatted_strings":true,"enable_pacf_slot_asde_infeed_h5":true,"enable_pacf_slot_asde_player_byte_h5":tr
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 6d 6f 64 65 6c 5f 6c 6f 67 67 69 6e 67 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 69 73 5f 62 72 6f 77 73 65 72 5f 73 75 70 70 6f 72 74 5f 66 6f 72 5f 77 65 62 63 61 6d 5f 73 74 72 65 61 6d 69 6e 67 22 3a 74 72 75 65 2c 22 6a 73 6f 6e 5f 63 6f 6e 64 65 6e 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 Data Ascii: model_logging_context":true,"is_browser_support_for_webcam_streaming":true,"json_condensed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":tru
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 66 6f 67 65 6c 5f 65 61 72 6c 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 69 6e 5f 6d 65 6d 6f 72 79 5f 73 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 Data Ascii: fogel_early_logging":true,"use_new_in_memory_storage":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":tr
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 Data Ascii: ream_optimization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3
2024-05-24 15:47:51 UTC	1805	IN	Data Raw: 41 59 45 52 22 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 6f 73 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 22 2c 22 6f 72 69 67 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 48 58 4a 45 61 6b 6d 36 35 46 49 3f 63 6f 6e 74 72 6f 6c 73 5c 75 30 30 33 64 30 5c 75 30 30 32 36 72 65 6c 5c 75 30 30 33 64 30 5c 75 30 30 32 36 70 6c 61 79 73 69 6e 6c 69 6e 65 5c 75 30 30 33 64 31 5c 75 30 30 32 36 65 6e 61 62 6c 65 6a 73 61 70 69 5c 75 30 30 33 64 31 5c 75 30 30 32 36 6f 72 69 67 69 6e 5c 75 30 30 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 61 79 73 Data Ascii: AYER","clientVersion":"1.20240521.01.00","osName":"Windows","osVersion":"10.0","originalUrl":"https://www.youtube.com/embed/HXJEakm65FI?controls\u003d0\u0026rel\u003d0\u0026playsinline\u003d1\u0026enablejsapi\u003d1\u0026origin\u003dhttps%3A%2F%2Fwww.days

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49968	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:51 UTC	636	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.daystarpayments.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
2024-05-24 15:47:52 UTC	325	IN	HTTP/1.1 304 Not Modified x-powered-by: Express access-control-allow-origin: * etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:52 GMT x-envoy-upstream-service-time: 0 server: envoy content-length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49971	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:52 UTC	414	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
2024-05-24 15:47:52 UTC	325	IN	HTTP/1.1 304 Not Modified x-powered-by: Express access-control-allow-origin: * etag: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU" date: Fri, 24 May 2024 15:47:52 GMT x-envoy-upstream-service-time: 0 server: envoy content-length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49976	34.107.203.234	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:52 UTC	414	OUT	GET /public-auth HTTP/1.1 Host: api-preview.luckyorange.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
2024-05-24 15:47:53 UTC	365	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 1043 etag: W/"413-OejJ8h+QKnoQJAV6R+nNg/v8Cao" date: Fri, 24 May 2024 15:47:53 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:53 UTC	1025	IN	Data Raw: 7b 22 61 63 63 65 73 73 5f 74 6f 6b 65 6e 22 3a 22 79 61 32 39 2e 63 2e 63 30 41 59 5f 56 70 5a 68 72 65 74 74 6f 41 37 68 4d 54 75 4f 43 53 4f 46 70 55 57 64 46 55 64 46 72 58 78 6b 61 41 35 69 41 54 66 37 34 44 48 6b 72 50 34 68 51 4c 4d 6f 57 65 67 68 38 39 43 39 33 73 6c 68 42 46 62 57 74 4e 5f 33 70 44 7a 5a 5f 77 7a 35 43 4d 39 52 4f 5f 57 73 57 49 58 59 77 56 33 63 46 57 56 49 46 48 49 76 4e 38 52 37 6b 4b 6a 79 50 79 43 4d 44 77 50 7a 61 5f 6a 77 72 66 52 36 34 39 31 59 73 36 50 62 4d 35 4f 57 65 62 47 43 50 43 37 5a 77 70 74 48 52 6c 4d 65 49 47 59 48 55 69 6d 4c 46 44 34 35 42 62 6e 4e 78 34 6c 73 31 41 45 47 77 76 4b 65 4d 6a 67 77 33 4d 57 42 72 59 54 4b 77 74 4f 47 64 67 75 5a 6d 2d 76 45 74 5f 74 38 48 32 6b 71 43 5f 6c 73 47 71 77 45 77 54 Data Ascii: {"access_token":"ya29.c.c0AY_VpZhrettoA7hMTuOCSOFpUWdFUdFrXxkaA5iATf74DHkrP4hQLMoWegh89C93slhBFbWtN_3pDzZ_wz5CM9RO_WsWIXYwV3cFWVIFHIvN8R7kKjyPyCMDwPza_jwrfR6491Ys6PbM5OWebGCPC7ZwptHRlMeIGYHUimLFD45BbnNx4ls1AEGwvKeMjgw3MWBrYTKwtOGdguZm-vEt_t8H2kqC_lsGqwEwT
2024-05-24 15:47:53 UTC	18	IN	Data Raw: 74 57 4d 55 33 49 38 5a 34 5f 42 37 51 56 4a 6b 22 7d Data Ascii: tWMU3I8Z4_B7QVJk"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49974	142.250.185.98	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:52 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:53 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 24 May 2024 15:47:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:53 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 43 6e 34 6e 65 77 36 35 63 2d 41 6a 48 64 53 75 64 41 41 56 39 59 6a 2d 5a 43 34 6d 32 68 37 4a 4f 6b 2d 51 41 67 38 78 31 65 50 58 5f 59 42 68 6c 66 62 74 79 49 6b 48 4f 61 66 35 49 39 73 74 50 65 37 6b 6e 57 41 79 6c 2d 66 6e 4b 4d 33 49 56 63 77 74 59 62 37 6d 33 79 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ"}
2024-05-24 15:47:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49978	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:53 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: RSwHqKvYBQErpyZfp0bHlA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:53 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:53 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:53 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49977	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:53 UTC	1132	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3388 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240521.01.00 X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:53 UTC	3388	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 48 58 4a 45 61 6b 6d 36 35 46 49 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 79 56 47 68 30 4f 54 5a 66 64 6e 42 54 4f 43 69 6e 37 63 4b 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 5a 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"HXJEakm65FI","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-05-24 15:47:53 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:53 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:53 UTC	958	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 77 68 5f 70 61 75 73 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"is_viewed_live","value":"False"},{"key":"is_alc_surface","value":"false"},{"key":"ipcc","value":"0"},{"key":"wh_paused","value":"0"},{"key":"logged_in","value":"0"
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 31 34 2c 35 31 31 35 38 35 33 35 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 37 32 32 2c 35 31 31 36 35 34 36 36 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 35 35 39 32 2c 35 31 31 36 36 35 36 32 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 38 32 30 37 2c 35 31 31 36 38 32 32 35 2c 35 31 31 36 38 32 35 36 2c 35 31 31 36 38 33 38 35 2c 35 31 31 36 38 34 31 39 2c 35 31 31 36 38 35 35 37 2c 35 31 31 36 38 39 31 38 2c 35 31 31 36 38 39 36 37 2c 35 31 31 36 38 39 37 30 2c 35 31 31 36 39 30 33 34 2c 35 31 31 36 39 31 33 30 2c 35 31 31 36 39 32 35 38 2c 35 31 31 36 39 32 36 30 2c 35 31 31 36 39 39 34 37 2c 35 31 31 37 30 33 37 33 2c 35 31 31 37 31 34 33 39 2c 35 31 31 37 32 39 36 33 2c 35 31 31 37 32 39 37 31 2c 35 31 31 37 33 31 33 32 2c Data Ascii: 14,51158535,51160545,51162170,51162722,51165466,51165568,51165592,51166562,51166922,51168207,51168225,51168256,51168385,51168419,51168557,51168918,51168967,51168970,51169034,51169130,51169258,51169260,51169947,51170373,51171439,51172963,51172971,51173132,
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 75 25 32 43 72 64 75 26 6d 76 3d 75 26 6d 76 69 3d 32 26 70 6c 3d 32 35 26 62 75 69 3d 41 57 52 57 6a 32 54 34 6e 61 43 67 42 4b 4c 61 4b 65 47 4d 4c 41 6c 54 6a 58 57 76 4e 4e 5f 47 4b 65 4b 45 6a 52 45 32 73 31 44 74 37 4c 4e 73 48 44 39 74 55 6b 59 50 52 51 55 39 33 66 58 39 49 43 37 58 48 63 65 49 62 30 6c 6d 30 6b 54 47 26 73 70 63 3d 55 57 46 39 66 30 6f 6f 6d 37 63 61 61 43 75 6c 71 2d 6c 42 70 62 6e 52 74 58 59 4e 35 6f 54 6b 31 50 44 34 50 44 37 51 36 73 44 74 78 54 51 66 38 6a 65 67 4c 50 4d 75 62 51 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 4a 69 6b 34 7a 63 78 31 7a 58 54 37 4d 74 70 66 52 78 6d 61 42 51 67 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 31 31 37 Data Ascii: u%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2T4naCgBKLaKeGMLAlTjXWvNN_GKeKEjRE2s1Dt7LNsHD9tUkYPRQU93fX9IC7XHceIb0lm0kTG&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Jik4zcx1zXT7MtpfRxmaBQgQ&rqh=1&gir=yes&clen=117
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 31 33 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 4d 42 26 6d 6d 3d 33 31 25 32 43 32 39 26 6d 6e 3d 73 6e 2d 70 35 71 73 37 6e 7a 72 25 32 43 73 6e 2d 70 35 71 6c 73 6e 72 6c 26 6d 73 3d 61 75 25 32 43 72 64 75 26 6d 76 3d 75 26 6d Data Ascii: 13&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&m
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 72 69 65 73 22 3a 22 43 4f 4c 4f 52 5f 50 52 49 4d 41 52 49 45 53 5f 42 54 37 30 39 22 2c 22 74 72 61 6e 73 66 65 72 43 68 61 72 61 63 74 65 72 69 73 74 69 63 73 22 3a 22 43 4f 4c 4f 52 5f 54 52 41 4e 53 46 45 52 5f 43 48 41 52 41 43 54 45 52 49 53 54 49 43 53 5f 42 54 37 30 39 22 2c 22 6d 61 74 72 69 78 43 6f 65 66 66 69 63 69 65 6e 74 73 22 3a 22 43 4f 4c 4f 52 5f 4d 41 54 52 49 58 5f 43 4f 45 46 46 49 43 49 45 4e 54 53 5f 42 54 37 30 39 22 7d 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 35 34 34 38 22 7d 2c 7b 22 69 74 61 67 22 3a 34 30 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 32 2d 2d 2d 73 6e 2d 70 35 71 73 37 6e 7a 72 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 Data Ascii: ries":"COLOR_PRIMARIES_BT709","transferCharacteristics":"COLOR_TRANSFER_CHARACTERISTICS_BT709","matrixCoefficients":"COLOR_MATRIX_COEFFICIENTS_BT709"},"approxDurationMs":"15448"},{"itag":401,"url":"https://rr2---sn-p5qs7nzr.googlevideo.com/videoplayback?e
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 6e 36 71 58 50 6c 45 47 32 54 45 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 30 31 2e 30 2e 31 32 4d 2e 30 38 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 35 33 35 37 31 36 30 2c 22 77 69 64 74 68 22 3a 33 38 34 30 2c 22 68 65 69 67 68 74 22 3a 32 31 36 30 2c 22 69 6e 69 74 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 30 22 2c 22 65 6e 64 22 3a 22 37 30 30 22 7d 2c 22 69 6e 64 65 78 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 37 30 31 22 2c 22 65 6e 64 22 3a 22 37 36 38 22 7d 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 37 31 34 35 36 38 31 39 33 37 36 35 33 33 34 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 39 33 37 32 30 35 36 22 2c 22 71 75 61 6c 69 Data Ascii: n6qXPlEG2TE%3D","mimeType":"video/mp4; codecs=\"av01.0.12M.08\"","bitrate":5357160,"width":3840,"height":2160,"initRange":{"start":"0","end":"700"},"indexRange":{"start":"701","end":"768"},"lastModified":"1714568193765334","contentLength":"9372056","quali
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 25 32 43 65 69 25 32 43 69 70 25 32 43 69 64 25 32 43 61 69 74 61 67 73 25 32 43 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 72 71 68 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 51 49 68 41 4d 6f 57 44 39 47 35 42 66 61 6b 54 55 4a 62 34 6f 5f 70 45 45 61 72 31 61 70 59 66 4c 50 66 75 58 5f 6c 58 39 62 67 4d 70 44 32 41 69 42 4f 69 50 59 34 59 4e 5f 30 4f 59 30 70 6f 32 33 6b 34 57 6b 73 6a 73 31 6e 4a 4c 68 39 2d 6a 31 67 75 43 66 32 62 62 57 55 78 77 25 33 44 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 Data Ascii: %2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAMoWD9G5BfakTUJb4o_pEEar1apYfLPfuX_lX9bgMpD2AiBOiPY4YN_0OY0po23k4Wksjs1nJLh9-j1guCf2bbWUxw%3D%3D&lsparams=mh%2Cmm%2C
