Edit tour

Windows Analysis Report
https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjC

Overview

General Information

Sample URL:	https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI5
Analysis ID:	1464331
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Blob-based file download detected

Found HTTP page in a blob

Detected suspicious crossdomain redirect

HTML page contains hidden URLs or javascript code

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,6084139276363326004,14724677063656091726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Found HTTP page in a blob

Source: blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06d

DOM page: Blob-based

Source: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z...

HTTP Parser: Base64 decoded: http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhB...

Source: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z...	HTTP Parser: No favicon
Source: blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06d	HTTP Parser: No favicon
Source: blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06d	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.16:49816 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: link.edgepilot.com to http://links.notification.intuit.com/ls/click?upn=u001.4hbrtpy8j6uxsk2aex2rzah5efphciifv3ven-2fx7ctl7yl0rqbeg5to4yn7gwqq9aly0xqjxtfa1awi51jobcqcnhjrgokkwepk76xmntcokiyvpgvkyw4pqtgdvg3d1u5hawh-2facrzucytgyvuxwyygm1-2f-2b4hsbimpsqax0wx3wjcqtx7xxtpleli0c8bhbmfcl4sb-2bc0p0rifmi7wznzk9oty5slzez4soiq0m44ftgzz-2bvw-2f74ns4dkgkmbfxawbjmevohbmp4l31wsel0q-3d-3dsgil_0qut3mqptwcj1pg0llnmrmxzs5gfo-2bwhas-2bwm85dst59sxq1v644vkncafohmg6uq86db24jqzsfwbp-2f-2fzhau7cah92-2fm-2botas0gobgn8edyy4v1qcxaww-2bqabo73nrgd-2b1uzqozrbtgelco3bonhgihdcq4w-2bh5fitfzmcqdbh3hwolyzkbb21iauza3ufb74s9zvum86we-2fl-2f5t9u31iyqdt1ed148vr9qkfvp-2b3oncpvd-2by-2fusv-2bkylfuesx9c-2fwjbktjnu75ob3ohwc7ggkh-2bicgvcxjz3pq4lnasavtku8mzy9yf6lnbnjzdptmuh8b6otxiwtdjqmweahr-2b-2frcao-2fj12qgpwtla2mxzss7sxzu47f-2b52jlmdxzqa8fxe9gpbqhcrwhgk2nsyvt0kukzpgmzj8zmj3evdomttmb-2b2vcmwvnlzokhh5rcaofiz4wpqri6xrunn-2bhc9fbz0rmlyxoj3bgpxzovn1dbcgj-2bx4obza-2boaapp4ewippjipjjydtcuwnuvcfmzsaw7yxqvesrl6feolvicel2z2qd9gtvwa5ijhttkpmhaedjpwqk8ivb7wewedu0b5puzoueray59rqk5bfwejp4169h-2f-2fl02ldrkexkceyuqbgyb7wisdq4ngsve3uhlpuhjcrsxafgtvscgtnllbj7xitpzzg2cjgkxwp2snhedihs

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS HTTP/1.1Host: link.edgepilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://link.edgepilot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://link.edgepilot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://link.edgepilot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://link.edgepilot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://link.edgepilot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://link.edgepilot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.css?v=1 HTTP/1.1Host: link.edgepilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: link.edgepilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: link.edgepilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US HTTP/1.1Host: connect.intuit.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US HTTP/1.1Host: connect.intuit.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV; AWSALBCORS=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV
Source: global traffic	HTTP traffic detected: GET /truste.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-7dbfac4402a4034a.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /truste.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-71ca81b130c00394.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3161-453b7f7fce0f2075.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5480-57779aea7089e098.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5669-00d69eb446cd722f.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://connect.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2352-55a0b477131a1625.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9211-e5b247be522986a8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6019-d03ad3086a0b9def.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3883-6f87e03a1b65d28c.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-d2971633ac2e2613.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/1.24.4-release_1.24.4-ca589f4/_buildManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/1.24.4-release_1.24.4-ca589f4/_ssgManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf HTTP/1.1Host: connect.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0intuit-realmid: 13845050475272421Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lwUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36intuit_tid: cp-cb5ca-3a6f-4b6d-b098-52e7b22218baAccept: application/pdfbaggage: sentry-environment=production,sentry-release=1.24.4-release_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7sentry-trace: a0f688fae52e4dc5956d99cda5d485e7-812c2af4d9752987-0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POrVY6DuSCNGz6g&MD=vVlEBouK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1Host: prd.sentry-io.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal/rest/invoice/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/view HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
Source: global traffic	HTTP traffic detected: GET /portal/rest/reporting/prometheus/view HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
Source: global traffic	HTTP traffic detected: GET /portal/rest/experiments HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
Source: global traffic	HTTP traffic detected: GET /portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; AWSALB=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG; AWSALBCORS=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1Host: prd.sentry-io.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8367.159e6dc789fa4500.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
Source: global traffic	HTTP traffic detected: GET /portal/rest/reporting/prometheus/pageLoad HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006; AWSALB=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R; AWSALBCORS=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R
Source: global traffic	HTTP traffic detected: GET /v2/segment/sbseg-qbo-clickstream/m HTTP/1.1Host: eventbus.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POrVY6DuSCNGz6g&MD=vVlEBouK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a75363d0418258491551ead6717ca895 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: c-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?3d4619f8959a0bb944ce9eb8ccf482ff HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: c-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9844.724333c7af959b0a.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/4299.ddfe61a9bd4e8832.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fconnect.intuit.com&oit=3&cp=26&pgcl=4&gs_rn=42&psi=36xeMSuxvWiNwaAx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: connect.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006; AWSALB=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4; AWSALBCORS=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS HTTP/1.1Host: links.notification.intuit.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_187.1.dr

String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: link.edgepilot.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: links.notification.intuit.com
Source: global traffic	DNS traffic detected: DNS query: connect.intuit.com
Source: global traffic	DNS traffic detected: DNS query: static.cns-icn-prod.a.intuit.com
Source: global traffic	DNS traffic detected: DNS query: cdn.polyfill.io
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: smx.intuit.com
Source: global traffic	DNS traffic detected: DNS query: prd.sentry-io.a.intuit.com
Source: global traffic	DNS traffic detected: DNS query: eventbus.intuit.com
Source: global traffic	DNS traffic detected: DNS query: quickbooks.intuit.com
Source: global traffic	DNS traffic detected: DNS query: customersurveys.intuit.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: static.quickbooks.com

Source: unknown

HTTP traffic detected: POST /filter HTTP/1.1Host: link.edgepilot.comConnection: keep-aliveContent-Length: 1716Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://link.edgepilot.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_141.1.dr, chromecache_165.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_187.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://app.qbo.intuit.com/app/login?pagereq=paymentssetup%3Fp_prioritycode%3Dacq937_payments_webpg
Source: chromecache_187.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_165.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://glam.app.intuit.com/app/guesttos?glocale=en_US
Source: chromecache_187.1.dr	String found in binary or memory: https://google.com
Source: chromecache_187.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_187.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_187.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_131.1.dr	String found in binary or memory: https://public-consumer-chat.app.intuit.com/app/ccs/consumer?experienceId=sbsegUsDtCorePos
Source: chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/help-article/chargebacks/sign-payments-dispute-pro
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/help-article/product-system-requirements/system-re
Source: chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/money/see-plans/
Source: chromecache_182.1.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/graphic-elements/sbseg-gwp-oifooter-sp
Source: chromecache_182.1.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icons/circle-check-fill.svg
Source: chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/desktop/#easy-payments
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/
Source: chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/qbmoneycard/toc92020/greendot/
Source: chromecache_131.1.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3
Source: chromecache_167.1.dr, chromecache_176.1.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_187.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_187.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_187.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_187.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_187.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_131.1.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/
Source: chromecache_186.1.dr, chromecache_131.1.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.16:49816 version: TLS 1.2

System Summary

Blob-based file download detected

Source: C:\Users\user\Downloads\downloaded.pdf

File download: blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06dC:\Users\user\Downloads\downloaded.pdf

Source: classification engine

Classification label: mal48.phis.win@26/151@63/22

Source: cd01622f-886a-4bbb-a51f-cbafff62a06e.tmp.0.dr	Initial sample: mailto:renen73797@devncie.com
Source: cd01622f-886a-4bbb-a51f-cbafff62a06e.tmp.0.dr	Initial sample: tel:+1 8024284826

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,6084139276363326004,14724677063656091726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,6084139276363326004,14724677063656091726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js	0%	URL Reputation	safe
https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS	0%	Avira URL Cloud	safe
https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/money/see-plans/	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5480-57779aea7089e098.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9844.724333c7af959b0a.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/favicon.png	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/legal/	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/desktop/#easy-payments	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-71ca81b130c00394.js	0%	Avira URL Cloud	safe
https://link.edgepilot.com/css/app.css?v=1	0%	Avira URL Cloud	safe
https://link.edgepilot.com/filter	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/truste.svg	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-00d69eb446cd722f.js	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js	0%	Avira URL Cloud	safe
https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_buildManifest.js	0%	Avira URL Cloud	safe
https://glam.app.intuit.com/app/guesttos?glocale=en_US	0%	Avira URL Cloud	safe
https://sketchapp.com	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/reporting/prometheus/view	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6019-d03ad3086a0b9def.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-453b7f7fce0f2075.js	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/graphic-elements/sbseg-gwp-oifooter-sp	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.2.1.min.js	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/invoice/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/view	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js	0%	Avira URL Cloud	safe
https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3883-6f87e03a1b65d28c.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/learn-support/en-us/help-article/chargebacks/sign-payments-dispute-pro	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js	0%	Avira URL Cloud	safe
https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/learn-support/en-us/	0%	Avira URL Cloud	safe
file:///C:/Users/user/Downloads/downloaded.pdf	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8367.159e6dc789fa4500.js	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://app.qbo.intuit.com/app/login?pagereq=paymentssetup%3Fp_prioritycode%3Dacq937_payments_webpg	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9211-e5b247be522986a8.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/4299.ddfe61a9bd4e8832.js	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fconnect.intuit.com&oit=3&cp=26&pgcl=4&gs_rn=42&psi=36xeMSuxvWiNwaAx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/index-d2971633ac2e2613.js	0%	Avira URL Cloud	safe
blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06d	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/reporting/batch	0%	Avira URL Cloud	safe
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/p	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/learn-support/en-us	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icons/circle-check-fill.svg	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-7dbfac4402a4034a.js	0%	Avira URL Cloud	safe
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/m	0%	Avira URL Cloud	safe
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t	0%	Avira URL Cloud	safe
https://www.intuit.com/legal/licenses/payment-licenses/	0%	Avira URL Cloud	safe
https://connect.intuit.com/	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/legal/qbmoneycard/toc92020/greendot/	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/learn-support/en-us/help-article/product-system-requirements/system-re	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/reporting/prometheus/pageLoad	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-55a0b477131a1625.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js	0%	Avira URL Cloud	safe
https://google.com	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_ssgManifest.js	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe
https://link.edgepilot.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.intuit.com/legal/licenses/payment-licenses/.	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
link.edgepilot.com	199.30.234.133	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
sendgrid.net	167.89.118.83	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
eventbus.a.intuit.com	54.213.166.94	true	false	unknown
prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com	52.43.112.129	true	false	unknown
static.cns-icn-prod.a.intuit.com	18.239.83.84	true	false	unknown
platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com	34.217.155.134	true	false	unknown
prd.sentry-io.a.intuit.com	unknown	unknown	false	unknown
smx.intuit.com	unknown	unknown	false	unknown
eu.qualtrics.com	unknown	unknown	false	unknown
connect.intuit.com	unknown	unknown	true	unknown
cdn.polyfill.io	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
customersurveys.intuit.com	unknown	unknown	false	unknown
quickbooks.intuit.com	unknown	unknown	false	unknown
static.quickbooks.com	unknown	unknown	false	unknown
links.notification.intuit.com	unknown	unknown	false	unknown
eventbus.intuit.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9844.724333c7af959b0a.js	false	Avira URL Cloud: safe	unknown
http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-71ca81b130c00394.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/favicon.png	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5480-57779aea7089e098.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/truste.svg	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js	false	Avira URL Cloud: safe	unknown
https://link.edgepilot.com/css/app.css?v=1	false	Avira URL Cloud: safe	unknown
https://link.edgepilot.com/filter	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_buildManifest.js	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-00d69eb446cd722f.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/reporting/prometheus/view	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6019-d03ad3086a0b9def.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-453b7f7fce0f2075.js	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.min.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/invoice/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/view	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js	false	URL Reputation: safe	unknown
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US	false		unknown
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3883-6f87e03a1b65d28c.js	false	Avira URL Cloud: safe	unknown
https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Downloads/downloaded.pdf	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8367.159e6dc789fa4500.js	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz	false	URL Reputation: safe	unknown
https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS	false		unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/4299.ddfe61a9bd4e8832.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9211-e5b247be522986a8.js	false	Avira URL Cloud: safe	unknown
https://customersurveys.intuit.com/jfe/form/SV_0riEj4WVtS49uVE?FTU=false&hasEverPaid=true&isBusiness=false&invoiceAmount=634.45&companyID=13845050475272421&saleID=1008	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fconnect.intuit.com&oit=3&cp=26&pgcl=4&gs_rn=42&psi=36xeMSuxvWiNwaAx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown
blob:https://connect.intuit.com/a142cebf-8db0-45b5-a2e8-db120c73c06d	true	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/index-d2971633ac2e2613.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/reporting/batch	false	Avira URL Cloud: safe	unknown
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/p	false	Avira URL Cloud: safe	unknown
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/m	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-7dbfac4402a4034a.js	false	Avira URL Cloud: safe	unknown
https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/	true	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-55a0b477131a1625.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/reporting/prometheus/pageLoad	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_ssgManifest.js	false	Avira URL Cloud: safe	unknown
https://link.edgepilot.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://quickbooks.intuit.com/payments/desktop/#easy-payments	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/money/see-plans/	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/payments/legal/	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://glam.app.intuit.com/app/guesttos?glocale=en_US	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://sketchapp.com	chromecache_167.1.dr, chromecache_176.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/graphic-elements/sbseg-gwp-oifooter-sp	chromecache_182.1.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_141.1.dr, chromecache_165.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/learn-support/en-us/	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/learn-support/en-us/help-article/chargebacks/sign-payments-dispute-pro	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://app.qbo.intuit.com/app/login?pagereq=paymentssetup%3Fp_prioritycode%3Dacq937_payments_webpg	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net	chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_187.1.dr	false	URL Reputation: safe	unknown
https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/learn-support/en-us	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icons/circle-check-fill.svg	chromecache_182.1.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_187.1.dr	false	URL Reputation: safe	unknown
https://www.intuit.com/legal/licenses/payment-licenses/	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_165.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/payments/legal/qbmoneycard/toc92020/greendot/	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/learn-support/en-us/help-article/product-system-requirements/system-re	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://google.com	chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://www.intuit.com/legal/licenses/payment-licenses/.	chromecache_186.1.dr, chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.30.234.133	link.edgepilot.com	United States	13380	ASN-CUSTUS	false
167.89.118.52	unknown	United States	11377	SENDGRIDUS	false
52.41.204.106	unknown	United States	16509	AMAZON-02US	false
13.227.222.191	unknown	United States	16509	AMAZON-02US	false
34.217.155.134	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
18.239.83.84	static.cns-icn-prod.a.intuit.com	United States	16509	AMAZON-02US	false
18.239.83.87	unknown	United States	16509	AMAZON-02US	false
52.26.102.158	unknown	United States	16509	AMAZON-02US	false
34.210.192.119	unknown	United States	16509	AMAZON-02US	false
44.228.239.27	unknown	United States	16509	AMAZON-02US	false
167.89.118.83	sendgrid.net	United States	11377	SENDGRIDUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
54.213.166.94	eventbus.a.intuit.com	United States	16509	AMAZON-02US	false
52.43.112.129	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
99.86.114.118	unknown	United States	16509	AMAZON-02US	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1464331
Start date and time:	2024-06-28 18:09:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@26/151@63/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 172.217.18.14, 142.250.110.84, 34.104.35.123, 93.184.221.240, 23.197.9.160, 104.102.35.78, 142.250.186.40, 23.196.247.153, 23.197.116.86, 95.101.149.99, 23.201.247.148, 142.250.186.74, 216.58.206.42, 142.250.185.106, 142.250.186.42, 142.250.181.234, 142.250.185.170, 142.250.186.138, 142.250.185.74, 142.250.184.202, 172.217.18.106, 142.250.186.170, 142.250.185.234, 172.217.16.138, 142.250.185.202, 216.58.206.74, 142.250.185.138, 142.250.185.131, 142.250.186.110, 23.215.21.159, 23.199.211.83
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, http-download.intuit.com.edgekey.net, e12398.b.akamaiedge.net, content-autofill.googleapis.com, slscr.update.microsoft.com, e6961.b.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, e4424.g.akamaiedge.net, mktg.intuit.com.edgekey.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, c-ring.msedge.net, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, akamaisecure4.qualtrics.com.edgekey.net, cloudenhanced.qualtrics.com.edgekey.net, clients.l.google.com, e9951.g.akamaiedge.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmz

Input	Output
URL: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh- Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text of the webpage does not create a sense of urgency, as there are no phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The title and text of the webpage do not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Checking link... OCR: Please wait while the link is checked... this button if you are not automaticalty redirected.
URL: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": true,
Title: Intuit QuickBooks OCR: InTUIT Sign in quickbooks Retailix BALANCE DUE $634.45 Invoice 1008 Due date July 27, 2024 $634.45 Invoice amount Looking for a way to pay? We can let Retailix know you're not sure how. wew invoice Yes, let them know No thanks Merchant details Email: renen73797@devncie.com @ 2024 Intuit Inc. All rights reserved. Privacy Terms of service TRUST. Informetion is protected ane kept confidentiel	{"loginform": true,"urgency": true,

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jun 28 15:09:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9852260782096254
Encrypted:	false
SSDEEP:	48:8GdKOTqK9R4HZidAKZdA1FehwiZUklqehay+3:8DOWERGZy
MD5:	AC7A934C200E8EEE15A3385C2B463E26
SHA1:	A9FBD0EE69212F656A4A2E318ED92DB036272985
SHA-256:	0A448DA6A08120B04C0E0E66857A9614B521635DC210AF8D14D21869A3559801
SHA-512:	1FD595D0F21566499048E2CB53E9EFCF50CDECE6DBAE5A271DD377ABE32DFA5A8E964FDFA599A175EF5DE40A267150177FC17F16D75A1AA6FBE41BA482E9F320
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....I>.u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jun 28 15:09:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.002291478287428
Encrypted:	false
SSDEEP:	48:8A9dKOTqK9R4HZidAKZdA1seh/iZUkAQkqehJy+2:8bOWERA9QYy
MD5:	B577BE935B1881082D8392FCA5A7B39A
SHA1:	EF89B35CCFC6E3CC022EF10E0452D4C8BCEB1068
SHA-256:	AF8B0BF03B2F232A6B5ACDBD6F377D29E9E1475A3BA1F3113B8BE1A58C6218CC
SHA-512:	46CDE03CC960CF0DC2E672F0E54ABA33D3FDEE8690636304A146ECB56F653CBA87D9C3CE5DF2364955326403D83E17144BA390E49F694E080335A528601214FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......3.u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008949372224847
Encrypted:	false
SSDEEP:	48:8MdKOTqK9RAHZidAKZdA14meh7sFiZUkmgqeh7sfy+BX:8xOWEREnFy
MD5:	0E5FB104CC3D046F6468EB4DBD2CA5D3
SHA1:	DE824AB61832D4ECDA01701D74AF968E149BB88D
SHA-256:	3D0B969253FF864F1B4A998C73BE99FB214FC9B50BDF374D00FDC672816089EE
SHA-512:	C230EC763B5AE32D8C3B444B892BF038791589E14C09D48F983067CD752DFE5949A703D1E845F32BC2C1141CCCA3BC8777979AD4869524386F20B59704E809A2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jun 28 15:09:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9965602332686854
Encrypted:	false
SSDEEP:	48:8/dKOTqK9R4HZidAKZdA1TehDiZUkwqehty+R:88OWERbHy
MD5:	C5975B4D334E1DFA7D9F3EC93E5253A7
SHA1:	D0DE4E442538B67BCECFBE8C4DD5B41EC89FD91E
SHA-256:	7D08844698411C131395CC6DA567C361366755EA4024929C0FD47D05B6DF15CA
SHA-512:	F182BD2ED870A857C856898E4AD09BA6AC640A42ED613AB9C1F660688C4DCDD3F075CD32D5EC9371F687773D6D62D1E6B546BBC1717EC098F7F8048A641B4090
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....tj..u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jun 28 15:09:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9875500151997336
Encrypted:	false
SSDEEP:	48:8WQdKOTqK9R4HZidAKZdA1dehBiZUk1W1qeh7y+C:8WNOWERb9by
MD5:	FAF5285CF91B84923D85B66FE7773964
SHA1:	04FEC2334A2A27D2CC4A2C65F8F3D38DCEEECD2E
SHA-256:	CA6772C3875C83F086102905715D105824C735655C27795EBBB5FB59E6848400
SHA-512:	0EBC281282EBC13354A30B7CD3A2A4207CF7039D13187A678F6520D00026F4CB30924578C163100B35A4B42AE3EC7AA57B5934952A5672B9EE002609B8F7DDB4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....g9.u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jun 28 15:09:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000710909308775
Encrypted:	false
SSDEEP:	48:8GdKOTqK9R4HZidAKZdA1duTeehOuTbbiZUk5OjqehOuTbFy+yT+:8DOWER/TfTbxWOvTbFy7T
MD5:	6B495C7A65A99AF1D454ED0CFAE899AC
SHA1:	C728D08E1D53CE34B8F4898CD3109B560F2216DD
SHA-256:	48EEFAE302DD0E0E16DB5A439C77C96B98B6FFEA8D7119E4AFE349FF7A0E7A8D
SHA-512:	14E22A3D0D1B8F24A39F7EC4B5000A3E4B5962F9071479BCD5BDE721F3E91E52480E745FC4EA17CDA0D87E5E0ABA0E461D26E18E664DE26C43CFD61136EC8929
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......&.u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X/.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\9d020c28-282c-418c-90be-b3bc5b4b441d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	24570
Entropy (8bit):	7.8671330487506355
Encrypted:	false
SSDEEP:	384:UrhtA6zxlHYvFppethzGJ0Tv3PEyFPo8jc+sSYqyxgiHNtDcAkH1ekMjziB/1CPW:UrhtAwYvZMh6JUcIPoXjSY73PcAmMfiv
MD5:	57E4A7B579EB69162DBF31D4C179ED09
SHA1:	C783A716282E1EFD906E3D4B15575E81B4FE7DD6
SHA-256:	7EAA812C145700515FB58586FD902A7ABE6FB85D942FA5E8111307AE6B088426
SHA-512:	8921853389C13E36C3F3E3AAA205766DF7B59833BA9000EDDAD04E16BAC112D485B0C9337C96D6B0A703A813A0547677C65A3689580372E72122FDAB4132DA22
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Chromium)./Producer (Skia/PDF m112)./CreationDate (D:20240628161003+00'00')./ModDate (D:20240628161003+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.6 0 obj.<</Type /XObject./Subtype /Image./Width 168./Height 50./ColorSpace /DeviceRGB./BitsPerComponent 8./Filter /FlateDecode./Length 1461>> stream.x..\MkUI.._......l.f.]..* Ap@.7..(.."...38...BDP....Q..8.7...uNW.y7/v8...nuW......._........k...\|...h...J.<......u....>ll...~.]..q...b..w...>\|.qq7....[.>. c...?~.....WI..+?.G...m..+m.."av..$.&D.*.FjDw......G......-..,..O...;F........r{.a.v...n..$.6.S.C..h....W..<e...p..?..~........9 .Y......"dFUsa.2..\|.....f...g.`.........,..j..Q<_..9.;..K.?#v....H.g...?..3.w.....1...K...<./..<E.J.F..R..$.%;9.....<..ke.W.0.Wxl7!.K.n.........O.......W$....O........'.h..GOK.[...x......%.....\|.y..%.a..k........hO.8wE.faM..p...G...:-..M...X%..@TO.+{O...y..GB.M...X%.....p...GI..vu.j.uI......>k....I..v.....DAK.Us...#.W^.5.9.yG.#.........!.G.

C:\Users\user\Downloads\cd01622f-886a-4bbb-a51f-cbafff62a06e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	24570
Entropy (8bit):	7.8671330487506355
Encrypted:	false
SSDEEP:	384:UrhtA6zxlHYvFppethzGJ0Tv3PEyFPo8jc+sSYqyxgiHNtDcAkH1ekMjziB/1CPW:UrhtAwYvZMh6JUcIPoXjSY73PcAmMfiv
MD5:	57E4A7B579EB69162DBF31D4C179ED09
SHA1:	C783A716282E1EFD906E3D4B15575E81B4FE7DD6
SHA-256:	7EAA812C145700515FB58586FD902A7ABE6FB85D942FA5E8111307AE6B088426
SHA-512:	8921853389C13E36C3F3E3AAA205766DF7B59833BA9000EDDAD04E16BAC112D485B0C9337C96D6B0A703A813A0547677C65A3689580372E72122FDAB4132DA22
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Chromium)./Producer (Skia/PDF m112)./CreationDate (D:20240628161003+00'00')./ModDate (D:20240628161003+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.6 0 obj.<</Type /XObject./Subtype /Image./Width 168./Height 50./ColorSpace /DeviceRGB./BitsPerComponent 8./Filter /FlateDecode./Length 1461>> stream.x..\MkUI.._......l.f.]..* Ap@.7..(.."...38...BDP....Q..8.7...uNW.y7/v8...nuW......._........k...\|...h...J.<......u....>ll...~.]..q...b..w...>\|.qq7....[.>. c...?~.....WI..+?.G...m..+m.."av..$.&D.*.FjDw......G......-..,..O...;F........r{.a.v...n..$.6.S.C..h....W..<e...p..?..~........9 .Y......"dFUsa.2..\|.....f...g.`.........,..j..Q<_..9.;..K.?#v....H.g...?..3.w.....1...K...<./..<E.J.F..R..$.%;9.....<..ke.W.0.Wxl7!.K.n.........O.......W$....O........'.h..GOK.[...x......%.....\|.y..%.a..k........hO.8wE.faM..p...G...:-..M...X%..@TO.+{O...y..GB.M...X%.....p...GI..vu.j.uI......>k....I..v.....DAK.Us...#.W^.5.9.yG.#.........!.G.

C:\Users\user\Downloads\downloaded.pdf (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	24570
Entropy (8bit):	7.8671330487506355
Encrypted:	false
SSDEEP:	384:UrhtA6zxlHYvFppethzGJ0Tv3PEyFPo8jc+sSYqyxgiHNtDcAkH1ekMjziB/1CPW:UrhtAwYvZMh6JUcIPoXjSY73PcAmMfiv
MD5:	57E4A7B579EB69162DBF31D4C179ED09
SHA1:	C783A716282E1EFD906E3D4B15575E81B4FE7DD6
SHA-256:	7EAA812C145700515FB58586FD902A7ABE6FB85D942FA5E8111307AE6B088426
SHA-512:	8921853389C13E36C3F3E3AAA205766DF7B59833BA9000EDDAD04E16BAC112D485B0C9337C96D6B0A703A813A0547677C65A3689580372E72122FDAB4132DA22
Malicious:	true
Reputation:	low
Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Chromium)./Producer (Skia/PDF m112)./CreationDate (D:20240628161003+00'00')./ModDate (D:20240628161003+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.6 0 obj.<</Type /XObject./Subtype /Image./Width 168./Height 50./ColorSpace /DeviceRGB./BitsPerComponent 8./Filter /FlateDecode./Length 1461>> stream.x..\MkUI.._......l.f.]..* Ap@.7..(.."...38...BDP....Q..8.7...uNW.y7/v8...nuW......._........k...\|...h...J.<......u....>ll...~.]..q...b..w...>\|.qq7....[.>. c...?~.....WI..+?.G...m..+m.."av..$.&D.*.FjDw......G......-..,..O...;F........r{.a.v...n..$.6.S.C..h....W..<e...p..?..~........9 .Y......"dFUsa.2..\|.....f...g.`.........,..j..Q<_..9.;..K.?#v....H.g...?..3.w.....1...K...<./..<E.J.F..R..$.%;9.....<..ke.W.0.Wxl7!.K.n.........O.......W$....O........'.h..GOK.[...x......%.....\|.y..%.a..k........hO.8wE.faM..p...G...:-..M...X%..@TO.+{O...y..GB.M...X%.....p...GI..vu.j.uI......>k....I..v.....DAK.Us...#.W^.5.9.yG.#.........!.G.

C:\Users\user\Downloads\downloaded.pdf.crdownload (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	24570
Entropy (8bit):	7.8671330487506355
Encrypted:	false
SSDEEP:	384:UrhtA6zxlHYvFppethzGJ0Tv3PEyFPo8jc+sSYqyxgiHNtDcAkH1ekMjziB/1CPW:UrhtAwYvZMh6JUcIPoXjSY73PcAmMfiv
MD5:	57E4A7B579EB69162DBF31D4C179ED09
SHA1:	C783A716282E1EFD906E3D4B15575E81B4FE7DD6
SHA-256:	7EAA812C145700515FB58586FD902A7ABE6FB85D942FA5E8111307AE6B088426
SHA-512:	8921853389C13E36C3F3E3AAA205766DF7B59833BA9000EDDAD04E16BAC112D485B0C9337C96D6B0A703A813A0547677C65A3689580372E72122FDAB4132DA22
Malicious:	true
Reputation:	low
Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Chromium)./Producer (Skia/PDF m112)./CreationDate (D:20240628161003+00'00')./ModDate (D:20240628161003+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.6 0 obj.<</Type /XObject./Subtype /Image./Width 168./Height 50./ColorSpace /DeviceRGB./BitsPerComponent 8./Filter /FlateDecode./Length 1461>> stream.x..\MkUI.._......l.f.]..* Ap@.7..(.."...38...BDP....Q..8.7...uNW.y7/v8...nuW......._........k...\|...h...J.<......u....>ll...~.]..q...b..w...>\|.qq7....[.>. c...?~.....WI..+?.G...m..+m.."av..$.&D.*.FjDw......G......-..,..O...;F........r{.a.v...n..$.6.S.C..h....W..<e...p..?..~........9 .Y......"dFUsa.2..\|.....f...g.`.........,..j..Q<_..9.;..K.?#v....H.g...?..3.w.....1...K...<./..<E.J.F..R..$.%;9.....<..ke.W.0.Wxl7!.K.n.........O.......W$....O........'.h..GOK.[...x......%.....\|.y..%.a..k........hO.8wE.faM..p...G...:-..M...X%..@TO.+{O...y..GB.M...X%.....p...GI..vu.j.uI......>k....I..v.....DAK.Us...#.W^.5.9.yG.#.........!.G.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5672)
Category:	downloaded
Size (bytes):	5725
Entropy (8bit):	5.480023665998886
Encrypted:	false
SSDEEP:	96:bGBMgrPmEVqZCQshOaVaH2UdMDUCIFU5LsGUzkkp2YVss+Vx6JDtGt6yIjIRJ4z:6BMMV0aVaWTiUckTYEPRtOjIAz
MD5:	F3BC000B95A0BA19CEF4C8EC9CAADF8C
SHA1:	E8980E0D28744AF112DF19446C69386A407EED95
SHA-256:	6C0578FBDF1173D420BAFBEDA825256A2E50D34A69F5336858B58DDD078ED0F0
SHA-512:	31E8D30790FEFB2392D26268B05712DA939CF48EFEF95F0EBAD9AFBD81CF468E6148B533848A97F28AD99861B851EEAD9D92D76ED8D7F5BE8F0554EE59CB698F
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-7dbfac4402a4034a.js
Preview:	!function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var e=[];n.O=function(t,r,c,f){if(!r){var o=1/0;for(i=0;i<e.length;i++){r=e[i][0],c=e[i][1],f=e[i][2];for(var a=!0,u=0;u<r.length;u++)(!1&f\|\|o>=f)&&Object.keys(n.O).every((function(e){return n.O[e](r[u])}))?r.splice(u--,1):(a=!1,f<o&&(o=f));if(a){e.splice(i--,1);var d=c();void 0!==d&&(t=d)}}return t}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[r,c,f]}}(),n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,{a:t}),t},function(){var e,t=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};n.t=function(r,c){if(1&c&&(r=this(r)),8&c)return r;if("object"===typeof r&&r){if(4&c&&r.__esModule)return r;if(16&c&&"function"===typeof r.the

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26705)
Category:	downloaded
Size (bytes):	26755
Entropy (8bit):	5.587209711976458
Encrypted:	false
SSDEEP:	768:sqwXST+ZGUjy2mrCFgQNF58N4PlazbnrV:9vUjy2QCFgQZeh
MD5:	E3EC417C67D46D4F1D09D7F9218EF174
SHA1:	F2319A1DE8E172A1C937B1FF82BF537B96D65B15
SHA-256:	877FF9D903126BA5630CFE23B93CE56BBDA113A65EEC3FF5EE808608D4A54FCF
SHA-512:	36D7BB620183D40EDF2D7DE4A133A4D695E65A08D807B52956D7C34BCACAE17AA01BA0CA0229E70DA1FF906910F63333C21C3586F5963F00DDBA93036E8D0453
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6019-d03ad3086a0b9def.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6019,6721],{89228:function(e,i,t){var s=t(95627),n=t.n(s),a=t(67294),o=t(54490),c=t(57230),l=t(51459),r=t(6721),d=t(51245),m=t(85893);const x=e=>{const{gratuityValue:i,invoiceNumber:t,invoiceDueDate:s,invoiceAmount:x,currency:y,isPartiallyPaid:u,useRedesign:p}=e;return(0,m.jsxs)(a.Fragment,{children:[(0,m.jsx)(n(),{id:"69754084",dynamic:[p?"0 14px":"0px",d.breakpoints.md,d.breakpoints.sm],children:[`.invoice-info.__jsx-style-dynamic-selector{padding:0px;margin:${p?"0 14px":"0px"};}`,`@media (max-width:${d.breakpoints.md}){.invoice-info.__jsx-style-dynamic-selector{max-width:400px;margin:5px auto;}}`,`@media (max-width:${d.breakpoints.sm}){.invoice-info.__jsx-style-dynamic-selector{max-width:576px;}}`]}),(0,m.jsxs)("ul",{"aria-label":"invoice info list",className:n().dynamic([["69754084",[p?"0 14px":"0px",d.breakpoints.md,d.breakpoints.sm]]])+" invoice-info",children:[t&&(0,m.jsx)(c.Z,{idValue:"INVOICE_SUMMARY_INVOICE