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 56 64 4d 65 47 59 4f 66 5a 70 39 52 62 4e 6b 38 5f 6c 70 5a 63 77 61 51 69 48 44 79 52 4e 67 50 43 52 6e 56 39 64 57 68 4c 70 66 45 58 6c 75 45 58 69 47 68 4c 61 30 6c 58 59 65 2d 43 44 7a 39 43 75 75 4d 34 56 43 68 36 26 73 70 63 3d 55 57 46 39 66 30 6f 6f 6d 37 63 61 61 43 75 6c 71 2d 6c 42 70 62 6e 52 74 58 59 4e 35 6f 54 6b 31 50 44 34 50 44 37 51 36 73 44 74 78 54 51 66 38 6a 65 67 4c 50 4d 75 62 51 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 6d 70 34 26 6e 73 3d 61 4a 2d 77 6b 6f 59 6a 47 78 67 6a 59 79 70 7a 77 7a 77 32 35 78 67 51 26 72 71 68 3d 31 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 34 37 37 34 36 31 30 26 64 75 72 3d 31 35 2e 34 34 38 26 6c 6d 74 3d 31 37 31 34 35 36 37 30 38 30 38 36 33 36 30 36 Data Ascii: VdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=4774610&dur=15.448&lmt=1714567080863606
2024-05-24 15:47:53 UTC	1390	IN	Data Raw: 6e 74 46 73 47 36 36 64 73 50 33 4f 75 72 34 41 6f 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 69 64 3d 6f 2d 41 46 34 4a 56 56 4e 38 6f 41 6a 69 49 72 58 74 50 32 32 70 73 31 6d 73 76 74 44 6f 4e 30 5a 66 36 64 56 2d 6f 73 42 46 32 62 68 4e 26 69 74 61 67 3d 31 33 37 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 31 25 32 43 32 37 38 25 32 43 33 31 33 25 32 43 33 39 34 25 32 43 33 39 35 25 32 43 33 39 36 25 32 43 33 39 37 25 32 43 33 39 38 25 32 43 33 39 39 25 32 43 34 30 30 25 32 43 34 30 31 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c Data Ascii: ntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=137&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49983	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	2623	OUT	POST /api/stats/qoe?fmt=399&cpn=HiHYYKo7qHOnQDeH&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29152%2C1065%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=1&docid=HXJEakm65FI&ei=qbZQZrntFsG66dsP3Our4Ao&event=streamingstats&plid=AAYZNRcyZNvsmyE9&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaUhZWUtvN3FIT25RRGVIEAE&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.008:B,0.012:S,1.296:S,1.296:S&cat=streaming&cmt=0.008:0.000 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565671033&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:54 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6c 70 5a 53 6e 6c 36 56 54 52 77 5a 30 4e 56 4d 31 4d 31 63 31 4a 4a 5a 58 4e 76 56 6b 4a 74 4c 58 42 75 51 58 78 42 51 33 4a 74 63 30 74 73 4f 55 74 6a 57 56 4e 55 52 30 6b 77 59 54 46 6c 53 6c 39 44 63 6a 55 35 53 56 52 4d 61 55 52 54 53 58 52 70 52 79 31 7a 63 56 6c 75 61 6c 56 4c 61 55 52 5a 58 31 45 79 54 6c 52 6f 63 6a 4a 4a 56 46 4a 6f 5a 6a 46 6e 62 56 4a 70 53 53 31 51 4f 54 5a 61 64 32 4a 72 4e 6c 6c 6d 55 30 31 33 4f 44 42 76 63 55 5a 58 62 45 78 4c 57 57 35 4a 56 48 51 33 4e 31 52 34 53 57 35 49 57 48 68 4f 4e 32 38 74 5a 54 6b 34 4e 7a 4a 51 55 46 46 34 4c 55 30 31 54 51 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqblpZSnl6VTRwZ0NVM1M1c1JJZXNvVkJtLXBuQXxBQ3Jtc0tsOUtjWVNUR0kwYTFlSl9DcjU5SVRMaURTSXRpRy1zcVlualVLaURZX1EyTlRocjJJVFJoZjFnbVJpSS1QOTZad2JrNllmU013ODBvcUZXbExLWW5JVHQ3N1R4SW5IWHhON28tZTk4NzJQUFF4LU01TQ%3D%3D
2024-05-24 15:47:54 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49984	142.250.184.194	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:54 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 24 May 2024 15:47:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:54 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 78 6f 6d 36 78 32 76 4f 44 68 76 63 69 36 65 67 72 5a 70 58 61 4c 51 65 6a 4e 61 44 72 44 4c 55 4c 5a 34 74 7a 6d 6b 47 74 7a 44 62 39 41 36 44 43 68 61 48 59 66 74 48 4f 63 6e 4e 71 47 56 59 34 6c 30 70 2d 78 6f 63 35 52 56 51 62 45 41 61 72 32 52 6d 5a 46 37 66 67 4a 67 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKpxom6x2vODhvci6egrZpXaLQejNaDrDLULZ4tzmkGtzDb9A6DChaHYftHOcnNqGVY4l0p-xoc5RVQbEAar2RmZF7fgJg"}
2024-05-24 15:47:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49988	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:54 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49991	173.194.53.7	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	2005	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-05-24 15:47:54 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:54 GMT Expires: Fri, 24 May 2024 15:47:54 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:54 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2024-05-24 15:47:54 UTC	48	IN	Data Raw: 14 2e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 8f 03 20 a8 ea 91 ce be ec 85 03 30 00 6a 0c 08 8f 03 10 a8 ea 91 ce be ec 85 03 70 80 06 Data Ascii: .HXJEakm65FI 0jp
2024-05-24 15:47:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:54 UTC	5	IN	Data Raw: 33 30 34 0d 0a Data Ascii: 304
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 15 81 0c 00 Data Ascii:
2024-05-24 15:47:54 UTC	768	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 57 e3 71 e2 57 e3 71 00 00 75 30 00 07 12 67 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 57 e3 71 e2 57 e3 71 00 00 00 01 00 00 00 00 00 07 12 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhdWqWqu0g@(mvex trextrak\tkhdWqWqg
2024-05-24 15:47:54 UTC	2010	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:54 GMT Expires: Fri, 24 May 2024 15:47:54 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	2093	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49992	173.194.53.7	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	1892	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-05-24 15:47:54 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:54 GMT Expires: Fri, 24 May 2024 15:47:54 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:54 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 35 30 0d 0a Data Ascii: 50
2024-05-24 15:47:54 UTC	80	IN	Data Raw: 14 4e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 fa 01 20 8e ca dd cb b6 ec 85 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fa 01 10 8e ca dd cb b6 ec 85 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 ab 02 Data Ascii: NHXJEakm65FI *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2024-05-24 15:47:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:54 UTC	5	IN	Data Raw: 31 32 66 0d 0a Data Ascii: 12f
2024-05-24 15:47:54 UTC	4	IN	Data Raw: 15 ac 04 00 Data Ascii:
2024-05-24 15:47:54 UTC	299	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 00 1c 4d 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 46 71 e4 00 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 ba 10 b1 f1 74 9e ed 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSgMMtMSIfSDMSTkSMSSkSIf*B@DFqMgoogle/video-fileWAgoogle/video-fileTkst"engA_OPUScOpusHead8Vc.V
2024-05-24 15:47:54 UTC	1975	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:54 GMT Expires: Fri, 24 May 2024 15:47:54 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	2096	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	2096	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	2097	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:56 GMT Expires: Fri, 24 May 2024 15:47:56 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:56 UTC	2099	OUT	POST /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2C [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:56 GMT Expires: Fri, 24 May 2024 15:47:56 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49987	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:54 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49989	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	472	OUT	GET /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:54 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Fri, 24 May 2024 15:47:54 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:54 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:54 UTC	456	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49990	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	1130	OUT	POST /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240521.01.00 X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:54 UTC	3092	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 79 56 47 68 30 4f 54 5a 66 64 6e 42 54 4f 43 69 6e 37 63 4b 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 5a 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-24 15:47:55 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:55 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:55 UTC	958	IN	Data Raw: 31 33 61 63 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 61 74 63 68 4e 65 78 74 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 65 35 34 30 35 35 38 36 36 33 61 37 38 61 34 38 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 Data Ascii: 13ac{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB_EMBEDDED_PLAYER"},{"key":"cver","value":"1.20240521.01.00"},{"key":"yt_li","value":"0"},{"key":"GetWatchNext_rid","value":"0xe540558663a78a48"}]},{"servi
2024-05-24 15:47:55 UTC	1390	IN	Data Raw: 32 32 30 37 2c 35 31 31 35 35 31 34 31 2c 35 31 31 35 36 33 38 35 2c 35 31 31 35 37 34 31 31 2c 35 31 31 35 37 38 33 38 2c 35 31 31 35 37 38 39 37 2c 35 31 31 35 38 35 31 34 2c 35 31 31 35 38 35 33 35 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 37 32 32 2c 35 31 31 36 35 34 36 36 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 35 35 39 32 2c 35 31 31 36 36 35 36 32 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 38 32 30 37 2c 35 31 31 36 38 32 32 35 2c 35 31 31 36 38 32 35 36 2c 35 31 31 36 38 33 38 35 2c 35 31 31 36 38 34 31 39 2c 35 31 31 36 38 35 35 37 2c 35 31 31 36 38 39 31 38 2c 35 31 31 36 38 39 36 37 2c 35 31 31 36 38 39 37 30 2c 35 31 31 36 39 30 33 34 2c 35 31 31 36 39 31 33 30 2c 35 31 31 36 39 32 35 38 2c 35 31 31 36 39 32 36 Data Ascii: 2207,51155141,51156385,51157411,51157838,51157897,51158514,51158535,51160545,51162170,51162722,51165466,51165568,51165592,51166562,51166922,51168207,51168225,51168256,51168385,51168419,51168557,51168918,51168967,51168970,51169034,51169130,51169258,5116926
2024-05-24 15:47:55 UTC	1390	IN	Data Raw: 78 57 48 34 55 38 49 48 54 41 47 41 54 45 3d 22 2c 22 61 64 64 54 6f 54 6f 61 73 74 41 63 74 69 6f 6e 22 3a 7b 22 69 74 65 6d 22 3a 7b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 41 63 74 69 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 72 65 73 70 6f 6e 73 65 54 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 4c 69 6e 6b 20 63 6f 70 69 65 64 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 22 7d 5d 7d 2c 22 61 63 74 69 6f 6e 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 67 51 38 46 73 69 45 77 69 79 33 70 75 36 30 61 61 47 41 78 57 48 34 55 38 49 48 54 41 47 41 54 45 3d 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 63 51 75 57 6f 69 Data Ascii: xWH4U8IHTAGATE=","addToToastAction":{"item":{"notificationActionRenderer":{"responseText":{"runs":[{"text":"Link copied to clipboard"}]},"actionButton":{"buttonRenderer":{"trackingParams":"CAgQ8FsiEwiy3pu60aaGAxWH4U8IHTAGATE="}},"trackingParams":"CAcQuWoi
2024-05-24 15:47:55 UTC	1306	IN	Data Raw: 6c 61 79 56 69 64 65 6f 44 65 74 61 69 6c 73 45 78 70 61 6e 64 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 52 79 61 6e 20 57 61 6c 74 65 72 73 22 7d 5d 7d 2c 22 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 22 3a 7b 22 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 53 75 62 73 63 72 69 62 65 22 7d 5d 7d 2c 22 73 75 62 73 63 72 69 62 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 46 52 45 45 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 7a 59 34 52 6a 59 65 71 52 69 6f 65 78 59 63 62 56 62 37 56 2d 51 22 2c Data Ascii: layVideoDetailsExpandedRenderer":{"title":{"runs":[{"text":"Ryan Walters"}]},"subscribeButton":{"subscribeButtonRenderer":{"buttonText":{"runs":[{"text":"Subscribe"}]},"subscribed":false,"enabled":true,"type":"FREE","channelId":"UCzY4RjYeqRioexYcbVb7V-Q",