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10768), with no line terminators
Category:	downloaded
Size (bytes):	10768
Entropy (8bit):	5.0726440895215745
Encrypted:	false
SSDEEP:	96:yWX/xhazin6zTJWSK2YoTMQ9vj8yxdzFYYDi6wU9GpDu7wdjI5Fgt+tDF:Xvnaz/vJo2YNohFYY+kgZ1AgtgDF
MD5:	E0D4E539045E6A6ED992C1560F77EAE7
SHA1:	261E2F4C41394E9E780F806ADF14918D46E986A9
SHA-256:	775D68EE93D46131880E5FA2CB1D1D9569146EA3FB017A2A09A40EEDEBA3DE21
SHA-512:	39DA3D74C2010C5C45AE293029EDEC11392F77C65DDBB79D6A9C0757CEC85F5C9C5B7C4DF5BCC423F40CB9C6F2457CDF9E2C72F7C677C287AF1E4D101ECF41AC
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-testimonial.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-06:#3bd85e;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-green-qrc:#009633;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--co

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2785
Entropy (8bit):	7.881347552761523
Encrypted:	false
SSDEEP:	48:6QiI7K89vE9Zqcrv8hp35diA2vo1pho1bUDsLObujVC/een+32nsxaK5DDBzUMDO:6QrK8jXfJd12Q1bNc1jE/e++32cfBoCO
MD5:	7DBE4596B420FF7FDAC169A69E4BBFC9
SHA1:	BE34FF3E7F9DC756178AE0D2A5DA1A34EE559A0E
SHA-256:	F0BE198819B5B8CF7819BB3A89C908AB8648B1196E8EB48418A6746D653A8031
SHA-512:	26B21EE302A25FEACAA6E90D6751407A8F0C2DE0B4CFD70A0AEAB5CB6DFD3F550FF9FE8AC566CD065BA48A87B6A44F54FC1ED29A92E932CDCB1D88408A5C93C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Oh.W..Y.J..-.!.........7..K...R.......`.F.`.5..<....b..Z.....=X.j[...-E..4E..K.o\|#.uv...{o..~0lH&;3..}....8..@H/.4>...[..Gw..*...C..`.....]......J...?.g..d..`..!.,.t..f.F..a.$a.(.....B.Q."....gd(...i..;r......-dp-..@....X.S..55np..:..a..mN2P`.iY.K.O7.\... .7......o.......1..H......>...dD(...L.9..6..,.r.0.H......A9Q.......(..../..$......?..l...[...GynO...zU...B...C..$C)YB....U(...3uI....&.K.O7.\.~.I....M..i`.......E2....T..O.1ny.#...aJ.b._]..9-.?.>.&9..%......Qk..M.-.f.LA..E......6I#.......+..s..Ig..MS3.uaW..(..I.>...,]......."..U...i..dq.D...J..<......>.......{l.....G.d..q.9...(.\|V.4.p.2@cj.:x.&.....C...2......[..........TX...A.R.P.w.h....Zg....j....e......yK.}.....\.....'.......w..un?....u....q.%.x!.........w6.c.....y.S7............;......rA...,@Ng.[...E2..Tl..u<3Ut..1.Y.M.6;.01..].2._p.m.(.... .D.).}...`0. ..../..zGZ._....9..;:H j........~........5..!.(3.xH<....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29257)
Category:	dropped
Size (bytes):	747327
Entropy (8bit):	5.180816780785392
Encrypted:	false
SSDEEP:	12288:/Zo7Rvf+/LE0SHmXTfoBjSs8zxNffPZn2urpaqmTVymTD6+P/ZKLqzDyQWi:4vf+/LE0SHSoBjSs8zxNHrMqmTVymTFf
MD5:	46E7D7B5B02CB3240ADAC7489B800652
SHA1:	0339AA094D8F94ECADFA495D235F1F8CC33E76DB
SHA-256:	D076CD6638CD2D143725A805AA2B31C1172BE26C566F942EE3A15308DD7BA973
SHA-512:	BC4DA5736EB830DCF2B95CB7A30A660D98AA0EE799A507AB2536F773CBBC837A37191DDF0913D195E60A205502A9CA649E7029CA99C64438B65776D15D0C6D6C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" data-locale="en_US"><head domainPrefix="https://static.quickbooks.com"><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/qbmds-components/styles/sbseg/fonts.css" as="style"/><link rel="preconnect" href="https://static.quickbooks.com"/><link rel="preload" href="https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/payments-product-explainer-brand-video23-still-en-us-desktop-620x620-2x.jpg" as="image" media="(min-width: 1024px)" fetchpriority="high"/><style data-styled="" data-styled-version="5.3.10"></style><script async="" type="text/javascript">function getCookieVal(e){try{return document.cookie.toString().match(e+"=[^;]*;?")[0].split("=")[1].replace(";","")}catch(e){"function"==typeof csLog&&csLog("error","Page Url is: "+window.location.href+";Error: "+e)}}window.mktg_datalayer\|\|(window.mktg_datalayer={}),window.mktg_datalayer.properties={market:"us",page_geography:"us",org

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26519), with no line terminators
Category:	downloaded
Size (bytes):	26519
Entropy (8bit):	5.6085652289882475
Encrypted:	false
SSDEEP:	384:dEhCc+W0RPtFjDhSK2VeWw49PZHpEsExn2Exxyfx35dxs63L6368SBS1lx3K8tlU:dEMdDjDhSCWw49PfEVN25DKSQgt
MD5:	C3F7AD4ABEB97C3470742ACC35853D4A
SHA1:	46BCBB3A80F3D926832401DDF9190E5FF4045548
SHA-256:	DFF9536E8237F8A4013A9B29C60EB25877F94F4D9638D6733E53DFD08CBF1C30
SHA-512:	45994E60072921F58072CC193A85A648A57F920C623FC0C6DF400B55C0B5C5F8BED782EB38D204B552A3CF4C7B16416455B208951ED9876E0C0EED6139345C36
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/te.c3f7ad4abeb97c347074.js
Preview:	webpackJsonp([8],{308:function(e,t,i){var n,r;n=[i(0),i(287),i(763),i(764),i(407),i(409),i(765),i(766),i(767),i(768),i(769),i(770),i(771),i(772)],void 0!==(r=function(e,t,i,n,r,a,s,o,u,l,h,c,d,m){"use strict";return e.Class.declare({$name:"TERendererBundle",$extends:t,getDefinedRenderers:function(){return{TEFORM:i,TESA:n,TEAUTO:r,TEAUTOSDS:r,TEAUTOGOOGLEMAPS:a,TEAUTOSTATIC:s}},getDefinedTemplates:function(){return{TEESTB:o,TEFORM:u,TEML:l,TEPW:h,TESL:c,TEAUTO:d,TEAUTOSDS:d,TEAUTOGOOGLEMAPS:m,TEAUTOSTATIC:d}}})}.apply(t,n))&&(e.exports=r)},407:function(e,t,i){var n,r;n=[i(3),i(0),i(2),i(288),i(408),i(5),i(289),i(28)],void 0!==(r=function(e,t,i,n,r,a,s,o){"use strict";return t.Class.declare({$name:"TEAUTORendererHTML",$extends:n,source:"sds",initialize:function(e){this.$super(e),e.SearchSource?this.on("postrender",this._postRender.$bind(this,e)):this.on("postrender",this._misconfiguredPostRender.$bind(this))},_misconfiguredPostRender:function(){var e=this._$el.find("#QR\\~"+this.id());e.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.381328385912462
Encrypted:	false
SSDEEP:	3:cb9fzRx3G/MRUe92Ab:cbtzRx3G0Ce9b
MD5:	61497F122EEC4729B631DCA3A64A30D3
SHA1:	D53005B1B66E6D7CDB2FDEB6430E95FDB557AE6E
SHA-256:	27D990658E439B5D045D493CB07C8364FA0CB0A1743DCB6DF3C18AA7617E03E4
SHA-512:	789D5F148C1FE3ED617ADE974E83840424508FC27D188F751C91D137B2C3884D1A91D8A43DE28518B8C19E87EB48A554E55F8EFC6000F224642997A76C1F116B
Malicious:	false
Reputation:	low
Preview:	<pre>404. The requested URL was not found.</pre>

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1401)
Category:	downloaded
Size (bytes):	1451
Entropy (8bit):	5.253413281045646
Encrypted:	false
SSDEEP:	24:ibjAOLxTOG++r7H5BdoPiJW/hS48uGuT0MdGqQItnHn5vxzZOaUVygy:ib3BOG++7rSPiA/x10qQOZ5zrL
MD5:	9E8147554B71674B97E01B1328ED325C
SHA1:	FBBD06A08A4D38D3726DA588DE6427756686366A
SHA-256:	10665BD646BDEA1FAE6687627799727AEB3AC33890A18D256CE489071764DD62
SHA-512:	38F94345337073CC37847C9890B28A2710A5F8E47B3D39BF2E82C25FA59FAD7888CA8B7381E19DB605280497AFF07234CE4A91622E4EF9FBB3F5D2BCF67FBF94
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8367.159e6dc789fa4500.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8367],{58367:function(e,t,l){l.r(t);l(67294);var s=l(85893);t.default=e=>{let{width:t=12,height:l=12,color:i="#8D9096"}=e;return(0,s.jsxs)("svg",{width:t,height:l,viewBox:"0 0 12 12",version:"1.1",xmlns:"http://www.w3.org/2000/svg",xmlnsXlink:"http://www.w3.org/1999/xlink",children:[(0,s.jsx)("title",{children:"Path"}),(0,s.jsx)("desc",{children:"Created with Sketch."}),(0,s.jsx)("g",{id:"Toast-message",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",children:(0,s.jsx)("g",{transform:"translate(-302.000000, -207.000000)",fill:i,fillRule:"nonzero",id:"Path",children:(0,s.jsx)("path",{d:"M308,211.761273 L303.495276,207.256549 C303.153211,206.914484 302.598614,206.914484 302.256549,207.256549 C301.914484,207.598614 301.914484,208.153211 302.256549,208.495276 L306.761273,213 L302.256549,217.504724 C301.914484,217.846789 301.914484,218.401386 302.256549,218.743451 C302.598614,219.085516 303.153211,219.085516

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35152, version 2.19660
Category:	downloaded
Size (bytes):	35152
Entropy (8bit):	7.994730947875104
Encrypted:	true
SSDEEP:	768:c+fFDW2005JZYl12LA9ew43d87ptxs6LfLZQLX2yZyikzj:fd5tHej2Lg83datxPFMXgikzj
MD5:	476FE09CBBBBF74BA00B93F8595EE5ED
SHA1:	5260DB428DE67799090CB7D2B52DA6E7043F2F8D
SHA-256:	1EDB3E080320B633696D0516B223BCE282EA73951AAE0B24BA806CCE076AFF64
SHA-512:	8D8B3794AB2D351A6CD50524BFAE70B58832A85850B09645DF0CF475CE6D455C9C16FBC5AC4DB0B426D7D39201A18D1CF2BE2E23F5D7289192A80E76B6945E26
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2
Preview:	wOF2.......P..............L........................^....`..`.....d..P...D....6.$..(..,.. .... ../[.qq.=..Hx.m....Q......_.u.;?,..>..E\|..mfD.\|.d...g&.9,.Zr..`..?I..#..c`.c.5..)l.<...}.H.'_.......;.U.N..".=-.^.Kvq....+..t.#.......pw.W...`...U...j..D.....(..H.X....$zK.1....z..u..z.,..q.P..\|.....A6..p..$..p....>...f..8...D..U..8....H/.....xMX..@..4.w~.f..h...,..P......8.r0%'.V.^....\|......s.{....Q. .fm`ca-..q..E.FWF.......U...ca.d._...:..\|...pD..8.+1.[......+]}6...(#.uE.......#s6......be..[... [2.~u........@@......Knw..U..=A......y.nc.'.M..%G..\|....d,P.1........J.c.Pn...{....-._....M.\...l_..l...."!.6E. $Y.S.)..._"........p0......8.WU...,...4...........TR...w....\|?.i......~...Sg..'"K..qh..O..qwu...A..<.w. ...*........e.].. ..Fe....I...-.erW....)..Z......#.H.\.....v......R;.>.....~EN....al@......i..I/c<.B).9#c#E. S.....Uu.t..F.............UU.F......qd9rk}...y...JA.J.&Ju.D.E..R.V...9...`.p...V...G.#...s...'..0ZY .Q...vt.wi.[g.h.-..+z..`.......5;o..;.A.s.?aS.^+

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.726474118254377
Encrypted:	false
SSDEEP:	3:FHW9RcH24Ut2/Yn:FHW9PJt2/Yn
MD5:	FEE07AB8C124C6615ACF3BD10D2879C3
SHA1:	AEDEA092B4246EAE9995E2597522D73599AA53BE
SHA-256:	E57BFC79C4477D977B2B943EF9430E0E68C64DDDE980E0368B84745DAB090270
SHA-512:	591C81F8C65204EBFAD926C9189D2F65FE56F585E838BE27B2E214C28173CB27BD0FDC64C08D09B2521DF469AE2A28060F79F2BC869349CFFD4EA5A367AD9777
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmBzZ3qiTx8rBIFDSDZxvcSBQ2dRqL_EhcJltjMqyUbQaQSBQ0g2cb3EgUNnUai_w==?alt=proto
Preview:	ChIKBw0g2cb3GgAKBw2dRqL/GgAKEgoHDSDZxvcaAAoHDZ1Gov8aAA==

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 71723
Category:	downloaded
Size (bytes):	21911
Entropy (8bit):	7.990284604228861
Encrypted:	true
SSDEEP:	384:eGzePcKhqp8ppchvs0oqCDAJXULtUlxWlkl5HKQ5Ds+XLowwEYDVcDBC0EFYvncy:eGzekKop0cvs2CDWOulHvHKQ5AYOVlDA
MD5:	C467A63B2E7C3A99BE423ACE649014D8
SHA1:	91A3CB3EBF4F3996512A740FC202E1803828594F
SHA-256:	D070E8B363B2CB1BC55B94F1612A1AF673155DF31773E992007F8952E3661EE5
SHA-512:	956B41FC42B9C3C4E161AF37270D3EAEA9E5936B4A99685727235BF9A46BF05ACAE5A64A4EB9A305EBF1ED5F752DF8FB9912626765DEBF1EB82839DF2124CA92
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz
Preview:	...........i{.8.0...........dFo.N'=.N..>.E.%.b".j...X..~....E.2..<.L."A.P...B-.......5.Xx....a...xs..E....K.0pw.Z..N}....`...[...e..N.......,rn.e.+q.........^yQ..I=......vz.O.QPi....3.\&..j...I..[.Q..i..,../y.....l.W.E.S....d..^.A2..V..S/....f..p....@.e.K>..0...u.&.d....X.i.x.f?...q.z<.G.n.C(..Z..U...lo:.e=....b...s....'..I.Qx]..u...~..0.-.X...Q......q8Z.y.8=...m.....a.i@.\|.].j."Gv8..".]w.%..1....f..3.....1....O.KfY.n.F....Y....r.@......3....4..,..?.x....K7a>.0.....?..~}...=;k..g.....4....$..O...u.6..<Jn.#o6.C.8.p...a..O..,a#............0..WY.....&....~..].5l._...\|w..C..K...[h,..z.y...#6...E.[,x0V.6B.n.....w....t...$.J.j.#=g.........6..%..?<k._.2.......;kx...`.LX.k..\|..".f5..G."\M.....w....m!l..E.U.+M.m.{;....A.Yg....1O.Z..H.,...6$J....".xT8C.Q8+.3...(\.Di.f.P.......>.....a..4a....u/.'c..L.A.Pe.I...%x..pA...............P..3.i.dAG.8.].H..#..:.....'.0L\.aY;a."..g70L..r ....0...h4.............a.D...m>.b..D..6...Yu.at.h7....*W<

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	downloaded
Size (bytes):	955
Entropy (8bit):	5.45203517363015
Encrypted:	false
SSDEEP:	24:ibjfhcpNhvCZDOHNKfntXybFvojrh880ofHZw:ib1Y4DOtKfnZy1oKqfe
MD5:	54378336344B3DE8529083EF5D0707AB
SHA1:	22B2C74ADC2587EFC1D46ACE3A26E061A66F0957
SHA-256:	630257DBFE8089B6F1F41B21F6376B15E0D4AE99D77CD3DD4DD11851A1922FD2
SHA-512:	1D140EBE12316A47874ED69397903B67ADA7EE3D2A22A581360DCCEE492C0883FF3245298A7F851F8E421B06057352F2F5360D6D05039DC557B67783155916D2
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:l,height:c,viewBox:"0 0 24 24",className:t,"aria-label":"Print",children:(0,r.jsxs)("g",{fill:"none",fillRule:"evenodd",children:[(0,r.jsx)("path",{"aria-label":"Print path",stroke:s,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",d:"M7.06 10V4c0-.552.448-1 1-1h8c.552 0 1 .448 1 1v6M7 19H5c-1.105 0-2-.895-2-2v-5c0-1.105.895-2 2-2h14c1.105 0 2 .895 2 2v5c0 1.105-.895 2-2 2h-2m-9.943.016c.002-1.105.898-1.999 2.003-1.997l6 .01c1.105.001 1.999.898 1.997 2.002-.002 1.105-.899 1.999-2.003 1.997l-6-.01c-1.105 0-1.999-.898-1.997-2.002z"}),(0,r.jsx)("circle",{cx:"7.003",cy:"13.933",r:"1",fill:s})]})})}}}]);.//# sourceMappingURL=7868.851b65ef7fa1a422.js.map

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1016 x 499, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7954
Entropy (8bit):	6.962691473483996
Encrypted:	false
SSDEEP:	96:IYB2zmai3hBAmjyXygSasXu/Fli/YFTUr5+vMDuqI3qq3OeBjfFIY/Ll3BIAp:IYBim/3hu5DSaselFTUbD7g3OsFTliAp
MD5:	54FAD235B1307BFEF9BBE1992D9AC44D
SHA1:	9BB34C6E86F4A485FFBA7CCF1FF835389354DEA8
SHA-256:	8D57F66EA081AF5A8F24DA86B259D7540E9F1A92B0AA4AF904EFE91BACEFBB3E
SHA-512:	E15EE54F1B522D834D32715299F647712B63F7D4A7D9F7642EFB57D4BFB27B9A50301E05CCD38E419F39F15E538C5AC99B4BF8C61DB6696EA38EB8ADDB00D270
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/CP/Graphic.php?IM=IM_3DVg3S2r4KBK3pX
Preview:	.PNG........IHDR................}....pHYs..........+......IDATx...}.eu.....N.;!,%."ED.,U\|9.Y\....h._x[..Pj({$F.K..].V..W.G]W).H....9.-;.8EdYB.;.L.fv2.L.d.?.E...yf..{...{>....<s.9......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................I...?..I.K..$.&.?.$..lN.x._$y M..PR.v.n.N....$.'9`.-.$O'..$k....R().....r.R.f..%9).>Kx..$7'.1M......$u{\....3..Kx.$.%Y...4.....^P.....]..$.&9p.g.?.Ui...p....nOJre...p..I.I.*M.i..^Q.....=+.$....w$.(M......\u{h.?M...}c.K.T_...af)

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1310
Entropy (8bit):	5.34821857415734
Encrypted:	false
SSDEEP:	12:3YwuOrbevXXOajELYwwHVvjU321Kd5ck1ToEL7Ri71XaVyksYpbQyb8WAEd0+DhR:3YwuOrceRtIoGE51Hw71Yb4EbUWemEC
MD5:	5FD6C81E2D45BD71EF47570F15EB622A
SHA1:	474672BAF3BF959B770A21ED2AD0FD6C3EAC424C
SHA-256:	C0F777284D7D75A641591D10D3CD99457F19F816FB3C6E2E6AB295F3EDA52E99
SHA-512:	5BF4DA717F0C50FAC0C6690F9FE176719DB74FF7A923F2B25FA52D197D71A880A8B008EB64AB4DAA8E8400FB338B1C1ED1D59DB44B3627D88F7F5194D6AC6023
Malicious:	false
Reputation:	low
URL:	https://link.edgepilot.com/favicon.ico
Preview:	<html>. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1" />. <title>404 - page not found</title>. <link href="/css/app.css?v=1" rel="stylesheet">. <link href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">. <script src="//code.jquery.com/jquery-3.2.1.min.js" integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>. <script src="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>. <meta name="norton-safeweb-site-verification" content="vo5jo2vr2es9toa19icr3h7q2hi6r6wqxg2e2qy7s06inecm48l-xszjfgzrt97-wwnlobyo8751zji5y68-iv6m14v35a8xr0is-usi88c7u6tn57czk90oepmrfgw1" />. </head>. <body>. <nav class="navb

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	downloaded
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21150)
Category:	downloaded
Size (bytes):	21200
Entropy (8bit):	4.399918006414408
Encrypted:	false
SSDEEP:	384:JIp+ma4Oh06Ie46eJVA4X6HjE+EiEQCE+EKEP7JOIev5yxqk6LbEwNEpAXv9m86k:0MaPB/BKHYlBIlJPYN8xz7af8xxBf7PI
MD5:	5D3ACBEE67E89B42766E3833A9EF5B9A
SHA1:	7C854709373067CF76CD691BF05DE7AFF54505B6
SHA-256:	FE69199B96A7026EB079FBB450BC8DE06B0D4DAEF58EDCEADB6C18E5CD3E255B
SHA-512:	CA97E2FD8748ABCBED7F17A751FFAC7BA2C74298918052012BD2E5CD020E8234EB7756FA55198A58E1FE295E52085969B306C587545617F24B567214BFB34988
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",defaultMessage:"Routing number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ROUTING_NUMBER_INFO_TEXT",defaultMessage:"Your Routing number is the first set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"99px",height:"64px",viewBox:"0 0 99 64",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Making-full-payment_tool-tip-",transform:"translate(-401.000000, -367.000000)",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-4",transform:"trans

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	267143
Entropy (8bit):	5.288153595207382
Encrypted:	false
SSDEEP:	3072:kycbhP+Bmz0bcfZrziitxP2mOPhgHvsfcZldD24hQiaLAYocuEfILQ9+j:kp9P+BC0yRzxzPg52PdRQiAWcuEfju
MD5:	944EC92FD0786E9660E87C4EC37D398B
SHA1:	DA5974AE8868F0EA63159417A0A1C9FEB2F2479E
SHA-256:	A8AEFF214BD4F3F0F418223A3E954F8232819170C23FA00B0DC8F90B8F6B9135
SHA-512:	39F5F39B53EADCA20B90D8FC2AF6621783F0DE2A58287691D8909FF55C91736D6E53EA34B7ACB30C0740098C9A61DDCBCF3DA86C098BC4A38106EC8269281990
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/vendor.944ec92fd0786e9660e8.js
Preview:	webpackJsonp([36],[function(t,e,n){var r,i;r=[n(58),n(201),n(202),n(203),n(204),n(205)],void 0!==(i=function(t,e,n,r,i,o){"use strict";var s={};return s.Class=t,s.AbstractClass=e,s.Interface=n,s.FinalClass=r,s.instanceOf=i,s.options=o,s.mode="loose",s}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(22)],void 0!==(i=function(t){"use strict";t.noConflict(),window.jQuery=t;return t.fn.dirtyWatch=function(e,n,r){var i=r\|\|100;return this.each(function(){if(!t(this).data("QWatchTimer")){var r=this,o=r[e],s=setInterval(function(){r[e]!==o&&(n.call(r,o,r[e]),o=r[e])},i);t(r).addClass("QWatchTimer").data("QWatchTimer",s)}})},t.fn.dirtyUnwatch=function(){return this.each(function(){var e=t(this).removeClass("QWatchTimer").data("QWatchTimer");t(this).removeData("QWatchTimer"),clearInterval(e)})},t.fn.dirtyUnwatchAll=function(){return this.each(function(){t(this).find(".QWatchTimer").dirtyUnwatch()})},t}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(81),n(152),n(157),n(52),n(1

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 1004, version 1.0
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	6.83404079874172
Encrypted:	false
SSDEEP:	24:0tChrLqdKg+X1t+S9e3YTYeZjlcx/3c1oMZr7MSiZ0LV:0tCRmdD8+SiYMok/3cp0Z0J
MD5:	90CF29AB19DC601F2E5A9F9B3C4898FB
SHA1:	A1A366B0BC23887A1F2645C8F68CB7521706D8E1
SHA-256:	C5550D7F8CC83561C801D3CDC4BB3C1784672CF0413EA79B5B32E890B1558C38
SHA-512:	FE4C726A9176E1D379E48CEBA881FCD7A12CAA38B920604FEE157705F4D7F5FAB7D7F0823D74FA0A3930755A45EA463658FE225B9069FAD99B5566823963A4FE
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/themes/base-css/basestyles-lfe/version-1678899357872-bbfdc9/files/external-link-icon.woff
Preview:	wOFF...............L........................OS/2.......>...VV.c3cmap...4...<...J...wglyf...p........BQhhead...$...+...6...hhea...P.......$.]..hmtx...h............loca...p.........j..maxp...x... ... ...Tname.......;...m.e$post...........)....x.c`da`........t.....B3.f0b.```b`ef....\S......Y@....0#.........x.c```f.`..F..p....\|... .......,........P.@...@9`$.d0......x.5.A..0.E;`.BP.8e.i..5........Cx...!.......g..3..?s.........w.....C#.BsOD<S.......L]r.#..).S..Z.{@.i....4.@g...5......V...[.....2}.....i.....7E..W.OX:D[.K.0.}Q(.@. .}.._[S#....x.c`d``....'...\|e.fa..[qJ..4..X....D...+...x.c`d``a...0.b32..&..F.m.............j.........H........................x.u.KN.0.........`...b.(}.U7.}.....8r.J=......#..p.~...Rby..7.q...;(.K.=+.2.s.'......W...U4.(\.......p.-8NP.3fwx.Vh.E..s.....+.w...!\CS......p..j......ou.l..7.....:...../l..A..{L.....u..J.l.M.X.9.4......v,>..... .v..yN.1.1D.3...O>d.aM.....".X..>...t..........G.<f..4(&~u'\.&+jK..}PL..}.....]...4co..x.c`b......(..R.....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23307), with no line terminators
Category:	downloaded
Size (bytes):	23307
Entropy (8bit):	5.272273973485033
Encrypted:	false
SSDEEP:	384:KXIozYYHBrRMyNz4pFq++TrsqxR1coecF5k5qdH0vbfNyCkf4hzfOWfNqce9OhSU:KX9zYYscEqazNyrgrO4gcs6
MD5:	7EA995B85484E7310ADFC0F54692276C
SHA1:	71D496BD6EE0CE810D7F23981C2ABCB11C6F5E50
SHA-256:	DD912E4EF80F0055B710356AF6FE76CFE05C0AFA728C63CB524D7BE44D88A284
SHA-512:	0EACD7FE0C2F5F0303856F2074ACAD327887E1464A473B67065720463016BFA60D75D4568212EC97DF21B7A88CC7127FADED0BE41FAE08A57FFB56627B4E4C3C
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw2-hero.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-06:#3bd85e;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-green-qrc:#009633;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--co

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1258)
Category:	downloaded
Size (bytes):	1308
Entropy (8bit):	5.452623430840307
Encrypted:	false
SSDEEP:	24:ibj3ia7gsxreZ/kYhSgUnmm9FyZn4FhdhJQHfntXrFt2efntX2QBoFt2efntX0Fv:ibOaheFkYhamSyIhdfQHfnZ58efnZ2Dy
MD5:	F69D3B30A1263332B5A03CD48576C018
SHA1:	DF7304DF5A2D0987DA1BA2DFBFBAC7D1550F3AE3
SHA-256:	0513FB180C36BB8F47AAB335FEC433BD9453F2EA6A73F30015FBA576296A21B5
SHA-512:	4E0145208A02723E9F0773FC41BF6DD16BB30C0731CDB326A59A4CFA7BF83A4921ADA98348BE8A07E1263F3DE5CA03B856A4DDFE30E0D5E3E957AF32ABFBBDCF
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c=1}=s;return(0,l.jsxs)(i.Fragment,{children:[(0,l.jsx)(o(),{id:"4037661919",children:[".paylink-lock-icon.jsx-4037661919{position:relative;top:2px;}"]}),(0,l.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:e,height:r,viewBox:"0 0 12 15",className:"jsx-4037661919 "+(a\|\|""),children:(0,l.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",className:"jsx-4037661919",children:[(0,l.jsx)("rect",{width:"10.165",height:"9",y:"4",stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,rx:"2",className:"jsx-4037661919"}),(0,l.jsx)("path",{stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,d:"M8.132 4V2.963C8.132 1.327 6.767 0 5.082 0 3.399 0 2.034 1.327 2.034 2.963V4",className:"jsx-4037661919"

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18781)
Category:	downloaded
Size (bytes):	18832
Entropy (8bit):	5.526630076144356
Encrypted:	false
SSDEEP:	384:4SOGKGmrY411ERAutjaJOkHP5veZjF/jz2Xv2dPPedeScK+xJ1:/Oj7r911Ew7v58k+dPGKz1
MD5:	7EF4984A9E579DAA2F76A3E9AA21D4F7
SHA1:	1E7B92D11B8C1129A01A0013FC8B4323F28029EA
SHA-256:	F5E2A803AE9193BCFFD204774A0FED70D4F1A2AB615E5889C5BF8DD55870E394
SHA-512:	0E313FC0F1302B67CD38E723617959D09F99F3C5F65B4868DC3351A3936C9D5C4AA9BDEC1E5B13E3FA433EA7BBF625FD1CA13518772E8B4DC42692E5D74E0C37
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/index-d2971633ac2e2613.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5405],{89974:function(e,n,s){"use strict";var t=s(95627),a=s.n(t),i=s(67294),o=s(44012),r=s(36456),c=s(55146),l=s(37590),d=s(51245),m=s(85893);n.Z=(0,r.$j)((function(e){let{sale:n}=e;return{paymentDetailsMessage:l.Y.paymentDetailsMessageSelector(n)}}),{})((e=>{let{paymentDetailsMessage:n}=e;const{0:s,1:t}=(0,i.useState)(!0);return n&&"string"===typeof n?(0,m.jsxs)(i.Fragment,{children:[(0,m.jsx)(a(),{id:"1836627109",dynamic:[d.breakpoints.md,d.fontSize.sm,d.fontSize.xs,s?"0":"18px",d.colors.blue],children:[`@media (max-width:${d.breakpoints.md}){.p-i-wrapper.__jsx-style-dynamic-selector{padding:0 16px 40px 16px;}}`,".w.__jsx-style-dynamic-selector{margin:0 4px 4px 4px;}",`.w.__jsx-style-dynamic-selector .header.__jsx-style-dynamic-selector{padding:13px 16px 4px 16px;display:block;width:100%;font-size:${d.fontSize.sm};font-weight:bold;}`,`.w.__jsx-style-dynamic-selector .msg.__jsx-style-dynamic-selector{padding:0px 16px 16px 16px;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	130057
Entropy (8bit):	5.263572458960338
Encrypted:	false
SSDEEP:	1536:M3hOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyX0w:M3hOC0x96ruNiXcvh0jyxRyX7
MD5:	575F0DD2D17BBECE23C4E3266A51A5C2
SHA1:	5E0E3742C130DDA924504E6A0A34C5A999AE46A8
SHA-256:	4AC51FFC4BCA5ED831338CA7656A8446F9DD02FB72C7C70E0440A6CFFD8CDF99
SHA-512:	0537024F5D3211530808C780BEEE8416771FC51B23A5726B3AD1C9ECD08C5BB4B0E81489D86D99E144AA6AD30D291063B1E556B562FD8FA8F52E13348C9C92AB
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2993), with no line terminators
Category:	downloaded
Size (bytes):	2993
Entropy (8bit):	5.214032888982741
Encrypted:	false
SSDEEP:	24:ZfUcM34sOVGb8uIm8i8PuNAjmku7kNYQTW1gwUCbCbBh/gJCwhU+HvqeuADZ/6JL:6T1AuNAjmkuANH7/6HrPnbZ/6O/Wjlt
MD5:	A26FB56AF1FD0D427B005908EBA5950E
SHA1:	75A4101AB452EF9C4E0F353447BD54B84C04164C
SHA-256:	B07B53125EBEF3BD1E2D1D7C314E42D3664037D709A54CFFE881E67E44C88C64
SHA-512:	78F36DDA3D1E08F160D8FCA2C8410ACFC1700A48A575F885518B173DD13A0FD6220828083E39E219891F2FEDF99474AF35C088DFB764B8BF4F54B22A3980FE89
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,s,a,c,t,i,n,d,r,p,f,u){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,a,c,i,r,p,u,"static/chunks/pages/index-d2971633ac2e2613.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e462043e1659035f.js"],"/_error":["static/chunks/pages/_error-68f95168e6ffc81e.js"],"/billingAgreement":["static/chunks/pages/billingAgreement-c71208dfd7eadd2b.js"],"/depositAccepted":[e,s,a,c,t,"static/chunks/pages/depositAccepted-3c92f7c35c529e4d.js"],"/depositDeclined":[e,s,a,c,t,"static/chunks/pages/depositDeclined-421ec4fb3ebd4b26.js"],"/depositPending":[e,n,s,a,c,t,i,d,"static/chunks/pages/depositPending-22267881af8b63bf.js"],"/error410":[e,s,"static/chunks/pages/error410-7741d19a3075877e.js"],"/error412":[e,s,"static/chunks/pages/error412-476ae41243d19d1c.js"],"/error500":[e,s,"static/chunks/pages/error500-7fa050389a2de8c1.js"],"/errorTokenExpired":[e,s,"static/chunks/pages/errorTokenExpired-e5651ab6b79cfe71.js"],"/estimateAccepted":[e,s,