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49993	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	1610	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 12354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565670885&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1716565673313 Content-Type: application/json X-Goog-Event-Time: 1716565673312 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:54 UTC	12354	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4b 66 74 77 72 49 47 45 4b 33 6a 73 41 55 51 6e 75 53 77 42 52 44 6a 72 66 38 53 45 4f 50 52 73 41 55 51 2d 65 53 77 42 52 44 54 34 4c 41 46 45 4e 6a 64 73 41 55 51 74 2d 2d 76 42 52 44 71 77 36 38 46 45 4c 32 32 72 67 55 51 6f 6f 47 77 42 52 43 61 38 4b 38 46 45 50 61 72 73 41 55 51 36 5f 61 77 42 52 44 72 6b 36 34 46 45 4e 33 6f 5f 68 49 51 74 2d 72 2d 45 68 44 4c 38 72 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240521.01.00","configInfo":{"appInstallData":"CKftwrIGEK3jsAUQnuSwBRDjrf8SEOPRsAUQ-eSwBRDT4LAFENjdsAUQt--vBRDqw68FEL22rgUQooGwBRCa8K8FEParsAUQ6_awBRDrk64FEN3o_hIQt-r-EhDL8rAFEL
2024-05-24 15:47:54 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:54 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:54 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-24 15:47:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49995	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:54 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 1NFMFy70dR74oPT3XbofIg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:55 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:55 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:55 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49997	173.194.53.7	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	1781	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2024-05-24 15:47:55 UTC	48	IN	Data Raw: 14 2e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 8f 03 20 a8 ea 91 ce be ec 85 03 30 00 6a 0c 08 8f 03 10 a8 ea 91 ce be ec 85 03 70 80 06 Data Ascii: .HXJEakm65FI 0jp
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 33 30 34 0d 0a Data Ascii: 304
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 15 81 0c 00 Data Ascii:
2024-05-24 15:47:55 UTC	768	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 57 e3 71 e2 57 e3 71 00 00 75 30 00 07 12 67 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 57 e3 71 e2 57 e3 71 00 00 00 01 00 00 00 00 00 07 12 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhdWqWqu0g@(mvex trextrak\tkhdWqWqg
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	1786	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:56 UTC	1872	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:56 GMT Expires: Fri, 24 May 2024 15:47:56 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:57 UTC	1875	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:57 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:57 GMT Expires: Fri, 24 May 2024 15:47:57 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49999	173.194.53.7	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	1668	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2 [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 35 30 0d 0a Data Ascii: 50
2024-05-24 15:47:55 UTC	80	IN	Data Raw: 14 4e 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 fa 01 20 8e ca dd cb b6 ec 85 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fa 01 10 8e ca dd cb b6 ec 85 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 ab 02 Data Ascii: NHXJEakm65FI *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 31 32 66 0d 0a Data Ascii: 12f
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 15 ac 04 00 Data Ascii:
2024-05-24 15:47:55 UTC	299	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 00 1c 4d 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 46 71 e4 00 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 ba 10 b1 f1 74 9e ed 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSgMMtMSIfSDMSTkSMSSkSIf*B@DFqMgoogle/video-fileWAgoogle/video-fileTkst"engA_OPUScOpusHead8Vc.V
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	1751	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2 [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:13:18 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	1869	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49996	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	913	OUT	GET /generate_204?SDRFfA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:55 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:55 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50000	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	585	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 35 36 35 36 37 32 35 33 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 5f 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 37 36 2e 37 30 30 30 30 30 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,null,[1,0,0,0,0]]],1828,[["1716565672534",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"_\"]],[null,76.7000000
2024-05-24 15:47:55 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=IM9iF2MpXyj0RarkNlcuksf9UabzHtXnKmTncxMj2eUE-ZZRTdbQEQf1tUHthj-VpEg_aN51wCpgFQcr1dN4MKLQ-Ge9hLKL5dEjtnWPZOQyEhbnLU94xMxT7Rh4vKn3Ur_7llFwB_hE8-j2IzM8_MSwEgb9HZoKkD0KtYnel98; expires=Sat, 23-Nov-2024 15:47:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:55 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 15:47:55 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50001	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 24 May 2024 15:47:55 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:55 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:55 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50002	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 542 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	542	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 35 36 35 36 37 32 35 34 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716565672542",null,null,null
2024-05-24 15:47:55 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=BR2Kq9pg2AMjtFIZgajnfTx9m4ANBr1HhEuLYCugL2jojrxeHJl7Wc50V2Ag0y1VqWlCyZr8Z78UwHer_ifeflZJa64b7Pd6bxlw1aS77Co3Nd4ukErP2JPv4409Y-Yzuogj1ZbfS5HOB-IOtHd_bZF2jvH4kAF59K4sYSNu010; expires=Sat, 23-Nov-2024 15:47:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:55 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 15:47:55 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49969	13.32.27.6	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	546	OUT	GET /core/frame.js?v=0b59897 HTTP/1.1 Host: tools.luckyorange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.daystarpayments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	693	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18973 Connection: close Date: Fri, 24 May 2024 15:47:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Wed, 22 May 2024 18:57:13 GMT ETag: "61c6843a9e14c4939990f8eb5be6789d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 a7631312afe99e40229aa0da70662112.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: 6UKH8p48-2hW148pB31j-R-H0CIQkWwNUuZWgEXBvbnltsh1cyGmoA==
2024-05-24 15:47:56 UTC	8284	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dd 7d e9 7a e3 46 92 e0 ab 90 68 b7 0c 58 10 44 aa 4e 81 85 e2 c8 55 72 5b d3 55 a5 9a 52 d9 ee 1e 8a ae 85 c0 24 05 17 04 b0 71 48 a5 a6 38 9f 67 77 67 cf ef db 07 d8 3f 3b 7f f7 d7 be c3 bc c9 78 5f 64 23 22 4f 80 20 a5 b2 ab 3d 3b e3 43 c4 91 99 c8 8c 8c 8c 8c 88 8c c3 9e 56 69 54 c6 59 6a 33 b7 74 16 d3 2c b7 2f c3 bc 93 76 e2 b4 53 3a 6c 94 8e 83 12 fe 2c 1d bb 3c 8f 0b 57 97 76 16 58 ae 0c 16 cb 81 7c d8 49 ed dc 59 c4 53 bb 1c e5 63 27 67 65 95 43 23 70 ed b1 0f f3 2c 2f 8b 01 56 c9 02 7c 14 2c 62 3f 77 13 bf db 77 c5 4b 7f b1 5c 0e 44 25 86 95 a2 30 49 ec 4c d6 75 33 57 5f a7 0e dc 24 41 b7 a7 9f 2d 45 d5 d4 bb 08 98 9b 7a 51 50 c2 df 49 60 8e cf 85 ee a5 5e 46 43 bd b9 39 3e fb 81 45 a5 37 61 d3 38 65 af f3 6c ce f2 Data Ascii: }zFhXDNUr[UR$qH8gwg?;x_d#"O =;CViTYj3t,/vS:l,<WvX\|IYSc'geC#p,/V\|,b?wwK\D%0ILu3W_$A-EzQPI`^FC9>E7a8el
2024-05-24 15:47:56 UTC	10689	IN	Data Raw: e4 98 6b de 0b 2a 01 d8 25 86 4a 02 3a 8e 7d 18 af 5a e9 72 b0 b9 fa 43 6e e6 28 69 44 d5 c4 1d 44 bc b7 57 e8 70 53 e2 a8 0d dd d5 92 c9 9a 25 69 2f 94 f5 b5 a2 70 98 10 01 38 dd 3f 70 b3 6a 13 37 24 7f 60 b9 02 93 d6 12 3d 61 dc 90 05 21 42 a8 a3 07 90 ba 1f 37 04 32 0e 6c e9 6e e6 12 7c 41 74 31 bb bd b2 fa e2 56 6b ea 36 b8 b7 8f 37 9b cf 6b e3 35 82 52 d7 30 3f 08 71 4f d2 4e 4d 4b f7 56 ab d6 47 dc a8 f5 e1 83 7a 64 8e ad ad 6e f6 51 d1 39 62 db 9a c4 97 a8 e7 0c ad 4d 51 3a bc b0 35 48 87 8a 78 f4 50 58 19 ee 39 1b 63 ec a3 46 4f 5a d4 a8 63 9f 8c 2c 6e 7c 61 60 56 6e 32 41 bc df af 99 95 c3 70 85 ed 74 71 1e 5e dc 1e 79 74 83 79 e8 43 09 57 13 9e dd 4d 2a ce 15 58 f3 3d 53 d8 d5 c9 d1 75 95 0d e4 cd 4d d7 6e b3 8d e5 15 f0 75 6d 2c a8 2f 7e 72 bf Data Ascii: k%J:}ZrCn(iDDWpS%i/p8?pj7$`=a!B72ln\|At1Vk67k5R0?qONMKVGzdnQ9bMQ:5HxPX9cFOZc,n\|a`Vn2Aptq^ytyCWMX=SuMnum,/~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50004	173.194.53.7	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:55 UTC	1872	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:55 GMT Expires: Fri, 24 May 2024 15:47:55 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-24 15:47:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-05-24 15:47:55 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 48 58 4a 45 61 6b 6d 36 35 46 49 18 8f 03 20 a8 ea 91 ce be ec 85 03 30 d1 d5 1f 6a 0c 08 8f 03 10 a8 ea 91 ce be ec 85 03 70 ae ae 10 Data Ascii: 1HXJEakm65FI 0jp
2024-05-24 15:47:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-24 15:47:55 UTC	7	IN	Data Raw: 34 31 37 33 33 0d 0a Data Ascii: 41733
2024-05-24 15:47:55 UTC	5	IN	Data Raw: 15 cf b9 20 00 Data Ascii:
2024-05-24 15:47:55 UTC	16384	IN	Data Raw: 00 00 03 fc 6d 6f 6f 66 00 00 00 10 6d 66 68 64 00 00 00 00 00 00 00 02 00 00 03 e4 74 72 61 66 00 00 00 18 74 66 68 64 00 02 00 0a 00 00 00 01 00 00 00 01 00 00 03 e9 00 00 00 10 74 66 64 74 00 00 00 00 00 01 c5 94 00 00 03 b4 74 72 75 6e 00 00 06 01 00 00 00 74 00 00 04 04 00 01 6f 4a 00 00 00 00 00 01 1b 4f 00 01 00 00 00 00 00 05 00 01 00 00 00 00 01 40 00 01 00 00 00 00 00 05 00 01 00 00 00 00 03 fe 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 e5 00 01 00 00 00 00 00 05 00 01 00 00 00 00 0e 81 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 ec 00 01 00 00 00 00 00 05 00 01 00 00 00 00 04 01 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 e6 00 01 00 00 00 00 00 05 00 01 00 00 00 00 2e 54 00 01 00 00 00 00 00 05 00 01 00 00 00 00 01 06 00 01 00 00 00 00 00 Data Ascii: moofmfhdtraftfhdtfdttruntoJO@.T
2024-05-24 15:47:56 UTC	16384	IN	Data Raw: 23 7b 25 80 6b 2d ad e6 2d c6 42 e5 42 6d 4a 94 09 69 aa a7 af f1 20 ed fd eb de 76 45 74 33 99 61 46 0f 50 59 c0 9f dd a4 8f c0 c3 36 f5 19 2b 7a 9c ea b5 50 02 b0 3e f3 ea 72 2e 08 d8 8e d0 ef 3c c8 0a b8 0a 5f 26 2c d2 1e 5e cc fe f7 a6 97 11 c2 95 6b 7a 7e 66 c2 2d ac 85 38 b5 60 89 16 1b 9a 28 78 fd 3b 19 a4 ff ee cd 6a 7b 0c d5 cb e5 1e d2 b4 6f e2 4c 21 96 26 16 20 82 6d 99 f7 49 fa 89 77 07 90 ec d6 30 fe 64 e6 d4 bb 0b e0 11 d8 c5 41 4a ed 6a 69 a5 fa 03 ab 40 cb 8d 5b 7e ca 08 c6 90 df 14 1d d2 23 59 a6 35 ce b2 b0 d2 74 ba 99 d6 b4 fc d8 24 c7 74 7e ab 34 f1 c1 0b 86 c8 f6 07 16 ed 69 f4 17 dd 8b d2 1f 25 92 ed 29 ca 58 5b 7b 29 fd c9 63 2b fa ed 21 f8 f1 b6 65 76 eb f0 eb a0 1a c0 93 0b ce 00 ea 65 e9 c5 72 f4 be 68 00 2c 6c 47 34 cb 81 37 36 Data Ascii: #{%k--BBmJi vEt3aFPY6+zP>r.<_&,^kz~f-8`(x;j{oL!& mIw0dAJji@[~#Y5t$t~4i%)X[{)c+!everh,lG476