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5270), with no line terminators
Category:	downloaded
Size (bytes):	5270
Entropy (8bit):	5.074983526416147
Encrypted:	false
SSDEEP:	96:GFbsH2GWjG0RHGFHcpm2cHXQtHkHn0jUAPHFDalQFnxN1XtUHjcH7RizHxhHH:VWflHGFHcpfcHgtHkHEHFDpUHAH9MHfn
MD5:	51957FB9144981ED0E8B5D6FE3E55709
SHA1:	DB60034D40D403BCDA7FB59485979B82E10446A1
SHA-256:	1ADDE1B23E9201953B10D3069EB2638BE97D7BD7415A1D6EBA79733DC6E36CE3
SHA-512:	2502CBC0FC45D265021CFDF5494BB583FABF16BFA60C248D01664442EB572272E99691965DBC9CF2E6CC735FAED6523EB863DD1CED4D460738808DCED4490E46
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/focus-handler.51957fb9144981ed0e8b.js
Preview:	webpackJsonp([34],{320:function(s,e,i){var t,n;t=[i(0),i(1),i(12),i(2)],void 0!==(n=function(s,e,i,t){"use strict";return s.Class.declare({$name:"FocusHandler",_page:null,_applyAnimations:!1,_gainFocusMargin:0,_loseFocusMargin:0,_gainFocusMarginFactor:.3,_loseFocusMarginFactor:.2,_focusedQuestion:null,_disqualified:[".Meta",".Timing",".Captcha"],_enabled:!0,_forceFocus:!1,_forceFocusTimeout:500,_disableMouseHover:!1,_disableMouseHoverTimeout:1250,_lastClientX:null,_lastClientY:null,_scrollingDown:!1,_lastScrollY:0,_getDisqualified:function(){return this._disqualified.join(",")},initialize:function(s,e){this._page=s,this._applyAnimations=e,this._setMarginAndRefocus()},setupInitialFocus:function(){if(this._enabled){this._page.resetAutoadvanceButtonDisplay(),this.clearFocusClasses(),this.clearFocusAnimationClasses(),this._focusedQuestion=this._page.findElementsOnPage("div.QuestionOuter:not(.hidden,"+this._getDisqualified()+"):first"),this._page.findElementsOnPage("div.QuestionOuter").off(

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14704), with no line terminators
Category:	downloaded
Size (bytes):	14704
Entropy (8bit):	5.296952768199817
Encrypted:	false
SSDEEP:	384:hmV/StpdWlIvU3r+ekod5JN8W6cwjEKznBhCbOoLA9cy0Cbl:urIvhoL8W6cwwKzTR
MD5:	9280391DFF50A2A432EF5FA6A19934C7
SHA1:	7B6B9FD355822498BA09A37E31480AB22F566B64
SHA-256:	71F936C09BE11994290BADA1D1BAD944D85B65CE2D2D2FE505B33852851FFDAE
SHA-512:	9AAA239FF8CDC05128BF146FC44DC2CB42F388A37423A4C6FFF54DD8D94DE2CB86331C47D68D32BB1FEC2AAAD127D7C435E353A7DF6B11FE197D2DA504AFB8FA
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/jsApi.9280391dff50a2a432ef.js
Preview:	webpackJsonp([29],{319:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;__WEBPACK_AMD_DEFINE_ARRAY__=[__webpack_require__(4),__webpack_require__(0),__webpack_require__(2),__webpack_require__(1),__webpack_require__(817),__webpack_require__(35),__webpack_require__(3),__webpack_require__(150)],void 0!==(__WEBPACK_AMD_DEFINE_RESULT__=function(Promise,dejavu,utils,$,QBuilder,Qualtrics,log,publicED){"use strict";return function(Page,$window){var prototypePromise=Page.getPageTemplate().getFeatureFlag("JFE_BlockPrototypeJS")?Promise.resolve():Promise.resolve(__webpack_require__.e(38).then(__webpack_require__.bind(null,818))).then(function(prototypeLoader){return prototypeLoader(Page,$window)});return $window.Qualtrics=Qualtrics,utils.deepMixIn(Qualtrics,{Browser:{IE:!(!$window.attachEvent\|\|$window.opera),Opera:!!$window.opera,WebKit:navigator.userAgent.indexOf("AppleWebKit/")>-1,Safari:navigator.userAgent.indexOf("Safari/")>-1,MobileWe

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92950
Entropy (8bit):	5.280632824837553
Encrypted:	false
SSDEEP:	1536:6v4qCtkOKAaNsZ9eCdYfBk2aDSIJh1OME3974yHCT2BPsy7lEv5Tn/OYVen90v7w:tkOVBRrbOlYc
MD5:	53CC12E39C138E5E551A5CC3DF8508AF
SHA1:	6D4BDEDAB30EE636F700D0A689B4D91289AA8E91
SHA-256:	7F1C8D2A22B75B52ACA4401662D3C78064BCB8970EBA2504291E96C33E4A3493
SHA-512:	70460D1F0D3ADCD2284B8679FB62E8A16583F19EFB8ECE2BE1C198AB8DAD90C3FEB696F9A7C914B0EDCE239967F57728EE5B0B4480049F4AAB74C676BE09AACC
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/prototype.53cc12e39c138e5e551a.js
Preview:	webpackJsonp([38],{818:function(t,e,n){var r,i;r=[n(3),n(819)],void 0!==(i=function(t,e){"use strict";function n(e,n,r){for(var i=function(){return t.info("Prototype global",n.getSM().SurveyID,r),e.apply(this,arguments)},o=Object.keys(e),s=0;s<o.length;s++)i[o[s]]=e[o[s]];return i}return function(t,r){for(var i in e)"function"==typeof e[i]?r[i]=n(e[i],t,i):r[i]=e[i]}}.apply(e,r))&&(t.exports=i)},819:function(module,exports){(function(){function $A(t){if(!t)return[];if("toArray"in Object(t))return t.toArray();for(var e=t.length\|\|0,n=new Array(e);e--;)n[e]=t[e];return n}function $w(t){return Object.isString(t)?(t=t.strip(),t?t.split(/\s+/):[]):[]}function $H(t){return new Hash(t)}function $R(t,e,n){return new ObjectRange(t,e,n)}var Prototype={Version:"1.7.1",Browser:function(){var t=navigator.userAgent,e="[object Opera]"==Object.prototype.toString.call(window.opera);return{IE:!!window.attachEvent&&!e,Opera:e,WebKit:t.indexOf("AppleWebKit/")>-1,Gecko:t.indexOf("Gecko")>-1&&-1===t.indexOf(

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	265188
Entropy (8bit):	5.245198588378085
Encrypted:	false
SSDEEP:	3072:wHAz206ZJkgGupf26SWLuO42x9y3x1MyIrb/U6bPz140OymB7wm713f/vXztmamN:jipfNb/J17OymB7w8/vXzt0N
MD5:	B882CE66A739ACD9914A579AD33ACE77
SHA1:	DF256A70D821629C80014671507DA9AA11180717
SHA-256:	7572C3FFCB82AB7F8B261595CF7166CB6B26F517BF3F51F74AA343B23112F02C
SHA-512:	E4BD9A86ABBBCA4C59B4ACF4BA8259C7677BAD4451A46BB644A50A5D78245682CF525586FDD7FEEA02DA70AB7D5C6F9E0F25BF4C926B06B06E6A48EDD9AC5F49
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/jfe.b882ce66a739acd9914a.js
Preview:	webpackJsonp([37],[,,,,,,,,,,,,function(t,e,i){var n;void 0!==(n=function(){"use strict";if("undefined"!=typeof window)return window}.call(e,i,e,t))&&(t.exports=n)},,,,,,function(t,e,i){var n,s;n=[i(26),i(2),i(3),i(1),i(40),i(0)],void 0!==(s=function(t,e,i,n,s,o){"use strict";return o.AbstractClass.declare({$name:"PageElement",$extends:t,_id:null,_$el:null,_page:null,_pageID:null,_defaultLan:"EN",_currentLan:"EN",_language:{},_boundView:null,runtime:{},initialize:function(t,e,i){e&&(this._defaultLan=e),i&&this.setPage(i),this.setDef(t)},setDef:function(t){t=t\|\|{},this.runtime.Display=t.Display\|\|"",this._language=t.Language\|\|{},this.translate(this._currentLan)},_getElement:function(){var t=this._pageID?"#"+this._pageID+" .ActivePage #":"#";return n(t+this._id)},bind:function(){this._$el=this._getElement(),this._$el&&this._$el[0]&&(this._boundView=s.bind(this._$el[0],{runtime:this.runtime})),this._trigger("bind")},setPage:function(t){this._page=t,this._pageID=t.id(),this._listenTo(this._

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.381328385912462
Encrypted:	false
SSDEEP:	3:cb9fzRx3G/MRUe92Ab:cbtzRx3G0Ce9b
MD5:	61497F122EEC4729B631DCA3A64A30D3
SHA1:	D53005B1B66E6D7CDB2FDEB6430E95FDB557AE6E
SHA-256:	27D990658E439B5D045D493CB07C8364FA0CB0A1743DCB6DF3C18AA7617E03E4
SHA-512:	789D5F148C1FE3ED617ADE974E83840424508FC27D188F751C91D137B2C3884D1A91D8A43DE28518B8C19E87EB48A554E55F8EFC6000F224642997A76C1F116B
Malicious:	false
Reputation:	low
Preview:	<pre>404. The requested URL was not found.</pre>

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28931)
Category:	downloaded
Size (bytes):	28981
Entropy (8bit):	5.581447265572943
Encrypted:	false
SSDEEP:	768:PuPnoo9IGJUVr20j6vEqu5zSTBK9eN/gLAgKe+55usKUiRV1Ob5dafH:GV8eC6kUcV1Oy
MD5:	37EB804273791AF5F1A8ACAC5775FD06
SHA1:	60864D25FDBA719B5B11EA0CEBA1AF018EF95409
SHA-256:	859E7D8C178651B6095C4F7E337C5545037C9B6826A67213207753C0589F3820
SHA-512:	601C38C1530DD31270D2D75648E399B93FD6F32736F55C51CA45D8A34DDEAA41AEF5205A9F4BFA9169B9E02073584DD72DD6930EBABE6DF67D764D9F5D6970A4
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"],u=["strategy","children","dangerouslySetInnerHTML","src"];function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?d(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var E,_=function(e){if(e&&e.__esModule)return e;if(null===e\|\|"object"!==typeof e&&"function"!==typeof e)return{

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9198)
Category:	downloaded
Size (bytes):	9270
Entropy (8bit):	5.141086013932976
Encrypted:	false
SSDEEP:	96:jJGAA61T1136GAzxXIzCzXEnMKHTo3Be+ODYTpU9WjfGgCnF8BpXzphl0sLmU:A61D3VAVXIOonMz0+OyjulaHLL
MD5:	00E9C65CBBA11C07C4BF4A6E2727B8EA
SHA1:	AC1A5D9B6FFCDE916A82169CD74C9A734BDF4A39
SHA-256:	129151ED0140041B198CE3B364A11861A3B5BAA5BB60475EBF7BEDB9B0FC94D6
SHA-512:	6C142FA3DE8B0452530D3E0DA7AF3B2CFCA2F0292282E07FF3AEF71426E791B650A8EDE02B5626B7ECF177B45B86630DACDDE9F9480B639E01C7B9D994535D2B
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t.__default)\|\|void 0===i?void 0:i.enabled)\|\|void 0===e\|\|e}i.d(n,{n:function(){return e}})},3162:function(t,n,i){i.r(n),i.d(n,{LegacyDestination:function(){return G},ajsDestinations:function(){return S}});var e=i(5163),r=i(4122),o=i(94),s=i(8404),a=i(1494),u=i(204),c=i(6096),l=i(9254),d=i(5944),h=i(8044),v=i(3098),f=i(3061),p=i(6338),m=i(7566),g=i(7070);function y(t){return t.toLowerCase().replace(".","").replace(/\s+/g,"-")}function w(t,n){return void 0===n&&(n=!1),n?btoa(t).replace(/=/g,""):void 0}function b(t,n,i,r){return(0,e.mG)(this,void 0,Promise,(function(){var o,s,a,u,c,l;return(0,e.Jh)(this,(function(d){switch(d.label){case 0:o=y(n),s=w(o,r),a=(0,m.Kg)(),u="".concat(a,"/integrations/").concat(null!=s?s:o,"/").concat(i,"/").conc

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2166
Entropy (8bit):	5.0425357458672515
Encrypted:	false
SSDEEP:	48:Yy/zUVvu7Ojy68cOvJ6pYHdKqHf5TadbS9KddmLOayiHYQmY7YFBbayZa5:dzp7OjTZeheQqQPHE6kBzy
MD5:	C71029D7CAD3B0F0EA0213EFC1363143
SHA1:	1060DEC42E558796F8BB3FDA97F78F2849EBA667
SHA-256:	ACEDEDD3FCC8D2B9F5D014A6E755792D55AACBCC4914A2AA74F274E6F2B92920
SHA-512:	17FD0E6636F6FE3998738A7DD1ED376BD835F6B73813426D9FF3B1BA77DCCC9BC5C4A48EA1CCE14BCEFD42C969B7248A681DB259B415751AF9EE80C4A7FE00DC
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings
Preview:	{"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":false,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"preferAnonymousIdForDeviceId":false,"saveParamsReferrerOncePerSession":true,"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackGclid":false,"trackNamedPages":true,"trackProductsOnce":false,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"traitsToIncrement":[],"traitsToSetOnce":[],"unsetParamsReferrerOnNewSession":false,"useAdvertisingIdForDeviceId":false,"useCustomAmplitudeProperties":false,"useLogRevenueV2":true,"versionName":"","versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"unbundled"},"Repeater":{"vers

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5749), with no line terminators
Category:	downloaded
Size (bytes):	5749
Entropy (8bit):	5.18437917793877
Encrypted:	false
SSDEEP:	48:1xYqGorMEjMJ0LhHNN5Vw9m56D9c8ppyH/rhusjDBVWiijlSr9Wy969:9G2C8h1Vwg6D9c8uusaEr9Wy969
MD5:	7060812001AB71E901B5AE3C0D311CA9
SHA1:	BE7A4CD2B67BE42833AFBF59EBB7D4C3E7893D35
SHA-256:	6BDAB11D5B60CAAFE619584818BAE0DC9D93684A391B21B9403F4785498034AF
SHA-512:	C0C6C280207B09C44B5A72CB3C1A0B9B9E5862EE189A851A01F241A8343F81787BFE0B091FE1DE11E12EAEF0C63A6EEE8F7987623984F82B56543F7B95F3BAC6
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/qbmds/container.css
Preview:	.Container_module_bg__df96d987{padding:0 .625rem}@media (min-width:768px){.Container_module_bg__df96d987{padding:0 1.875rem}}.Container_module_noPadding__df96d987{padding:0!important}.Container_module_noMargin__df96d987{margin:0!important}.Container_module_position__df96d987{position:relative}[id=pricing]{scroll-margin-top:7.5rem}.Container_module_container__df96d987{position:relative;max-width:86.25rem;margin:0 auto}.Container_module_container__df96d987.Container_module_columnLayout__df96d987{-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column}@media (min-width:1024px){.Container_module_container__df96d987{display:-webkit-box;display:-ms-flexbox;display:flex}}@media (max-width:1023px){.Container_module_container__df96d987.Container_module_mobileTwoColumn__df96d987 [class=ContainerItem_module_containerItem]{width:50%;display:-webkit-inline-box;display:-ms-inline-flexbox;display:inline-flex;margin:0;padding:0 .625rem}}.Container_mod

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46289), with no line terminators
Category:	downloaded
Size (bytes):	46289
Entropy (8bit):	5.306261123905945
Encrypted:	false
SSDEEP:	768:KX9zYYvGXshhac801SPc3sZlHn823J3Y3z343H3H3F323V363933EsLEo3dpSpvf:uXT
MD5:	1C55DA78462F1EF69CB55BC4093AFD31
SHA1:	4B039029E3169B5A9AA76BC37CFA816F4774537C
SHA-256:	104E048E324BA413EE36A4EAC3B3A29300DE32831B739F6D255FD2802965C890
SHA-512:	E8AA23E086DD3B17A371B0F7867A9732FF9F448D6B09088F234E355EE4E0400BC081DB69D9147ECBEA0168C531134362B5F2875C0297AAB8C6E7A00D0D323A40
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-global-nav.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-06:#3bd85e;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-green-qrc:#009633;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--co

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23477), with no line terminators
Category:	downloaded
Size (bytes):	23477
Entropy (8bit):	5.161802788791692
Encrypted:	false
SSDEEP:	384:n/ZmfpkXRMNOZBBiunzFdbr4VK5KIVLQVskx7aL:khG
MD5:	A6F447C4D58EB4C9AE27C0CD227BD594
SHA1:	077C133469AA1163DA8868170BA2D20AE503AE44
SHA-256:	589AF654D0001DD5A8794EF4EC05569D3B93AEFBA8E4A6691AE2DE035BE3B61F
SHA-512:	4AFA91BAADA7B9F5E32FC3BCC552EFB4CD8A4FAA9F18D55CFB57405796F17FF4F00C73CBE6295C71A9B129BA7CF38C74ECDE9F7068BB2039C9F867A61E4CA77C
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-secondary-nav.css
Preview:	:root{--navTop:5rem;--rwSecnavStickyHeight:5rem}.RwSecondaryNav_rwSky__dbdb12ef{background-color:#dbedee;background-color:var(--color-blue-rw-sky)}.RwSecondaryNav_white__dbdb12ef{background-color:#fff;background-color:var(--color-white)}.RwSecondaryNav_darkTofu__dbdb12ef{background-color:#e2e0db;background-color:var(--color-grey-rw-dark-tofu)}.RwSecondaryNav_faintGreen__dbdb12ef{background-color:#e8f5e3;background-color:var(--color-green-rw-light)}.RwSecondaryNav_tofu__dbdb12ef{background-color:#f3f2ef;background-color:var(--color-grey-rw-tofu)}.RwSecondaryNav_transparent__dbdb12ef{background-color:transparent}.RwSecondaryNav_rwSecNav__dbdb12ef{position:relative;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;width:100%;z-index:1100;z-index:var(--zindex-sticky);-webkit-transition:all .5s cubic-bezier(.35,0,.25,1);transition:all .5s cubic-bezier(.35,0,.25,1);-webkit-transition:a

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1074763
Entropy (8bit):	5.439605604789784
Encrypted:	false
SSDEEP:	12288:/WLz0wviTZThuK3xZAKPRu36uhS0Ns/qoqqErGUGQM9r3Jt66:/WLz0fTZluK3DAKZGsyk3Jt66
MD5:	953A4D6B67538E188E9B4CF4EFB5154A
SHA1:	514FE5582CE0C078F740F43AA825C079EB6F7768
SHA-256:	AA49B7CA7FD89A8AAC73A1B66E943D2621CE1837D147614F9C960CAADC57615E
SHA-512:	802411FE79EDC01F167FEB68F97CBEA787672F8275FD8452404ED7A1A07A4090534B2F98C76AF1EFAE4A14FB584096B83F48693FAC9FE8A34098660B6A9E0BCA
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-71ca81b130c00394.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var n=t&&t.cache?t.cache:u,r=t&&t.serializer?t.serializer:c;return(t&&t.strategy?t.strategy:s)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"===typeof o\|\|"boolean"===typeof o?r:n(r),a=t.get(i);return"undefined"===typeof a&&(a=e.call(this,r),t.set(i,a)),a}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return"undefined"===typeof i&&(i=e.apply(this,r),t.set(o,i)),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:function(){return d},Z:function(){return r}});var c=function(){return JSON.stringify(arguments)};function l(){this.cache=Object.create(null)}l.prototype.get=function(e){return this.cache

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (951)
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	5.445974682324403
Encrypted:	false
SSDEEP:	24:ibjw7snS0HCIsZn0hJCmUfntXeLBfntX3ALG34KeGiBGx24fr:ibMAS0HCF0fCmUfnZ2BfnZ30G34y1xdz
MD5:	809D00F1DE64FBEFBC1D5D0799370E9F
SHA1:	672F069611558248370053836273D73FB37CF22D
SHA-256:	8527949118A923DB9B180471B9A704BD27E56EF5EA7A11B28F5296290F36C288
SHA-512:	5235C1E5637BEEF93A615AD36B6D02C5C5ACA87153AD5481083033AD1586DECCB22D349196F6EFC64C641B315A523FE16DA7CB862497A3D5ADB02A0C534B07D4
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9844.724333c7af959b0a.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9844],{49844:function(e,r,t){t.r(r);t(67294);var o=t(51245),s=t(85893);r.default=e=>{let{width:r=18,height:t=20,color:i=o.colors.black,"aria-label":a}=e;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:r,height:t,viewBox:"0 0 18 20",color:i,"aria-label":a,children:(0,s.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",children:[(0,s.jsx)("rect",{width:"15",height:"18",x:"1",stroke:i,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",rx:"2.14"}),(0,s.jsx)("path",{stroke:i,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",d:"M0 4h2M0 9h2M0 14h2"}),(0,s.jsx)("path",{fill:i,d:"M9.39 9.45c.983 0 1.78.797 1.78 1.78v1.38a.45.45 0 0 1-.45.44H6.28a.45.45 0 0 1-.45-.44v-1.33c0-.983.797-1.78 1.78-1.78v-.24a1.78 1.78 0 0 1-.89-1.54v-.89a1.78 1.78 0 0 1 3.56 0v.89a1.8 1.8 0 0 1-.52 1.26 2.57 2.57 0 0 1-.37.28v.19z"})]})})}}}]);.//# sourceMappingURL=9844.724333c7af959b0a.js.ma

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	4.7468253845545645
Encrypted:	false
SSDEEP:	12:bLbd1x/p88CrEx4ZbdPhTvNb4jGWKLwuhAivmGuRp14mcQ7ZE+iOQcBhdw8KIQQP:b/d1rpodP7s9Kcu0h0jua2pfw8KIFoHc
MD5:	959F46F67438369C413F903156848BD0
SHA1:	0DAF348389DA6CE4DCC2CBE71E0589C26F6BBDAB
SHA-256:	8C52987FBC48500C2A81BD52F81D44324E31E7ECADBEBD111A02F912BE232CFD
SHA-512:	D3385ABE556BB749AAEDF1400A66BF7FBBE5A57562CB0A0D133BA0399320C3FB4DE2860339287D1CF04AC04A10DBA5D7A230E2633C6B24BD3EE836E5178F6594
Malicious:	false
Reputation:	low
URL:	https://link.edgepilot.com/css/app.css?v=1
Preview:	nav.navbar {. min-height: 80px ! important;. background-color: inherit ! important;. border-color: transparent ! important;. margin-bottom: 5px ! important;.}.nav.navbar > * {. min-height: 80px;.}..navbar-brand {. height: 70px;. margin: 0 0 0 0;. padding: 0 0 0 20px;.}.li.navbar-brand {. vertical-align: middle ! important;. line-height: 70px;.}.#logo {. height: 70px;. padding: 0 0 0 0;. margin: 0 0 0 0;.}.#details-toggle {. font-size: 16px;. color: #333333;. display: inline-block;. margin-top: 15px;.}..filter-explanation-link {. color: #333333;.}.#filter-details {. margin-top: 15px;.}.#score-breakdown {. height: 300px;. line-height: 300px;.}.#score-table {. margin-top: 30px;.}.#loading-animation {. margin-top: -50px;. margin-bottom: -50px;.}.* {. word-break: break-all ! important;.}.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (410), with no line terminators
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	5.189647299723488
Encrypted:	false
SSDEEP:	12:ycXiudEVc/aIsGIgrNuzd1cAr4pNNGgrC9Bhn:ycS+EVCaXGIONQONNGO8Bh
MD5:	530A4E8C5C1D103B58731F4DD3B0C229
SHA1:	BE14CCD47619A4B8766EFDC9BF50DAA5AB0D2931
SHA-256:	0B2C901FF34C4EDAB0E9BD1117CBB3B22753B402BFE75F4FAD60C60196AF499F
SHA-512:	15254E89A7E1FD36733117FC739884D18EACA4862A11BA87A86EC85F68DE458BF547A3AA6FE5C20DFEE97C9AD98D232F278087407F05E9C434A8E7525E0FE0E3
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/advance-button-template.530a4e8c5c1d103b5873.js
Preview:	webpackJsonp([39],{291:function(e,t){e.exports='{{var inputMessage = Q.getMessageFromTemplate(\'Done\') \|\| \'Done\'; }}\n<div class="advanceButtonContainer" {{? !Q.getPage().shouldAutoadvance() \|\| !Q.getPage().showAutoadvanceButton()}}style="display: none"{{?}}>\n <input id="{{=Q.runtime.ID}}-Advance" class="AdvanceButton Button" type="button" value={{=inputMessage}} title={{=inputMessage}}>\n</div>'}});

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (559)
Category:	downloaded
Size (bytes):	198555
Entropy (8bit):	5.46564651975053
Encrypted:	false
SSDEEP:	3072:xCD1necoktGzsFHdNekqF4Cr3u7EjY5ZVOnH2vrWF+PyhMBeEkVGWie2R3qonBFg:IDbF9rWFkBeEoGWie2VjlI
MD5:	6BDB10939385537ACC9E49EA3E68F838
SHA1:	7F3986534C2F3F724B03831304B941BADC63618A
SHA-256:	26E6E7E5ECF5D596E4350DD943C7932FEE3DB686E53E8C9904761AD6692C7534
SHA-512:	119F525C8ACD93228DAF5AE507F4DB757E002EA9CA23684E1453E4D283532133F8A3D7B6DEBAB8A5B1AF44232534DC8B21E2FC335B0543476BF68FFD8FBCDB05
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/themes/templated-skins/qualtrics.2014:intuit.3525198643:null/version-1711678411443-3f4634/stylesheet.css
Preview:	#css-trigger{font-family:jfe !important}.#SurveyEngineBody{-webkit-text-size-adjust:100%}..Skin .MC .MAHR li,.Skin .MC .SAHR li{float:left}..Skin .QuestionBody .TextEntryBox.TextEntryLarge{width:600px;height:200px;margin:7px 0}..Skin .QuestionBody .TextEntryBox.TextEntryMedium{width:300px;height:100px;margin:7px 0}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:block}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected:hover{border:1px solid #ccc}..Skin .PGR .DragAndDrop .NotSelected:hover{border:none;padding-left:0;padding-right:0}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:inline-block}..Skin .QuestionOverlay{position:absolute;top:0;bottom:0;left:0;right:0;z-index:10000;background-color:#fff;opacity:0;filter:alpha(opacity=0)}..Skin .ResponseSummary~.QuestionOuter.Matrix .DL td.last{width:50%}..OrgHierarchy{padding:0 20px 20px 20px}..OrgHierarchy .O

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20028
Entropy (8bit):	4.319049804109463
Encrypted:	false
SSDEEP:	384:j16CvHqWF4OOOP0y+nCaESSxm0OCSWuyiwwd1EsCje7xf/jBUFn+9Pyap08ple:juW+O90ymCaEnPOhPd12G/jBUB+9Hk
MD5:	6DCC0DB5446AC677D011C9E531400A08
SHA1:	824D51B43005AAB359B700E43E2FC64F57B2DF43
SHA-256:	F42ABCD844DD443999483304AD956BB3E784FD0F8493EC0C96E72D3BC3EED083
SHA-512:	27AD56B1A765027AB1B378B689C25782040A49C6928504C1D3D17AE96C537D0870C9EB2DDBD2376D1C599E18413FF79680B694D5BF5EAA30EF273C48D7403371
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53.2 (72643) - https://sketchapp.com -->. <title>Group 44</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.0001 0.0002 87.808 0.0002 87.808 28 0.0001 28"></polygon>. <polygon id="path-3" points="0 28 87.808 28 87.808 0 0 0"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="company-logo" transform="translate(-75.000000, -88.000000)">. <g id="Group-44" transform="translate(75.000000, 88.000000)">. <path d="M16.2428,27.8943 C11.4518,27.8943 7.3678,24.6403 6.2898,19.9793 L6.2718,19.8993 L5.4038,19.8553 C2.4358,19.7003 0.1048,17.2483 0.1048,14.2683 L0.1048,0.1123 L84.3058,0.1123 C86.1788,0.1123 87.6958,1.6363 87.6958,3.5153 L87.6958

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39684), with no line terminators
Category:	downloaded
Size (bytes):	39684
Entropy (8bit):	5.167639634679469
Encrypted:	false
SSDEEP:	768:h98PseNO9B1dOLQGWg8QqzntluhPIgYo6/:hSPnRxu
MD5:	19204E8370CED59D9CDB12B3EED0086A
SHA1:	5FA2134EFA953CFD3EEF16457AA5B088DE1AE007
SHA-256:	CBC57106F0E96E632E0178541A8D0D7C4996FA0C9E7DA5C94AF701B6AB53FF1B
SHA-512:	55D736E74F5022D90C764333BC4EF98C6C4F14F90C5AD2B1C4BB4E4F0C71A6495A0A323CCB76CAA68622B1283B66A76A6894EED4CD24D2B91F8272A3038066B5
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/mc.19204e8370ced59d9cdb.js
Preview:	webpackJsonp([6],{301:function(e,n,i){var t,o;t=[i(0),i(287),i(712),i(713),i(714),i(357),i(715),i(716),i(717),i(718),i(719),i(720),i(721),i(722),i(723),i(724),i(725)],void 0!==(o=function(e,n,i,t,o,r,c,s,d,l,a,u,h,C,m,p,I){"use strict";return e.Class.declare({$name:"MCRendererBundle",$extends:n,getDefinedRenderers:function(){return{MCDL:i,MCMACB:t,MCMSB:o,MCSA:r,MCSB:c}},getDefinedTemplates:function(){return{MCDL:s,MCMACOLTX:d,MCMAHRTX:l,MCMAVRTX:a,MCMSB:u,MCNPS:h,MCSACOLTX:C,MCSAHRTX:m,MCSAVRTX:p,MCSB:I}}})}.apply(n,t))&&(e.exports=o)},357:function(e,n,i){var t,o;t=[i(3),i(28),i(2),i(0),i(404)],void 0!==(o=function(e,n,i,t,o){"use strict";return t.Class.declare({$name:"MCSARendererHTML",$extends:o,blankOptionScreenreader:{},detectedClick:!1,initialize:function(e){this.$super(e),this.on("prerender",function(){this.blankOptionScreenreader=this.getMessageFromTemplate("Blank")}.$bind(this)),this.on("postrender",function(){i.each(this.runtime.Choices,function(e,n){e.TextEntry\|\|this._$el.fi

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42868), with no line terminators
Category:	downloaded
Size (bytes):	42868
Entropy (8bit):	5.171170787620403
Encrypted:	false
SSDEEP:	384:H0i7NXDwLN1J27vIn17OhRCRORERBgHOycExztOW2slHZeD65Z3fqByYVHK6EGdS:ZNX+G4AObuUBEsZdpmN4q24
MD5:	1B1F31181E5526819597AE7CADC41D62
SHA1:	B7B8F41FC1C0AE9F5606A306D2AA965BA8F17122
SHA-256:	54E76710E16E5FFA3AC70BBF53EF3A3D4FF449FA0A5D784E317AEC6A77A8499E
SHA-512:	21FE2A6C48B13D4B0B66FF60D3752E2F692D6E2845D85C060E0DA9A04FA2FE8C9CF8CFBEF7CDFC1329D8F013C1B8528796AD376DC26A6B3CACBCE463CAE44E15
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-price-card-container.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem;--rw-width-1143:71.4375rem}.RwPriceCardContainer_rwPriceCardContainer__640ee804{width:100%}.RwPriceCardContainer_rwPriceCardsContainer__640ee804{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:stretch;-ms-flex-align:stretch;align-items:stretch;padding-top:3.75rem;padding-top:var(--spacing-xlarge);padding-bottom:1.25rem;padding-bottom:var(--spacing-small)}@media screen and (max-width:64rem - 1){.RwPriceCardContainer_rwPriceCardsContainer__640ee804.RwPriceCardContainer_toggleEnabled__640ee804{padding-top:2.5rem;padding-top:var(--spacing-large)}}.RwPriceCardContainer_carouselWrapper__640ee804{overflow:hidden;display:none;position:relative;background-color:inherit}.RwPriceCardContainer_carouselWrapper__640ee804.RwPriceCardContainer_showPadding__

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35228, version 2.19660
Category:	downloaded
Size (bytes):	35228
Entropy (8bit):	7.995183642239223
Encrypted:	true
SSDEEP:	768:yDgSpSDLuESkBB/e/Y/OzfNt++ZdvZpzdPgVkswbXPP0KI30lt:yDyLuExX2/YwVtlzvZ3sX3a
MD5:	0ACD962351F0B06E9A1F472E692ED680
SHA1:	AA8E984BDB4490B0344845A9A0B5B4DC4B72018C
SHA-256:	5291CBB4481ACB60681D554CDD9E736912DF36C26264961EBDD003B67A65E1DE
SHA-512:	908AF480952117311ED9836BD6554D9E095EA9FDCADC5183AEF0048E515486AC1B3B81FBB3FEC51E0F30042F2401F291235AF439F4F8814C10D3C05F49FEA13C
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2
Preview:	wOF2...................8..L.............................`..`.....d..P...\..\|.6.$..(..,.. ..3. ../[.qq@..W...h[.......(x....z.....32../?....q.1.T..Q...5.....>k....;f}..;.K.7(..._.......Y..P.O....(.R....U..&>.w..@......!..MW...u>5..lJi................Q.../>......=...R.!........6.l`......^....bLZ....z..?.......B...V.j@S(.l...vDW.3._LtT2@7.n.g..~.......~m>..k.2.E$.q..ia$:..BW6........Y............s.$.-..?SQ.[@..y\|....%S...)._n.H&&<B:...._.....T8...j.q`,.<..mY.ZG'>.O.0..a.iT.t..%.....> ..g wW.......h..H$.%D,mB7m..Y.e....X...V...[I.3...4.../+e....iKWv.X.l.k~Xa.]m.D..vF>.@..T....T@.p........."..~....}?. ..4+zM.UEL&.4... @.O....{M0.*I...2.L..9.m(W..d6........\|.{;..&..f.f.2.:.\..N.'.\.pq.D....JR...L...^...D..UD.d..{.o{f.}!.r@b..{6;....14f.......Q.g...6..K..N.;...,`.KO.$.Ia..@....l.~U......[.,.YH._.l..".d...bp..DI........Q...}..Fh..Y.N..Js_"4^._...AN.=.h.F...0..(..fYj..(...%.RvHQR.~U.^.T.P..z..Y...jI>..1......4u.xU@.5..dY.......u....w....n.[.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1539)
Category:	downloaded
Size (bytes):	3955
Entropy (8bit):	5.801417933614898
Encrypted:	false
SSDEEP:	96:SzINR+kFAwvfmrwinqyB89MOwJc139ZHJLlEQCeWGzc:SzIn+Xwiq6y3gQc
MD5:	D6D8A998F51403D619F93389B002A39A
SHA1:	B7C55E1B29CC39E1E7F84FE53E9013A4D50ABB50
SHA-256:	23EBC8699CBD268968C6589399EBAB68A91B9E6AECE40908CC47B1A75212D084
SHA-512:	3E2B646A83288CF95B33D4FFA9CDAAF237FB3E992C2D81FA861BD300C170E7F630D5E60D47DA128763CD0AD54F49C7DA8E92F464199EA5009CE1832F27434F6C
Malicious:	false
Reputation:	low
URL:	https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS
Preview:	<html>. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1" />. <title>Checking link...</title>. <link href="/css/app.css?v=1" rel="stylesheet">. <link href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">. <script src="//code.jquery.com/jquery-3.2.1.min.js" integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>. <script src="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>. <meta name="norton-safeweb-site-verification" content="vo5jo2vr2es9toa19icr3h7q2hi6r6wqxg2e2qy7s06inecm48l-xszjfgzrt97-wwnlobyo8751zji5y68-iv6m14v35a8xr0is-usi88c7u6tn57czk90oepmrfgw1" />. </head>. <body>. <nav class="navbar n

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15201)
Category:	downloaded
Size (bytes):	15251
Entropy (8bit):	5.63557200748697
Encrypted:	false
SSDEEP:	192:3RdTpatIZdSfuu3uVUXUJh0j0RO0hU0zs0ztOD0Ehn0EpU2Sxa2bPwibi2vLurLb:3vgCZkfunG8EwASJ6
MD5:	4722B48BC39C7F5FE282DF00B69848F6
SHA1:	5770FD6C8FECE05E8CB87AEFE2D48FD2D02B919D
SHA-256:	62AD1DD2048CD7E362AF23D24C6E7453CD690BB29E2BE6177D0AF98944B79828
SHA-512:	63CC48DC7F651A7A8312027C6E10BE2F3D5E1E0B7F451313336EC8491DFB300718837520C462DAC8D8867CDF93951B165E7BE9A87AFB75881204EA7468C48556
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9211-e5b247be522986a8.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9211],{86553:function(e,o,s){s.d(o,{Z:function(){return f}});var r=s(59499),c=s(95627),l=s.n(c),t=s(67294),n=s(44012),a=s(54490),i=s(51459),d=s(70678),x=s(85893);var p=e=>{let{color:o="#6B6C72",width:s=24,height:r=24,className:c=""}=e;return(0,x.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:s,height:r,className:c,viewBox:"0 0 24 24",fill:"none",children:[(0,x.jsx)("path",{d:"M17 4H15.816C15.6099 3.41709 15.2288 2.91209 14.7247 2.55409C14.2206 2.19608 13.6183 2.00256 13 2H11C10.3817 2.00256 9.77937 2.19608 9.2753 2.55409C8.77123 2.91209 8.39008 3.41709 8.184 4H7C6.20435 4 5.44129 4.31607 4.87868 4.87868C4.31607 5.44129 4 6.20435 4 7V19C4 19.7956 4.31607 20.5587 4.87868 21.1213C5.44129 21.6839 6.20435 22 7 22H17C17.7956 22 18.5587 21.6839 19.1213 21.1213C19.6839 20.5587 20 19.7956 20 19V7C20 6.20435 19.6839 5.44129 19.1213 4.87868C18.5587 4.31607 17.7956 4 17 4ZM11 4H13C13.2652 4 13.5196 4.10536 13.7071 4.29289

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1016 x 499, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7954
Entropy (8bit):	6.962691473483996
Encrypted:	false
SSDEEP:	96:IYB2zmai3hBAmjyXygSasXu/Fli/YFTUr5+vMDuqI3qq3OeBjfFIY/Ll3BIAp:IYBim/3hu5DSaselFTUbD7g3OsFTliAp
MD5:	54FAD235B1307BFEF9BBE1992D9AC44D
SHA1:	9BB34C6E86F4A485FFBA7CCF1FF835389354DEA8
SHA-256:	8D57F66EA081AF5A8F24DA86B259D7540E9F1A92B0AA4AF904EFE91BACEFBB3E
SHA-512:	E15EE54F1B522D834D32715299F647712B63F7D4A7D9F7642EFB57D4BFB27B9A50301E05CCD38E419F39F15E538C5AC99B4BF8C61DB6696EA38EB8ADDB00D270
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................}....pHYs..........+......IDATx...}.eu.....N.;!,%."ED.,U\|9.Y\....h._x[..Pj({$F.K..].V..W.G]W).H....9.-;.8EdYB.;.L.fv2.L.d.?.E...yf..{...{>....<s.9......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................I...?..I.K..$.&.?.$..lN.x._$y M..PR.v.n.N....$.'9`.-.$O'..$k....R().....r.R.f..%9).>Kx..$7'.1M......$u{\....3..Kx.$.%Y...4.....^P.....]..$.&9p.g.?.Ui...p....nOJre...p..I.I.*M.i..^Q.....=+.$....w$.(M......\u{h.?M...}c.K.T_...af)

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/1.24.4-release_1.24.4-ca589f4/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19608)
Category:	downloaded
Size (bytes):	19658
Entropy (8bit):	5.464350869654377
Encrypted:	false
SSDEEP:	192:WAEmEyE7EkA/EfaRYdg4I2aVY232yoY2yi2wHPZwxGfLwCLTCUinMPI29N3eK0Ib:WA5nSzA/EqoQV8/Z6Dw9AiF1haC
MD5:	F49E5EAC9CB32884C0A137322F2173B6
SHA1:	F535F20920E62C895480CB68F72A8F66EAC36FE0
SHA-256:	A0466A1B22B62D2A5B40637A843FAFA46797E06D86118D46219751FD52DF8FB6
SHA-512:	5A45262CDE07A377F565F0D5FFFD337C13F6835DFA158BE85C5267F7AC850793EC10C853534903DF09A97DBD69B0D18A1AA846CC1DBBED7D7F3C6FAF62B0947D
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-55a0b477131a1625.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),a=n(44012),r=n(14067),c=n(54623),l=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i,cancelIntl:x={id:"CANCEL",defaultMessage:"cancel"},continueIntl:y,children:b,hideOnContinueFinish:f=!0,continueDisabled:u,bodyContainerWidth:g,removeDefaultBackground:h,withHr:j=!0,customDesignKey:w,withHeader:k=!0,withCancelBtn:_=!0}=e;const{0:S,1:z}=(0,o.useState)(!1),v="freeTextModal"===w,$=async()=>{S\|\|t()},N=k?(0,p.jsx)(a.Z,{id:i.id,defaultMessage:i.defaultMessage,values:i.values}):void 0;return(0,p.jsxs)(o.Fragment,{children:[(0,p.jsx)(r.Z,{hide:()=>$(),header:N,removeDefaultBackground:h,customDesignKey:"freeTextModal",children:(0,p.jsxs)("div",{className:s().dynamic([["278771648",[g\|\|"496px",m.breakpoints.sm,v&&`@media screen and (max-width: ${m.breakpoints.sm}) {\n \n }`,v?"55px;":"72px;",_?"space-betwe

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20028
Entropy (8bit):	4.319049804109463
Encrypted:	false
SSDEEP:	384:j16CvHqWF4OOOP0y+nCaESSxm0OCSWuyiwwd1EsCje7xf/jBUFn+9Pyap08ple:juW+O90ymCaEnPOhPd12G/jBUB+9Hk
MD5:	6DCC0DB5446AC677D011C9E531400A08
SHA1:	824D51B43005AAB359B700E43E2FC64F57B2DF43
SHA-256:	F42ABCD844DD443999483304AD956BB3E784FD0F8493EC0C96E72D3BC3EED083
SHA-512:	27AD56B1A765027AB1B378B689C25782040A49C6928504C1D3D17AE96C537D0870C9EB2DDBD2376D1C599E18413FF79680B694D5BF5EAA30EF273C48D7403371
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/truste.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53.2 (72643) - https://sketchapp.com -->. <title>Group 44</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.0001 0.0002 87.808 0.0002 87.808 28 0.0001 28"></polygon>. <polygon id="path-3" points="0 28 87.808 28 87.808 0 0 0"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="company-logo" transform="translate(-75.000000, -88.000000)">. <g id="Group-44" transform="translate(75.000000, 88.000000)">. <path d="M16.2428,27.8943 C11.4518,27.8943 7.3678,24.6403 6.2898,19.9793 L6.2718,19.8993 L5.4038,19.8553 C2.4358,19.7003 0.1048,17.2483 0.1048,14.2683 L0.1048,0.1123 L84.3058,0.1123 C86.1788,0.1123 87.6958,1.6363 87.6958,3.5153 L87.6958

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	downloaded
Size (bytes):	1559
Entropy (8bit):	5.120755987626891
Encrypted:	false
SSDEEP:	48:iKQKFYYCvoDlgVDyNQ2glkMBaqNTYEZqNF5XmbxDy:jJmYoyGPlkMBa+TrZqp2y
MD5:	3867B2388B619FF7FDDC29EF359FC9AA
SHA1:	511BED0C4D3D57AB4CF1B1D7596FB845ECFBA6AC
SHA-256:	31892C21AE4FB908A875BBE29DBF0DF74C2E84171CFBCAC23540F3AD8222A35A
SHA-512:	7BFD6E6CD2FE7A79F4797439BC7294A36D076D67A3DC5BB8E86FA5AF19B50F0E8FEC18BF33B30588486B231062E43F417708333044207A586AAD999E97E819A5
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n.__default)\|\|void 0===t?void 0:t.enabled)\|\|void 0===i\|\|i}t.d(e,{n:function(){return i}})},5081:function(n,e,t){t.r(e),t.d(e,{schemaFilter:function(){return o}});var i=t(5163),r=t(9254);function o(n,e){function t(t){var o=n,u=t.event.event;if(o&&u){var a=o[u];if(!(0,r.n)(o,a))return t.updateEvent("integrations",(0,i.pi)((0,i.pi)({},t.event.integrations),{All:!1,"Segment.io":!0})),t;var s=function(n,e){var t,i;if(!n\|\|!Object.keys(n))return{};var r=n.integrations?Object.keys(n.integrations).filter((function(e){return!1===n.integrations[e]})):[],o=[];return(null!==(t=e.remotePlugins)&&void 0!==t?t:[]).forEach((function(n){r.forEach((function(e){n.creationName==e&&o.push(n.name)}))})),(null!==(i=e.remotePlugins)&&void 0!==i?i:[]).reduce((fu

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13638)
Category:	downloaded
Size (bytes):	13688
Entropy (8bit):	5.497286447223826
Encrypted:	false
SSDEEP:	384:SdeQ9JG9sNbat6kg80+UbDU9UH7Z3+VLk:SdeSJMsNmt61n+SDU4B+pk
MD5:	988CD6D581A566A28851EB19CFB5C40F
SHA1:	4C9BFD4A4706DFE6BB0C791C13642BC8AB5593E0
SHA-256:	2BB0B3609F38E827343594A9FF53AD750A987AC943EC993CFBDEFA30014573A0
SHA-512:	36C239A2935C368C4E40632A5E823F93BC52AEA8741651D1D7B2B02130658EC277CA8D0CAAEF7AB58D79E97E53C56C1B05256856842D22496161818BC3B7DFF5
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-00d69eb446cd722f.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMessage({id:"TRUSTE_IMG_ALT",defaultMessage:"Trust's online privacy certification"});return(0,l.jsx)("a",{href:"//privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d",title:"TRUSTe online privacy certification",target:"_blank",rel:"noopener noreferrer",onClick:()=>a.Z.clickTrust(),children:(0,l.jsx)("img",{src:`${n}/truste.svg`,alt:t})})},x=s(55146),m=s(70678),y=s(51245);var p=e=>{let{cdn:n}=e;const s=(0,i.Z)();return(0,l.jsxs)(t.Fragment,{children:[(0,l.jsx)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]]),children:(0,l.jsx)(x.Z,{children:(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]])+" wrapper",children:[(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.font

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5684), with no line terminators
Category:	downloaded
Size (bytes):	5684
Entropy (8bit):	5.137417419937052
Encrypted:	false
SSDEEP:	48:vDH6qzR86eivdjcc8aIXdddPLmCj8BxiLCjXbcoboaoF8pFQq3qFQqfb49FM5s0l:vLyiEybB4LucopskSs2MXFx1Aq6
MD5:	47B8E8700F2DAF9BC5C7463662EC62F4
SHA1:	08CFF0507B13E425D61713EE3D74442C4133770D
SHA-256:	774C1C61C113A37A3BDDB2E6A55483E89A2D6BD388DA3962772681D5246C0E91
SHA-512:	D54C9D9F771AD038FC316192A8C25EBC631BB8ACEAD3C956486E5326FC49920B6442DE5A380648455974592B2EF16EDF1EA4381E94385E3FE802BA352E46B77B
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-ecosystem-module.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.RwEcosystemModule_ecosystemModule__bf2c2502{width:calc(100% - 1.25rem);width:calc(100% - var(--grid-gutter));position:relative;max-width:90rem;max-width:var(--breakpoints-xlarge);margin:0 auto;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;border-radius:.5rem;border-radius:var(--border-radius-medium);-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column}@media (min-width:48rem){.RwEcosystemModule_ecosystemModule__bf2c2502{width:calc(100% - 2.5rem);width:calc(100% - var(--grid-gutter)*2)}}@media (min-width:64rem){.RwEcosystemModule_ecosystemModule__bf2c2502{-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-align:start;-ms-flex-align:start;align-items:start}}.RwEcosystemModule_ecosystemModule__bf2c2502.RwEcosystemModule_blue__bf2c2502{background-co

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4158
Category:	downloaded
Size (bytes):	1655
Entropy (8bit):	7.8783859431231225
Encrypted:	false
SSDEEP:	48:XM1lkFklJCQZmr4qx0Z2w9bQSQMd9exLzc/cNau:yLbZmr4OO2f3MaPj
MD5:	D151CB0874ED5E13006E5F38364EC01E
SHA1:	3155596C3845863DD4138F3B354D4BA379F083A2
SHA-256:	C1C09BC9842129EE1D81812F0513F63BB8AD246442CFF41C9C55E5AE56ECDE3C
SHA-512:	48E8F94CFB8F1B47EED462DA514EB645A459A71BF4C014ABA6BE5BBDD0ED381C205C60D38D1DE0B34F2C23D2B1FED3819F54EBAAB363E1A1B663E9D0A97B6D46
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz
Preview:	...........Wmo.6..._.p.+!.mwm.Y.....Z...0.Fd.&2..T.....z...]?m@....x..VRq..>]h.....+m.=Qb.Z...,.....rba..Z....3..r.[.N...`_...x.._.~Kn,...../4....W...8....4j..C.[E.v.:Y..H..v..w.D.3l...f...x.3.y6.%..NgiyfI...]...q...3...Fd..F;...A..}.R....q.$cy.....L.l0.IQ...o......^..I...Dr,@d..bF9.K..b0(..4o5Mrb...8I....aE....g.......s.l:.h.@?u&[....n..S5..........z:O...Y::..L9. ..qR.XIb.\f"V''x.`MY...pNR5...+l....dTa..i.\|0.U,@....k"..q6...Gt-'..1n.'.j..=Sp.ky...5.W...U.,..d...^.a.].fD.e..4...J.F4......\L@.B.......E...9:.>=.U..~y.....%N.tF..l1..z.!-.`..w...@U..1..\..e;.....CP...s.B....3Pm.t....-..)D[..`.....-S..F.... ..<O.8pX....0..V...{..B...B6.e.d.tX..T'.i.'pg...K..\.:...V..s.Gj'.^..{.~..Nit.&.\v...R.1....?..B..~..x./.....[Z..Y..e.?Y...bK1....y....5 .w.$..T..Xb.8..._....-.g.1....._....\<E..-o..5....~._...".!..Lk.q1....O......)`-...<.f~}....k.h............s..w..g.B..Ex..,.ro9.wl.w~`...j\|4..dZ..ca}!.0{...W..E....-@.o....../oiv5....9...V+.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20968)
Category:	downloaded
Size (bytes):	21018
Entropy (8bit):	4.374254271081485
Encrypted:	false
SSDEEP:	384:BIp0m4FZoeLVA4X6/jEsEhRE22yL7W8c6/Ea2EyEvnHE42GA5SSHw3dEnOEXyhmR:7nPhBK/Yzhm22yL7W8c68adxPE42GAnn
MD5:	9507D9BD19EF23CFA07CF7346001111B
SHA1:	E640C21A8C5A74B583826DF6EC7250FBF51CB557
SHA-256:	957A4209F18B1304BA4DBEFA8E9C430FE8CFF0374D7553ED5CF821DBBCB04659
SHA-512:	D84BDDAA8E00243E7700CACD131E975DDD77C06963B5653C10A3CDCEFB29B7F66F610742BDB894C312AE4096865820DB120DA8CE7E2739DD820E26E248B5E314
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",defaultMessage:"Account number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ACCOUNT_NUMBER_INFO_TEXT",defaultMessage:"Your Account number is the second set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"109px",height:"61px",viewBox:"0 0 109 61",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-54",className:"jsx-1363339181",children:[(0,t.jsxs)("g",{id:"Group-8",className:"jsx-1363339181",children:[(0,t.jsx)("g",{id:"Group-9",transform:"tran

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15186)
Category:	downloaded
Size (bytes):	987486
Entropy (8bit):	5.346055021504652
Encrypted:	false
SSDEEP:	24576:l8m1flMMdV0iZzzIjndFvMpJn+qr2aoWY:l8m1flMMdV0iZzzIjMp8qr2aoWY
MD5:	2E48533A664771C1EFCE32E60F785F54
SHA1:	C1107DD148C22C4FB2FCACA1A26869178D865283
SHA-256:	936E80B9EFBBEF8A2C1A30DC5756AF2701DDBA3B3125761AD7482E5D1D9696BF
SHA-512:	486543B31D9EF71C3DB08D23C7ED13A45EFE4538A8E0E331056AFF7F6B97956F3E9D3F23E0162A9391CA94AF25DCCC72888912360D7E50392BA3D1C72BA1EB31
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/stylesheet.atoms_molecules_globals.css
Preview:	:root{--fontColor:#0077c5;--fontColorMobile:#fff;--fontSize03:1rem;--textAlign:center}.CustomPhone_phoneLink__e448855f{color:#0077c5;color:var(--fontColor)}.CustomPhone_phoneSpace__e448855f{white-space:nowrap}@media screen and (max-width:1023px){.CustomPhone_phoneLink__e448855f{text-align:center;text-align:var(--textAlign);font-size:1rem;font-size:var(--fontSize03);color:#fff;color:var(--fontColorMobile)}}.:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.FittedHeading_fittedHeadingContainer__8b95135f{display:-webkit-box;display:-ms-flexbox;display:flex}.FittedHeading_fittedHeadingContainer_TextCenterAligned__8b95135f{display:inline-block;text-align:center}@media (min-width:64rem){.FittedHeading_fittedHeadingContainer_TextCenterAligned__8b95135f .FittedHeading_fittedHeading__8b95135f{margin-left:0}}.FittedHeading_fittedHeading__8b95135f{margin:0;padding:0;font-size:6rem;font-size:var(--font-size-13);line-height:var(--font-lineheight-13);font-family:AvenirNext forINTUIT,Avenir,H

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2856
Entropy (8bit):	5.113954396136143
Encrypted:	false
SSDEEP:	24:89KFiRis0/h3iDRiDsMHAiUipR/Hl3imirbzQiHiia/193ivi6N4Qiai3N1/F3ii:cKX/5v/uq/d5/If7gOtrJaBdt
MD5:	AAB51F638293A57E4B232FE54E23088B
SHA1:	180278A2C773E925A3B30CF235161AEE11C07113
SHA-256:	FD781ACE64C49880AB33D8939669BD2628E0718B20BA7010D941C801A12838B0
SHA-512:	44D7FDFC7E887BD19128C6AC26A751D96F20D7737AA6C910F99A8CBD3301D1EA822CA7BF56807561EEA51927AE3328601D4A01B7AFEFD3A240A20BCC595DF034
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/styles/sbseg/fonts.css
Preview:	@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 400;.font-style: normal;.font-display: swap;.src: local('Avenir Next Regular'), local('AvenirNext-Regular'),. url('../../fonts/avenir-400.woff2') format('woff2'), url('../../fonts/avenir-400.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 400;.font-style: italic;.font-display: swap;.src: local('Avenir Next Regular Italic'), local('AvenirNext-Regular-Italic'),. url('../../fonts/avenir-400-it.woff2') format('woff2'), url('../../fonts/avenir-400-it.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 500;.font-style: normal;.font-display: swap;.src: local('Avenir Next Medium'), local('AvenirNext-Medium'),. url('../../fonts/avenir-500.woff2') format('woff2'), url('../../fonts/avenir-500.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 500;.font-style: italic;.font-display: swap;.src: local('Avenir Next M

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (809), with no line terminators
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	4.891599058473651
Encrypted:	false
SSDEEP:	24:yR7oIMY+Tm39mWcLIMY+TmdT9mWccSI2WMQu:w7oDY4mtmW6DY4mdhmWdSAY
MD5:	C017188F78B01D552BF5CF1890C9566B
SHA1:	CA06497D43D8967193F0A9BB77F723E82481D885
SHA-256:	573694D6E34813165228481361D66B523BC47AA231F0E4C3FC08EB2A6D673642
SHA-512:	073E23C3FA58D9EEB996BF8ECDBCBF977AD4CB5A9AFAC8C3217832DF4E44843CAE9D5D2C68B5A95CFE42B3190AB6F8CEDA2F63EBAA599DD86B1D0487278613D4
Malicious:	false
Reputation:	low
URL:	https://customersurveys.intuit.com/jfe/static/dist/c/slide.c017188f78b01d552bf5.js
Preview:	webpackJsonp([30],{311:function(t,e,i){var s,n;s=[i(4),i(0),i(1),i(118)],void 0!==(n=function(t,e,i,s){"use strict";return e.Class.declare({$name:"SlideTransition",$extends:s,enter:function(){var e=this._enter.offset().left-this._exit.offset().left,i=this.getSafeWidth();return t.all([this._exit.css({position:"relative"}).animate({left:"-"+i+"px"}).promise(),this._enter.css({position:"relative"}).animate({left:-1e+"px"}).promise()])},reverse:function(){var e=this._enter.offset().left-this._exit.offset().left,i=this.getSafeWidth();return t.all([this._exit.css({position:"relative"}).animate({left:i+"px"}).promise(),this._enter.css({position:"relative"}).animate({left:-1e+"px"}).promise()])},cleanup:function(){this._enter.attr("style",""),this._exit.attr("style","")}})}.apply(e,s))&&(t.exports=n)}});

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29257)
Category:	downloaded
Size (bytes):	747327
Entropy (8bit):	5.180816780785392
Encrypted:	false
SSDEEP:	12288:/Zo7Rvf+/LE0SHmXTfoBjSs8zxNffPZn2urpaqmTVymTD6+P/ZKLqzDyQWi:4vf+/LE0SHSoBjSs8zxNHrMqmTVymTFf
MD5:	46E7D7B5B02CB3240ADAC7489B800652
SHA1:	0339AA094D8F94ECADFA495D235F1F8CC33E76DB
SHA-256:	D076CD6638CD2D143725A805AA2B31C1172BE26C566F942EE3A15308DD7BA973
SHA-512:	BC4DA5736EB830DCF2B95CB7A30A660D98AA0EE799A507AB2536F773CBBC837A37191DDF0913D195E60A205502A9CA649E7029CA99C64438B65776D15D0C6D6C
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect
Preview:	<!DOCTYPE html><html lang="en" data-locale="en_US"><head domainPrefix="https://static.quickbooks.com"><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/qbmds-components/styles/sbseg/fonts.css" as="style"/><link rel="preconnect" href="https://static.quickbooks.com"/><link rel="preload" href="https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/payments-product-explainer-brand-video23-still-en-us-desktop-620x620-2x.jpg" as="image" media="(min-width: 1024px)" fetchpriority="high"/><style data-styled="" data-styled-version="5.3.10"></style><script async="" type="text/javascript">function getCookieVal(e){try{return document.cookie.toString().match(e+"=[^;]*;?")[0].split("=")[1].replace(";","")}catch(e){"function"==typeof csLog&&csLog("error","Page Url is: "+window.location.href+";Error: "+e)}}window.mktg_datalayer\|\|(window.mktg_datalayer={}),window.mktg_datalayer.properties={market:"us",page_geography:"us",org

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20800)
Category:	downloaded
Size (bytes):	271336
Entropy (8bit):	5.551633592713257
Encrypted:	false
SSDEEP:	3072:aTtXavJY1VVZLJL5hfoL0KmcpPCCYCW/e1CzW7VVDzHBmIvaDc:aZ1VV9JLnR0DzHBmIva4
MD5:	365122BE47C2F693CC00635DB5694B20
SHA1:	8126075407D6175E7AD28D3645FA64BE57DECA76
SHA-256:	B53AF8A81A76C5207B547ECD3C0204537697736604D6864FB7F788BD0E86DF71
SHA-512:	BA83433E79EC33F4AB02E2F2B537FCA90F876C672FD023DD661DC18C91ECDE04B43F7076DBB8FB747C7FB972338973D0433EF1A8854BB02831518367209B1EF7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1051519679
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":22,"vtp_instanceDestinationId":"AW-1051519679","tag_id":119},{"function":"__ogt_cps","priority":12,"vtp_cpsMode":"ALL","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":""

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2166
Entropy (8bit):	5.0425357458672515
Encrypted:	false
SSDEEP:	48:Yy/zUVvu7Ojy68cOvJ6pYHdKqHf5TadbS9KddmLOayiHYQmY7YFBbayZa5:dzp7OjTZeheQqQPHE6kBzy
MD5:	C71029D7CAD3B0F0EA0213EFC1363143
SHA1:	1060DEC42E558796F8BB3FDA97F78F2849EBA667
SHA-256:	ACEDEDD3FCC8D2B9F5D014A6E755792D55AACBCC4914A2AA74F274E6F2B92920
SHA-512:	17FD0E6636F6FE3998738A7DD1ED376BD835F6B73813426D9FF3B1BA77DCCC9BC5C4A48EA1CCE14BCEFD42C969B7248A681DB259B415751AF9EE80C4A7FE00DC
Malicious:	false
Reputation:	low
Preview:	{"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":false,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"preferAnonymousIdForDeviceId":false,"saveParamsReferrerOncePerSession":true,"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackGclid":false,"trackNamedPages":true,"trackProductsOnce":false,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"traitsToIncrement":[],"traitsToSetOnce":[],"unsetParamsReferrerOnNewSession":false,"useAdvertisingIdForDeviceId":false,"useCustomAmplitudeProperties":false,"useLogRevenueV2":true,"versionName":"","versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"unbundled"},"Repeater":{"vers

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1310
Entropy (8bit):	5.34821857415734
Encrypted:	false
SSDEEP:	12:3YwuOrbevXXOajELYwwHVvjU321Kd5ck1ToEL7Ri71XaVyksYpbQyb8WAEd0+DhR:3YwuOrceRtIoGE51Hw71Yb4EbUWemEC
MD5:	5FD6C81E2D45BD71EF47570F15EB622A
SHA1:	474672BAF3BF959B770A21ED2AD0FD6C3EAC424C
SHA-256:	C0F777284D7D75A641591D10D3CD99457F19F816FB3C6E2E6AB295F3EDA52E99
SHA-512:	5BF4DA717F0C50FAC0C6690F9FE176719DB74FF7A923F2B25FA52D197D71A880A8B008EB64AB4DAA8E8400FB338B1C1ED1D59DB44B3627D88F7F5194D6AC6023
Malicious:	false
Reputation:	low
Preview:	<html>. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1" />. <title>404 - page not found</title>. <link href="/css/app.css?v=1" rel="stylesheet">. <link href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">. <script src="//code.jquery.com/jquery-3.2.1.min.js" integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>. <script src="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>. <meta name="norton-safeweb-site-verification" content="vo5jo2vr2es9toa19icr3h7q2hi6r6wqxg2e2qy7s06inecm48l-xszjfgzrt97-wwnlobyo8751zji5y68-iv6m14v35a8xr0is-usi88c7u6tn57czk90oepmrfgw1" />. </head>. <body>. <nav class="navb

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60204)
Category:	downloaded
Size (bytes):	60254
Entropy (8bit):	5.572263534928265
Encrypted:	false
SSDEEP:	768:LFEMD3mg4VDbMSH+j08VW2etrnAszTW6XebTHlZRTgApg8C/oo2vW:mMDWg4VDl8Nwi6s9Xa8C/oHe
MD5:	AADF50B1A44DEB0F096DBFDC9A9743AD
SHA1:	54A310868BAF2ABC3D8149B58923CD8E84242882
SHA-256:	D1576ABEFEBB76061A6238FB70E141DF8BE499A1ED63FD3E51EE716FD12B3243
SHA-512:	BD654D778AFB7226B5F4CB09B19D8273426AF9DFD392EBD3FBE9E05F0FB961892F37603484999F79BC846D57B842FD4A64CECCDB84134B2C271FDB50BAA900EA
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3883-6f87e03a1b65d28c.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3883],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function y(e){for(var t=1;t<arguments.length;t++){var s=null!=arguments[t]?arguments[t]:{};t%2?x(Object(s),!0).forEach((function(t){(0,o.Z)(e,t,s[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(s)):x(Object(s)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(s,t))}))}return e}t.Z=e=>{const t=(0,r.Z)(),{withTOS:s=!0,separator:o="\xa0"}=e,{privacyUrl:a,tosUrl:x}=(0,d.getLegalLinks)(t.locale),_={activity_type:"optional_actions",ui_object:"link",ui_action:"clicked",ui_access_point:"tra

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35236, version 2.19660
Category:	downloaded
Size (bytes):	35236
Entropy (8bit):	7.9948931922381945
Encrypted:	true
SSDEEP:	768:Tm1hlQRCJ8WHFEHdwAxpm8C7sOoFyqCazhQdlEsFOsZHwL/kCrU:+hlXJ8WHSH6Axpm8C7sOoFy/lzFLQACY
MD5:	4451062C2D96D0EB928E7A55A7C7DA34
SHA1:	14F55C3E48227598F5BE2EA14AEA1FB8056DBA9D
SHA-256:	063208866C888AD85F806C644A7944C729A9E81693AD1BC7979EB752D97442BC
SHA-512:	8722936631BF4A0926C8C28A0D8379CA11600A94D38946896D168FAFCA0FA3E2F15B412133E1B8121AF1A498AC617607FB2FB1E8308B44B2B4BFEAD4963F39E6
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2
Preview:	wOF2...................A..L........................l....`..`.....d..P...@..V.6.$..(..,.. ..K. ../[.sq.O6z.@.m3.b..7prK..=.L Fo....m3B;....Y.f...OP2n.q[......%#jL..>1.qjE)zMw.3(......`.2}7......{..C.j.....T..?0.t..]f.w..Y.....1... ..`.C,..o%p...n......p>....m.[.."5c9v..g...'q...^...1..R..".l9....w..;."M~.<.....a.U.\......d..n.4..%E.i.6v1....mRM.."..........l..1a.....J.9..c.cR.. B".. .(%k).B.].!.._.gT....c....$...?'..Tm].+.](.^.._.N..&Z.........kz.L....SB.....]...Q.A#....F.V.q.A......=6.^..!@KE.Ofr.s..!.,)..E%......1..\w[.z.....E;.m.TrM.g.X..7.........O..+f..vfB.%..6ms.k.....Q.Z....i.H.....+...i.,h.L...=iq..N..{[.]~...Ut.@p...P...9.....#.#...0..ox..?.......~.PT...`...'.i"WZ....^..l.E~....a....7......bp.Q......,.Q.......ZY-.....;.."e..E..V...O...:?;:o#.`...... .w/.....&%.....7.^0.o..h..=.0.....N.^0..5Db.x....../Tl.........[..H`,~..&.@.Z..........-&....PX2..+..........I..7...<.q.?K...z....H$./......N...!.=...kR...-...#&.q.$.....L?Sbwe.I

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21309), with no line terminators
Category:	downloaded
Size (bytes):	21309
Entropy (8bit):	5.217375743716074
Encrypted:	false
SSDEEP:	192:Xvnaz/vJo2YNohFYYaLdzouFzFTXpeJcA6pHWSLmfS9N05vx3Ow:KXIozYY2qu/DpYctpH7Kv5
MD5:	F32A4AC64A77AFCE09594759542661CA
SHA1:	B098245D1826460E20C876403940F0C5B15C3A86
SHA-256:	C391A894A16C3BE69829A0BA00B258EA4D2186C1CC3E8025D352EDC857422233
SHA-512:	E1A98B6CDA076D6A59ECA10D23113B45E78C45C1BFE3ACAB6807E0F0717A99BAE02F23CA1D335B50FD617C962369C3A38ED9E4ECB58C73D2F4924729F78C0E2F
Malicious:	false
Reputation:	low
URL:	https://quickbooks.intuit.com/qbmds-components/releases/6180/styles/quickbooks/mds/rw-text-grid.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-06:#3bd85e;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-green-qrc:#009633;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--co

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105530
Entropy (8bit):	5.175252934314328
Encrypted:	false
SSDEEP:	768:MLMeCBCBkYC/MFRo43esRdLyWQL9XOYOLBOODYdTeR2CjRBKF2FTm7Y/LTfFlIsc:0CBNP/E1QY2TnCjRBKFgTmytF634p2
MD5:	F39BAA3E77CA645A1CA554B5C7FEEF30
SHA1:	EC7B2DF5E7B7B6B707FB387818658562B5F991C1
SHA-256:	B127ABF66FF982972155287A7B270E7BA39032C207E98FDCC348439CC1EE5CEC
SHA-512:	930577209CA18D25566C2CE7C6C1C663F33C60A5D263BE4D0801C1A5CD082EFB604CEC0A8916319C1BEBBF7C9D4D27857ECB93D7F275A46A0DB15723AD77727D
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75858
Entropy (8bit):	5.3482850912409114
Encrypted:	false
SSDEEP:	768:GtYBkJX7gbQzg6BVcevBgt3yLnsoCtAbWiDsBdERRHIDF4ee5XdBXtGVujNHBs5b:GSINhvcm7dxzvHbK0aB62X1
MD5:	650F21AC4FD9546E505724ABE1DB85E7
SHA1:	9882E3FAE26B0015E7A83A84D2B1808830B0BA22
SHA-256:	21CCAA43F628E9DC521F0E75E6DB23AFC7B63E9A9403D1E610AFE676C02BC0E1
SHA-512:	86E34BA42A67B3002FCF87A22921B6934787169F67DF65334B5DC330A442D0686C1158C69785F84E0C802D9C083018767304FC96074541BDC2A22752C6DB452B
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var t=this,n=arguments;return new Promise((function(o,a){var i=e.apply(t,n);function s(e){r(i,o,a,s,l,"next",e)}function l(e){r(i,o,a,s,l,"throw",e)}s(void 0)}))}}},6495:function(e,t){"use strict";function r(){return r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.Z=function(){return r.apply(this,arguments)}},92648:function(e,t){"use strict";t.Z=function(e){return e&&e.__esModule?e:{default:e}}},91598:function(e,t){"use strict";function r(e){if("function"!==typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;return(r=function(e){return e?n:t})(e)}t.Z=function(e,t){if(!t&&e&&e.__esModule)return