2024-05-24 15:47:57 UTC	1873	OUT	GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cm [TRUNCATED] Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:57 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Wed, 01 May 2024 12:49:11 GMT Content-Type: application/vnd.yt-ump Date: Fri, 24 May 2024 15:47:57 GMT Expires: Fri, 24 May 2024 15:47:57 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50005	216.239.32.181	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	1436	OUT	POST /g/collect?v=2&tid=G-58PX1N3KV2&gtm=45je45m0v892801163za201&_p=1716565650054&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2069642792.1716565597&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEAE&_s=2&sid=1716565597&sct=1&seg=1&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&dt=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&en=video_start&epn.video_current_time=2&epn.video_duration=16&epn.video_percent=13&ep.video_provider=youtube&ep.video_title=daystarbg&ep.video_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Ft%3D2%26v%3DHXJEakm65FI&ep.visible=true&_et=3550&tfd=32614 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.daystarpayments.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.daystarpayments.com Date: Fri, 24 May 2024 15:47:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50007	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	2710	OUT	GET /api/stats/playback?ns=yt&el=embedded&cpn=HiHYYKo7qHOnQDeH&ver=2&cmt=2&fmt=399&fs=0&rt=3.106&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=3329&cl=635991227&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&hl=en_US&cr=US&len=16&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29152%2C1065%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&rtn=14&afmt=250&size=1703%3A958&inview=0&muted=1&docid=HXJEakm65FI&ei=qbZQZrntFsG66dsP3Our4Ao&plid=AAYZNRcyZNvsmyE9&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26or [TRUNCATED] Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565671033&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:56 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50009	216.58.212.130	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	1018	OUT	GET /td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1449637007 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
2024-05-24 15:47:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 15:47:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:56 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-24 15:47:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50006	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	785	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	1374	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 35 36 35 36 37 34 35 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716565674541",null,null,null
2024-05-24 15:47:56 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=PP9JzChxaT7bHAxOsKq61t1Ix9mqosSzF9JQgunHFhgVeT8SWhGaCY1yL97BEEeCt49usXo-XeYE1azgTq5SitFrBy8cl14rGrEWdQWRMB6Hw2lw4jJNW3S49sD-rMWD9z1_Y7C6r2Hl74NcKPor4LDr1zDaVqwhQqxIPKYubIs; expires=Sat, 23-Nov-2024 15:47:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 15:47:56 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-24 15:47:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50008	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	1498	OUT	GET /ptracking?html5=1&video_id=HXJEakm65FI&cpn=HiHYYKo7qHOnQDeH&ei=qbZQZrntFsG66dsP3Our4Ao&ptk=youtube_none&pltype=contentugc HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565671033&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:56 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50010	142.250.184.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	470	OUT	GET /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:56 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1604 Date: Fri, 24 May 2024 15:47:56 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:56 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:56 UTC	454	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50011	172.217.16.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=BR2Kq9pg2AMjtFIZgajnfTx9m4ANBr1HhEuLYCugL2jojrxeHJl7Wc50V2Ag0y1VqWlCyZr8Z78UwHer_ifeflZJa64b7Pd6bxlw1aS77Co3Nd4ukErP2JPv4409Y-Yzuogj1ZbfS5HOB-IOtHd_bZF2jvH4kAF59K4sYSNu010
2024-05-24 15:47:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 15:47:56 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-24 15:47:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50012	35.201.124.9	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:56 UTC	539	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: in.visitors.live Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.daystarpayments.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 7JiMJx29eeh+SJuDdsy5Gw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-24 15:47:56 UTC	218	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Date: Fri, 24 May 2024 15:47:56 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:56 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50015	192.124.249.2	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:57 UTC	1417	OUT	GET /wp-content/uploads/2023/11/bg2.jpg HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565674.60.0.0
2024-05-24 15:47:57 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:57 GMT Content-Type: image/jpeg Content-Length: 19917 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 13 Nov 2023 21:03:36 GMT ETag: "27a117f-4dcd-60a0f00e41a00" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:57 UTC	7673	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 30 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky<0http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-05-24 15:47:57 UTC	8192	IN	Data Raw: 9e 1c ad 92 3c 7e 0a 3b f9 3e 95 4f 4d 7e b2 e6 29 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 1d ce ef 6f b6 c7 37 cd 78 ac 7d b2 8f 66 da d2 33 32 da b5 99 ec f9 de e3 fb 93 36 5d 71 ed a3 db a7 eb fc d2 e3 f2 3e 42 6d d2 bd 21 6f 5f 1e 23 bb 8b 6b 5a d3 36 b4 cd a6 79 cc f1 73 a6 66 7b ac e1 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 da 9f 49 79 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 66 22 26 66 74 88 e7 20 e3 ef fb 8c e5 d7 16 29 d3 17 8c fe af e8 e7 6f e4 79 74 8e cb 14 d7 8e b2 Data Ascii: <~;>OM~)%o7x}f326]q>Bm!o_#kZ6ysf{Iyf"&ft )oyt
2024-05-24 15:47:57 UTC	4052	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 3d ce 7a 60 c3 6c b7 e5 58 e1 1e 73 e1 08 f7 6d 8a 56 6d 2d a9 5f 29 c3 e5 f3 65 be 5c b6 c9 79 d6 d6 9d 65 e6 76 5e 6d 69 99 ef 2e 95 6b 88 c2 8d 19 00 00 00 01 a9 ba c7 d3 7e a8 e5 6f e2 af b6 b8 9c a4 ac b0 22 6c 00 00 00 03 4b b9 db 4c 75 af 9c ab 72 67 a2 4d 70 e7 29 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 33 53 49 ea 8e 53 cd 25 65 ac b1 b6 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 b5 3e 92 f3 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: =z`lXsmVm-_)e\yev^mi.k~o"lKLurgMp)3SIS%e`>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50013	216.58.212.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:57 UTC	2537	OUT	POST /api/stats/qoe?fmt=399&afmt=250&cpn=HhvLVt-RnKxTEP9r&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&cl=635991227&seq=5&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&event=streamingstats&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&qclc=ChBIaHZMVnQtUm5LeFRFUDlyEAU&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&cmt=28.085:2.000,31.099:2.000&vps=28.085:S,31.099:S&bwe=31.099:1 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:57 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 48 4e 5a 4e 47 35 36 55 45 39 74 61 6d 56 44 53 30 31 76 51 6d 74 54 52 57 73 79 53 57 77 78 59 6b 46 70 55 58 78 42 51 33 4a 74 63 30 74 75 51 6c 4e 5a 54 44 46 54 56 32 74 44 61 30 63 7a 52 55 56 31 4c 56 68 55 56 48 4d 77 5a 6d 74 53 63 33 67 30 54 55 39 31 4e 6d 46 71 63 56 42 35 55 48 46 54 51 54 52 70 4e 6c 68 53 52 58 6c 48 4e 48 56 4b 4f 55 78 6c 5a 6e 68 5a 53 56 4e 58 55 32 4a 7a 55 6b 6f 78 57 6a 4e 74 55 33 64 4d 54 44 42 47 5a 33 70 73 59 7a 51 34 63 55 31 50 4e 6c 52 52 51 56 4a 71 4d 46 52 6d 4e 6c 64 7a 62 6b 4a 43 56 33 42 57 53 48 42 42 52 31 55 77 52 31 42 76 4e 41 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbHNZNG56UE9tamVDS01vQmtTRWsySWwxYkFpUXxBQ3Jtc0tuQlNZTDFTV2tDa0czRUV1LVhUVHMwZmtSc3g0TU91NmFqcVB5UHFTQTRpNlhSRXlHNHVKOUxlZnhZSVNXU2JzUkoxWjNtU3dMTDBGZ3psYzQ4cU1PNlRRQVJqMFRmNldzbkJCV3BWSHBBR1UwR1BvNA%3D%3D
2024-05-24 15:47:57 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50014	142.250.185.206	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:57 UTC	973	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 717 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=PP9JzChxaT7bHAxOsKq61t1Ix9mqosSzF9JQgunHFhgVeT8SWhGaCY1yL97BEEeCt49usXo-XeYE1azgTq5SitFrBy8cl14rGrEWdQWRMB6Hw2lw4jJNW3S49sD-rMWD9z1_Y7C6r2Hl74NcKPor4LDr1zDaVqwhQqxIPKYubIs
2024-05-24 15:47:57 UTC	717	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 35 36 35 36 37 35 36 32 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716565675623",null,null,null
2024-05-24 15:47:57 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=b3C0cI0DuXnicvmJrMF_Hf7NGuH777v-cRFW7x5VHIMMlFw7aoGKl8-7piKlmSvKL9EDSnqBOb-ujAhgS4MdkyJXPcIpKsaNlHJzOFDPGG8e65o3wsNXfMjLIFITVOFDnIyrFi64OCK1iyszOi_7gBRO2Tc_DhoGQBJgvOiISYs; expires=Sat, 23-Nov-2024 15:47:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:57 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 15:47:57 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-24 15:47:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50016	172.217.16.142	443	5296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:57 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=BR2Kq9pg2AMjtFIZgajnfTx9m4ANBr1HhEuLYCugL2jojrxeHJl7Wc50V2Ag0y1VqWlCyZr8Z78UwHer_ifeflZJa64b7Pd6bxlw1aS77Co3Nd4ukErP2JPv4409Y-Yzuogj1ZbfS5HOB-IOtHd_bZF2jvH4kAF59K4sYSNu010
2024-05-24 15:47:57 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 15:47:57 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:57 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-24 15:47:57 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.4	50017	142.250.185.206	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	973	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=PP9JzChxaT7bHAxOsKq61t1Ix9mqosSzF9JQgunHFhgVeT8SWhGaCY1yL97BEEeCt49usXo-XeYE1azgTq5SitFrBy8cl14rGrEWdQWRMB6Hw2lw4jJNW3S49sD-rMWD9z1_Y7C6r2Hl74NcKPor4LDr1zDaVqwhQqxIPKYubIs
2024-05-24 15:47:58 UTC	705	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 35 36 35 36 37 36 35 31 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716565676510",null,null,null
2024-05-24 15:47:58 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=i5-r_dbQjeUZ35nGdx-aSuSgyDhUhWMZd_M8WSSzyQSUYYHw9tWVc4FuJLX--CePUnxeyDQfvUnv3mvtuRYFQDmhyevQQvKqoMAoEOqpmuTGp9SXk72ydi1I_7ZedZwDXQxyxb2S9AgEixbRJ7xFdc7Smq8XQPdWiTUv9Uhg8a4; expires=Sat, 23-Nov-2024 15:47:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 24 May 2024 15:47:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 15:47:58 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-24 15:47:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.4	50018	216.58.212.142	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	1609	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 7799 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565670885&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1716565676526 Content-Type: application/json X-Goog-Event-Time: 1716565676526 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:58 UTC	7799	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 35 32 31 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4b 66 74 77 72 49 47 45 4b 33 6a 73 41 55 51 6e 75 53 77 42 52 44 6a 72 66 38 53 45 4f 50 52 73 41 55 51 2d 65 53 77 42 52 44 54 34 4c 41 46 45 4e 6a 64 73 41 55 51 74 2d 2d 76 42 52 44 71 77 36 38 46 45 4c 32 32 72 67 55 51 6f 6f 47 77 42 52 43 61 38 4b 38 46 45 50 61 72 73 41 55 51 36 5f 61 77 42 52 44 72 6b 36 34 46 45 4e 33 6f 5f 68 49 51 74 2d 72 2d 45 68 44 4c 38 72 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240521.01.00","configInfo":{"appInstallData":"CKftwrIGEK3jsAUQnuSwBRDjrf8SEOPRsAUQ-eSwBRDT4LAFENjdsAUQt--vBRDqw68FEL22rgUQooGwBRCa8K8FEParsAUQ6_awBRDrk64FEN3o_hIQt-r-EhDL8rAFEL