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (923)
Category:	downloaded
Size (bytes):	973
Entropy (8bit):	5.282462750881302
Encrypted:	false
SSDEEP:	24:ibjBq+sN000pmeIfFkVIFGpZFlNBWnaAZszLmLW:ib1q+h0reIyVDJNBWnC
MD5:	6B64452B69B814FA56DB74365D21D6FE
SHA1:	47126888E8C7DF6596378B1AD65C0DD9F6630CA3
SHA-256:	2E38066FB7FB959C9506D28E33B301C82C09923505E42C6F02E0296067CB77C7
SHA-512:	18642DFF4E6C06F2E5104EDC1E6D2FBBAEEF7D0596DB4E0CE41B90F674E1D0E97C96A1A8C4F46F6237003FD58C8BC94C30BA7055ED2E189B90ED8D57E567D586
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:c,height:e,viewBox:"0 0 24 24",className:t,"aria-label":"Download",children:(0,s.jsx)("path",{fill:h,fillRule:"evenodd","aria-label":"Download path",d:"M20 11c.553 0 1 .448 1 1v6c0 1.654-1.346 3-3 3H6c-1.654 0-3-1.346-3-3v-6c0-.552.447-1 1-1 .553 0 1 .448 1 1v6c0 .55.448 1 1 1h12c.552 0 1-.45 1-1v-6c0-.552.447-1 1-1zm-8-8c.553 0 1 .448 1 1v9.586l2.293-2.293c.391-.391 1.023-.391 1.414 0 .391.39.391 1.023 0 1.414l-3.999 3.999c-.093.093-.203.166-.326.217-.122.051-.252.077-.382.077s-.26-.026-.382-.077c-.123-.051-.233-.124-.326-.217l-3.999-3.999c-.391-.391-.391-1.023 0-1.414s1.023-.391 1.414 0L11 13.586V4c0-.552.447-1 1-1z"})})}}}]);.//# sourceMappingURL=9835.59c20536643b9726.js.map

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.381328385912462
Encrypted:	false
SSDEEP:	3:cb9fzRx3G/MRUe92Ab:cbtzRx3G0Ce9b
MD5:	61497F122EEC4729B631DCA3A64A30D3
SHA1:	D53005B1B66E6D7CDB2FDEB6430E95FDB557AE6E
SHA-256:	27D990658E439B5D045D493CB07C8364FA0CB0A1743DCB6DF3C18AA7617E03E4
SHA-512:	789D5F148C1FE3ED617ADE974E83840424508FC27D188F751C91D137B2C3884D1A91D8A43DE28518B8C19E87EB48A554E55F8EFC6000F224642997A76C1F116B
Malicious:	false
Reputation:	low
Preview:	<pre>404. The requested URL was not found.</pre>

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.089332633683316
Encrypted:	false
SSDEEP:	3:9wWHW9Rc/q1sKMvW0oTSB1G0mRGSFq1sKMvW0oTSh:9lHW94AsrNmRfAsrT
MD5:	8E60D6E0A0AE77728E80B9676EB674AC
SHA1:	B23D753C05D292599C72E19C9262CE3B5CD29461
SHA-256:	9FE8C162980888503DA8A353F2A9CDFED3E8DA30E0552655BAB69BA399061F7B
SHA-512:	03C4F4E262B20299E6ACE5F0D5828D1802EB4C8AFBCA1A432076CCFDF708EA165499B76DA751652AA9D5EE59C371F0F0E2B9085C9195DB75E3CFFC65E9CE41AE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAmiq1abFJ8jqBIFDSDZxvcSBQ2dRqL_EgUNfCO4ExIFDf6I6ScSBQ2bXN-0EhcJltjMqyUbQaQSBQ0g2cb3EgUNnUai_xIeCcYDwB1fyM04EgUNfCO4ExIFDf6I6ScSBQ2bXN-0?alt=proto
Preview:	CjUKBw0g2cb3GgAKBw2dRqL/GgAKCw18I7gTGgQIBxgBCgsN/ojpJxoECAkYAQoHDZtc37QaAAoSCgcNINnG9xoACgcNnUai/xoACiMKCw18I7gTGgQIBxgBCgsN/ojpJxoECAkYAQoHDZtc37QaAA==

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2785
Entropy (8bit):	7.881347552761523
Encrypted:	false
SSDEEP:	48:6QiI7K89vE9Zqcrv8hp35diA2vo1pho1bUDsLObujVC/een+32nsxaK5DDBzUMDO:6QrK8jXfJd12Q1bNc1jE/e++32cfBoCO
MD5:	7DBE4596B420FF7FDAC169A69E4BBFC9
SHA1:	BE34FF3E7F9DC756178AE0D2A5DA1A34EE559A0E
SHA-256:	F0BE198819B5B8CF7819BB3A89C908AB8648B1196E8EB48418A6746D653A8031
SHA-512:	26B21EE302A25FEACAA6E90D6751407A8F0C2DE0B4CFD70A0AEAB5CB6DFD3F550FF9FE8AC566CD065BA48A87B6A44F54FC1ED29A92E932CDCB1D88408A5C93C3
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/favicon.png
Preview:	.PNG........IHDR..............>a.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Oh.W..Y.J..-.!.........7..K...R.......`.F.`.5..<....b..Z.....=X.j[...-E..4E..K.o\|#.uv...{o..~0lH&;3..}....8..@H/.4>...[..Gw..*...C..`.....]......J...?.g..d..`..!.,.t..f.F..a.$a.(.....B.Q."....gd(...i..;r......-dp-..@....X.S..55np..:..a..mN2P`.iY.K.O7.\... .7......o.......1..H......>...dD(...L.9..6..,.r.0.H......A9Q.......(..../..$......?..l...[...GynO...zU...B...C..$C)YB....U(...3uI....&.K.O7.\.~.I....M..i`.......E2....T..O.1ny.#...aJ.b._]..9-.?.>.&9..%......Qk..M.-.f.LA..E......6I#.......+..s..Ig..MS3.uaW..(..I.>...,]......."..U...i..dq.D...J..<......>.......{l.....G.d..q.9...(.\|V.4.p.2@cj.:x.&.....C...2......[..........TX...A.R.P.w.h....Zg....j....e......yK.}.....\.....'.......w..un?....u....q.%.x!.........w6.c.....y.S7............;......rA...,@Ng.[...E2..Tl..u<3Ut..1.Y.M.6;.01..].2._p.m.(.... .D.).}...`0. ..../..zGZ._....9..;:H j........~........5..!.(3.xH<....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (843)
Category:	downloaded
Size (bytes):	893
Entropy (8bit):	5.499210727408988
Encrypted:	false
SSDEEP:	24:ibjxaR7Fm0HRdZn2h0MJH6hVfntX3LIfntX15026vHZkpNp8:ibNaRo0HRL2SjVfnZbIfnZs26vHmp8
MD5:	01E9EFB3E7FB6632E90114510F269816
SHA1:	6DE3892E526A207C1D2B79705F6666E3DB44387B
SHA-256:	63A237E8B647E0FEE91212BE2A16D0B24D7277B2563C047F9F4FA1A1E8AC56E6
SHA-512:	97FBEA941DDED6FF1FEF2B288946643AB82A6E2054295B055EA411F3FFC030AC49E143C026EE54356215FB14793229DED1EBFF25CB5661C539AF97F2CB74306A
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/4299.ddfe61a9bd4e8832.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4299],{64299:function(e,r,t){t.r(r);t(67294);var s=t(85893);r.default=e=>{let{width:r=19,height:t=20,color:n="#000000","aria-label":i}=e;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:r,height:t,viewBox:"0 0 19 20","aria-label":i,children:(0,s.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(-3 -2)",children:[(0,s.jsx)("path",{d:"M0 0h24v24H0z"}),(0,s.jsx)("circle",{cx:"12",cy:"11",r:"3",stroke:n,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2"}),(0,s.jsx)("path",{stroke:n,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",d:"M19.897 9.088c.796 3.844-1.7 7.614-5.727 8.65l-2.133 3.27-2.133-3.27c-3.813-.97-6.3-4.406-5.852-8.088.448-3.68 3.695-6.504 7.644-6.645 3.948-.14 7.415 2.444 8.159 6.083h.042z"})]})})}}}]);.//# sourceMappingURL=4299.ddfe61a9bd4e8832.js.map

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17402)
Category:	downloaded
Size (bytes):	17452
Entropy (8bit):	5.288572550577447
Encrypted:	false
SSDEEP:	384:lI5d0SoJwVdmL4/AtSlaKexJqgD2Uzbq7lRcHIt9SqmJULBu2X/v5vG:lwd0SDVdmE/ISlaKexJjzboR82SqmJ8m
MD5:	4F08D7DE67096486A0E610ED486FF262
SHA1:	3DD27DF3939B394B1498747EFD40220E0758C8DC
SHA-256:	996B9F613E0432A4717BD7F4375B266577099162F9F0F8D20F7893032AC84ED6
SHA-512:	C917BC6D306064791BBA31B8BD5B71A4E1B75D28548C26F2720A22D58DB4C32FF8A98706F4B958561C285CB2A8E7C7D68CCAF6AB58190C8EC7C100A7235CAC6E
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-453b7f7fce0f2075.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return J},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((function(t){t.addEventProcessor((function(t){return new Promise((function(n){return t.environment=e.config.env,n(t)}))}))})),o.v("config",{ssrtid:e.config.ssrtid,originatingIp:e.config.originatingIp}),e.sale)o.v("sale",{amount:e.sale.amount,type:e.sale.type,txnDate:e.sale.txnDate,currency:null===(t=e.sale.currencyInfo)\|\|void 0===t?void 0:t.currency,id:e.sale.id,referenceNumber:e.sale.referenceNumber,recipientEmail:e.auth.recipientEmail});if(e.companyInfo)o.v("companyInfo",{companyName:e.companyInfo.companyName,language:e.companyInfo.language,region:e.companyInfo.region,primaryEmail:null===(n=e.companyInfo.contactMethods)\|\|void 0===n\|\|null===(a=n[0])\|\|void 0===a\|\|null===(i=a.primaryEmail)\|\|void 0===i?void 0:i.emailAddress});e.payment&&o.v(

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21126)
Category:	downloaded
Size (bytes):	21176
Entropy (8bit):	5.349623887478872
Encrypted:	false
SSDEEP:	192:Cg314HXGePkWQJuMTI5GlgUvndhhLx9K3qS7WMtfi7dJ4vsjnvzls2gd4POs2WkM:/rqwQZGHvz9K3lfiS2eULaL4
MD5:	2BE60E17E19974BB24152DD84E196D68
SHA1:	AFC3838B0EF8EF9DEC43A0FCBC50F6EC22CAAEF0
SHA-256:	799FC533D3781281160FCF3C0F4E898AB4D038B243FE4005BE58FE3E15C7D25F
SHA-512:	8020FD25B0F2A91435C4F72B0F423F391079DFA74A104FDE88084854D8146163B3F65187A1C9D80E4860FB40551E0FE4D9DD4D76CBF20FEA50DEB512BB0DEEA8
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5480-57779aea7089e098.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),l=t(67294),i=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(l.Fragment,{children:[(0,n.jsx)("div",{role:"dialog","data-testid":"test-modal-dialog",className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",i.breakpoints.sm]]])+" overlay",children:(0,n.jsx)("div",{className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",i.breakpoints.sm]]])+" modal",children:e})}),(0,n.jsx)(s(),{id:"2451540248",dynamic:[t?"unset":"rgba(0, 0, 0, 0.5)",i.breakpoints.sm],children:[`.overlay.__jsx-style-dynamic-selector{position:fixed;width:100%;height:100%;top:0;left:0;right:0;bottom:0;background-color:${t?"unset":"rgba(0, 0, 0, 0.5)"};z-index:2;}`,`@media screen and (max-width:${i.breakpoints.sm}){.overlay.__jsx-style-dynamic-selector{padding:12px 2px 32px;}}`,".overlay.__jsx-style-dynamic-selector .modal.__jsx-style-dyna

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 28, 2024 18:09:47.127743006 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.127780914 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.127846956 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.128663063 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.128690004 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.800982952 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.801270962 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.801305056 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.802382946 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.802449942 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.803349018 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.803428888 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.803530931 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.803545952 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.859055996 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.944546938 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.944569111 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.944643021 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.944650888 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.944689989 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.945710897 CEST	49699	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.945740938 CEST	443	49699	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.965604067 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.965672016 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.965764046 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.966022015 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:47.966038942 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:47.975064039 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975123882 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:47.975178957 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975187063 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:47.975251913 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975284100 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975486040 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975502014 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:47.975634098 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:47.975644112 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:47.975914001 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:47.975964069 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:47.976016045 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:47.976196051 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:47.976211071 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.443768978 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.444513083 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.444552898 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.445511103 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.445637941 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.446914911 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.447026014 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.447120905 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.447140932 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.447154045 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.447295904 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.447335005 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.448517084 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.448592901 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.449321032 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.449404955 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.449434996 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.464210033 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.475297928 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.475326061 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.476530075 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.476627111 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.479899883 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.479974985 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.480045080 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.480061054 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.492794037 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.495564938 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.495590925 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.500768900 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.500999928 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.501024961 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.501358032 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.501717091 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.501770020 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.501864910 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.501882076 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.523979902 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.540026903 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.544075012 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.557900906 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.557917118 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.557934046 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.558128119 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.558162928 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.558223963 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.598889112 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.598937988 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.598979950 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599004984 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599040985 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599069118 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599097013 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599142075 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.599142075 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.599142075 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.599173069 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599215984 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.599522114 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599571943 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.599605083 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.599611998 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.603528976 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.603611946 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.603631973 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623161077 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623219967 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623260021 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623281956 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623287916 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623308897 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623347998 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623373985 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623400927 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623451948 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623451948 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623451948 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623466969 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623599052 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623635054 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623639107 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623656034 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.623691082 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.623698950 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.635241985 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.635272980 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.635371923 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.635406017 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.635551929 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.637567997 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.637588978 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.637660980 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.637676954 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.637715101 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.645427942 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.645553112 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.645601988 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.646140099 CEST	49702	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.646162987 CEST	443	49702	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.651045084 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.667001009 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.667035103 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687719107 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687774897 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687802076 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687825918 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687827110 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.687844038 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.687891960 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.688050985 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.688091040 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.688093901 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.688101053 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.688147068 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.688154936 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.688163996 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.688206911 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.688211918 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689347982 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689378977 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689402103 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.689404964 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689415932 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689444065 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.689768076 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689815044 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689815044 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.689825058 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689867020 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.689872026 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689879894 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.689917088 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.689924002 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.714996099 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725121021 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725195885 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725220919 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725240946 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725249052 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725260019 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725301027 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725305080 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725317001 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725349903 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725352049 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725383997 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725392103 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725399971 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725425005 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725439072 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725446939 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725472927 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725501060 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725507975 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725545883 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725553036 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725600004 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.725636959 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.725833893 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.725893974 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.725897074 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.725919008 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.725960016 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.725985050 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.726044893 CEST	49704	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.726058006 CEST	443	49704	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.726319075 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726340055 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726372957 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.726382971 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726394892 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726406097 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.726429939 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.726437092 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726465940 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.726473093 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.726509094 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.729459047 CEST	49705	443	192.168.2.16	151.101.130.137
Jun 28, 2024 18:09:48.729479074 CEST	443	49705	151.101.130.137	192.168.2.16
Jun 28, 2024 18:09:48.730986118 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.730994940 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776418924 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776452065 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776527882 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776555061 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776554108 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.776582003 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776628017 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.776634932 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776643038 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776650906 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.776673079 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.776695967 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.776727915 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.777506113 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.777556896 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.777565002 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.777571917 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.777606010 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.777627945 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.777673006 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.777678967 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.777720928 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.778512955 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.778573990 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.778950930 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.779002905 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.779073954 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.779124022 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865092039 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865242004 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865358114 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865386963 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865418911 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865432024 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865444899 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865545034 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865590096 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865597010 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865641117 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865818024 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865849018 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865874052 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865880013 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.865906000 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.865923882 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866391897 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866425991 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866447926 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866453886 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866460085 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866488934 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866508007 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866512060 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866537094 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.866578102 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866683960 CEST	49703	443	192.168.2.16	104.18.11.207
Jun 28, 2024 18:09:48.866698027 CEST	443	49703	104.18.11.207	192.168.2.16
Jun 28, 2024 18:09:48.915395021 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.915452957 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:48.915577888 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.915798903 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:48.915815115 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.480874062 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.481138945 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.481169939 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.481523037 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.481900930 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.481982946 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.482105017 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.482139111 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.629889011 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.633344889 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.633425951 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.633618116 CEST	49706	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.633641958 CEST	443	49706	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.654498100 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.654542923 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.654642105 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.654871941 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.654886007 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.666564941 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.666605949 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.666680098 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.666866064 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.666873932 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.666917086 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.667187929 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.667206049 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:49.667399883 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:49.667412996 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.198791027 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.199249029 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.199275017 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.200366020 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.200474024 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.200745106 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.200818062 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.200891018 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.200901985 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.206197023 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.206532001 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.206554890 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.207812071 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.208185911 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.208376884 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.208429098 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.208496094 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.208686113 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.213330030 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.213532925 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.213552952 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.214665890 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.214943886 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.215115070 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.243985891 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.260080099 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.375755072 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.375852108 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:50.375931978 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.376821041 CEST	49708	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:50.376843929 CEST	443	49708	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:51.132783890 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:09:51.434994936 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:09:51.892021894 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:51.892071962 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:51.892141104 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:51.892522097 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:51.892534971 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.040992975 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:09:52.768830061 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.769243002 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:52.769275904 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.770140886 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.770226002 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:52.771230936 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:52.771290064 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.816054106 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:52.816087008 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:09:52.864052057 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:09:52.891524076 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:52.892273903 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:52.892410994 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:52.892977953 CEST	49709	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:09:52.893001080 CEST	443	49709	199.30.234.133	192.168.2.16
Jun 28, 2024 18:09:52.921752930 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:09:52.926871061 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:09:52.929289103 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:09:52.929542065 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:09:52.936816931 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:09:52.936913967 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:09:53.243113041 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:09:53.537354946 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:09:53.578067064 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:09:53.598052025 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:53.598103046 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:53.598196030 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:53.598406076 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:53.598421097 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:53.821516037 CEST	49689	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:09:54.476150990 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.476478100 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.476514101 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.476922989 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.477000952 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.477627993 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.477683067 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.478669882 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.478790998 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.478856087 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.478868961 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.521068096 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.655850887 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.655939102 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.656044006 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.658457994 CEST	49715	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.658483982 CEST	443	49715	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.659975052 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.660028934 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:54.660118103 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.660358906 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:54.660373926 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.288649082 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.289037943 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:55.289062023 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.289464951 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.289886951 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:55.289964914 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.290047884 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:55.336504936 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:55.653013945 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:09:56.221390009 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.221411943 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.221426010 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.221503019 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.221527100 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.221573114 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.223205090 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.223221064 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.223301888 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.223309040 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.223346949 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.270473003 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270523071 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.270589113 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270626068 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.270631075 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270684958 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270821095 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270840883 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.270962954 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.270975113 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.314023018 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.314048052 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.314153910 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.314183950 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.314228058 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.315711021 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.315731049 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.315798044 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.315809011 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.315843105 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.318334103 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.318741083 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.318774939 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.318837881 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.318934917 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.318949938 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.319014072 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.319020987 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.319158077 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.319199085 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.319257021 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.319472075 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.319498062 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.319525957 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.319525957 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.319538116 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.319549084 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.319561005 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.319601059 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.321501017 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.321511984 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.321580887 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.321717024 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.321738958 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.321976900 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.321990967 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.322443008 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.322455883 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.322614908 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.322624922 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.334883928 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.334920883 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.335005999 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.335639000 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.335654020 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.343405008 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:56.343444109 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:56.343528032 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:56.343704939 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:56.343718052 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:56.367043018 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.374875069 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.374912024 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.375010967 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.375174046 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.375180960 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.375231981 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.375370979 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.375382900 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.375508070 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.375516891 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.407052994 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.407083988 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.407215118 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.407243967 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.407293081 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.408700943 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.408785105 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.408786058 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.408829927 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.408921003 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.408938885 CEST	443	49718	52.43.112.129	192.168.2.16
Jun 28, 2024 18:09:56.408947945 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.408976078 CEST	49718	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:09:56.956655025 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.956954002 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.956984043 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.957988024 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.958066940 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.959013939 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.959073067 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.959305048 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.959311962 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.980384111 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.980643988 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.980673075 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.981663942 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.981734037 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.982006073 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.982065916 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:56.982139111 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:56.982148886 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.007000923 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.023977995 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.023999929 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.024298906 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.024316072 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.025424957 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.025491953 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.025820017 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.025878906 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.025966883 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.025974989 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.032192945 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.032391071 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.032409906 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.033412933 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.033479929 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.033718109 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.033780098 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.033818960 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.045444965 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.045659065 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.045677900 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.046262980 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.046433926 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.046442986 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.046698093 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.046763897 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047020912 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047091961 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.047130108 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047478914 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.047549963 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047785997 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047867060 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.047873020 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.047883987 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.054301023 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.054543018 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.054569960 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.055612087 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.055675983 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.055969954 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.056029081 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.056091070 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.056103945 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.069994926 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.070234060 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.070482016 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.070499897 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.071506023 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.071573019 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.071849108 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.071918011 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.072000027 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.072005987 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.080501080 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.085995913 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.086010933 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.086884975 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.087095976 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.087110043 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.088123083 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.088187933 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.088990927 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.089059114 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.089118958 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.089124918 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.092534065 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.100991964 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.100994110 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.101005077 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.101013899 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.101021051 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.117000103 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.122427940 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.122653961 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.122669935 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.123856068 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.123930931 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.124202967 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.124315023 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.124330044 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.124376059 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.133033991 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.133037090 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.149048090 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.149048090 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.165002108 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.165021896 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.203996897 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.213004112 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.213152885 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.213177919 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.213222027 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.213228941 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.213258028 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.213270903 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.213284969 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.213311911 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.238758087 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.240643024 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.240721941 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.241183043 CEST	49720	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.241200924 CEST	443	49720	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.241468906 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.241498947 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.241556883 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.242019892 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.242036104 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.290483952 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.292680025 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.292776108 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.292799950 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.292831898 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.292848110 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.292877913 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.292958975 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.292969942 CEST	443	49722	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.292979002 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.293013096 CEST	49722	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.298528910 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.298554897 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.298563004 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.298621893 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.298650980 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299123049 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.299161911 CEST	443	49725	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299211979 CEST	49725	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.299463987 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299475908 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299496889 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299505949 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299514055 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299523115 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.299563885 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299578905 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.299585104 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.299609900 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.303910971 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.304085970 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.304132938 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.304476023 CEST	49721	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.304490089 CEST	443	49721	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.307774067 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:57.307807922 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:57.307872057 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:57.308111906 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:57.308123112 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:57.321152925 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.322455883 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.322545052 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.322597980 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.322947979 CEST	49723	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.322962999 CEST	443	49723	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.324333906 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.324373960 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.324469090 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.324685097 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.324698925 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.329804897 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.329817057 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.329845905 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.329889059 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.329914093 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.329946041 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.329997063 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.331947088 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332027912 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.332556963 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332580090 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332587957 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332619905 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332645893 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.332659006 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332669020 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.332679987 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.332699060 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.339998960 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383002043 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383014917 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383045912 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383059978 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383089066 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383115053 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383128881 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383137941 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383157015 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383162975 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383194923 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383212090 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.383245945 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383536100 CEST	49730	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.383547068 CEST	443	49730	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.385684013 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.385730982 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.385797024 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.386007071 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.386017084 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390105963 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390129089 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390136957 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390171051 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390187025 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390197992 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.390202999 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390223026 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.390239954 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.390263081 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.413813114 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.413881063 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.413935900 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.413969994 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.413995028 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.414012909 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.420819998 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.420864105 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.420900106 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.420921087 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.420958042 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.420958996 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.420978069 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.420984983 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.421005011 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421091080 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.421125889 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421144009 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.421200991 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.421211004 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421236038 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.421252966 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421267986 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421838045 CEST	49726	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.421852112 CEST	443	49726	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.425482035 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.425515890 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.425575018 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.425769091 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.425784111 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.426093102 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:57.426119089 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:57.426166058 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:57.428014040 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:57.428026915 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:57.475121021 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.475143909 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.475235939 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.475265026 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.475308895 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.475980997 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.476037025 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.476044893 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.476059914 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.476084948 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.476114988 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.476176977 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.476191044 CEST	443	49729	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.476224899 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.476239920 CEST	49729	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.478892088 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.478934050 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.479001999 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.479207993 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.479217052 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.502760887 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.502788067 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.502872944 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.502906084 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.502948046 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.511296988 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511353970 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511421919 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.511437893 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511456013 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.511470079 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.511477947 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511509895 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511534929 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.511539936 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.511569023 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.528978109 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.529042006 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.529104948 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.529125929 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.529151917 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.529170990 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.600898027 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.600950956 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.601001024 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.601020098 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.601077080 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.601450920 CEST	49724	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.601471901 CEST	443	49724	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.604525089 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.604569912 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.604638100 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.604847908 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.604863882 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.941612959 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.952003002 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.952013969 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.952024937 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.952081919 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.952100992 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:57.952158928 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:57.988708973 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.989041090 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.989077091 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.992644072 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.992738962 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.993114948 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:57.993285894 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:57.993288040 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.027390957 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.027652025 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.027683973 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.028733969 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.028789997 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.029114008 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.029191017 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.029294014 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.029300928 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.035161972 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.035183907 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.035305023 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.035320044 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.035409927 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.040515900 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.041008949 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.041023016 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.041066885 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.041115999 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.041130066 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.041138887 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.041162968 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.057327986 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.057657003 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.057681084 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.058036089 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.058445930 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.058517933 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.058624029 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.072051048 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.086945057 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.087074995 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.088016987 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.089215040 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.090781927 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.090811014 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.091068029 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.100514889 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.107270956 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.107635021 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.107659101 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.112562895 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.112658024 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.112987041 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.113133907 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.113143921 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.113178968 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.123228073 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.123256922 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.123322964 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.123339891 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.123380899 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.124166965 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.124183893 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.124238968 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.124245882 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.124280930 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.126645088 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.126666069 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.126732111 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.126739025 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.126782894 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.128604889 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.131764889 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.131814003 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.131840944 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.131854057 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.131901026 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.132056952 CEST	49727	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.132071018 CEST	443	49727	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.139597893 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.139633894 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.139736891 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.139942884 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.139957905 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.148267984 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.148538113 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.148556948 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.149512053 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.149578094 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.149844885 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.149909973 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.149967909 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.168035984 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.168064117 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.176503897 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.196499109 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.200072050 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.200087070 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.206902981 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.207164049 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.207180023 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.208170891 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.208239079 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.208515882 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.208570004 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.208651066 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.208657026 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.216000080 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.248056889 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.259473085 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.263027906 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.268368959 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268399000 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268420935 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268462896 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268490076 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.268512011 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268518925 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.268532991 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.268548012 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.268551111 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.268608093 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.277208090 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.285881042 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.285892963 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.285909891 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.285999060 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.286024094 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.286079884 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.317368031 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.317641973 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.317655087 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.318653107 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.318730116 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.319020033 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.319083929 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.319152117 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.319158077 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.347239971 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.354279041 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.354310989 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.354353905 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.354387045 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.354401112 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.354439974 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.356074095 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.356089115 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.356139898 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.356148005 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.356198072 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.358429909 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.358481884 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.359042883 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.359091997 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.359114885 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.359123945 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.359148026 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.359183073 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.361881971 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.361944914 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.362004042 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.362128973 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.362152100 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.362163067 CEST	49736	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.362169027 CEST	443	49736	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.364274979 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.366750002 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.366817951 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.366817951 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.366854906 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.366996050 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.367017031 CEST	443	49732	18.239.83.87	192.168.2.16
Jun 28, 2024 18:09:58.367027998 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.367060900 CEST	49732	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:09:58.373004913 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.396917105 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.396969080 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.397048950 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.397316933 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:58.397330046 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:58.420118093 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.723078966 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723100901 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723136902 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723150015 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723162889 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723186016 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.723201036 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.723228931 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.723259926 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.723893881 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724349022 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724364042 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724411964 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724425077 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724446058 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724457979 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724500895 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724683046 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724695921 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724728107 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724742889 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724751949 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724771976 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724787951 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.724946022 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.724962950 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725007057 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725014925 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725039959 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725045919 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725071907 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725092888 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725100040 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725121975 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725135088 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725137949 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725178003 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725402117 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725699902 CEST	49731	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.725713968 CEST	443	49731	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.725960970 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726258039 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726267099 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726284981 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726291895 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726298094 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726316929 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.726325035 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726344109 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.726368904 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.726403952 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.728200912 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.728239059 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.728310108 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.728580952 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.728595972 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.728869915 CEST	49738	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.728889942 CEST	443	49738	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729110956 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729125023 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729145050 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729185104 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729199886 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.729238987 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.729245901 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729274035 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.729280949 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.729330063 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.730854988 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.730868101 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.730931044 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.730956078 CEST	49734	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.730963945 CEST	443	49734	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.731440067 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.731451035 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.733547926 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.733567953 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.733618975 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.733794928 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.733803988 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736176014 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736186028 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736215115 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736232042 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736242056 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736248016 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736264944 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736274958 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736287117 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736303091 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736330986 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736366034 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736536980 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736546040 CEST	443	49735	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.736568928 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.736593008 CEST	49735	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737104893 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737142086 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737163067 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737171888 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737190962 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737206936 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737485886 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737497091 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737514973 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737521887 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737524986 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737533092 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737551928 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.737564087 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.737593889 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.738078117 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.738132000 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.738141060 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.738178015 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739180088 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.739197016 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.739238024 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739248991 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.739265919 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739285946 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739442110 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739471912 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.739526987 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739963055 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.739978075 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.740439892 CEST	49737	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.740458012 CEST	443	49737	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.741355896 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.741372108 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.741404057 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.741434097 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.741446018 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.741473913 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.743635893 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.743670940 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.743726969 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.743923903 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.743935108 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.744223118 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.744245052 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.744282961 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.744297028 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.744316101 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.746428967 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.746443033 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.746505976 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.746521950 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.748285055 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.748313904 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.748352051 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.748363972 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.748382092 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.749172926 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.749186039 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.749236107 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.749247074 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.749897957 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.749916077 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.749972105 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.749983072 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.751810074 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.751822948 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.751877069 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.751888990 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.752211094 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.752228975 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.752263069 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.752271891 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.752283096 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.753254890 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753266096 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753319025 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.753329992 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753376007 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.753784895 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753799915 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753849983 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.753859043 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.753890038 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.754086018 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.754098892 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.754138947 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.754148006 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.754175901 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755196095 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755209923 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755270958 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755284071 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755321026 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755533934 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755548000 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755609035 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755615950 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755645037 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755816936 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755832911 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755871058 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.755881071 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.755928993 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757066011 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757081032 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757118940 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757132053 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757157087 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757169962 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757285118 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757298946 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757329941 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757339001 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.757359982 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.757375956 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.771433115 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.771447897 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.771519899 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.771536112 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.771564960 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.813908100 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.813936949 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814013958 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.814028025 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814068079 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.814181089 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814199924 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814229012 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814248085 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.814255953 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814275980 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.814677000 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814697027 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814729929 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.814738035 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.814760923 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815016985 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815031052 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815069914 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815078020 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815095901 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815366030 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815392971 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815416098 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815423012 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815445900 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815773964 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815788984 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815821886 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.815828085 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.815849066 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.820050001 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.820075989 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.820138931 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.820147038 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.863743067 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.863765955 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.863929987 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.863951921 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.890574932 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.890933037 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.890952110 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.891956091 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.892026901 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.892436028 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.892509937 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.892590046 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.892596960 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:58.906677008 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.906702995 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.906822920 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.906843901 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.907761097 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.907803059 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.907834053 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.907841921 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.907850981 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908149958 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908164978 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908199072 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908205986 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908230066 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908423901 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908438921 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908468962 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908476114 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908498049 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908901930 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908915997 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.908982038 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.908989906 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909337997 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909356117 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909399986 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.909406900 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909425020 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.909671068 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909683943 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909735918 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.909744024 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.909760952 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.913156033 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.913168907 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.913237095 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.913255930 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.947038889 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:58.956351042 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.956511974 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.956532001 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999547958 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999574900 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999694109 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:58.999716997 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999917030 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999932051 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:58.999974966 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000005960 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.000011921 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000057936 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.000406027 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000420094 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000469923 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.000478983 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000500917 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000519037 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000546932 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.000552893 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.000574112 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.001081944 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.001095057 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.001144886 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.001152039 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.001502991 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.001518965 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.001569033 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.001576900 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005613089 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005625010 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005738020 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.005759954 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005842924 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005856037 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005896091 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.005904913 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.005919933 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.005939960 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.049468994 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.049550056 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092041969 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092062950 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092209101 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092233896 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092276096 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092367887 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092384100 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092451096 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092458010 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092492104 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092668056 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092681885 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092727900 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092736959 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.092781067 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.092962980 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093008041 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093022108 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.093031883 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093067884 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.093106985 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093152046 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.093369007 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093381882 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093436003 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.093444109 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093862057 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093883038 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.093934059 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.093940973 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098386049 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098400116 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098515034 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.098525047 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098639965 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098654985 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098716021 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.098726034 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.098767996 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.172219992 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.172249079 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.172316074 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.172394991 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.172420979 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.173037052 CEST	49739	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.173057079 CEST	443	49739	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.184746027 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.184768915 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.184874058 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.184889078 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.184931993 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.185048103 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185064077 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185111046 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.185122013 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185153961 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.185503960 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185518980 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185560942 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.185570002 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.185600042 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.185898066 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.185946941 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.186032057 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186038971 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.186052084 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186083078 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186084986 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186095953 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186129093 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186142921 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186155081 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186170101 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186316013 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186362982 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186372995 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186391115 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186412096 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186709881 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186723948 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186764956 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186772108 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.186801910 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.186851978 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.186875105 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.190943956 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.190959930 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.191065073 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.191072941 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.194418907 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.194454908 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.194539070 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.194767952 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.194781065 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.234040022 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.234424114 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.234447956 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.234539032 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.234549046 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.234581947 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.277494907 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277515888 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277599096 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.277611017 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277647972 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.277770042 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277786016 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277832031 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.277838945 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.277875900 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.278028965 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278057098 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278101921 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.278109074 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278142929 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.278652906 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278692007 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278717995 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.278723001 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278740883 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.278754950 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.278783083 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.279413939 CEST	49733	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.279423952 CEST	443	49733	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.283164024 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.283191919 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.283266068 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.283766985 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.283778906 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.298834085 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:09:59.340775967 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:09:59.340802908 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:09:59.340866089 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:09:59.341078043 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:09:59.341085911 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:09:59.390666962 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.390803099 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.391992092 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.392019987 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.392290115 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.393405914 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.436502934 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.436574936 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.436898947 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.436922073 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.438004971 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.438083887 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.438383102 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.438443899 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.438536882 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.438544989 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.464679003 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.465006113 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.465035915 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.466110945 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.466181040 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.466506004 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.466568947 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.466698885 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.466706991 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473087072 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473270893 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473356962 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.473371983 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473473072 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.473480940 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473726034 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.473853111 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.474066973 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.474126101 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.474308968 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.474376917 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.474447966 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.474490881 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.482882023 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.483181953 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.483217001 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.484251976 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.484328032 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.484735012 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.484797001 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.484987974 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.484997988 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.488020897 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.516503096 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.516503096 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.520057917 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.536061049 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.600024939 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:09:59.686382055 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.694859982 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.694875956 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.694894075 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.694936991 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.694953918 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.695003986 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.708048105 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.708148956 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.708204031 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.710158110 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.710191011 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.710203886 CEST	49740	443	192.168.2.16	184.28.90.27
Jun 28, 2024 18:09:59.710211039 CEST	443	49740	184.28.90.27	192.168.2.16
Jun 28, 2024 18:09:59.724936962 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725004911 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725029945 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725054026 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725070953 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.725100994 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725114107 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.725120068 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725158930 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725176096 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.725183010 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725209951 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.725336075 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.725387096 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.726430893 CEST	49744	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.726444960 CEST	443	49744	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.734211922 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742151022 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742180109 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742197037 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742270947 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.742301941 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742347956 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.742571115 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742593050 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742635012 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.742646933 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.742692947 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.749473095 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749492884 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749501944 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749545097 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749574900 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749593019 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.749629021 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.749644041 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.749666929 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.751583099 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.751655102 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.751658916 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.751698971 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.768294096 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.768362045 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.768435955 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.769033909 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.769052029 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.775444031 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.775507927 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.775521994 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.775537014 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.775557995 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.775587082 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.777452946 CEST	49743	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.777482033 CEST	443	49743	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.778104067 CEST	49745	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.778134108 CEST	443	49745	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.799818039 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.799873114 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.799946070 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.800312042 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.800333023 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.803595066 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.803628922 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.803706884 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.803889036 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.803900003 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.830437899 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.830471039 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.830591917 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.830624104 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.830768108 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.834898949 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.834918022 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.835012913 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.835021019 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.835063934 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.840775967 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.840847969 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.840868950 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.840878963 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.840939999 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.844554901 CEST	49741	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.844568968 CEST	443	49741	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.922281981 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.922952890 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.922996044 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.923026085 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.923057079 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.923098087 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.923126936 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.923145056 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.923146009 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.923187971 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.923738003 CEST	49742	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.923753977 CEST	443	49742	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.924053907 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.924110889 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.925335884 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.925407887 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.925868034 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.925884962 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:09:59.927680016 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.930309057 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.930327892 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.930793047 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.931176901 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.931257010 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.931313992 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:09:59.935805082 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:09:59.935852051 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:09:59.935919046 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:09:59.941270113 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:09:59.941299915 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:09:59.966053963 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:09:59.972503901 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:09:59.988219976 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.988507986 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.988543034 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.989604950 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.989675999 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.990041018 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.990104914 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:09:59.990227938 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:09:59.990242958 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.043124914 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.043184996 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.043276072 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.043745041 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.043792009 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.043850899 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.043981075 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.043998957 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.044131041 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.044143915 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.044166088 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.051023960 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.051068068 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.051132917 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.051646948 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.051666021 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.052635908 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.052666903 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.052723885 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.053036928 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.053046942 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.187330008 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:10:00.187356949 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:10:00.187427044 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:10:00.187436104 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:10:00.187473059 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:10:00.188332081 CEST	49746	443	192.168.2.16	13.227.222.191
Jun 28, 2024 18:10:00.188357115 CEST	443	49746	13.227.222.191	192.168.2.16
Jun 28, 2024 18:10:00.203003883 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:10:00.204879999 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.204907894 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.204946041 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.204969883 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.204997063 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.205038071 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.206417084 CEST	49747	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.206439972 CEST	443	49747	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.210381985 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.210406065 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.210463047 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.210679054 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.210695028 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.237421036 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.237695932 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.237718105 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.239392996 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.239483118 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.240525961 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.240592003 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.240705967 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.240715981 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.254513979 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.254545927 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.254601002 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.254636049 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.254678011 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.254744053 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.254821062 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.254858971 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.255167961 CEST	49748	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.255191088 CEST	443	49748	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.283015966 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.369370937 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.369422913 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.369519949 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.369823933 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.369837046 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.457026005 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:10:00.479058027 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.479377031 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.479408979 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.479764938 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.480051041 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.480122089 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.480180979 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.515680075 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.515953064 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.515985966 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.516350031 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.516691923 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.516777039 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.516824961 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.524513960 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.525966883 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.526190042 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.526204109 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.527247906 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.527328014 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.527801991 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.527862072 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.527966022 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.527972937 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.529953003 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.530277014 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.530340910 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.530471087 CEST	49750	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:00.530488968 CEST	443	49750	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:00.564507008 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.568051100 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.568111897 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.568409920 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:00.568445921 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:00.568525076 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:00.568813086 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:00.568820953 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:00.650293112 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.650702000 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.650734901 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.651087999 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.651503086 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.651554108 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.651700020 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.651715994 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.665426016 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.665676117 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.665707111 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.665725946 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.665868044 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.665883064 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666069031 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666225910 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666286945 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.666342974 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.666394949 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666683912 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.666702032 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.666704893 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666934967 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.666992903 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.667057037 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.667171001 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.667227983 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.667377949 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.667398930 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.667567015 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.667587042 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.667608023 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.668045998 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.668106079 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.668992996 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.669044018 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.669173956 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.669285059 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.669321060 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.669337988 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.669346094 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.712033987 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.712033987 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:00.712508917 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.712527990 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:00.764172077 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.764245987 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.764297009 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.764867067 CEST	49751	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.764899015 CEST	443	49751	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.768771887 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:00.768842936 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:00.771632910 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:00.771645069 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:00.772207975 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:00.788783073 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.792143106 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.796888113 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.796897888 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.796910048 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.796958923 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.796996117 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.797024965 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.797044992 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.800585032 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800610065 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800630093 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800653934 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.800672054 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800688982 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.800690889 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800715923 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.800721884 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.800744057 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.800770998 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.824078083 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:00.841523886 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:00.878298044 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.878366947 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.878375053 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.878418922 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.878739119 CEST	49753	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.878758907 CEST	443	49753	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.882474899 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.882541895 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.882571936 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.882587910 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.882625103 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.882761955 CEST	49752	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:00.882775068 CEST	443	49752	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:00.888489962 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:00.988821030 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.989125013 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.989151955 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.990348101 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:00.990657091 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.990786076 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:00.990820885 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:01.014061928 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.014324903 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.014359951 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.014735937 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.014801979 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.015450954 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.015501022 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.015636921 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.015697002 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.015825033 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.015839100 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.015865088 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.015919924 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:01.031018972 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:01.063040972 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:01.413360119 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:10:02.150888920 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.150914907 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.150922060 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.150934935 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.150943995 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.150950909 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.151055098 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:02.151084900 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.151101112 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.151139021 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.151154995 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:02.151215076 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:02.154277086 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.154300928 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.154350042 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.154371023 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.154386044 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.154438019 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.155318022 CEST	49759	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.155328989 CEST	443	49759	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.157298088 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157535076 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157607079 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.157876015 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157882929 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157972097 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157978058 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.157998085 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.158032894 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.158036947 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.158060074 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.158101082 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.160643101 CEST	49757	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.160672903 CEST	443	49757	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.161621094 CEST	49758	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.161637068 CEST	443	49758	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.162373066 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.162394047 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.162574053 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.163161039 CEST	49760	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.163175106 CEST	443	49760	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.163932085 CEST	49755	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.163944960 CEST	443	49755	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.164145947 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:02.164155006 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.164184093 CEST	49754	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:02.164191008 CEST	443	49754	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:02.164515972 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.164529085 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.225965023 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.225986958 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226083040 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226119995 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226123095 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226171017 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226217985 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226227999 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226311922 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226351976 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226357937 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226407051 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226602077 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226613045 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226738930 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226757050 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226857901 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226870060 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.226978064 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:02.226989031 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:02.233789921 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.233824015 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.233912945 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.233925104 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.233944893 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234004974 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234056950 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234127998 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.234193087 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234252930 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234271049 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.234390974 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234402895 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.234530926 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:02.234566927 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:02.336787939 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.337018013 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.337033987 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.338053942 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.338103056 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.338386059 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.338433981 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.338577032 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.338582039 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.379029036 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.452451944 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:02.452537060 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:02.452630043 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:02.509618044 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.509692907 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.509783983 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.510231018 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.510231018 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.510246992 CEST	443	49761	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:02.510530949 CEST	49761	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:02.551943064 CEST	49711	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:02.551960945 CEST	443	49711	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:02.552306890 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.552345037 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.552405119 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.552623987 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:02.552637100 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:02.911883116 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.912144899 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.912158966 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.912455082 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.912741899 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.912797928 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:02.912873030 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:02.956504107 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.002623081 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.002917051 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.002940893 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.003882885 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.003950119 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.004915953 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.005023956 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.005095959 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.005155087 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.005162954 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.014795065 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.015032053 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.015053988 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.018620014 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.018688917 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.018712997 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.018978119 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.019052029 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.019139051 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.019145966 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.019258976 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.019267082 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.019283056 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.019295931 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.020083904 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.020150900 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.020495892 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.020575047 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.020627022 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.020662069 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.020668983 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.036375999 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.036596060 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.036607027 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.037663937 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.037724972 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.038017988 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.038079023 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.038160086 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.038167953 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.038194895 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.038240910 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.048043966 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.060997009 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.061018944 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.093034983 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.103614092 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.103914022 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.103954077 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.105201960 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.105287075 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.105694056 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.105864048 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.105879068 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.106966019 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.107028961 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.107671976 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.107731104 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.107786894 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.107850075 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.107963085 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.108061075 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.108102083 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.108258009 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.108268023 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.108278990 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.108313084 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.148509026 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.148926020 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.149183035 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.149194002 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.149749994 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.149813890 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.151189089 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.151249886 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.151429892 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.151556015 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.151612997 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.151621103 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.157021999 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.157036066 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.157036066 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.162833929 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.163094997 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.163110018 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.163428068 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.163747072 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.163801908 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.163938046 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.163958073 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.163979053 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.164014101 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.197845936 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.198563099 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.198669910 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.199300051 CEST	49766	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.199316025 CEST	443	49766	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.205040932 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.205166101 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.249038935 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.249175072 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.249264956 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.249644041 CEST	49764	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.249669075 CEST	443	49764	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.270230055 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.270925045 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.271002054 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.271380901 CEST	49763	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.271393061 CEST	443	49763	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.289005995 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.289194107 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.289259911 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.289608002 CEST	49765	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:03.289617062 CEST	443	49765	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:03.302841902 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.302947044 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.303093910 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.303848982 CEST	49769	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.303864002 CEST	443	49769	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.304970026 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.305068016 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.305262089 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.306221962 CEST	49767	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.306240082 CEST	443	49767	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.344629049 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.344707966 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.344805002 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.345458984 CEST	49768	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.345475912 CEST	443	49768	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.362823963 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.365451097 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.365516901 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.366225004 CEST	49770	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.366233110 CEST	443	49770	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.775358915 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:03.778413057 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.778443098 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.778496027 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.778517008 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.778747082 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.778891087 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.779218912 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.779218912 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.779232025 CEST	443	49762	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.779386997 CEST	49762	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.781898022 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.781936884 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.782030106 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.782227993 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:03.782242060 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:03.783819914 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.783838987 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.783855915 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.783910990 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.783934116 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.783998966 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.784452915 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.784534931 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.784538031 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.784578085 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.784750938 CEST	49756	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:03.784768105 CEST	443	49756	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:03.787254095 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.787280083 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.787552118 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.787739038 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:03.787760973 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:03.823019028 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:10:04.078032017 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:04.149575949 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:04.149616003 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:04.149729013 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:04.149961948 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:04.149972916 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:04.477597952 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.477902889 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:04.477919102 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.478286982 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.478581905 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:04.478638887 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.478713036 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:04.524499893 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.538444042 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:04.539989948 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:04.540019989 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:04.540368080 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:04.543615103 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:04.543793917 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:04.543803930 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:04.543828964 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:04.588037014 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:04.685034990 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:04.747838020 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.747930050 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.748050928 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:04.749524117 CEST	49773	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:04.749543905 CEST	443	49773	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:04.992733955 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:04.992820978 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:04.993263960 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:04.993522882 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:04.993560076 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.108733892 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.125956059 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.125976086 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.126425028 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.127545118 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.127624989 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.128086090 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.128118038 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.128142118 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.128155947 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.356722116 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.356829882 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.357003927 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.357518911 CEST	49774	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:05.357541084 CEST	443	49774	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:05.420587063 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.420615911 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.420624018 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.420717955 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.420748949 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.425966978 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.426069021 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.426084042 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.479037046 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.557686090 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.557702065 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.557826042 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.558150053 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.558191061 CEST	443	49772	99.86.8.175	192.168.2.16
Jun 28, 2024 18:10:05.558267117 CEST	49772	443	192.168.2.16	99.86.8.175
Jun 28, 2024 18:10:05.611622095 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.611926079 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:05.611953020 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.612302065 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.612647057 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:05.612726927 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.612816095 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:05.660516977 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:05.738889933 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:05.738931894 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:05.739016056 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:05.739263058 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:05.739272118 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:05.776109934 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:05.776143074 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:05.776235104 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:05.777534008 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:05.777550936 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:05.893050909 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:06.735950947 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:06.736047029 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:06.736108065 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:06.736856937 CEST	49775	443	192.168.2.16	34.217.155.134
Jun 28, 2024 18:10:06.736881018 CEST	443	49775	34.217.155.134	192.168.2.16
Jun 28, 2024 18:10:06.759439945 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:06.759463072 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:06.759530067 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:06.759720087 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:06.759732008 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.350852966 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.351084948 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.351104975 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.351444960 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.351733923 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.351785898 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.351869106 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.351902962 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.351928949 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.385380030 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.385591030 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:07.385607958 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.385946035 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.386337042 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:07.386388063 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.386466980 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:07.432496071 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.440367937 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.440615892 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.440630913 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.441040993 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.441366911 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.441421986 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.441646099 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.484512091 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.602803946 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.602876902 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.603035927 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.603328943 CEST	49778	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:07.603347063 CEST	443	49778	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:07.633920908 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.634001017 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.634047031 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:07.634560108 CEST	49779	443	192.168.2.16	34.210.192.119
Jun 28, 2024 18:10:07.634577036 CEST	443	49779	34.210.192.119	192.168.2.16
Jun 28, 2024 18:10:07.701040983 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.701071024 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.701132059 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:07.701261997 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.701261997 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.701822996 CEST	49777	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:07.701836109 CEST	443	49777	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:08.295118093 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:08.629064083 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:10:10.072108984 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 28, 2024 18:10:13.100167990 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:15.214008093 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.214066982 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.214133978 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.214392900 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.214407921 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.215951920 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.215990067 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.216063023 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.216248989 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.216270924 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.824549913 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.824898958 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.824914932 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.825242996 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.825690031 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.825758934 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.825886965 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.825902939 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:15.825916052 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:15.943622112 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.943806887 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.943825960 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.944147110 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.944407940 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.944468975 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.944490910 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:15.984551907 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:15.995074034 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.200607061 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:16.200635910 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:16.200711012 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.200752020 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:16.201143980 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:16.201209068 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.201590061 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.201607943 CEST	443	49789	18.239.83.84	192.168.2.16
Jun 28, 2024 18:10:16.201642036 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.201663971 CEST	49789	443	192.168.2.16	18.239.83.84
Jun 28, 2024 18:10:16.204231024 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:16.204255104 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.204349041 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:16.204556942 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:16.204571009 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.386706114 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:16.386879921 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:16.386945963 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:16.387516022 CEST	49788	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:16.387535095 CEST	443	49788	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:16.389736891 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:16.389759064 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:16.389851093 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:16.390113115 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:16.390125036 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:16.748090029 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:16.748141050 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:16.748245955 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:16.748447895 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:16.748466015 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:16.965435982 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.965732098 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:16.965744972 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.966090918 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.966398001 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:16.966460943 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:16.966542959 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:17.008527994 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.023935080 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.024152040 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:17.024169922 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.024552107 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.024842024 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:17.024912119 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.024969101 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:17.072508097 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.225617886 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.225655079 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.225732088 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:17.225759983 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.225887060 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.225954056 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:17.226587057 CEST	49790	443	192.168.2.16	18.239.83.87
Jun 28, 2024 18:10:17.226604939 CEST	443	49790	18.239.83.87	192.168.2.16
Jun 28, 2024 18:10:17.307599068 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.307682991 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.307754993 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:17.308334112 CEST	49793	443	192.168.2.16	52.41.204.106
Jun 28, 2024 18:10:17.308353901 CEST	443	49793	52.41.204.106	192.168.2.16
Jun 28, 2024 18:10:17.358715057 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.358993053 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.359025955 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.359535933 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.359848022 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.359942913 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.359992027 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.359992981 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.360021114 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.414091110 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.624763966 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.624877930 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:17.624950886 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.625518084 CEST	49794	443	192.168.2.16	52.43.112.129
Jun 28, 2024 18:10:17.625535965 CEST	443	49794	52.43.112.129	192.168.2.16
Jun 28, 2024 18:10:18.241066933 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 28, 2024 18:10:22.713071108 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 28, 2024 18:10:29.195926905 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.195960045 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.196043968 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.196269035 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.196278095 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.806540966 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.806802034 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.806819916 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.807140112 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.807440996 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.807504892 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:29.807571888 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:29.848503113 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:30.053267002 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:30.053373098 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:30.053464890 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:30.053875923 CEST	49798	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:30.053900957 CEST	443	49798	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:30.091370106 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.091422081 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.091514111 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.091752052 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.091763973 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.883435011 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.883719921 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.883757114 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.884660959 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.884741068 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.885011911 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.885072947 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.885185003 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:30.885196924 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:30.937128067 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:31.058490992 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:31.058581114 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:31.058643103 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:31.059266090 CEST	49799	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:10:31.059288979 CEST	443	49799	44.228.239.27	192.168.2.16
Jun 28, 2024 18:10:35.231159925 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:10:35.231189966 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:10:38.468852043 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:38.468897104 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:38.468996048 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:38.469366074 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:38.469377041 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:38.544212103 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:10:38.549340010 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:10:39.267359972 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.267461061 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.268826962 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.268836021 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.269037962 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.270466089 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.316504955 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.610591888 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.610622883 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.610639095 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.610786915 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.610806942 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.610863924 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.611927986 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.611990929 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.611996889 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.612013102 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.612071037 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.612082958 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.612123966 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.613481045 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.613493919 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:39.613506079 CEST	49804	443	192.168.2.16	40.68.123.157
Jun 28, 2024 18:10:39.613511086 CEST	443	49804	40.68.123.157	192.168.2.16
Jun 28, 2024 18:10:50.335310936 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:10:50.335431099 CEST	443	49710	199.30.234.133	192.168.2.16
Jun 28, 2024 18:10:50.335500956 CEST	49710	443	192.168.2.16	199.30.234.133
Jun 28, 2024 18:10:51.934889078 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:51.934947014 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:51.935045004 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:51.935339928 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:51.935354948 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:52.584996939 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:52.585275888 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:52.585325956 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:52.586076975 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:52.586390972 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:52.586463928 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:10:52.635181904 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:10:55.950419903 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:55.950465918 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:55.950553894 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:55.950768948 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:55.950779915 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.582712889 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.583008051 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.583044052 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.583364964 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.583657026 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.583714008 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.583781958 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.583811998 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.583856106 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.831933975 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.832041979 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:56.832108021 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.834176064 CEST	49813	443	192.168.2.16	54.213.166.94
Jun 28, 2024 18:10:56.834197998 CEST	443	49813	54.213.166.94	192.168.2.16
Jun 28, 2024 18:10:58.538333893 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:10:58.538405895 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:10:59.324863911 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:10:59.627183914 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:11:00.187815905 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:11:00.195261002 CEST	80	49712	167.89.118.83	192.168.2.16
Jun 28, 2024 18:11:00.195344925 CEST	49712	80	192.168.2.16	167.89.118.83
Jun 28, 2024 18:11:02.489839077 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:02.489924908 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:02.490012884 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:03.324945927 CEST	49812	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:03.324989080 CEST	443	49812	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:12.369901896 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.370152950 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.370191097 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.370307922 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.370496988 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.370508909 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.682233095 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.955216885 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.955319881 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.987159967 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.987210035 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.987354994 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.987365007 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.987577915 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:12.987643957 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:12.989665031 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.989742041 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.989799023 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.990067005 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.990124941 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:12.990226984 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.990437031 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:12.990448952 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.096796989 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.096820116 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.096852064 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.096929073 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.096961021 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.096991062 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.097007036 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.097285032 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.097347975 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.097837925 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.097892046 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.099870920 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.099940062 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188344002 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.188426971 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188496113 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.188544035 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.188559055 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188575029 CEST	443	49814	204.79.197.222	192.168.2.16
Jun 28, 2024 18:11:13.188586950 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188586950 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188586950 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.188623905 CEST	49814	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.284235954 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:13.300313950 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.300322056 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.300322056 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.576015949 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.576210022 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.576766014 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.576832056 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.579952955 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.579965115 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.580368042 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.580434084 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.580919981 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.580949068 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.581114054 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.628516912 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.698867083 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.698999882 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.699079990 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.699121952 CEST	443	49815	204.79.197.200	192.168.2.16
Jun 28, 2024 18:11:13.699199915 CEST	49815	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.904227972 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.904252052 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:13.904527903 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:14.494247913 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:15.118248940 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:15.118280888 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:15.118484020 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:16.090792894 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.090821028 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.090909958 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.091480017 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.091497898 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.683459044 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.683588028 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.690138102 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.690162897 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.690350056 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.690360069 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.690433025 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.732502937 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.790374041 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.790436029 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.790440083 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.790489912 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.791085005 CEST	49816	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.791111946 CEST	443	49816	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.793826103 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.793857098 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.793943882 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.794167995 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:16.794182062 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:16.901276112 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:17.362134933 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.362263918 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.362673044 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.362688065 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.362909079 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.362915039 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.464234114 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.464318037 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.464339972 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.464354038 CEST	443	49817	13.107.4.254	192.168.2.16
Jun 28, 2024 18:11:17.464392900 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.464416027 CEST	49817	443	192.168.2.16	13.107.4.254
Jun 28, 2024 18:11:17.523235083 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:17.523289919 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:17.523294926 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:20.733834982 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.733860970 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:20.733935118 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.734069109 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.734112024 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:20.734179020 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.734379053 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.734400034 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:20.734704018 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:20.734719038 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:20.748161077 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:20.748203039 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:20.748276949 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:20.748503923 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:20.748518944 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:21.713314056 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:22.004472971 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.004900932 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.004925013 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.006118059 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.006130934 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.006231070 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.006377935 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.006400108 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.006535053 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.006558895 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.006784916 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.006876945 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.006932974 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.007066965 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.007250071 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.007318020 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.007579088 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.007663012 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.007744074 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.007781982 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.007802010 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.007971048 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.008096933 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.048508883 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.048508883 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.333256960 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:22.333259106 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:22.333314896 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:22.457156897 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.457742929 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.457858086 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.458271027 CEST	49821	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:22.458295107 CEST	443	49821	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:22.527096033 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.528610945 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:22.528687000 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.529089928 CEST	49820	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:22.529115915 CEST	443	49820	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:23.105576992 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:23.105700016 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:23.105770111 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:23.106358051 CEST	49819	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:23.106379986 CEST	443	49819	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:26.423604965 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:26.423635006 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:26.423774958 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:26.424050093 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:26.424062967 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.039235115 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.039602995 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.039616108 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.039927959 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.040333033 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.040380955 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.040499926 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.040549040 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.040565968 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.288845062 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.288947105 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:27.289011955 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.289450884 CEST	49822	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:27.289465904 CEST	443	49822	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:31.314340115 CEST	49683	443	192.168.2.16	204.79.197.222
Jun 28, 2024 18:11:31.934353113 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:31.934410095 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:31.934462070 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 28, 2024 18:11:33.803200006 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.803263903 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:33.803359032 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.803570986 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.803589106 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:33.805485010 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.805522919 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:33.805583954 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.805831909 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.805844069 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:33.807729959 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.807775021 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:33.807841063 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.808073997 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:33.808088064 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.477355957 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.477492094 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.477684975 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.477700949 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.477929115 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.477950096 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.478040934 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.478452921 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.478508949 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.478602886 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.478641987 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.478665113 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.479414940 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.479481936 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.479950905 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.480019093 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.480137110 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.480144024 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.480175972 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.480215073 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.491770029 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.491991997 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.492027044 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.492357969 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.492635012 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.492696047 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.492747068 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.492794037 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.492809057 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.531243086 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.717948914 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.718049049 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.718110085 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.718419075 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.718498945 CEST	49824	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.718516111 CEST	443	49824	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.718758106 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.718811035 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.719201088 CEST	49825	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.719214916 CEST	443	49825	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.740447044 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.740588903 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:34.740652084 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.740888119 CEST	49823	443	192.168.2.16	44.228.239.27
Jun 28, 2024 18:11:34.740910053 CEST	443	49823	44.228.239.27	192.168.2.16
Jun 28, 2024 18:11:42.380495071 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:42.380542040 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:42.380620956 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:42.380960941 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:42.380979061 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.110253096 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.110682964 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:43.110728025 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.111073971 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.111481905 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:43.111548901 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.111654043 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:43.152506113 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.234184027 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:43.234373093 CEST	443	49826	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:43.234534979 CEST	49826	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:43.271114111 CEST	49827	80	192.168.2.16	167.89.118.52
Jun 28, 2024 18:11:43.272124052 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:43.272195101 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:43.272294044 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:43.272533894 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:43.272552967 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:43.278441906 CEST	80	49827	167.89.118.52	192.168.2.16
Jun 28, 2024 18:11:43.278517008 CEST	49827	80	192.168.2.16	167.89.118.52
Jun 28, 2024 18:11:43.287130117 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287183046 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:43.287255049 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287614107 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287647009 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:43.287698984 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287808895 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287827969 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:43.287956953 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:43.287970066 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:43.999346972 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:43.999732018 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:43.999806881 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:44.000294924 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:44.000711918 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:44.000823975 CEST	443	49828	99.86.114.118	192.168.2.16
Jun 28, 2024 18:11:44.053301096 CEST	49828	443	192.168.2.16	99.86.114.118
Jun 28, 2024 18:11:44.157136917 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.157418013 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.157438040 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.157843113 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.158220053 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.158330917 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.158406019 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.184041977 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.184349060 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.184372902 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.185672998 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.186060905 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.186242104 CEST	443	49830	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.204504013 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.229298115 CEST	49830	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.343018055 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.343106031 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:44.343162060 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.345482111 CEST	49831	443	192.168.2.16	52.26.102.158
Jun 28, 2024 18:11:44.345499992 CEST	443	49831	52.26.102.158	192.168.2.16
Jun 28, 2024 18:11:51.989132881 CEST	49856	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:51.989187956 CEST	443	49856	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:51.989370108 CEST	49856	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:51.989528894 CEST	49856	443	192.168.2.16	172.217.18.4
Jun 28, 2024 18:11:51.989543915 CEST	443	49856	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:52.852693081 CEST	443	49856	172.217.18.4	192.168.2.16
Jun 28, 2024 18:11:52.896318913 CEST	49856	443	192.168.2.16	172.217.18.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 28, 2024 18:09:47.075197935 CEST	64270	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.075387001 CEST	50265	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.076741934 CEST	53	49687	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.084428072 CEST	53	50265	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.094990969 CEST	53	64270	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.145358086 CEST	53	55571	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.967334032 CEST	49377	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.967489958 CEST	57413	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.968091011 CEST	51028	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.968291044 CEST	62176	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:47.974277020 CEST	53	49377	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.974292994 CEST	53	57413	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.975080967 CEST	53	51028	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:47.975106001 CEST	53	62176	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:48.139867067 CEST	53	54924	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:49.636467934 CEST	53946	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:49.636616945 CEST	56777	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:49.647218943 CEST	53	53946	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:49.657123089 CEST	53	56777	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:51.883181095 CEST	56540	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:51.883356094 CEST	57361	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:51.890331030 CEST	53	57361	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:51.891134024 CEST	53	56540	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:52.899561882 CEST	51796	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:52.899791002 CEST	61714	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:52.909564018 CEST	53	51796	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:52.919872999 CEST	53	61714	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:53.540498018 CEST	52746	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:53.540616989 CEST	63783	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:53.585454941 CEST	53	52746	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:53.597517967 CEST	53	63783	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.244358063 CEST	57407	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.244527102 CEST	56813	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.252568960 CEST	53	57407	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.269978046 CEST	53	56813	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.332201004 CEST	49563	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.332343102 CEST	57121	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.333592892 CEST	60324	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.333885908 CEST	55893	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.334223986 CEST	58250	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.334357023 CEST	53189	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.339616060 CEST	53	49563	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.339629889 CEST	53	57121	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.340353012 CEST	60792	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:56.341125965 CEST	53	60324	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.342911005 CEST	53	55893	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:56.350372076 CEST	53	60792	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:57.295898914 CEST	56203	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:57.296077013 CEST	51768	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:57.304109097 CEST	53	56203	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:57.307410955 CEST	53	51768	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:59.176579952 CEST	64629	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:59.176718950 CEST	51872	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:59.183490038 CEST	53	64629	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:59.185226917 CEST	53	51872	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:59.296060085 CEST	56281	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:59.296209097 CEST	55453	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:09:59.315474033 CEST	53	55453	1.1.1.1	192.168.2.16
Jun 28, 2024 18:09:59.340229034 CEST	53	56281	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:00.532751083 CEST	58906	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:00.532921076 CEST	61614	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:00.557250977 CEST	53	58906	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:00.576562881 CEST	53	61614	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:02.167499065 CEST	59406	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:02.167889118 CEST	60021	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:02.191544056 CEST	62182	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:02.191620111 CEST	56228	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:02.210221052 CEST	53	56228	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:02.225244999 CEST	53	62182	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:02.232095003 CEST	53	59406	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:02.233340025 CEST	53	60021	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:03.306818962 CEST	56339	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:03.307064056 CEST	54884	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:05.133862019 CEST	53	61435	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:05.576813936 CEST	53	60546	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:05.745439053 CEST	50106	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:05.745573997 CEST	57160	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:06.755724907 CEST	52546	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:06.756006002 CEST	50188	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:07.923643112 CEST	52827	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:07.923787117 CEST	49261	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:17.807883978 CEST	61771	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:17.808018923 CEST	59972	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:23.916224957 CEST	53	57231	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:30.056386948 CEST	58148	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:30.056509018 CEST	59616	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:10:30.073745012 CEST	53	58148	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:30.132843018 CEST	53	59616	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:38.719094038 CEST	53	63350	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:46.566446066 CEST	53	63246	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:47.063437939 CEST	53	56144	1.1.1.1	192.168.2.16
Jun 28, 2024 18:10:55.467015982 CEST	138	138	192.168.2.16	192.168.2.255
Jun 28, 2024 18:11:14.550127029 CEST	53	58704	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:20.715591908 CEST	57394	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:20.715826035 CEST	57749	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:20.726059914 CEST	64095	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:20.726285934 CEST	58496	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:20.732942104 CEST	53	57749	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:20.733314037 CEST	53	57394	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:20.733800888 CEST	53	58496	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:20.747426033 CEST	53	64095	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:43.243825912 CEST	50710	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.243982077 CEST	50687	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.245424032 CEST	58667	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.245657921 CEST	56729	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.245855093 CEST	64342	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.245980978 CEST	58745	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:43.257157087 CEST	53	58667	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:43.274137020 CEST	53	56729	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:43.285445929 CEST	53	50687	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:43.286564112 CEST	53	50710	1.1.1.1	192.168.2.16
Jun 28, 2024 18:11:44.346664906 CEST	53641	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:44.346864939 CEST	64015	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:46.440207005 CEST	58940	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:46.440457106 CEST	59185	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:52.045752048 CEST	53359	53	192.168.2.16	1.1.1.1
Jun 28, 2024 18:11:52.045752048 CEST	63849	53	192.168.2.16	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jun 28, 2024 18:09:49.657197952 CEST	192.168.2.16	1.1.1.1	c231	(Port unreachable)	Destination Unreachable
Jun 28, 2024 18:09:56.360713005 CEST	192.168.2.16	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable
Jun 28, 2024 18:10:00.576639891 CEST	192.168.2.16	1.1.1.1	c296	(Port unreachable)	Destination Unreachable
Jun 28, 2024 18:10:06.783941031 CEST	192.168.2.16	1.1.1.1	c2b7	(Port unreachable)	Destination Unreachable
Jun 28, 2024 18:10:30.132942915 CEST	192.168.2.16	1.1.1.1	c260	(Port unreachable)	Destination Unreachable
Jun 28, 2024 18:11:43.274288893 CEST	192.168.2.16	1.1.1.1	c252	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 28, 2024 18:09:47.075197935 CEST	192.168.2.16	1.1.1.1	0xae15	Standard query (0)	link.edgepilot.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.075387001 CEST	192.168.2.16	1.1.1.1	0xcacb	Standard query (0)	link.edgepilot.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:47.967334032 CEST	192.168.2.16	1.1.1.1	0x73e0	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.967489958 CEST	192.168.2.16	1.1.1.1	0xb43f	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:47.968091011 CEST	192.168.2.16	1.1.1.1	0xfc44	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.968291044 CEST	192.168.2.16	1.1.1.1	0xa4e4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:49.636467934 CEST	192.168.2.16	1.1.1.1	0x537a	Standard query (0)	link.edgepilot.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:49.636616945 CEST	192.168.2.16	1.1.1.1	0xc356	Standard query (0)	link.edgepilot.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:51.883181095 CEST	192.168.2.16	1.1.1.1	0x351	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:51.883356094 CEST	192.168.2.16	1.1.1.1	0x6071	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:52.899561882 CEST	192.168.2.16	1.1.1.1	0xbb02	Standard query (0)	links.notification.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.899791002 CEST	192.168.2.16	1.1.1.1	0x3d40	Standard query (0)	links.notification.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:53.540498018 CEST	192.168.2.16	1.1.1.1	0xa47d	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.540616989 CEST	192.168.2.16	1.1.1.1	0x7100	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.244358063 CEST	192.168.2.16	1.1.1.1	0xd248	Standard query (0)	static.cns-icn-prod.a.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.244527102 CEST	192.168.2.16	1.1.1.1	0xdb9e	Standard query (0)	static.cns-icn-prod.a.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.332201004 CEST	192.168.2.16	1.1.1.1	0xef13	Standard query (0)	cdn.polyfill.io	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.332343102 CEST	192.168.2.16	1.1.1.1	0x95ff	Standard query (0)	cdn.polyfill.io	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.333592892 CEST	192.168.2.16	1.1.1.1	0xbf85	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.333885908 CEST	192.168.2.16	1.1.1.1	0x676a	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.334223986 CEST	192.168.2.16	1.1.1.1	0x2752	Standard query (0)	smx.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.334357023 CEST	192.168.2.16	1.1.1.1	0x8a52	Standard query (0)	smx.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.340353012 CEST	192.168.2.16	1.1.1.1	0x7fc2	Standard query (0)	cdn.polyfill.io	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:57.295898914 CEST	192.168.2.16	1.1.1.1	0xff4f	Standard query (0)	static.cns-icn-prod.a.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:57.296077013 CEST	192.168.2.16	1.1.1.1	0x8c6d	Standard query (0)	static.cns-icn-prod.a.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:59.176579952 CEST	192.168.2.16	1.1.1.1	0x944	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.176718950 CEST	192.168.2.16	1.1.1.1	0xd82a	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jun 28, 2024 18:09:59.296060085 CEST	192.168.2.16	1.1.1.1	0x14d	Standard query (0)	prd.sentry-io.a.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.296209097 CEST	192.168.2.16	1.1.1.1	0x4a50	Standard query (0)	prd.sentry-io.a.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:00.532751083 CEST	192.168.2.16	1.1.1.1	0x591c	Standard query (0)	prd.sentry-io.a.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:00.532921076 CEST	192.168.2.16	1.1.1.1	0xdafd	Standard query (0)	prd.sentry-io.a.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:02.167499065 CEST	192.168.2.16	1.1.1.1	0x26e8	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.167889118 CEST	192.168.2.16	1.1.1.1	0x56b2	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:02.191544056 CEST	192.168.2.16	1.1.1.1	0xa8dc	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.191620111 CEST	192.168.2.16	1.1.1.1	0x51ef	Standard query (0)	eventbus.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:03.306818962 CEST	192.168.2.16	1.1.1.1	0x28c1	Standard query (0)	quickbooks.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:03.307064056 CEST	192.168.2.16	1.1.1.1	0xfd92	Standard query (0)	quickbooks.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:05.745439053 CEST	192.168.2.16	1.1.1.1	0x480d	Standard query (0)	customersurveys.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:05.745573997 CEST	192.168.2.16	1.1.1.1	0xc1ba	Standard query (0)	customersurveys.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:06.755724907 CEST	192.168.2.16	1.1.1.1	0x1866	Standard query (0)	customersurveys.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:06.756006002 CEST	192.168.2.16	1.1.1.1	0xe4c7	Standard query (0)	customersurveys.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:07.923643112 CEST	192.168.2.16	1.1.1.1	0xbe34	Standard query (0)	eu.qualtrics.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:07.923787117 CEST	192.168.2.16	1.1.1.1	0x817b	Standard query (0)	eu.qualtrics.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:17.807883978 CEST	192.168.2.16	1.1.1.1	0xd7df	Standard query (0)	customersurveys.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:17.808018923 CEST	192.168.2.16	1.1.1.1	0xf43f	Standard query (0)	customersurveys.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:10:30.056386948 CEST	192.168.2.16	1.1.1.1	0x836c	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.056509018 CEST	192.168.2.16	1.1.1.1	0x67ed	Standard query (0)	eventbus.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:20.715591908 CEST	192.168.2.16	1.1.1.1	0x7b59	Standard query (0)	static.cns-icn-prod.a.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.715826035 CEST	192.168.2.16	1.1.1.1	0x8603	Standard query (0)	static.cns-icn-prod.a.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:20.726059914 CEST	192.168.2.16	1.1.1.1	0xccbd	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.726285934 CEST	192.168.2.16	1.1.1.1	0x876b	Standard query (0)	eventbus.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:43.243825912 CEST	192.168.2.16	1.1.1.1	0xff9b	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.243982077 CEST	192.168.2.16	1.1.1.1	0x75ab	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:43.245424032 CEST	192.168.2.16	1.1.1.1	0xb229	Standard query (0)	links.notification.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.245657921 CEST	192.168.2.16	1.1.1.1	0xd33f	Standard query (0)	links.notification.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:43.245855093 CEST	192.168.2.16	1.1.1.1	0xc0a7	Standard query (0)	smx.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.245980978 CEST	192.168.2.16	1.1.1.1	0xcfdd	Standard query (0)	smx.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:44.346664906 CEST	192.168.2.16	1.1.1.1	0x245b	Standard query (0)	quickbooks.intuit.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:44.346864939 CEST	192.168.2.16	1.1.1.1	0x5b3c	Standard query (0)	quickbooks.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:46.440207005 CEST	192.168.2.16	1.1.1.1	0x4a84	Standard query (0)	static.quickbooks.com	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:46.440457106 CEST	192.168.2.16	1.1.1.1	0x4d21	Standard query (0)	static.quickbooks.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:52.045752048 CEST	192.168.2.16	1.1.1.1	0x4ac3	Standard query (0)	quickbooks.intuit.com	65	IN (0x0001)	false
Jun 28, 2024 18:11:52.045752048 CEST	192.168.2.16	1.1.1.1	0x551e	Standard query (0)	quickbooks.intuit.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 28, 2024 18:09:47.094990969 CEST	1.1.1.1	192.168.2.16	0xae15	No error (0)	link.edgepilot.com		199.30.234.133	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.974277020 CEST	1.1.1.1	192.168.2.16	0x73e0	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.974277020 CEST	1.1.1.1	192.168.2.16	0x73e0	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.974292994 CEST	1.1.1.1	192.168.2.16	0xb43f	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jun 28, 2024 18:09:47.975080967 CEST	1.1.1.1	192.168.2.16	0xfc44	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.975080967 CEST	1.1.1.1	192.168.2.16	0xfc44	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.975080967 CEST	1.1.1.1	192.168.2.16	0xfc44	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:47.975080967 CEST	1.1.1.1	192.168.2.16	0xfc44	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:49.647218943 CEST	1.1.1.1	192.168.2.16	0x537a	No error (0)	link.edgepilot.com		199.30.234.133	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:51.890331030 CEST	1.1.1.1	192.168.2.16	0x6071	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 28, 2024 18:09:51.891134024 CEST	1.1.1.1	192.168.2.16	0x351	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	links.notification.intuit.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.118.83	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.118.52	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.909564018 CEST	1.1.1.1	192.168.2.16	0xbb02	No error (0)	sendgrid.net		167.89.118.120	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:52.919872999 CEST	1.1.1.1	192.168.2.16	0x3d40	No error (0)	links.notification.intuit.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.43.112.129	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.40.25.165	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.33.121.244	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.26.227.75	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.212.174.223	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		44.233.93.43	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		35.161.151.102	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.585454941 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.41.204.106	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:53.597517967 CEST	1.1.1.1	192.168.2.16	0x7100	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:56.252568960 CEST	1.1.1.1	192.168.2.16	0xd248	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.84	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.252568960 CEST	1.1.1.1	192.168.2.16	0xd248	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.90	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.252568960 CEST	1.1.1.1	192.168.2.16	0xd248	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.7	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.252568960 CEST	1.1.1.1	192.168.2.16	0xd248	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.87	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.339616060 CEST	1.1.1.1	192.168.2.16	0xef13	Name error (3)	cdn.polyfill.io	none	none	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.339629889 CEST	1.1.1.1	192.168.2.16	0x95ff	Name error (3)	cdn.polyfill.io	none	none	65	IN (0x0001)	false
Jun 28, 2024 18:09:56.341125965 CEST	1.1.1.1	192.168.2.16	0xbf85	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:56.341125965 CEST	1.1.1.1	192.168.2.16	0xbf85	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.342911005 CEST	1.1.1.1	192.168.2.16	0x676a	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:56.346993923 CEST	1.1.1.1	192.168.2.16	0x2752	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:56.350372076 CEST	1.1.1.1	192.168.2.16	0x7fc2	Name error (3)	cdn.polyfill.io	none	none	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:56.360620975 CEST	1.1.1.1	192.168.2.16	0x8a52	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:57.304109097 CEST	1.1.1.1	192.168.2.16	0xff4f	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.87	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:57.304109097 CEST	1.1.1.1	192.168.2.16	0xff4f	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.7	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:57.304109097 CEST	1.1.1.1	192.168.2.16	0xff4f	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.90	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:57.304109097 CEST	1.1.1.1	192.168.2.16	0xff4f	No error (0)	static.cns-icn-prod.a.intuit.com		18.239.83.84	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.183490038 CEST	1.1.1.1	192.168.2.16	0x944	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:59.183490038 CEST	1.1.1.1	192.168.2.16	0x944	No error (0)	d296je7bbdd650.cloudfront.net		13.227.222.191	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.185226917 CEST	1.1.1.1	192.168.2.16	0xd82a	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:59.315474033 CEST	1.1.1.1	192.168.2.16	0x4a50	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:59.340229034 CEST	1.1.1.1	192.168.2.16	0x14d	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:09:59.340229034 CEST	1.1.1.1	192.168.2.16	0x14d	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.217.155.134	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.340229034 CEST	1.1.1.1	192.168.2.16	0x14d	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.211.119.28	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:09:59.340229034 CEST	1.1.1.1	192.168.2.16	0x14d	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.210.192.119	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:00.557250977 CEST	1.1.1.1	192.168.2.16	0x591c	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:00.557250977 CEST	1.1.1.1	192.168.2.16	0x591c	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.210.192.119	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:00.557250977 CEST	1.1.1.1	192.168.2.16	0x591c	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.217.155.134	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:00.557250977 CEST	1.1.1.1	192.168.2.16	0x591c	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.211.119.28	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:00.576562881 CEST	1.1.1.1	192.168.2.16	0xdafd	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.210221052 CEST	1.1.1.1	192.168.2.16	0x51ef	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		54.213.166.94	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		34.216.193.81	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		44.233.9.47	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		52.89.143.233	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		44.228.239.27	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		44.228.42.109	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		34.213.192.16	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.225244999 CEST	1.1.1.1	192.168.2.16	0xa8dc	No error (0)	eventbus.a.intuit.com		35.83.103.33	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.41.204.106	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.33.121.244	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.26.102.158	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.212.174.223	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.43.112.129	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.40.76.48	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		44.224.167.159	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.232095003 CEST	1.1.1.1	192.168.2.16	0x26e8	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.186.238.196	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:02.233340025 CEST	1.1.1.1	192.168.2.16	0x56b2	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:03.315612078 CEST	1.1.1.1	192.168.2.16	0x28c1	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:03.322717905 CEST	1.1.1.1	192.168.2.16	0xfd92	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.762655020 CEST	1.1.1.1	192.168.2.16	0xc1ba	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.762655020 CEST	1.1.1.1	192.168.2.16	0xc1ba	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.783874989 CEST	1.1.1.1	192.168.2.16	0xe4c7	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.783874989 CEST	1.1.1.1	192.168.2.16	0xe4c7	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.785562038 CEST	1.1.1.1	192.168.2.16	0x480d	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.785562038 CEST	1.1.1.1	192.168.2.16	0x480d	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.786113977 CEST	1.1.1.1	192.168.2.16	0x1866	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:06.786113977 CEST	1.1.1.1	192.168.2.16	0x1866	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:07.932229042 CEST	1.1.1.1	192.168.2.16	0xbe34	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:07.937087059 CEST	1.1.1.1	192.168.2.16	0x817b	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:17.829176903 CEST	1.1.1.1	192.168.2.16	0xd7df	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:17.829176903 CEST	1.1.1.1	192.168.2.16	0xd7df	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:17.831758976 CEST	1.1.1.1	192.168.2.16	0xf43f	No error (0)	customersurveys.intuit.com	intuit.vanity4.co1.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:17.831758976 CEST	1.1.1.1	192.168.2.16	0xf43f	No error (0)	intuit.vanity4.co1.qualtrics.com	akamaisecure4.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		44.228.239.27	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		34.216.193.81	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		52.89.143.233	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		44.228.42.109	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		54.213.166.94	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		34.213.192.16	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		44.233.9.47	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.073745012 CEST	1.1.1.1	192.168.2.16	0x836c	No error (0)	eventbus.a.intuit.com		35.83.103.33	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:10:30.132843018 CEST	1.1.1.1	192.168.2.16	0x67ed	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:20.733314037 CEST	1.1.1.1	192.168.2.16	0x7b59	No error (0)	static.cns-icn-prod.a.intuit.com		99.86.114.118	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.733314037 CEST	1.1.1.1	192.168.2.16	0x7b59	No error (0)	static.cns-icn-prod.a.intuit.com		99.86.114.12	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.733314037 CEST	1.1.1.1	192.168.2.16	0x7b59	No error (0)	static.cns-icn-prod.a.intuit.com		99.86.114.10	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.733314037 CEST	1.1.1.1	192.168.2.16	0x7b59	No error (0)	static.cns-icn-prod.a.intuit.com		99.86.114.104	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.733800888 CEST	1.1.1.1	192.168.2.16	0x876b	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		44.228.239.27	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		44.233.9.47	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		52.89.143.233	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		34.216.193.81	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		35.83.103.33	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		34.213.192.16	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		54.213.166.94	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:20.747426033 CEST	1.1.1.1	192.168.2.16	0xccbd	No error (0)	eventbus.a.intuit.com		44.228.42.109	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	links.notification.intuit.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.118.52	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.118.120	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.257157087 CEST	1.1.1.1	192.168.2.16	0xb229	No error (0)	sendgrid.net		167.89.118.83	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.274137020 CEST	1.1.1.1	192.168.2.16	0xd33f	No error (0)	links.notification.intuit.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.274148941 CEST	1.1.1.1	192.168.2.16	0xcfdd	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.274159908 CEST	1.1.1.1	192.168.2.16	0xc0a7	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.285445929 CEST	1.1.1.1	192.168.2.16	0x75ab	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.26.102.158	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.41.204.106	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.212.174.223	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.43.112.129	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.33.121.244	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		44.224.167.159	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.187.48.118	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:43.286564112 CEST	1.1.1.1	192.168.2.16	0xff9b	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.40.25.165	A (IP address)	IN (0x0001)	false
Jun 28, 2024 18:11:44.355777025 CEST	1.1.1.1	192.168.2.16	0x245b	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:44.370484114 CEST	1.1.1.1	192.168.2.16	0x5b3c	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:46.456324100 CEST	1.1.1.1	192.168.2.16	0x4d21	No error (0)	static.quickbooks.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:46.487852097 CEST	1.1.1.1	192.168.2.16	0x4a84	No error (0)	static.quickbooks.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:52.053301096 CEST	1.1.1.1	192.168.2.16	0x551e	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 28, 2024 18:11:52.054371119 CEST	1.1.1.1	192.168.2.16	0x4ac3	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