2024-05-24 15:47:58 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 24 May 2024 15:47:58 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 15:47:58 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-24 15:47:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.4	50019	216.58.212.142	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	2326	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=32.089&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=28076&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&hl=en_US&cr=US&len=15.481&afmt=250&idpj=-1&ldpj=-19&rti=32&size=1634%3A919&inview=0&st=2&et=2&muted=1&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRMaExtbHJleTNGclpHWEhuNmRIZEQtZHNoVG95NzE2VjZVdWQ2TFJDWTYtZ2JmQVBta0tESlBrY29URW1LQmpsSGcyRkNpYWpKTVhXa1U2VHRaaVEtaXdkVHBpV2NCMFlKeS1uNmtGN3gxVzA5cWJ1V2tqaHVNTElYNTlaS1ZlWEJ6d1QyTTRMU2piZ1ZSZ3dmdkJRaAI HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=1&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240521.01.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
2024-05-24 15:47:58 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Fri, 24 May 2024 15:47:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.4	50020	172.217.16.142	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=PP9JzChxaT7bHAxOsKq61t1Ix9mqosSzF9JQgunHFhgVeT8SWhGaCY1yL97BEEeCt49usXo-XeYE1azgTq5SitFrBy8cl14rGrEWdQWRMB6Hw2lw4jJNW3S49sD-rMWD9z1_Y7C6r2Hl74NcKPor4LDr1zDaVqwhQqxIPKYubIs
2024-05-24 15:47:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 24 May 2024 15:47:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:59 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-24 15:47:59 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.4	50022	192.124.249.2	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	1350	OUT	GET /wp-content/uploads/2024/01/phone2.webp HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.daystarpayments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565676.58.0.0
2024-05-24 15:47:59 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:58 GMT Content-Type: image/webp Content-Length: 159472 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 09 Jan 2024 19:50:48 GMT ETag: "27a0cf0-26ef0-60e88a182e216" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-05-24 15:47:59 UTC	7648	IN	Data Raw: 52 49 46 46 e8 6e 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6a 03 00 f0 02 00 41 4c 50 48 7c de 01 00 01 19 87 6d db 48 12 72 37 5e 67 84 49 ff 05 4f 66 9f 0e 22 fa 3f 01 e2 cb 7b f2 3b 55 91 a2 d7 83 aa aa 18 a9 8a f1 00 54 4d 8c b5 22 86 40 54 1c ea d0 8e 04 57 c5 40 a0 d9 1f 62 64 ad b5 62 0c 90 e5 dc 4f e7 31 30 f0 52 8c dc 78 a9 ca 60 78 63 95 25 b1 e7 7c f2 37 40 4e 30 99 f9 20 d9 e7 64 7f 34 b2 93 00 f2 77 2f 7e 5d d2 64 de f3 76 4d 69 23 d3 22 3b 49 cd 35 3b 32 04 39 23 02 d1 d8 53 6a fa 9c 7f ce b6 53 ba 83 a5 ce b2 3d 1f b4 42 c8 f0 8b 17 c4 6e 6c 9b b3 c1 70 d9 b6 30 44 38 74 00 ec 6b 37 c0 51 d8 b6 6d 53 2b ca ff 47 37 1d 27 44 c4 04 ac 9c b9 cc 3b f7 77 50 0f 70 62 2f a0 bc 80 0d ea 7a 2a 80 84 c7 52 05 8a dd 5a f7 a5 35 6e 6d 7d Data Ascii: RIFFnWEBPVP8XjALPH\|mHr7^gIOf"?{;UTM"@TW@bdbO10Rx`xc%\|7@N0 d4w/~]dvMi#";I5;29#SjS=Bnlp0D8tk7QmS+G7'D;wPpb/z*RZ5nm}
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 94 20 53 d6 ad b3 6a b5 92 7b 7c e9 a8 7c 2d 2a eb ac 5e 79 c9 46 ac 5a 2c 13 62 ab 5a 29 56 84 92 f3 d3 6e 25 f7 aa f4 68 14 8b 26 51 54 aa ee 10 04 21 82 71 26 79 17 2a 4b 75 c9 ea 57 74 d3 41 be 17 a4 1a a2 44 25 a2 8a 60 a3 fa e6 4b d6 6a 51 09 0d 6c 9e b2 66 2d a1 50 48 19 fb 36 33 44 3d a2 5d 2d 14 a2 5c ef 72 59 bb ca 26 bf b4 17 bd a9 ab 0e 3f 9a 36 f5 89 5c e7 93 f9 60 9b 28 b2 56 3c b6 d9 57 92 7d 85 b2 a8 a9 42 ed 26 72 d9 2b 9d 31 49 e5 7c ed f6 c5 9d 0e ba 2a c1 5d 54 2a 42 ef e5 f5 ae 60 51 16 86 c5 08 96 ef a7 b2 d4 62 4f d7 e3 3a ef 97 4a d3 97 ca b4 70 76 41 71 11 57 35 0e ba a8 ba 52 ee 88 8c 44 57 8a 44 26 7a ef 38 32 5a ba 32 29 28 74 b7 48 c7 51 25 f4 b2 54 51 71 bb 88 2e a9 fc fc 82 8b 52 0a 41 4d 28 3c 25 f5 0c ea a4 65 1b 43 50 1e Data Ascii: Sj{\|\|-^yFZ,bZ)Vn%h&QT!q&yKuWtAD%`KjQlf-PH63D=]-\rY&?6\`(V<W}B&r+1I\|]TB`QbO:JpvAqW5RDWD&z82Z2)(tHQ%TQq.RAM(<%eCP
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 72 5d a8 27 1d 84 c3 88 60 8d 56 27 77 43 15 d1 d3 4a 15 c2 10 89 e4 58 45 a9 76 6c 4a 91 90 35 42 76 e5 c3 bd eb d4 1d 3a 54 f6 75 75 9b 6d bb 35 fb 43 11 a1 0e b5 28 fd 47 95 9e 7a a6 95 94 58 1f fe f9 7f e6 1f e2 8f c9 7f f8 df f7 63 a1 b1 b5 ec 55 ed 3a 52 99 ba 97 d2 16 a9 43 e2 bc a3 87 a8 e6 ee 33 72 ea c1 5d 75 af fd d4 7e fa 71 4b ba 2e 94 cb a2 20 4d 5d 4d 96 a7 8e 28 89 1a f7 31 b1 6b 67 48 c9 6a 97 36 99 cb 1d 76 3c 77 0d 46 a1 d7 4a 96 9f 36 4d b5 3b 4a e1 a8 55 90 2b 58 ea b5 83 f4 aa 15 aa db b3 ce a4 86 ee 44 d7 35 45 b7 4e 57 ae 5a d4 1d 51 51 32 ef 4e cd 75 a5 c7 6c 3c b3 f8 8f 7d b1 d0 ee 99 8a a7 46 aa 14 24 6b c9 e5 62 29 f4 aa cd 7d 59 6b b3 cd 39 fb 9c b3 af 53 85 67 77 59 52 24 49 b6 51 93 a8 29 95 1e e7 0c 61 b3 9d f9 47 ff cd ff Data Ascii: r]'`V'wCJXEvlJ5Bv:Tuum5C(GzXcU:RC3r]u~qK. M]M(1kgHj6v<wFJ6M;JU+XD5ENWZQQ2Nul<}F$kb)}Yk9SgwYR$IQ)aG
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: ac 1e ee aa 43 eb a5 23 a1 3e 69 ed ae 73 dd 0d d1 6e ec 6a 6c 9a 51 31 6e 2b 75 46 9f 75 f7 88 52 17 9f ed b0 5b bb 5b 7e ba fd a9 7f c7 5f ef b7 fe ba bb 09 39 05 04 1e 9a 08 ea 36 b5 bb 2e 3d 27 df af 68 ca 5d 3a 2b ba a6 6e fa 8e 28 1b 52 49 a5 b7 c3 51 ca af 7d b5 e6 b8 a0 13 ca 9a 90 44 82 d6 d4 44 32 a5 a9 d3 56 2b e6 ef fb 9f ff 37 fb ff e3 af 9f 40 a0 08 35 03 05 f0 a9 69 d1 5d ba c6 d3 3e 76 92 94 33 7d 2a ed 84 bb 4f bd 1e b1 47 65 c8 f6 5c 8c 47 e7 47 47 e7 aa 67 9a b8 85 93 d6 f4 b8 73 e6 5e d7 72 5d 5e f7 89 5b cd d3 ae 8f 7f e2 7f e3 af f2 07 f8 ff fd 8c 40 d1 04 66 11 5a 6a 55 78 56 1f 35 33 d9 4d 95 94 ed d4 e8 ba a5 94 8a b5 ae eb 45 69 ba 9a 9e d1 5a d1 57 52 84 bc cd 87 5b 10 45 29 4f 28 ba 17 c9 50 1b 25 55 76 92 98 bf f3 7f f8 3f e6 Data Ascii: C#>isnjlQ1n+uFuR[[~_96.='h]:+n(RIQ}DD2V+7@5i]>v3}*OGe\GGGgs^r]^[@fZjUxV53MEiZWR[E)O(P%Uv?
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: a1 5f 45 3b f7 87 bf ef bf f5 7f f6 17 fc 4e fc 12 f6 f8 00 90 90 77 a9 e9 eb 3d bb db 53 a5 12 9d 2d ae ec 68 d7 4f 8d 2e ba 4c 77 a5 eb 2b 9d a0 e2 e9 a3 0a 2d 99 b1 2b b7 fd 78 f7 bc da bc 5e 38 64 bf bc eb e2 45 d4 c7 85 97 be 44 8d 94 86 27 1f 35 f3 16 00 61 ad fa f0 c7 fd 5e 4f b1 df ff e0 2f fc 9f fe 2b ff 90 f0 4b da c3 13 c0 c6 83 4e ba 55 22 bb 0e e9 7a df a9 2e c5 ec ca 74 8d b4 6b 77 a7 50 48 51 45 f6 d8 3d 22 ad b3 21 09 19 cf 8c c3 4f 8c f5 c5 5e 6c 7b b9 60 f1 b2 b6 5a 74 ea f6 dc 46 92 e5 b7 2e 79 c6 00 42 91 fd 95 bf dd e5 eb fd c7 ff 97 ff 33 ff 84 9f e2 97 ba d7 8e 99 fa 9e e5 74 2b d7 60 73 94 8b 06 91 35 5d 3c 85 a3 e8 da d6 2c 3f 0d 95 ab 75 7b ce 82 56 d4 d2 f6 24 26 8e e7 79 86 cc 2b eb 6e 5f a5 25 8b a1 b6 9a 7d 87 dc d2 07 f7 9f Data Ascii: _E;Nw=S-hO.Lw+-+x^8dED'5a^O/+KNU"z.tkwPHQE="!O^l{`ZtF.yB3t+`s5]<,?u{V$&y+n_%}
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 40 61 d3 fe 82 cf 10 3c 21 49 25 c5 60 df 26 ee e9 45 35 ab f5 95 45 5a de 63 07 75 1d 12 b3 02 6f c0 20 ef b8 e4 6f bd 86 3d d4 4a 52 80 08 9a 56 10 6b 36 6a b7 67 b9 bb 0e b7 dd 86 35 b3 96 9f bd 31 e3 48 d2 a0 3a a7 8c 1c f9 25 a7 3e 9f 48 48 91 da 98 aa b4 30 76 0d 69 e4 79 9f 34 6a 9e f2 85 87 30 03 10 0a cc 95 1e 30 06 bb cc b4 bb d5 8a d9 9b 56 bf 6c 22 d1 1c da 80 40 da 69 f9 ea f7 7e 96 ee c5 82 96 86 ea 6c 85 35 05 43 e3 ea c1 42 ed 53 ea ea 4a a1 48 9f 46 79 c7 ee 7a ef b2 e4 ea da ad 4f e5 73 cf f2 f9 e0 da 46 a7 d4 8a c0 84 a6 cd 1d be b8 2f 27 3d 08 32 2f 54 4b e3 ea b9 82 b3 60 21 d6 29 01 b3 17 37 d9 c7 0d 17 6c 3b 85 74 63 d8 6d 38 91 24 ce 06 88 1d d6 d3 5f f9 79 fa 2e 6b 54 94 8d 7c 36 4b 9a 08 ea 65 e5 dc ba e6 d8 b4 b6 1e b6 ce ad eb Data Ascii: @a<!I%`&E5EZcuo o=JRVk6jg51H:%>HH0viy4j00Vl"@i~l5CBSJHFyzOsF/'=2/TK`!)7l;tcm8$_y.kT\|6Ke
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 47 1f bb a2 6b 4d 64 42 14 48 2d a6 66 07 85 40 3b fe c8 29 1e c9 2f 4b 75 a6 7e e1 83 50 22 b1 a6 ca 84 6d 7a 22 84 1b 17 05 e6 cb 69 5c 99 05 ce 2f 14 01 85 16 33 37 7f cc bf ec 97 fd f0 3a 5d 96 e5 d0 de 3d ca e4 d9 25 08 d2 e9 25 e3 72 89 6d 61 4f d7 a4 25 58 98 8c a9 46 a8 a4 1b db 69 59 06 dd 74 73 8b 69 29 08 62 35 dd e5 33 a5 2b d1 fb d1 f3 4c 78 ba dd bb b7 b5 6f 26 ef f6 45 c1 26 b5 24 58 6c ba ae eb a0 0c a8 0b dc 86 2e 50 1d 1a ba 2a 6a 19 30 00 92 62 76 22 e5 7a f1 9d ac e3 17 f3 4c 4b 1b e7 7d 17 46 04 2b 37 bb ed 6d e2 c3 da ed b3 b7 b6 3f fc 7e e8 a7 52 41 7f 56 fc d1 bf eb 07 40 99 75 af f3 4a 77 2f cc 6b 12 3b 9b 31 1a c5 98 52 6c 86 38 da 74 6a e4 b6 d2 b0 e8 cc 42 25 8c 26 89 95 31 7c 96 d1 11 6b c2 8c 7b 3e ab bb 19 db f9 ac ae a9 59 Data Ascii: GkMdBH-f@;)/Ku~P"mz"i\/37:]=%%rmaO%XFiYtsi)b53+Lxo&E&$Xl.P*j0bv"zLK}F+7m?~RAV@uJw/k;1Rl8tjB%&1\|k{>Y
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 32 80 67 3c 73 67 fa 8f fe fd 3f d8 2a b6 98 18 2a 3b 64 a7 03 90 88 29 88 d6 34 d6 5a 68 50 c8 27 11 3a 5d c7 aa 3d a5 58 9b ec da f3 8b 27 3d 9d 76 6b 30 9f d1 ec 24 ef 98 4c 75 58 70 24 bb f6 6c 3e 19 3e bb 4a c0 cf 5d 65 77 a1 6e ca a2 3b 6e 34 db 8e 95 f0 91 1b 9a 34 6b f6 f8 01 35 aa 66 f7 67 f7 83 e9 e9 90 30 1c 53 65 ca 25 5a f2 bd 0e 7d bd 9f f7 35 21 d4 44 ac d1 62 5e 80 34 d9 28 20 b5 e9 a7 fe 61 1f 6b 6f e9 64 6b db c9 36 85 45 4a 58 21 60 0d f2 2d 10 05 0a 50 34 49 4d d7 55 3d a4 8b 7e e4 7a 9c 47 b7 9b bb b8 eb 56 c1 5c cd ee 36 88 ee 5a 11 e3 aa 2c db ca 87 a9 64 8b 7d ce 34 d2 92 20 35 59 a8 0c e3 7e 92 ee 1a 9e 9a 8b 59 cf 85 8b b8 1f b3 a5 0b 35 da b2 65 07 c5 85 d0 58 f0 28 e3 8f 29 79 8f d8 6d 6e a9 2f d2 8c b9 1b 87 8c 38 6d 33 e6 8c Data Ascii: 2g<sg?**;d)4ZhP':]=X'=vk0$LuXp$l>>J]ewn;n44k5fg0Se%Z}5!Db^4( akodk6EJX!`-P4IMU=~zGV\6Z,d}4 5Y~Y5eX()ymn/8m3
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 76 53 dc 90 35 56 bb 51 a1 39 a1 6a 18 15 0c 25 aa 54 0e 50 99 4a ae a6 50 bb 90 36 1a 99 dd 8f b0 82 ab b4 18 1c 98 60 7a 01 d2 e9 e2 2d e3 28 a2 ba 4d f7 6e 45 7d 42 1b 97 46 8a f5 de 3b e9 ce ec ae fd e1 02 02 f4 c7 1a 5d fc 0b 85 cb 0d 64 fb ae c1 c3 3f fc ab 57 f7 14 c2 20 29 40 40 0d 46 e6 18 a9 85 a6 d2 a4 ba c0 90 e0 01 86 24 ad b1 4b d5 f5 59 f9 dc 85 4e 76 f2 ee b9 b5 95 ba 19 31 eb b3 44 2a d9 5a 68 be 4a a6 93 93 88 48 94 ef 37 68 e6 7d 13 6f 11 f1 9b 64 00 a1 40 d5 a8 95 82 e2 d2 4f 0b 42 5b d3 2c e9 9a 06 e9 40 41 ec d2 73 62 31 c8 70 0e cf 2d 1c 66 86 9c 12 5e 85 a4 ba b8 49 b2 74 85 1b 22 db 35 e9 b6 36 3e eb fd b8 a6 ee f7 0a 20 ca 8f 9b f9 87 04 06 ae 6f 1c db df 15 c8 3f 7e d5 67 ba 05 b6 b2 60 2c b3 42 c0 a5 cf 40 37 b7 82 65 8d 2c 6a Data Ascii: vS5VQ9j%TPJP6`z-(MnE}BF;]d?W )@@F$KYNv1D*ZhJH7h}od@OB[,@Asb1p-f^It"56> o?~g`,B@7e,j
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: ce 6b 71 c1 cd 1d 6e 7a e5 a1 4b 3e cf d9 db 5c 4e 58 73 59 6c 4b 22 8b 85 50 28 4f 6a 3a c3 ae 14 ab a1 a5 d4 32 64 d6 5d 08 8d 3b 9a fb 5c 7d 6a ee a9 6b 5d 4f 39 54 39 9f a7 eb 06 f7 c9 24 b1 d6 e6 0e b6 2d 2a 49 5c b4 fc 84 5e fd 4b 5b af 96 9f 16 eb 6a ce da d8 42 54 24 95 da 4e cd 28 03 36 dd b4 a1 0b 78 d4 a9 01 85 1c 8a b5 9e 12 76 9c 76 f8 a6 b0 a3 cc 78 50 cb 21 be 1f cb 54 f3 78 00 2f f8 3e 92 ef 83 c1 9e 22 0f 96 4d 47 62 57 09 9f 93 bb 9a 2e ec 60 a0 06 25 24 05 58 b6 4a 59 1d 1c d9 46 20 01 c8 02 81 31 20 c0 4c 3d 07 78 bc 7e b0 4e d2 ca 54 66 16 65 06 d8 34 ca f1 b2 1d b9 74 45 7a e3 66 9d e7 f8 46 b0 c6 d9 8f af f1 f7 f3 bc 86 da 90 e0 0c 45 6a 9d 79 46 c3 f5 75 7f 41 a7 27 31 f1 04 b4 01 4b db f8 9c 70 f9 4d bf fa 80 f6 89 1a da 2b a9 dc Data Ascii: kqnzK>\NXsYlK"P(Oj:2d];\}jk]O9T9$-*I\^K[jBT$N(6xvvxP!Tx/>"MGbW.`%$XJYF 1 L=x~NTfe4tEzfFEjyFuA'1KpM+

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.4	50023	192.124.249.2	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:58 UTC	1102	OUT	GET /wp-content/uploads/2023/11/bg2.jpg HTTP/1.1 Host: www.daystarpayments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565676.58.0.0