link.edgepilot.com

https:

code.jquery.com

maxcdn.bootstrapcdn.com

static.cns-icn-prod.a.intuit.com

cdn.segment.com

prd.sentry-io.a.intuit.com

connect.intuit.com

eventbus.intuit.com

fp.msedge.net

www.bing.com

c-ring.msedge.net

fs.microsoft.com

slscr.update.microsoft.com

www.google.com

links.notification.intuit.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49712	167.89.118.83	80	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 18:09:52.929542065 CEST	1549	OUT	GET /ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7Wi [TRUNCATED] Host: links.notification.intuit.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 28, 2024 18:09:53.537354946 CEST	619	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 28 Jun 2024 16:09:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 221 Connection: keep-alive Location: https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US X-Robots-Tag: noindex, nofollow Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 6f 72 74 61 6c 2f 61 70 70 2f 43 6f 6d 6d 65 72 63 65 4e 65 74 77 6f 72 6b 2f 76 69 65 77 2f 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 3f 63 74 61 3d 76 69 65 77 69 6e 76 6f 69 63 65 6e 6f 77 26 61 6d 70 3b 6c 6f 63 61 6c 65 3d 65 6e 5f 55 53 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US">Found</a>.
Jun 28, 2024 18:10:38.544212103 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49697	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:41 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-28 16:09:41 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Fri, 28 Jun 2024 16:09:41 GMT content-type: application/json; charset=utf-8 Content-Length: 319 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 1 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-28 16:09:41 UTC	319	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49699	199.30.234.133	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:47 UTC	1813	OUT	GET /s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaED [TRUNCATED] Host: link.edgepilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:47 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 28 Jun 2024 16:09:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3955 Connection: close Cache-Control: no-cache
2024-06-28 16:09:47 UTC	3955	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 6c 69 6e 6b 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>Checking link...</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/bootstr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49705	151.101.130.137	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:48 UTC	569	OUT	GET /jquery-3.2.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://link.edgepilot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:48 UTC	560	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86659 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15283" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 885283 Date: Fri, 28 Jun 2024 16:09:48 GMT X-Served-By: cache-lga21971-LGA, cache-ewr18133-EWR X-Cache: HIT, HIT X-Cache-Hits: 694, 0 X-Timer: S1719590988.498267,VS0,VE1 Vary: Accept-Encoding
2024-06-28 16:09:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-06-28 16:09:48 UTC	16384	IN	Data Raw: 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 65 5b 75 5d 3f 65 28 62 29 3a 65 2e 6c 65 6e 67 74 68 3e 31 3f 28 63 3d 5b 61 2c 61 2c 22 22 2c 62 5d 2c 64 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 Data Ascii: [a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase(
2024-06-28 16:09:48 UTC	16384	IN	Data Raw: 72 2e 65 78 70 61 6e 64 6f 2b 56 2e 75 69 64 2b 2b 7d 56 2e 75 69 64 3d 31 2c 56 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 55 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d Data Ascii: r.expando+V.uid++}V.uid=1,V.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},U(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==
2024-06-28 16:09:48 UTC	16384	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 45 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 Data Ascii: tContent=a)})},null,a,arguments.length)},append:function(){return Ja(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Ea(this,a);b.appendChild(a)}})},prepend:function(){return Ja(this,arguments,function(a){if(1
2024-06-28 16:09:48 UTC	16384	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c 22 75 73 65 4d 61 70 22 2c 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 Data Ascii: t:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){r.propFix[this
2024-06-28 16:09:48 UTC	4739	IN	Data Raw: 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 55 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 68 3f 62 5b 68 5d 3d 62 5b 68 5d 2e 72 65 70 6c 61 63 65 28 55 62 2c 22 24 31 22 2b 65 29 3a 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 62 2e 75 72 6c 2b 3d 28 76 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 26 22 3a Data Ascii: application/x-www-form-urlencoded")&&Ub.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,h?b[h]=b[h].replace(Ub,"$1"+e):b.jsonp!==!1&&(b.url+=(vb.test(b.url)?"&":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49703	104.18.11.207	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:48 UTC	609	OUT	GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://link.edgepilot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:48 UTC	932	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:09:48 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"ec3bb52a00e176a7181d454dffaea219" Last-Modified: Mon, 25 Jan 2021 22:03:59 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:15:06 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 5f656cb60f08c6c06c7851614756aae1 CDN-Cache: HIT CF-Cache-Status: HIT Age: 8588366 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89aef17e5df215af-EWR alt-svc: h3=":443"; ma=86400
2024-06-28 16:09:48 UTC	437	IN	Data Raw: 37 63 30 65 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7c0e/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 Data Ascii: y{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dot
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 Data Ascii: ype=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{padd
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c Data Ascii: rtant}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff2) format('woff2'),
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: :before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{cont
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphic
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: :before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphic
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 7d Data Ascii: e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"}
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 Data Ascii: glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49704	104.18.11.207	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:48 UTC	593	OUT	GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://link.edgepilot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:48 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:09:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"5869c96cc8f19086aee625d670d741f9" Last-Modified: Mon, 25 Jan 2021 22:04:00 GMT CDN-CachedAt: 11/15/2022 10:30:01 CDN-ProxyVer: 1.03 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1053 CDN-Status: 200 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-RequestId: 7cd5f82ca8714ac966f2d509cec8085c CDN-Cache: HIT CF-Cache-Status: HIT Age: 9233315 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89aef17e8dc77cb4-EWR alt-svc: h3=":443"; ma=86400
2024-06-28 16:09:48 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e Data Ascii: 7c00/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 75 74 20 6c 6f 77 65 72 20 74 68 61 6e 20 76 65 72 73 69 6f 6e 20 34 22 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 Data Ascii: ut lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitione
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 73 65 2e 62 73 2e 61 6c 65 72 74 22 29 29 2c 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 67 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 67 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 63 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 63 28 29 29 7d 3b 76 61 72 20 65 3d 61 2e 66 6e 2e 61 6c 65 72 74 3b 61 2e 66 6e 2e 61 6c 65 72 74 3d 62 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d Data Ascii: se.bs.alert")),b.isDefaultPrevented()\|\|(g.removeClass("in"),a.support.transition&&g.hasClass("fade")?g.one("bsTransitionEnd",c).emulateTransitionEnd(d.TRANSITION_DURATION):c())};var e=a.fn.alert;a.fn.alert=b,a.fn.alert.Constructor=d,a.fn.alert.noConflict=
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 63 74 69 76 65 22 29 29 3a 22 63 68 65 63 6b 62 6f 78 22 3d 3d 63 2e 70 72 6f 70 28 22 74 79 70 65 22 29 26 26 28 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 21 3d 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 26 26 28 61 3d 21 31 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 61 26 26 63 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 65 6c 73 65 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e Data Ascii: ctive")):"checkbox"==c.prop("type")&&(c.prop("checked")!==this.$element.hasClass("active")&&(a=!1),this.$element.toggleClass("active")),c.prop("checked",this.$element.hasClass("active")),a&&c.trigger("change")}else this.$element.attr("aria-pressed",!this.
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6b 65 79 64 6f 77 6e 2c 74 68 69 73 29 29 2c 22 68 6f 76 65 72 22 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 26 26 21 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 74 68 69 73 2e 24 65 6c 65 6d Data Ascii: ed=null,this.sliding=null,this.interval=null,this.$active=null,this.$items=null,this.options.keyboard&&this.$element.on("keydown.bs.carousel",a.proxy(this.keydown,this)),"hover"==this.options.pause&&!("ontouchstart"in document.documentElement)&&this.$elem
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 69 6e 67 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 74 6f 28 61 29 7d 29 3a 63 3d 3d 61 3f 74 68 69 73 2e 70 61 75 73 65 28 29 2e 63 79 63 6c 65 28 29 3a 74 68 69 73 2e 73 6c 69 64 65 28 61 3e 63 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 65 71 28 61 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7c 7c 28 74 68 69 73 2e 70 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6e 65 78 74 2c 20 2e 70 72 65 76 22 29 2e 6c 65 6e 67 74 68 26 26 Data Ascii: ))return this.sliding?this.$element.one("slid.bs.carousel",function(){b.to(a)}):c==a?this.pause().cycle():this.slide(a>c?"next":"prev",this.$items.eq(a))},c.prototype.pause=function(b){return b\|\|(this.paused=!0),this.$element.find(".next, .prev").length&&
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 29 2c 69 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 7d 2c 30 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 29 3a 28 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 66 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 29 2c 67 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 2c 74 68 69 73 7d 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 3b 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 3d Data Ascii: ),i.sliding=!1,setTimeout(function(){i.$element.trigger(m)},0)}).emulateTransitionEnd(c.TRANSITION_DURATION)):(e.removeClass("active"),f.addClass("active"),this.sliding=!1,this.$element.trigger(m)),g&&this.cycle(),this}};var d=a.fn.carousel;a.fn.carousel=
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 68 72 65 66 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 2c 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 27 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2e 67 65 74 50 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 67 67 6c 65 26 26 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 7d 3b 64 2e 56 Data Ascii: ="collapse"][href="#'+b.id+'"],[data-toggle="collapse"][data-target="#'+b.id+'"]'),this.transitioning=null,this.options.parent?this.$parent=this.getParent():this.addAriaAndCollapsedClass(this.$element,this.$trigger),this.options.toggle&&this.toggle()};d.V
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 74 79 70 65 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 69 6e 22 29 29 7b 76 61 72 20 62 3d 61 2e 45 76 65 6e 74 28 22 68 69 64 65 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 62 29 2c 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 29 29 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 Data Ascii: type.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeight,this.$element.add
2024-06-28 16:09:48 UTC	1369	IN	Data Raw: 20 65 3d 61 28 74 68 69 73 29 3b 65 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 7c 7c 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 62 28 65 29 2c 67 3d 66 2e 64 61 74 61 28 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2c 68 3d 67 3f 22 74 6f 67 67 6c 65 22 3a 65 2e 64 61 74 61 28 29 3b 63 2e 63 61 6c 6c 28 66 2c 68 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 63 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 63 7c 7c 28 63 3d 62 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 63 3d 63 26 26 2f 23 5b 41 2d 5a 61 2d 7a 5d 2f 2e 74 65 73 74 28 63 29 26 26 63 2e 72 65 70 6c 61 Data Ascii: e=a(this);e.attr("data-target")\|\|d.preventDefault();var f=b(e),g=f.data("bs.collapse"),h=g?"toggle":e.data();c.call(f,h)})}(jQuery),+function(a){"use strict";function b(b){var c=b.attr("data-target");c\|\|(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.repla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49702	199.30.234.133	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:48 UTC	1702	OUT	GET /css/app.css?v=1 HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6fe [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:48 UTC	249	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 28 Jun 2024 16:09:48 GMT Content-Type: text/css Content-Length: 819 Last-Modified: Wed, 01 Mar 2023 20:35:57 GMT Connection: close ETag: "63ffb72d-333" Cache-Control: max-age Accept-Ranges: bytes
2024-06-28 16:09:48 UTC	819	IN	Data Raw: 6e 61 76 2e 6e 61 76 62 61 72 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 30 70 78 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 6e 61 76 2e 6e 61 76 62 61 72 20 3e 20 2a 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 30 70 78 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 30 3b 0a 20 20 Data Ascii: nav.navbar { min-height: 80px ! important; background-color: inherit ! important; border-color: transparent ! important; margin-bottom: 5px ! important;}nav.navbar > * { min-height: 80px;}.navbar-brand { height: 70px; margin: 0 0 0 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49706	199.30.234.133	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:49 UTC	1744	OUT	GET /favicon.ico HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6fe [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:49 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 28 Jun 2024 16:09:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1310 Connection: close Cache-Control: no-cache
2024-06-28 16:09:49 UTC	1310	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>404 - page not found</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/boo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49708	199.30.234.133	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:50 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:50 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 28 Jun 2024 16:09:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1310 Connection: close Cache-Control: no-cache
2024-06-28 16:09:50 UTC	1310	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>404 - page not found</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/boo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49709	199.30.234.133	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:50 UTC	1978	OUT	POST /filter HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive Content-Length: 1716 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://link.edgepilot.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6fe [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:50 UTC	1716	OUT	Data Raw: 64 69 67 65 73 74 3d 30 30 33 34 34 33 35 30 26 69 64 3d 36 38 42 43 74 52 5a 4a 74 45 69 6a 5a 56 5f 53 73 32 72 5a 74 67 26 78 66 77 64 3d 38 2e 34 36 2e 31 32 33 2e 33 33 25 32 43 2b 31 30 2e 31 39 32 2e 31 35 32 2e 31 31 26 75 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 70 61 74 68 3d 73 26 75 72 6c 3d 61 48 52 30 63 44 6f 76 4c 32 78 70 62 6d 74 7a 4c 6d 35 76 64 47 6c 6d 61 57 4e Data Ascii: digest=00344350&id=68BCtRZJtEijZV_Ss2rZtg&xfwd=8.46.123.33%2C+10.192.152.11&uagent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&path=s&url=aHR0cDovL2xpbmtzLm5vdGlmaWN
2024-06-28 16:09:52 UTC	1274	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 28 Jun 2024 16:09:52 GMT Transfer-Encoding: chunked Connection: close Location: http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59R [TRUNCATED] Cache-Control: no-cache
2024-06-28 16:09:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49715	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:54 UTC	840	OUT	GET /portal/app/CommerceNetwork/view/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:54 UTC	1206	IN	HTTP/1.1 302 Found Date: Fri, 28 Jun 2024 16:09:54 GMT Content-Type: text/html;charset=utf-8 Content-Length: 328 Connection: close x-spanid: cbc0bb70-f04b-9ac5-40e7-83d1f6f28f75 x-amzn-trace-id: Root=1-667ee052-40fe22c103a3d3314f51ee41 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV; Expires=Fri, 05 Jul 2024 16:09:54 GMT; Path=/ Set-Cookie: AWSALBCORS=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV; Expires=Fri, 05 Jul 2024 16:09:54 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Location: /t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Vary: Accept, Accept-Encoding x-envoy-upstream-service-time: 5 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee052-40fe22c103a3d3314f51ee41 x-request-id: 1-667ee052-40fe22c103a3d3314f51ee41 server: istio-envoy
2024-06-28 16:09:54 UTC	328	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 74 2f 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 3f 63 74 61 3d 76 69 65 77 69 6e 76 6f 69 63 65 6e 6f 77 26 61 6d 70 3b 6c 6f 63 61 6c 65 3d 65 6e 5f 55 53 22 3e 2f 74 2f 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 Data Ascii: <p>Found. Redirecting to <a href="/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US">/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49718	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:55 UTC	1088	OUT	GET /t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV; AWSALBCORS=8AHrG8UAWGBA6vwXx5uyLTi5p+isDaE+ijyhKMO93froDvbcDPmJ3TSGCe2DW2f24GOBpkOvRnlJwHuKqh7DR6tCkxuzLWFS5EzkD7YkeLQWw9hIkydHQXs8+ExV
2024-06-28 16:09:56 UTC	1225	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:09:56 GMT Content-Type: text/html;charset=utf-8 Content-Length: 120419 Connection: close x-spanid: 951727d7-7e5e-5747-7c71-708afcb0e693 x-amzn-trace-id: Root=1-667ee053-29efee102785270764d476df X-Content-Type-Options: nosniff Set-Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; Expires=Fri, 05 Jul 2024 16:09:55 GMT; Path=/ Set-Cookie: AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; Expires=Fri, 05 Jul 2024 16:09:55 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Set-Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; Domain=.intuit.com; Path=/; Expires=Thu, 28 Jun 2029 16:09:55 GMT; Secure ETag: W/"1d663-0/sEcfu9JC+/UXSumnVQbGayDPo" Vary: Accept-Encoding x-envoy-upstream-service-time: 588 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee053-29efee102785270764d476df x-request-id: 1-667ee053-29efee102785270764d476df server: istio-envoy
2024-06-28 16:09:56 UTC	15159	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 74 69 74 6c 65 3e 49 6e 74 75 69 74 20 51 75 69 63 6b 42 6f 6f 6b 73 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 65 73 73 61 67 65 2c 20 73 6f 75 72 63 65 2c 20 6c 69 6e 65 6e 6f 2c 20 63 6f 6c 6e 6f 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><title>Intuit QuickBooks</title><script>window.onerror = function (message, source, lineno, colno, error) {
2024-06-28 16:09:56 UTC	16373	IN	Data Raw: 37 31 31 31 34 36 39 32 33 20 2e 75 73 65 72 2d 69 63 6f 6e 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 39 33 61 33 64 3b 7d 2e 77 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 2e 75 73 65 72 2d 69 63 6f 6e 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 3a 68 6f 76 65 72 2c 2e 77 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 2e 75 73 65 72 2d 69 63 6f 6e 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 7d 2e 77 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 2e 75 73 65 72 2d 69 63 6f 6e 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 3a 68 6f 76 65 72 20 63 69 72 63 6c 65 2c 2e 77 2e 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 2e 75 73 65 72 2d 69 63 6f 6e 2e Data Ascii: 711146923 .user-icon.jsx-3711146923 path{fill:#393a3d;}.w.jsx-3711146923 .user-icon.jsx-3711146923:hover,.w.jsx-3711146923 .user-icon.jsx-3711146923:focus{outline:none;}.w.jsx-3711146923 .user-icon.jsx-3711146923:hover circle,.w.jsx-3711146923 .user-icon.
2024-06-28 16:09:56 UTC	16384	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 4d 65 64 69 75 6d 3b 7d 2e 6d 6f 72 65 2d 64 65 74 61 69 6c 73 2e 6a 73 78 2d 33 37 36 38 30 35 37 34 38 36 20 2e 68 65 61 64 65 72 2e 6a 73 78 2d 33 37 36 38 30 35 37 34 38 36 20 73 76 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 31 35 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 31 35 73 20 6c Data Ascii: ;font-size:14px;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;font-family:AvenirNextforINTUIT-Medium;}.more-details.jsx-3768057486 .header.jsx-3768057486 svg{-webkit-transition:all 0.15s linear;transition:all 0.15s l
2024-06-28 16:09:56 UTC	16384	IN	Data Raw: 2e 33 38 32 35 37 76 35 2e 30 31 37 35 33 68 32 2e 31 36 33 34 56 35 2e 36 33 39 35 63 30 2d 31 2e 31 37 39 33 33 2e 37 39 33 38 2d 31 2e 39 36 38 36 34 20 31 2e 38 33 36 36 2d 31 2e 39 36 38 36 34 20 31 2e 30 34 32 38 20 30 20 31 2e 38 33 36 36 2e 37 38 39 33 31 20 31 2e 38 33 36 36 20 31 2e 39 36 38 36 34 76 34 2e 37 36 30 36 48 34 36 6c 2d 2e 30 30 36 32 2d 35 2e 30 31 37 35 33 5a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 68 31 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 78 2d 33 37 31 31 31 34 36 39 32 33 20 66 6c 65 78 20 66 6c 65 78 2d 61 6e 79 22 3e 3c 64 69 76 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 73 69 67 Data Ascii: .38257v5.01753h2.1634V5.6395c0-1.17933.7938-1.96864 1.8366-1.96864 1.0428 0 1.8366.78931 1.8366 1.96864v4.7606H46l-.0062-5.01753Z"></path></svg></h1><div class="jsx-3711146923 w"><div class="jsx-3711146923 flex flex-any"><div tabindex="0" data-testid="sig
2024-06-28 16:09:56 UTC	735	IN	Data Raw: 74 42 65 66 6f 72 65 28 6e 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 5f 6c 6f 61 64 4f 70 74 69 6f 6e 73 20 3d 20 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 6e 61 6c 79 74 69 63 73 45 72 72 6f 72 20 3d 20 65 72 72 6f 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 53 4e 49 50 50 45 54 5f 56 45 52 53 49 4f 4e 20 3d 20 22 34 2e 31 2e 30 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 61 64 28 Data Ascii: tBefore(n, a); analytics._loadOptions = e } catch (error) { window.analyticsError = error } }; analytics.SNIPPET_VERSION = "4.1.0"; analytics.load(
2024-06-28 16:09:56 UTC	16384	IN	Data Raw: 61 73 65 5f 31 2e 32 34 2e 34 2d 63 61 35 38 39 66 34 2c 73 65 6e 74 72 79 2d 74 72 61 6e 73 61 63 74 69 6f 6e 3d 25 32 46 2c 73 65 6e 74 72 79 2d 70 75 62 6c 69 63 5f 6b 65 79 3d 65 62 65 33 62 32 63 37 63 32 31 32 34 37 65 62 61 65 65 31 37 63 35 62 66 34 63 61 36 37 63 33 2c 73 65 6e 74 72 79 2d 74 72 61 63 65 5f 69 64 3d 61 30 66 36 38 38 66 61 65 35 32 65 34 64 63 35 39 35 36 64 39 39 63 64 61 35 64 34 38 35 65 37 2c 73 65 6e 74 72 79 2d 73 61 6d 70 6c 65 5f 72 61 74 65 3d 30 2e 32 22 7d 2c 22 69 6e 69 74 69 61 6c 52 65 64 75 78 53 74 61 74 65 22 3a 7b 22 73 61 6c 65 22 3a 7b 22 63 6f 6e 74 61 63 74 22 3a 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 4e 65 77 20 55 73 65 72 22 2c 22 69 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 79 22 3a 7b 22 67 6c Data Ascii: ase_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7,sentry-sample_rate=0.2"},"initialReduxState":{"sale":{"contact":{"displayName":"New User","id":null,"entity":{"gl
2024-06-28 16:09:56 UTC	16384	IN	Data Raw: 3a 22 42 61 6c 61 6e 63 65 20 64 75 65 22 2c 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 42 41 4c 41 4e 43 45 5f 41 4d 4f 55 4e 54 22 3a 22 42 61 6c 61 6e 63 65 20 41 6d 6f 75 6e 74 22 2c 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 4f 55 54 53 54 41 4e 44 49 4e 47 5f 42 41 4c 41 4e 43 45 22 3a 22 4f 75 74 73 74 61 6e 64 69 6e 67 20 62 61 6c 61 6e 63 65 22 2c 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 44 55 45 5f 44 41 54 45 22 3a 22 44 75 65 20 64 61 74 65 22 2c 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 44 55 45 5f 4f 4e 22 3a 22 44 75 65 20 4f 6e 22 2c 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 43 4f 4e 56 45 4e 49 45 4e 43 45 5f 46 45 45 22 3a 22 43 6f 6e 76 65 6e 69 65 6e 63 65 20 66 65 65 22 2c 22 49 4e 56 4f 49 Data Ascii: :"Balance due","INVOICE_SUMMARY_BALANCE_AMOUNT":"Balance Amount","INVOICE_SUMMARY_OUTSTANDING_BALANCE":"Outstanding balance","INVOICE_SUMMARY_DUE_DATE":"Due date","INVOICE_SUMMARY_DUE_ON":"Due On","INVOICE_SUMMARY_CONVENIENCE_FEE":"Convenience fee","INVOI
2024-06-28 16:09:56 UTC	16384	IN	Data Raw: 74 6c 79 20 64 6f 77 6e 20 66 6f 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 20 70 6c 65 61 73 65 20 74 72 79 20 74 6f 20 72 65 66 72 65 73 68 20 74 68 69 73 20 70 61 67 65 20 69 6e 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 2e 22 2c 22 42 4c 4f 43 4b 5f 50 41 59 4d 45 4e 54 53 5f 50 41 59 50 41 4c 5f 48 45 41 44 45 52 5f 44 55 45 5f 44 41 54 45 22 3a 22 50 61 79 69 6e 67 20 77 69 74 68 20 50 61 79 50 61 6c 20 69 73 6e 27 74 20 61 76 61 69 6c 61 62 6c 65 20 72 69 67 68 74 20 6e 6f 77 22 2c 22 42 4c 4f 43 4b 5f 50 41 59 4d 45 4e 54 53 5f 4e 41 4e 4f 50 41 59 5f 42 41 4e 4b 5f 48 45 41 44 45 52 5f 44 55 45 5f 44 41 54 45 22 3a 22 50 61 79 69 6e 67 20 62 79 20 62 61 6e 6b 20 74 72 61 6e 73 66 65 72 20 69 73 6e 27 74 20 61 76 61 69 6c 61 62 6c 65 20 72 69 67 68 Data Ascii: tly down for maintenance, please try to refresh this page in a few minutes.","BLOCK_PAYMENTS_PAYPAL_HEADER_DUE_DATE":"Paying with PayPal isn't available right now","BLOCK_PAYMENTS_NANOPAY_BANK_HEADER_DUE_DATE":"Paying by bank transfer isn't available righ
2024-06-28 16:09:56 UTC	6232	IN	Data Raw: 44 41 4c 5f 52 45 46 45 52 52 41 4c 5f 48 45 41 44 45 52 22 3a 22 44 6f 20 79 6f 75 20 6b 6e 6f 77 20 61 6e 79 6f 6e 65 20 77 68 6f 20 77 6f 75 6c 64 20 62 65 6e 65 66 69 74 20 66 72 6f 6d 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 7b 63 6f 6d 70 61 6e 79 4e 61 6d 65 7d 3f 22 2c 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 52 45 46 45 52 52 41 4c 5f 46 4e 41 4d 45 22 3a 22 46 69 72 73 74 20 6e 61 6d 65 22 2c 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 52 45 46 45 52 52 41 4c 5f 4c 4e 41 4d 45 22 3a 22 4c 61 73 74 20 6e 61 6d 65 22 2c 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 52 45 46 45 52 52 41 4c 5f 45 4d 41 49 4c 22 3a 22 45 6d 61 69 6c 22 2c 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 52 Data Ascii: DAL_REFERRAL_HEADER":"Do you know anyone who would benefit from working with {companyName}?","CRM_FEEDBACK_MODAL_REFERRAL_FNAME":"First name","CRM_FEEDBACK_MODAL_REFERRAL_LNAME":"Last name","CRM_FEEDBACK_MODAL_REFERRAL_EMAIL":"Email","CRM_FEEDBACK_MODAL_R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49722	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:56 UTC	654	OUT	GET /truste.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	566	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20028 Connection: close Date: Mon, 24 Jun 2024 14:01:12 GMT Last-Modified: Mon, 13 May 2019 07:16:15 GMT ETag: "6dcc0db5446ac677d011c9e531400a08" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ca0e18fe48e6994b3446a58a1e05c1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 0LPb_0I-TPpKjArqpc_NAHmB715V6emhjxSo-TwUHweMT2rPiDXYHQ== Age: 353326 Vary: Origin
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 33 2e 32 20 28 37 32 36 34 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 53.2 (72643) - https://sketchapp.com -->
2024-06-28 16:09:57 UTC	3644	IN	Data Raw: 34 38 2c 31 39 2e 34 34 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 35 36 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 37 31 33 34 20 4c 37 34 2e 30 37 36 38 2c 31 39 2e 37 32 36 34 20 43 37 34 2e 30 37 36 38 2c 31 39 2e 38 37 35 34 20 37 34 2e 31 33 37 38 2c 31 39 2e 39 39 35 34 20 37 34 2e 32 35 36 38 2c 32 30 2e 30 37 34 34 20 43 37 34 2e 33 37 33 38 2c 32 30 2e 31 35 32 34 20 37 34 2e 35 32 38 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 37 30 37 38 2c 32 30 2e 31 39 34 34 20 43 37 34 2e 38 33 31 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 39 34 32 38 2c 32 30 2e 31 37 36 34 20 37 35 2e 30 34 38 38 2c 32 30 2e 31 34 36 34 20 43 37 35 2e 31 35 33 38 2c 32 30 2e 31 31 36 34 20 37 35 2e 32 34 36 38 2c 32 30 2e 30 36 38 34 20 37 35 2e 33 32 36 38 2c 32 30 2e 30 30 37 34 Data Ascii: 48,19.4444 74.0768,19.5644 74.0768,19.7134 L74.0768,19.7264 C74.0768,19.8754 74.1378,19.9954 74.2568,20.0744 C74.3738,20.1524 74.5288,20.1944 74.7078,20.1944 C74.8318,20.1944 74.9428,20.1764 75.0488,20.1464 C75.1538,20.1164 75.2468,20.0684 75.3268,20.0074