2024-05-24 15:47:59 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Fri, 24 May 2024 15:47:58 GMT Content-Type: image/jpeg Content-Length: 19917 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 13 Nov 2023 21:03:36 GMT ETag: "27a117f-4dcd-60a0f00e41a00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-05-24 15:47:59 UTC	7673	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 30 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky<0http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-05-24 15:47:59 UTC	8192	IN	Data Raw: 9e 1c ad 92 3c 7e 0a 3b f9 3e 95 4f 4d 7e b2 e6 29 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 1d ce ef 6f b6 c7 37 cd 78 ac 7d b2 8f 66 da d2 33 32 da b5 99 ec f9 de e3 fb 93 36 5d 71 ed a3 db a7 eb fc d2 e3 f2 3e 42 6d d2 bd 21 6f 5f 1e 23 bb 8b 6b 5a d3 36 b4 cd a6 79 cc f1 73 a6 66 7b ac e1 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 da 9f 49 79 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 66 22 26 66 74 88 e7 20 e3 ef fb 8c e5 d7 16 29 d3 17 8c fe af e8 e7 6f e4 79 74 8e cb 14 d7 8e b2 Data Ascii: <~;>OM~)%o7x}f326]q>Bm!o_#kZ6ysf{Iyf"&ft )oyt
2024-05-24 15:47:59 UTC	4052	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 3d ce 7a 60 c3 6c b7 e5 58 e1 1e 73 e1 08 f7 6d 8a 56 6d 2d a9 5f 29 c3 e5 f3 65 be 5c b6 c9 79 d6 d6 9d 65 e6 76 5e 6d 69 99 ef 2e 95 6b 88 c2 8d 19 00 00 00 01 a9 ba c7 d3 7e a8 e5 6f e2 af b6 b8 9c a4 ac b0 22 6c 00 00 00 03 4b b9 db 4c 75 af 9c ab 72 67 a2 4d 70 e7 29 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 33 53 49 ea 8e 53 cd 25 65 ac b1 b6 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 b5 3e 92 f3 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: =z`lXsmVm-_)e\yev^mi.k~o"lKLurgMp)3SIS%e`>

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.4	50024	142.250.184.206	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 15:47:59 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 15:47:59 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 24 May 2024 15:47:59 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 15:47:59 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-24 15:47:59 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Target ID:	0
Start time:	11:46:19
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:46:22
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:46:25
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:47:25
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5916 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	11:47:25
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2008,i,4317271888108639358,36157287163807191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11423436062?random=1716565650394&cv=11&fst=1716565650394&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565651846&cv=11&fst=1716565651846&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565652128&cv=11&fst=1716565652128&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11423436062?random=1716565650394&cv=11&fst=1716565650394&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565651846&cv=11&fst=1716565651846&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11272802727?random=1716565652128&cv=11&fst=1716565652128&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.daystarpayments.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1449637007

Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1	HTTP Parser: No favicon

Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="author".. found
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="author".. found
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="author".. found
Source: https://www.daystarpayments.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.daystarpayments.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.daystarpayments.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.daystarpayments.com/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET /apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Email HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/litespeed/js/503e1faacc150a4f6f725bcecfce6ae2.js?ver=4a1c2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.daystarpayments.com/wp-content/litespeed/css/4187afa6e2a8af9719ef76e9dde0899a.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/js/float.js?ver=6.5.3 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11423436062/?random=1716565592441&cv=11&fst=1716565592441&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11423436062?random=1716565592441&cv=11&fst=1716565592441&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11272802727?random=1716565597065&cv=11&fst=1716565597065&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=510751336 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11423436062/?random=1716565592441&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLFJiyLI-J8GgiJlSeir7NaIY9KZ4wHw&random=3592456305&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11272802727?random=1716565598683&cv=11&fst=1716565598683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11272802727/?random=1716565597065&cv=11&fst=1716565597065&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11423436062/?random=1716565592441&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLFJiyLI-J8GgiJlSeir7NaIY9KZ4wHw&random=3592456305&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11272802727/?random=1716565598683&cv=11&fst=1716565598683&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565597065&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLlnLwH4GQ6FqxzMImrCeaCSrXcJDaCjYrVyKn63037n9Xb5yK&random=2950629753&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565598683&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL6ezzgUQy5mUQpOtu9cM_pgujao6mZpcwqzZG4gIw3-Hhujpl&random=1627328665&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565597065&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLlnLwH4GQ6FqxzMImrCeaCSrXcJDaCjYrVyKn63037n9Xb5yK&random=2950629753&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565598683&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&hn=www.googleadservices.com&frm=0&tiba=Getting%20Started%20%7C%20Daystar&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL6ezzgUQy5mUQpOtu9cM_pgujao6mZpcwqzZG4gIw3-Hhujpl&random=1627328665&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/svg/en-us.svg HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-lucky-referrer: sec-ch-ua-mobile: ?0x-lucky-uid: undefinedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/svg/en-us.svg HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/form.72b77b99d67b130634d2.bundle.min.js HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-lucky-referrer: sec-ch-ua-mobile: ?0x-lucky-uid: undefinedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/core.js?v=0b59897 HTTP/1.1Host: tools.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /signals/config/1423059381965053?v=2.9.156&r=stable&domain=www.daystarpayments.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mqtt HTTP/1.1Host: realtime.luckyorange.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: FAf/pBdxoBmgrQIA+uP9Qw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: CLK1vO02ZlzwLAiOTZbq3g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /core/frame.js?v=0b59897 HTTP/1.1Host: tools.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mqtt HTTP/1.1Host: realtime.luckyorange.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: FC6UbPci33CQqlty6LItnw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqttv3.1
Source: global traffic	HTTP traffic detected: GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: vW4rCbEObFt/n+8SYYPYPg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Emailhttps%3A%2F%2Fwww.daystarpayments.com%2Fapply-now%2F%3Futm_source%3DEmail%26utm_medium%3DBlake-MassEmail%26utm_campaign%3DBlake-Email&rl=&if=false&ts=1716565638244&cd[page_title]=Daystar%20Email%20Webapp&cd[post_type]=page&cd[post_id]=11063&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2Fapply-now%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565635400&coo=false&eid=860d66e2-1632-451e-aa06-ec34ca05bd42&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-OejJ8h+QKnoQJAV6R+nNg/v8Cao"
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Q1PwVcibM8CZwrrRT74+/Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: VvtuiNUHZZNFXtipp5AJtg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /vi/HXJEakm65FI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGF4gXiheMA8=&rs=AOn4CLD7_0DFTCgDs92mmoJzxK2E6w0EBA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?DW3D_Q HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: nHXYsaZ4iRZiPQqEMXHp4g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/cropped-1-5-32x32.png HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/cropped-1-5-32x32.png HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/logo.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-Emailhttps://www.daystarpayments.com/apply-now/?utm_source=Email&utm_medium=Blake-MassEmail&utm_campaign=Blake-EmailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/litespeed/js/1d4bf4c17bc68ec761951d45626a34b9.js?ver=4a1c2 HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/logo.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/bg3.png HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/bg-1-1.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/image2.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565598.59.0.0; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427
Source: global traffic	HTTP traffic detected: GET /td/rul/11423436062?random=1716565650394&cv=11&fst=1716565650394&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11423436062/?random=1716565650394&cv=11&fst=1716565650394&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11272802727/?random=1716565651846&cv=11&fst=1716565651846&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /td/rul/11272802727?random=1716565651846&cv=11&fst=1716565651846&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /td/rul/11272802727?random=1716565652128&cv=11&fst=1716565652128&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11272802727/?random=1716565652128&cv=11&fst=1716565652128&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: /i+8pTBPmdgCYZoyi5YYLA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/image2.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565652.5.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/bg3.png HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565652.5.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11423436062/?random=1716565650394&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLO7ADp7tozPge2DzKQvSatn_lAClJykAPo4sk0YKW2zeTbXWt&random=1853353537&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565651846&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLHej53Xq6Be13h1NukudYt7lAqpGLxJ1tCntL_eWSGKth4NrC&random=3020920566&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565652128&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYSPUjCpnmGHC2KZJQg-fgS-ABE6Cs3y1Jc1EvOFaJ6hnh-49&random=1337554678&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11423436062/?random=1716565650394&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLO7ADp7tozPge2DzKQvSatn_lAClJykAPo4sk0YKW2zeTbXWt&random=1853353537&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565651846&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45je45m0v892801163z8893682453za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLHej53Xq6Be13h1NukudYt7lAqpGLxJ1tCntL_eWSGKth4NrC&random=3020920566&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: KczrkFanGDXhKA5FE9Pr5Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11272802727/?random=1716565652128&cv=11&fst=1716562800000&bg=ffffff&guid=ON&async=1&gtm=45be45m0v892801163z8893682453za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.daystarpayments.com%2F&hn=www.googleadservices.com&frm=0&tiba=Merchant%20Payment%20Processing%20%7C%20No%20Fee%20Merchant%20Processing&npa=0&pscdl=noapi&auid=28365965.1716565592&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYSPUjCpnmGHC2KZJQg-fgS-ABE6Cs3y1Jc1EvOFaJ6hnh-49&random=1337554678&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=0-767&rn=1&rbuf=0&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=0-298&rn=2&rbuf=0&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=768-163388&rn=3&rbuf=0&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=0-767&rn=4&rbuf=0&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhALPxTijmQbwDrBnwNZeCA0DK--zhClOjbgZDZrn5QjNCAiA1SDhCutbl3UD0UVA6TY6itemSMUmwHKrk309z0f-1nw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=299-7292&rn=5&rbuf=0&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1163821&dur=15.448&lmt=1714566912813249&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhALgLxIBINc6yRaB7e2Ms509CnOIarn6D_ISfVJ4qQyMsAiEAiR9rkfeqvxLHr_nmsM7ofc7S1jcqX0qkLwDqvls5e9s%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=163389-314752&rn=6&rbuf=5&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=518865-786942&rn=7&rbuf=1871&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=786943-975634&rn=8&rbuf=4142&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Dlc288Nbq/cIkM0+KRAjDw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=12.135&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=8122&cl=635991227&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&hl=en_US&cr=US&len=15.481&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29151%2C1066%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&rtn=22&afmt=250&size=1634%3A919&inview=0&muted=1&vis=3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRMaExtbHJleTNGclpHWEhuNmRIZEQtZHNoVG95NzE2VjZVdWQ2TFJDWTYtZ2JmQVBta0tESlBrY29URW1LQmpsSGcyRkNpYWpKTVhXa1U2VHRaaVEtaXdkVHBpV2NCMFlKeS1uNmtGN3gxVzA5cWJ1V2tqaHVNTElYNTlaS1ZlWEJ6d1QyTTRMU2piZ1ZSZ3dmdkJRaAI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3gsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=HXJEakm65FI&cpn=HhvLVt-RnKxTEP9r&ei=lrZQZqPqHOvA6dsP94ee4Ak&ptk=youtube_none&pltype=contentugc HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3gsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=975635-1536319&rn=9&rbuf=5741&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587254&ei=lrZQZqPqHOvA6dsP94ee4Ak&ip=8.46.123.175&id=o-APrIoguFpGVruVr7luks2Ps410xQGMxK934uE1JCDjOQ&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C26&mn=sn-p5qlsnrl%2Csn-ab5l6nk6&ms=au%2Conr&mv=u&mvi=2&pl=25&bui=AWRWj2Tol5kagpYOcvcaB7_PEaTkJaU80WtKog1AsabbMI2xUjFyXepSUR1vxf2L_hIFErExvQdyADKE&spc=UWF9f4w2O5cSzm2FNWNRnSJXxGdp9GYPUlWcCxKMzdAs6Bo&vprv=1&svpuc=1&mime=video%2Fmp4&ns=c_M2gGOAg5ej8fU3QPUlwx0Q&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=Ow02vqx6Bf2bmQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAKkK-BGmAvLSsOo8TtSMyHMU5gBbkUkkmEIwQqD4ch2-AiBiCLXGG5CSB1vmBQuBakZWvQO6uTv2w0fyg_jLnrgDgA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIgBliUjK9N3SYyWOJGqJc1PxS7QK9j0TpUh_A6zY8cEqoCIQDcUhZGgP3B6E1Vt-bVxe1MV4CUtJiXierj2hqFa5cizQ%3D%3D&alr=yes&cpn=HhvLVt-RnKxTEP9r&cver=1.20240521.01.00&range=1536320-1872151&rn=10&rbuf=10081&pot=MnQK811gZizOsgrLOPTia8zSn87N11mpgy-Rp7asmOjlagnwvF6ze1Fv1N9kezi9tposiKt2sbS4YJ5ILaD2SLvBEs7polZ7bntxNEkSy4v9WqIAohpXtBy8goTP5o6A6MkXbjmWajWomFxazmWD3G5OnIcXwA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qlsnrl.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_miLQJvHS8uaWL2Pqs0rlYaadcUYMBlj8GE1OAEBhah9no=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: WEB8iOA0BwbvQZH2SLsQgQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 1Z+PFy6T+jN82W4gG9k3Bg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: IT94b0bSOVVxXJK/R2RCkQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/bg-1-1.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-lucky-referrer: sec-ch-ua-mobile: ?0x-lucky-uid: 0cce5631-1716565635899-af5311f42aca53faUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.70d63d6d093f3a45a0c6.bundle.min.js HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=22.989&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=18976&cl=635991227&state=paused&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&hl=en_US&cr=US&len=15.481&rtn=32&afmt=250&idpj=-1&ldpj=-19&rti=22&size=1634%3A919&inview=0&st=0%2C2.167&et=2%2C3.622&muted=1%2C1&vis=3%2C3&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRMaExtbHJleTNGclpHWEhuNmRIZEQtZHNoVG95NzE2VjZVdWQ2TFJDWTYtZ2JmQVBta0tESlBrY29URW1LQmpsSGcyRkNpYWpKTVhXa1U2VHRaaVEtaXdkVHBpV2NCMFlKeS1uNmtGN3gxVzA5cWJ1V2tqaHVNTElYNTlaS1ZlWEJ6d1QyTTRMU2piZ1ZSZ3dmdkJRaAI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=2&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3gsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/tabs.c2af5be7f9cb3cdcf3d5.bundle.min.js HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565656.1.0.0
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-lucky-referrer: sec-ch-ua-mobile: ?0x-lucky-uid: 0cce5631-1716565635899-af5311f42aca53faUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 3mY2FwTNy887aGq3CNsGsg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /mqtt HTTP/1.1Host: realtime.luckyorange.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 2o1eJeCw30CHfY8hc14cPg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mqtt HTTP/1.1Host: realtime.luckyorange.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: /bgYa/MXHjjK47WoFNPXtA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqttv3.1
Source: global traffic	HTTP traffic detected: GET /0cce5631 HTTP/1.1Host: settings.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: w4oi1PrxwaSNPNRc3f9Jbw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1423059381965053&ev=PageView&dl=https%3A%2F%2Fwww.daystarpayments.com%2F&rl=&if=false&ts=1716565667873&cd[page_title]=Daystar%20Home&cd[post_type]=page&cd[post_id]=2576&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.daystarpayments.com%2F&sw=1280&sh=1024&ud[external_id]=fb8b254901345a54558c7e5df5e4f439b46c01d341dac0037f4c430fb6ab9bb8&v=2.9.156&r=stable&a=dvpixelyoursite&ec=0&o=4126&fbp=fb.1.1716565588.5275137427&cs_est=true&ler=empty&cdl=API_unavailable&it=1716565667121&coo=false&eid=a26887cf-a159-4776-b67a-f0f88f447086&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.daystarpayments.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
Source: global traffic	HTTP traffic detected: GET /public-auth HTTP/1.1Host: api-preview.luckyorange.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"413-DP/LDYEgffxrfPOMxXSlbLytbsU"
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: RSwHqKvYBQErpyZfp0bHlA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 1NFMFy70dR74oPT3XbofIg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=0-767&rn=1&rbuf=0&pot=Ijh9eX1_GynL0T4eCQArPhVJMi0nHxkXPy0yOhQXSho2AD8TNDI-HjcvKAE0PDoePB4nKFhKOVxOPQ==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=0-298&rn=2&rbuf=0&pot=IjhCBEICJFT0rAFjNn0UQyo0DVAYYiZqAFANRytqdWcJfQBuC08BYwhSF3wLQQVjA2MYVWc3BiFxQA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?SDRFfA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=768-268845&rn=3&rbuf=0&pot=IjiLRItC7RQ97cgj_z3dA-N0xBDRIu8qyRDEB-IqvCfAPckuwg_II8ES3jzCAcwjyiPRFa53z2G4AA==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=250&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=7293&dur=15.481&lmt=1714565598897422&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5532434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhANoyaB6fzV5FlcIOLuIMSToQku1W47MmcDwKXBvecFfTAiEA0Td2aMDmzUUGsNB74UFUNoKbvHnTKDcH1WbVTU8RwGs%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=299-7292&rn=4&rbuf=0&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/frame.js?v=0b59897 HTTP/1.1Host: tools.luckyorange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.daystarpayments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=268846-518864&rn=5&rbuf=3&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=518865-786942&rn=6&rbuf=1871&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=786943-975634&rn=7&rbuf=4142&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=embedded&cpn=HiHYYKo7qHOnQDeH&ver=2&cmt=2&fmt=399&fs=0&rt=3.106&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=3329&cl=635991227&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&hl=en_US&cr=US&len=16&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C73455%2C230596%2C121055%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C26496%2C6966%2C2%2C6689%2C2007%2C9072%2C29152%2C1065%2C1131%2C8970%2C1026%2C1103%2C21%2C4187%2C2744%2C102%2C2657%2C31%2C301%2C361%2C49%2C3%2C288%2C2%2C3703%2C8%2C173%2C659%2C217%2C410%2C5%2C39%2C2037%2C501%2C1478%2C492%2C1008%2C4075%2C40%2C8%2C47%2C1023%2C1345%2C713%2C2585%2C3%2C7%2C1358%2C507%2C5057&rtn=14&afmt=250&size=1703%3A958&inview=0&muted=1&docid=HXJEakm65FI&ei=qbZQZrntFsG66dsP3Our4Ao&plid=AAYZNRcyZNvsmyE9&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKcnctME9FWlM3RkxPSV9IMXpBTTlmeWd2X0c2aGMxbldkdy1WclI4c291QWJmQVBta0tETG5SZkpodjdvRWltLVJUdnkyUDR6QTRzVXJaX1Y0WnBZZlBOOUJoSUd5aHVhajc2eXRRNzBTYTc4NWx6OEp3WDN0R056a0ppRjhLT19CM1V1aUU0SkNEM0trOGc0Vkt3aAI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565671033&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-58PX1N3KV2&gacid=2069642792.1716565597&gtm=45je45m0v892801163za201&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1449637007 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVbhbvnoBAMewTeCXnqwXAVfHACFHSxa2uBcJd82iMJmZhyuv4FcO-GqeY
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=HXJEakm65FI&cpn=HiHYYKo7qHOnQDeH&ei=qbZQZrntFsG66dsP3Our4Ao&ptk=youtube_none&pltype=contentugc HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565671033&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1703%2C958&vis=1&wgl=true&ca_type=image&bid=ANyPxKpCn4new65c-AjHdSudAAV9Yj-ZC4m2h7JOk-QAg8x1ePX_YBhlfbtyIkHOaf5I9stPe7knWAyl-fnKM3IVcwtYb7m3yQsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCin7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=BR2Kq9pg2AMjtFIZgajnfTx9m4ANBr1HhEuLYCugL2jojrxeHJl7Wc50V2Ag0y1VqWlCyZr8Z78UwHer_ifeflZJa64b7Pd6bxlw1aS77Co3Nd4ukErP2JPv4409Y-Yzuogj1ZbfS5HOB-IOtHd_bZF2jvH4kAF59K4sYSNu010
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: in.visitors.liveConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.daystarpayments.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 7JiMJx29eeh+SJuDdsy5Gw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=975635-1718791&rn=8&rbuf=5544&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716587273&ei=qbZQZrntFsG66dsP3Our4Ao&ip=8.46.123.175&id=o-AF4JVVN8oAjiIrXtP22ps1msvtDoN0Zf6dV-osBF2bhN&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313%2C394%2C395%2C396%2C397%2C398%2C399%2C400%2C401&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=MB&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsnrl&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2SVdMeGYOfZp9RbNk8_lpZcwaQiHDyRNgPCRnV9dWhLpfEXluEXiGhLa0lXYe-CDz9CuuM4VCh6&spc=UWF9f0oom7caaCulq-lBpbnRtXYN5oTk1PD4PD7Q6sDtxTQf8jegLPMubQ&vprv=1&svpuc=1&mime=video%2Fmp4&ns=aJ-wkoYjGxgjYypzwzw25xgQ&rqh=1&gir=yes&clen=1872152&dur=15.448&lmt=1714567751431464&mt=1716564831&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5537434&n=fq0_ZJJcNILx6g&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgO7zVLsDBPXRmP8b7j4_9Hj1bOEpRMATJKd5pWt80ejoCIDrkhZoigSiR8jhRJ37SsRlGSNzF2NZX8f1mINAkkFdd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRgIhAKiNWrAkf9h7ZNTPRI7oS3rHfUrEca4f9TXee9o5PvQJAiEA1nbc7N0oATHtspoTKIlPStSr2TBQKcg1n6qXPlEG2TE%3D&alr=yes&cpn=HiHYYKo7qHOnQDeH&cver=1.20240521.01.00&range=1718792-1872151&rn=9&rbuf=11253&pot=MnTyo9IOj-bjPfKb5mmVmIZKqFB11PkDNsvnk07EC7lBed7ePMOmDH_ILQuJE5vlqUmXh8KoDyxbEsAKl1exVLt8Z1TT9kUG4k-KF7txe63SsskMJUqgD5gZhNGJwFj2vDhNoQfONXXQEbXEDeTRhnoBlkxXlg==&ump=1&srfvp=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/bg2.jpg HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/wp-content/litespeed/css/ddff27af406bf1e999a008f17424e3cc.css?ver=4a1c2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565674.60.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=BR2Kq9pg2AMjtFIZgajnfTx9m4ANBr1HhEuLYCugL2jojrxeHJl7Wc50V2Ag0y1VqWlCyZr8Z78UwHer_ifeflZJa64b7Pd6bxlw1aS77Co3Nd4ukErP2JPv4409Y-Yzuogj1ZbfS5HOB-IOtHd_bZF2jvH4kAF59K4sYSNu010
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=HhvLVt-RnKxTEP9r&ver=2&cmt=2&fmt=399&fs=0&rt=32.089&euri=https%3A%2F%2Fwww.daystarpayments.com%2F&lact=28076&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240521.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&hl=en_US&cr=US&len=15.481&afmt=250&idpj=-1&ldpj=-19&rti=32&size=1634%3A919&inview=0&st=2&et=2&muted=1&docid=HXJEakm65FI&ei=lrZQZqPqHOvA6dsP94ee4Ak&plid=AAYZNRYR7cmdBEdq&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHXJEakm65FI%3Fcontrols%3D0%26rel%3D0%26playsinline%3D1%26enablejsapi%3D1%26origin%3Dhttps%253A%252F%252Fwww.daystarpayments.com%26widgetid%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRMaExtbHJleTNGclpHWEhuNmRIZEQtZHNoVG95NzE2VjZVdWQ2TFJDWTYtZ2JmQVBta0tESlBrY29URW1LQmpsSGcyRkNpYWpKTVhXa1U2VHRaaVEtaXdkVHBpV2NCMFlKeS1uNmtGN3gxVzA5cWJ1V2tqaHVNTElYNTlaS1ZlWEJ6d1QyTTRMU2piZ1ZSZ3dmdkJRaAI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1716565643488&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1634%2C919&vis=1&wgl=true&ca_type=image&bid=ANyPxKpjPqJ1U0T3B_zQKDGkv0WW3X6slKMjOKHoru6u-LbSj5xeuauh1yRxYyiSgomriVj6MdDe7j7FzS_oMqTyBWInQlSp3gsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240521.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgtyVGh0OTZfdnBTOCiH7cKyBjIKCgJVUxIEGgAgZQ%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/HXJEakm65FI?controls=0&rel=0&playsinline=1&enablejsapi=1&origin=https%3A%2F%2Fwww.daystarpayments.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=lPkBZp0Aznk; VISITOR_INFO1_LIVE=rTht96_vpS8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=PP9JzChxaT7bHAxOsKq61t1Ix9mqosSzF9JQgunHFhgVeT8SWhGaCY1yL97BEEeCt49usXo-XeYE1azgTq5SitFrBy8cl14rGrEWdQWRMB6Hw2lw4jJNW3S49sD-rMWD9z1_Y7C6r2Hl74NcKPor4LDr1zDaVqwhQqxIPKYubIs
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/phone2.webp HTTP/1.1Host: www.daystarpayments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.daystarpayments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565676.58.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/bg2.jpg HTTP/1.1Host: www.daystarpayments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.28365965.1716565592; _ga=GA1.1.2069642792.1716565597; pys_session_limit=true; pys_start_session=true; pbid=efededffeeaeefdcbdeecce; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.daystarpayments.com/apply-now/; pys_utm_source=Email; pys_utm_medium=Blake-MassEmail; pys_utm_campaign=Blake-Email; last_pysTrafficSource=direct; last_pys_landing_page=https://www.daystarpayments.com/apply-now/; last_pys_utm_source=Email; last_pys_utm_medium=Blake-MassEmail; last_pys_utm_campaign=Blake-Email; _fbp=fb.1.1716565588.5275137427; lo-uid=0cce5631-1716565635899-af5311f42aca53fa; lo-visits=1; _fbp=fb.1.1716565588.5275137427; _ga_58PX1N3KV2=GS1.1.1716565597.1.1.1716565676.58.0.0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_217.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_157.2.dr	String found in binary or memory: (g.dq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.dq(c,"www.youtube.com"),d=c.toString()):(c=XBa(d),eJ(c)&&(d=c));c=new g.tP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_161.2.dr	String found in binary or memory: </a></li></ul></div></div></div></div></div></section></div></div></div></section></div><div class="gtranslate_wrapper" id="gt-wrapper-10758220"></div><noscript><img height="1" width="1" style="display: none;" src="https://www.facebook.com/tr?id=1423059381965053&ev=PageView&noscript=1&cd%5Bpage_title%5D=Daystar+Home&cd%5Bpost_type%5D=page&cd%5Bpost_id%5D=2576&cd%5Bplugin%5D=PixelYourSite&cd%5Buser_role%5D=guest&cd%5Bevent_url%5D=www.daystarpayments.com%2F" alt=""></noscript> <script type="text/javascript" id="gt_widget_script_10758220-js-before">/* */ equals www.facebook.com (Facebook)
Source: chromecache_142.2.dr	String found in binary or memory: </button></div></div></form></div></div></div></div></div></section></div></div></div></section></div><div class="gtranslate_wrapper" id="gt-wrapper-55523285"></div><noscript><img height="1" width="1" style="display: none;" src="https://www.facebook.com/tr?id=1423059381965053&ev=PageView&noscript=1&cd%5Bpage_title%5D=Daystar+Email+Webapp&cd%5Bpost_type%5D=page&cd%5Bpost_id%5D=11063&cd%5Bplugin%5D=PixelYourSite&cd%5Buser_role%5D=guest&cd%5Bevent_url%5D=www.daystarpayments.com%2Fapply-now%2F" alt=""></noscript> <script type="text/javascript" id="gt_widget_script_55523285-js-before">/* */ equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook elementor-animation-grow elementor-repeater-item-38d7f9b" href="https://www.facebook.com/profile.php?id=100088741953533" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-animation-grow elementor-repeater-item-a0621b3" href="https://www.linkedin.com/company/daystarpaymentsystems" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-animation-grow elementor-repeater-item-e5a4268" href="https://www.youtube.com/@daystarpayments" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_144.2.dr, chromecache_199.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: VSa=function(a,b){if(!a.j["0"]){var c=new iK("0","fakesb",{video:new eK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new vQ(new g.tP("http://www.youtube.com/videoplayback"),c,"fake"):new GQ(new g.tP("http://www.youtube.com/videoplayback"),c,new jQ(0,0),new jQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: a))):this.Md(g.RV(a.errorMessage)):this.Md(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.to(c,{hl:a})),this.Md(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.qc&&!d.D&&D_a(this,function(f){if(g.mU(f,b.api,!QR(b.api.U()))){f={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var h=b.api;h.Ac("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|OBa(this.yf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=wB(d,h,ZTa):h&&(d="embedded");this.La=d;vua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ta,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ta,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.gp=!this.qa;this.Sa=vB(!1,a.disableplaybackui);this.disablePaidContentOverlay=vB(!1, equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: a.hl);this.region=b?b.contentRegion\|\|"US":yB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":yB("en",a.host_language);this.Uo=!this.Bc&&Math.random()<g.DI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Bc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=xB(this.Jd,a.ismb);this.gp?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=MR(this.Ea)\|\|"www.youtube.com")):r="video.google.com";this.cn=r;dUa(this,a,!0);this.Na=new lR;g.N(this, equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: a.severity,e,UJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Wd(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.DC)(),AX(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Wd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.OR(b),0===b.indexOf("www.")&&(b=b.substring(4)),c=g.xT(a)?"Watch on YouTube Music":"youtube.com"===b?"Watch on YouTube":g.pJ("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_144.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=oA(a,c,e);P(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return P(122),!0;if(d&&f){for(var m=Nb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},rA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_144.2.dr, chromecache_199.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){OC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(RC(w,"iframe_api")\|\|RC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!IC&&PC(y[B],n.xe))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_215.2.dr	String found in binary or memory: function Y(a,b,c){this.l=this.g=this.h=null;this.i=0;this.s=!1;this.o=[];this.j=null;this.C={};if(!a)throw Error("YouTube player element ID required.");this.id=Aa(this);this.A=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?rc(a.src):"https://www.youtube.com"),this.h=new Sc(b),c\|\|(b=Wc(this,a),this.l=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Aa(this.g)),V[this.g.id]=this,window.postMessage){this.j= equals www.youtube.com (Youtube)
Source: chromecache_225.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Mz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Mz("fsl","nv.ids",[]):Mz("fsl","ids",[]);if(!p.length)return!0;var q=Rz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;P(121);if("https://www.facebook.com/tr/"===r)return P(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!zI(q, equals www.facebook.com (Facebook)
Source: chromecache_157.2.dr	String found in binary or memory: g.$R=function(a){var b=g.OR(a);oUa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: g.OR=function(a){a=MR(a.Ea);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",Fkb);var GBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var ZNa={I6a:0,F6a:1,C6a:2,D6a:3,E6a:4,H6a:5,G6a:6};var Hpa=(new Date).getTime();var Eka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Fka=/\bocr\b/;var Hka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(ev,g.Dd);ev.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Vn.Pj(this.G);delete ev.instance}; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.OR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.IR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),TC&&(a=vpa())&&(b.ebc=a));return g.to(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_225.2.dr, chromecache_186.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: this.W.Ca&&(a.authuser=this.W.Ca);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.pc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(jR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.bR(this.B)?aR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_194.2.dr, chromecache_202.2.dr	String found in binary or memory: this._core.enter('playing');this._core.trigger('play',null,'video');item=this._core.items(this._core.relative(item.index()));this._core.reset(item.index());if(video.type==='youtube'){html='<iframe width="'+width+'" height="'+height+'" src="//www.youtube.com/embed/'+video.id+'?autoplay=1&v='+video.id+'" frameborder="0" allowfullscreen></iframe>'}else if(video.type==='vimeo'){html='<iframe src="//player.vimeo.com/video/'+video.id+'?autoplay=1" width="'+width+'" height="'+height+'" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>'}else if(video.type==='vzaar'){html='<iframe frameborder="0"'+'height="'+height+'"'+'width="'+width+'" allowfullscreen mozallowfullscreen webkitAllowFullScreen '+'src="//view.vzaar.com/'+video.id+'/player?autoplay=true"></iframe>'} equals www.youtube.com (Youtube)
Source: chromecache_157.2.dr	String found in binary or memory: var D3={};var Jgb=/[&\?]action_proxy=1/,Igb=/[&\?]token=([\w-])/,Kgb=/[&\?]video_id=([\w-])/,Lgb=/[&\?]index=([\d-])/,Mgb=/[&\?]m_pos_ms=([\d-])/,Ogb=/[&\?]vvt=([\w-]*)/,Agb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ngb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Dgb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_144.2.dr, chromecache_199.2.dr, chromecache_186.2.dr	String found in binary or memory: var TB=function(a,b,c,d,e){var f=Mz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Mz("fsl","nv.ids",[]):Mz("fsl","ids",[]);if(!g.length)return!0;var h=Rz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if("https://www.facebook.com/tr/"===m)return P(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!yy(h,zy(b, equals www.facebook.com (Facebook)
Source: chromecache_177.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: icreativefintech.us22.list-manage.com
Source: global traffic	DNS traffic detected: DNS query: www.daystarpayments.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: settings.luckyorange.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: tools.luckyorange.com
Source: global traffic	DNS traffic detected: DNS query: in.visitors.live
Source: global traffic	DNS traffic detected: DNS query: realtime.luckyorange.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: api-preview.luckyorange.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-p5qlsnrl.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-p5qs7nzr.googlevideo.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Windows Analysis Report
https://icreativefintech.us22.list-manage.com/track/click?u=a52dcb07190894ca565ad7e12&id=86f3344ff9&e=92747e965c