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49720	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:56 UTC	628	OUT	GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1308 Connection: close Date: Thu, 27 Jun 2024 17:46:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT ETag: "f69d3b30a1263332b5a03cd48576c018" x-amz-server-side-encryption: AES256 x-amz-version-id: mhtUAj.w9pZBbYCTMupebW8YXj1lGOoi Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cb6a2c71695f851967f08ee8b2defc0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: N77Wi_RNQdRJD7JWrxITpw4ct_Rz2xmu3WXB1rvJz0AKW_1CEMeX6g== Age: 80604 Vary: Origin
2024-06-28 16:09:57 UTC	1308	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 39 33 5d 2c 7b 36 31 31 39 33 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 65 2c 72 29 7b 72 2e 72 28 65 29 3b 76 61 72 20 74 3d 72 28 39 35 36 32 37 29 2c 6f 3d 72 2e 6e 28 74 29 2c 69 3d 72 28 36 37 32 39 34 29 2c 6e 3d 72 28 35 31 32 34 35 29 2c 6c 3d 72 28 38 35 38 39 33 29 3b 65 2e 64 65 66 61 75 6c 74 3d 73 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 65 3d 31 32 2c 68 65 69 67 68 74 3a 72 3d 31 35 2c 63 6f 6c 6f 72 3a 74 3d 6e 2e 63 6f 6c 6f 72 73 2e 62 6c 61 63 6b 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 3d 22 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49721	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	628	OUT	GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 973 Connection: close Date: Fri, 28 Jun 2024 15:09:44 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "6b64452b69b814fa56db74365d21d6fe" x-amz-server-side-encryption: AES256 x-amz-version-id: cVKFO7zrnGL3LoFkUieWOJuRcyhX.MNq Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 459ec09472abb8544521a9b5cc6706ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: HyqukCs8u-VYLMj90_Fhko1WhXYCOGxxW9JiRRoZsNWa0Whn3FFVMQ== Age: 3614 Vary: Origin
2024-06-28 16:09:57 UTC	973	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 33 35 5d 2c 7b 33 39 38 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 63 2c 65 29 7b 65 2e 72 28 63 29 3b 65 28 36 37 32 39 34 29 3b 76 61 72 20 61 3d 65 28 35 31 32 34 35 29 2c 73 3d 65 28 38 35 38 39 33 29 3b 63 2e 64 65 66 61 75 6c 74 3d 6c 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 63 3d 32 34 2c 68 65 69 67 68 74 3a 65 3d 32 34 2c 63 6f 6c 6f 72 3a 68 3d 61 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 6c 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49730	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	638	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:57 UTC	648	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35228 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:18 GMT x-amz-version-id: eWJvGZvOztSr3hMiY_jDKfHtC28kH6yJ Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 28 Jun 2024 07:57:29 GMT ETag: "0acd962351f0b06e9a1f472e692ed680" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ddcfcdf22c7ea27fb2a066c5c7d99ad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 8nnDq2q7UmH0rPMo0INmpa81d1G3gdhYC3aHetcVGVMAXugvA-vrHg== Age: 29548
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 9c 00 10 00 00 00 01 a7 e0 00 00 89 38 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 87 0c 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 99 5c 83 c0 7c 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a2 33 07 20 0c 84 2f 5b c3 71 71 40 1c b7 57 80 f3 04 68 5b f3 ab e7 e6 be 80 ea b5 c3 e2 e8 b9 b5 28 78 83 ca ee 00 7a fb 94 81 f3 04 33 32 ad d5 2f 3f fb ff ff 08 71 0c 31 05 54 dd 0f 51 a5 2a a8 9e 35 b3 d7 c9 1e f7 3e 6b bd cd 8c a9 8f 3b 66 7d a2 a7 3b b7 4b 03 37 28 d9 d1 e9 5f 14 82 a9 1f 1d 9d e9 8d 59 a0 15 50 b7 4f 94 f4 05 15 28 01 52 05 fc 03 ad 55 c5 f2 a6 26 3e 00 77 19 10 40 07 00 00 00 00 d4 21 d8 93 d3 4d 57 91 a8 2e 75 3e 35 0b b0 6c 4a 69 ac 00 06 00 c0 0a 00 00 f8 02 00 Data Ascii: wOF28L``dP\\|6$(, 3 /[qq@Wh[(xz32/?q1TQ*5>k;f};K7(_YPO(RU&>w@!MW.u>5lJi
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 74 48 91 2b 20 7e 6e f7 45 dc 05 5c ec 51 20 63 7c e2 9a ee 37 5d 22 63 c2 90 7f 73 14 85 22 87 28 f3 b3 c4 95 d8 6f b1 08 09 d1 0d ac b7 6f 31 7c 28 bc ce fe b9 01 7e eb 96 3c 95 9b 92 6f 9e 9a 27 06 f3 7a e7 b6 e7 2d fe 75 3b 8a 02 3f 64 f0 a0 d0 b5 eb ce 35 60 99 c1 33 c5 af c4 9e 69 92 b9 ed a5 d5 ed 39 b3 f0 05 c0 3b 6d a3 13 b7 28 79 b9 92 a6 52 07 38 6c 97 e4 07 fd 34 6d 3d 15 f4 5e 8f a5 2c ca 4e fc 89 27 51 d9 16 90 17 49 61 d3 26 0b 64 a8 c6 3a 22 c7 48 65 da 04 f2 4d 3e 90 df f2 6a 6c 1c e8 fb 94 50 22 8b d3 f4 26 72 5c 22 21 94 50 ae b4 8c e6 42 73 3c fb 19 48 4b af 11 cb c2 fe ea a5 ba 44 81 da 91 3e fc 9f f3 d0 1e 42 df 72 6b b6 91 4c 0b 54 8d 0c 32 50 96 3f 4d 58 46 f0 77 9a 31 d0 ac 48 52 8d 46 4a 42 2a 35 c8 20 f3 aa 2a 44 29 36 e5 a6 af Data Ascii: tH+ ~nE\Q c\|7]"cs"(oo1\|(~<o'z-u;?d5`3i9;m(yR8l4m=^,N'QIa&d:"HeM>jlP"&r\"!PBs<HKD>BrkLT2P?MXFw1HRFJB5 D)6
2024-06-28 16:09:57 UTC	2460	IN	Data Raw: 3f 92 cc 73 c1 7d 6b b0 f8 9a bc 85 23 b1 b1 f5 37 79 2c 5d 60 c1 e4 92 ea 4d de 19 56 33 08 e3 98 c7 0a f0 53 a2 81 3b 17 fd db b9 80 d2 45 2f b7 5e 52 70 68 2b 3c 7e 22 b0 02 0f 57 f4 e3 2b 09 6f 9e b0 e7 c0 df 38 a0 dc 32 9a ce d7 99 0f ce 85 7b e3 cd 03 11 13 e8 3d c9 aa 31 b4 db 6a 24 9d 5f 1c 43 f5 5a c6 d7 0a 90 33 3a a1 87 4e 28 2f c3 22 3f 9f 29 d1 ba 73 db 66 b5 ae fb cf eb d6 db 4d 42 0e 9c a3 92 af e8 d3 0b c7 1d bb 33 6a 17 3e 17 2a cc 55 85 36 e3 b1 85 ea bf f6 f5 d7 3f b2 18 49 0e 4e ce d9 39 e4 60 11 9a 89 73 3d cf b9 7e d5 d3 b3 1b 12 a4 e6 27 c6 e8 84 b1 51 d6 58 96 52 4b 58 f0 60 94 d9 6c 1b f9 a5 55 40 95 01 53 c7 75 e9 1e 82 58 65 a4 a1 ca 78 19 15 79 00 d0 2b fb e3 c3 61 0c d8 cf e1 cb 4a a9 2d b1 cc f8 cd c7 bd 91 92 93 ba c0 96 56 Data Ascii: ?s}k#7y,]`MV3S;E/^Rph+<~"W+o82{=1j$_CZ3:N(/"?)sfMB3j>*U6?IN9`s=~'QXRKX`lU@SuXexy+aJ-V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49723	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	628	OUT	GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 955 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0SjUj_SyxzbHtNx3LqSXflnzqPfIVRZ0 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 28 Jun 2024 16:09:57 GMT ETag: "54378336344b3de8529083ef5d0707ab" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa63af50c0e4f34ddecf2b2d0dca224e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: TswupZgGuUCouxpn-vRVXRvTPNooUZWJ_3l_3U1lhpr-yHvsjTZSSw== Age: 3614 Vary: Origin
2024-06-28 16:09:57 UTC	955	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 36 38 5d 2c 7b 37 37 38 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6c 2c 63 29 7b 63 2e 72 28 6c 29 3b 63 28 36 37 32 39 34 29 3b 76 61 72 20 69 3d 63 28 35 31 32 34 35 29 2c 72 3d 63 28 38 35 38 39 33 29 3b 6c 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 6c 3d 32 34 2c 68 65 69 67 68 74 3a 63 3d 32 34 2c 63 6f 6c 6f 72 3a 73 3d 69 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49725	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	631	OUT	GET /_next/static/chunks/webpack-7dbfac4402a4034a.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5725 Connection: close Date: Thu, 27 Jun 2024 17:46:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "f3bc000b95a0ba19cef4c8ec9caadf8c" x-amz-server-side-encryption: AES256 x-amz-version-id: MIaItx4DfgX8VAQojbZpR1YsDMTlMMNM Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 416dae0837568c2bb7cea7ae5c6bba22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: ZiatJF_rCcem3vfhI5wkrpC1ZWOjR2oY_1vLc-JrU-7UVZeS16cv6w== Age: 80604 Vary: Origin
2024-06-28 16:09:57 UTC	5725	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 63 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 63 29 72 65 74 75 72 6e 20 63 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 74 5b 72 5d 3d 7b 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6f 3d 21 30 3b 74 72 79 7b 65 5b 72 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 6f 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49724	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	633	OUT	GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:57 UTC	637	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 130057 Connection: close Date: Thu, 27 Jun 2024 17:46:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "575f0dd2d17bbece23c4e3266a51a5c2" x-amz-server-side-encryption: AES256 x-amz-version-id: U8LfsFSEohTgBiIaty2n8SmvFyzn_gvX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: -Tc1tQuWYWdGwEdx9r2pOtgtU_sgbVaSrljEWoscrUZ_hX87pyUfJA== Age: 80604 Vary: Origin
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 36 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 39 36 30 38 36 29 2c 61 3d 6e 28 36 33 38 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args
2024-06-28 16:09:57 UTC	1514	IN	Data Raw: 61 2c 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 Data Ascii: a,o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedSt
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 2c 73 74 3d 6e 75 6c 6c 2c 63 74 3d 6e 65 77 20 4d 61 70 2c 66 74 3d 6e 65 77 20 4d 61 70 2c 64 74 3d 5b 5d 2c 70 74 3d 22 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 61 75 78 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 64 72 61 67 65 6e 64 20 64 72 61 67 73 74 61 72 74 20 64 72 6f 70 20 63 6f 6d 70 6f 73 69 74 69 6f 6e 65 6e 64 20 63 6f 6d 70 6f 73 69 74 69 6f 6e 73 74 61 72 74 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6b 65 79 75 70 20 69 6e 70 75 74 20 74 65 78 74 49 6e 70 75 74 20 63 6f 70 79 20 63 75 74 20 70 61 73 74 65 20 63 Data Ascii: ,st=null,ct=new Map,ft=new Map,dt=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste c
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 69 65 64 20 65 6e 63 72 79 70 74 65 64 20 65 6e 64 65 64 20 65 72 72 6f 72 20 6c 6f 61 64 65 64 64 61 74 61 20 6c 6f 61 64 65 64 6d 65 74 61 64 61 74 61 20 6c 6f 61 64 73 74 61 72 74 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 69 6e 67 20 70 72 6f 67 72 65 73 73 20 72 61 74 65 63 68 61 6e 67 65 20 73 65 65 6b 65 64 20 73 65 65 6b 69 6e 67 20 73 74 61 6c 6c 65 64 20 73 75 73 70 65 6e 64 20 74 69 6d 65 75 70 64 61 74 65 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 77 61 69 74 69 6e 67 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 50 72 3d 6e 65 77 20 53 65 74 28 22 63 61 6e 63 65 6c 20 63 6c 6f 73 65 20 69 6e 76 61 6c 69 64 20 6c 6f 61 64 20 73 63 72 6f 6c 6c 20 74 6f 67 67 6c 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 63 6f 6e 63 61 74 28 43 72 29 29 3b 66 75 6e Data Ascii: ied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),Pr=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));fun
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 3d 3d 3d 74 79 70 65 6f 66 20 6c 2e 67 65 74 53 6e 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6c 2e 55 4e 53 41 46 45 5f 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 7c 7c 28 74 3d 6c 2e 73 74 61 74 65 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 2e 55 4e 53 41 46 45 5f 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 6c 2e Data Ascii: ===typeof l.getSnapshotBeforeUpdate\|\|"function"!==typeof l.UNSAFE_componentWillMount&&"function"!==typeof l.componentWillMount\|\|(t=l.state,"function"===typeof l.componentWillMount&&l.componentWillMount(),"function"===typeof l.UNSAFE_componentWillMount&&l.
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 63 65 72 3a 66 6f 2c 75 73 65 52 65 66 3a 62 6f 2c 75 73 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 6f 28 73 6f 29 7d 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 50 6f 2c 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 6f 28 73 6f 29 2c 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 31 5d 3b 72 65 74 75 72 6e 20 45 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 31 3b 74 72 79 7b 72 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 74 7d 7d 29 2c 5b 65 5d 29 2c 6e 7d 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: cer:fo,useRef:bo,useState:function(){return fo(so)},useDebugValue:Po,useDeferredValue:function(e){var t=fo(so),n=t[0],r=t[1];return Eo((function(){var t=Ga.transition;Ga.transition=1;try{r(e)}finally{Ga.transition=t}}),[e]),n},useTransition:function(){var
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 61 2e 6f 6e 43 6c 69 63 6b 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 72 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 56 72 29 7d 66 6f 72 28 66 20 69 6e 20 5f 65 28 6e 2c 72 29 2c 6e 3d 6e 75 6c 6c 2c 61 29 69 66 28 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 6e 75 6c 6c 21 3d 61 5b 66 5d 29 69 66 28 22 73 74 79 6c 65 22 3d 3d 3d 66 29 7b 76 61 72 20 73 3d 61 5b 66 5d 3b 66 6f 72 28 6f 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6e 7c 7c 28 6e 3d 7b 7d 29 2c 6e 5b 6f 5d 3d 22 22 29 7d 65 6c 73 65 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 21 Data Ascii: ypeof a.onClick&&"function"===typeof r.onClick&&(e.onclick=Vr)}for(f in _e(n,r),n=null,a)if(!r.hasOwnProperty(f)&&a.hasOwnProperty(f)&&null!=a[f])if("style"===f){var s=a[f];for(o in s)s.hasOwnProperty(o)&&(n\|\|(n={}),n[o]="")}else"dangerouslySetInnerHTML"!
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 69 28 65 29 7b 76 61 72 20 74 3d 57 6c 28 29 3b 72 65 74 75 72 6e 20 51 6c 28 39 39 2c 52 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 74 29 29 2c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 52 69 28 65 2c 74 29 7b 64 6f 7b 46 69 28 29 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 65 69 29 3b 69 66 28 30 21 3d 3d 28 34 38 26 4f 75 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 32 37 29 29 3b 76 61 72 20 6e 3d 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 65 2e 66 69 6e 69 73 68 65 64 4c 61 6e 65 73 3d 30 2c 6e 3d 3d 3d 65 2e 63 75 72 72 65 6e 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f Data Ascii: )}function Oi(e){var t=Wl();return Ql(99,Ri.bind(null,e,t)),null}function Ri(e,t){do{Fi()}while(null!==ei);if(0!==(48&Ou))throw Error(o(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(o
2024-06-28 16:09:57 UTC	13855	IN	Data Raw: 6c 28 39 38 2c 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 6e 2c 72 2c 6c 29 29 7d 66 69 6e 61 6c 6c 79 7b 30 3d 3d 3d 28 4f 75 3d 61 29 26 26 28 71 75 28 29 2c 4b 6c 28 29 29 7d 7d 2c 46 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 30 3d 3d 3d 28 34 39 26 4f 75 29 26 26 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 69 29 7b 76 61 72 20 65 3d 6c 69 3b 6c 69 3d 6e 75 6c 6c 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 69 72 65 64 4c 61 6e 65 73 7c 3d 32 34 26 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 2c 76 69 28 65 2c 24 6c 28 29 29 7d 29 29 7d 4b 6c 28 29 7d 28 29 2c 46 69 28 29 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 75 3b 4f 75 7c 3d 32 3b 74 72 79 7b 72 65 Data Ascii: l(98,e.bind(null,t,n,r,l))}finally{0===(Ou=a)&&(qu(),Kl())}},Fe=function(){0===(49&Ou)&&(function(){if(null!==li){var e=li;li=null,e.forEach((function(e){e.expiredLanes\|=24&e.pendingLanes,vi(e,$l())}))}Kl()}(),Fi())},Ie=function(e,t){var n=Ou;Ou\|=2;try{re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49726	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	640	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:57 UTC	648	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35152 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:29 GMT x-amz-version-id: ER4n9r0bgQC73W_rMirrtGRmEaqFzUq9 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 28 Jun 2024 07:57:29 GMT ETag: "476fe09cbbbbf74ba00b93f8595ee5ed" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 411234c039d8f1de63b7f2192e5e24d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: VwYE1kAbB0Kfg-BrMvGzIC9jNLzCOGVaZGw4vAknImF7gK5OzPHW5A== Age: 29549
2024-06-28 16:09:57 UTC	15736	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 50 00 10 00 00 00 01 a5 08 00 00 88 ee 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 8d 5e 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 8c 44 83 b8 05 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a3 1d 07 20 0c 84 2f 5b 08 71 71 04 3d ed f8 48 78 b8 6d 00 ec d6 e1 51 cd ca 07 c4 01 b7 5f 09 75 a7 3b 3f 2c b3 c4 3e c1 dc 9c 45 7c c8 a1 e6 6d 66 44 8e 7c b9 64 ff ff ff 67 26 0d 39 2c b9 5a 72 a5 14 60 db ff 3f 49 91 0d 23 91 15 63 60 8c 63 90 35 94 e2 29 6c f1 3c 2e dd ab ea a6 7d ad 48 1c 27 5f d4 1c f8 d8 d2 9c b5 de 3b 1a 55 e4 8a 4e b9 19 22 15 3d 2d 9c 5e 2e 4b 76 71 9e 90 91 da 2b ac c5 74 e7 23 ec 15 86 1a c9 c1 db 70 77 d8 57 85 12 cd a4 60 a2 03 16 55 c8 b8 12 1f 6a 13 a9 44 Data Ascii: wOF2PL^``dPD6$(, /[qq=HxmQ_u;?,>E\|mfD\|dg&9,Zr`?I#c`c5)l<.}H'_;UN"=-^.Kvq+t#pwW`UjD
2024-06-28 16:09:57 UTC	16244	IN	Data Raw: 4c 8d b0 78 f8 13 ae 22 2f 47 fc 78 5d 0f fb 2d ce 49 c1 de fb d6 2f ec 7e 2e ad 1e a3 58 a3 9b e4 ad 2d 8a b5 41 bf 66 6d 67 db 7a a5 df 36 ce 2a 87 d4 c3 d7 b3 90 72 a3 0e 12 93 39 07 3f bb 76 98 6d f1 a6 dc 1c 7c 58 6a 72 31 38 8c c0 2f aa 5f fc 34 f0 fa 58 ed 6c 5b 32 6c 1d c1 27 d5 00 79 a7 a1 4c 56 eb 3b b9 9e 20 ab 5b 6f e2 74 05 bc 3d 4c e3 84 ae 5a 7a aa 57 74 6a b3 79 b7 d4 b8 bb ab e1 eb 74 12 2e 70 1a 6e 2e 71 14 7e 35 17 b0 6e db 09 da 26 e7 30 3c 5c 25 37 e8 15 15 11 b2 f1 ec e1 01 83 45 c2 17 39 98 df 5f 27 d4 f9 b9 de 88 44 a9 f0 f0 03 f8 e7 3a 8b de e3 97 ac 30 8a 3c 03 98 1d d4 a2 5c 45 29 19 ec 69 86 5c 99 e6 ed 6b 75 fc b6 de 94 64 96 20 cd a2 64 52 b9 2e 14 51 af 6b 2f 6d 94 86 e4 dd 04 8f 98 12 38 fd 97 3c 8f d1 17 b6 ad 69 b6 30 fb Data Ascii: Lx"/Gx]-I/~.X-Afmgz6*r9?vm\|Xjr18/_4Xl[2l'yLV; [ot=LZzWtjyt.pn.q~5n&0<\%7E9_'D:0<\E)i\kud dR.Qk/m8<i0
2024-06-28 16:09:57 UTC	3172	IN	Data Raw: 20 2d b3 c9 a3 f3 13 0a 74 f5 07 37 41 69 15 e1 93 f7 1d 66 7c e3 80 bb 4c 06 9b 66 b0 bf 4d c7 fb 14 59 3a 91 eb eb c5 cd 9c 19 c6 06 5f ac 16 f9 5d 8b 9c 7a b3 70 10 bf fe 74 6f 87 71 0f cb e6 76 83 7e f7 b6 d1 3a 1d 5d e3 cc bd 1b 93 dd 87 eb f5 41 96 c5 68 11 ba 09 41 10 dd fc a9 c3 15 45 6e dd 0f 05 2e 43 2a 3f 26 b1 9d 27 1e df 6f 4a 1c 36 76 41 3f b9 73 17 cc eb 3d c6 5d 1a db 12 77 41 f4 5f 73 9b da ff ef 76 c0 ff 14 4a f9 92 c2 2a 0a 35 17 3b 31 84 e0 cd 32 d9 bd be b3 c5 3e 2a 59 19 70 b7 80 68 62 25 00 82 c0 bb 1c b1 77 95 7c d6 e9 45 b7 61 30 1a 63 fb 37 54 22 82 0f 64 71 73 ec f0 1e a7 24 d8 1e 77 25 11 27 67 ca b2 cb 1e d9 f2 23 48 1a d8 23 91 d0 44 42 64 00 3e da 8c 87 10 d3 d4 af 18 a9 a8 e4 6c eb 72 f3 ca 31 7c 2e ef b2 85 6e b2 cd 62 d3 Data Ascii: -t7Aif\|LfMY:_]zptoqv~:]AhAEn.C?&'oJ6vA?s=]wA_svJ5;12>*Yphb%w\|Ea0c7T"dqs$w%'g#H#DBd>lr1\|.nb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49727	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	582	OUT	GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:57 UTC	764	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 105530 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Fri, 31 May 2024 22:37:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 58Sz48hada2o.h1q0i.QPc.mFzfEpCAS Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 28 Jun 2024 16:09:58 GMT Cache-Control: public, max-age=120 ETag: "f39baa3e77ca645a1ca554b5c7feef30" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d5fb859c39a16d7f218b4c7fb1528ad6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: O4vEvFwQwhr7OFXRmym9A2wjCBdMlDyTHtC22MAcWFQkSEY-4KP5RQ==
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 74 5b 72 5d 3d 69 28 6e 2c 65 29 7d 29 29 2c 74 7d 28 74 2c 65 29 3a 72 2e 69 73 28 74 2c 65 29 3f 72 2e 70 61 72 73 65 28 74 29 3a 74 7d 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 38 32 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 2f 5e 28 5c 64 7b 34 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 29 3f 29 3f 28 3f 3a 28 5b 20 54 5d 29 28 5c 64 7b 32 7d 29 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 5b 2c 5c 2e 5d 28 5c 64 7b 31 2c 7d 29 29 3f 29 3f 28 3f 3a 28 5a 29 Data Ascii: .isArray(t)?function(t,e){return t.forEach((function(n,r){t[r]=i(n,e)})),t}(t,e):r.is(t,e)?r.parse(t):t}t.exports=i},8264:function(t,e){"use strict";var n=/^(\d{4})(?:-?(\d{2})(?:-?(\d{2}))?)?(?:([ T])(\d{2}):?(\d{2})(?::?(\d{2})(?:[,\.](\d{1,}))?)?(?:(Z)
2024-06-28 16:09:58 UTC	12288	IN	Data Raw: 70 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 6f 3d 7b 6e 65 78 74 3a 75 28 30 29 2c 74 68 72 6f 77 3a 75 28 31 29 2c 72 65 74 75 72 6e 3a 75 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 6f 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 6f 3b 66 75 6e 63 74 69 6f 6e 20 75 28 75 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 6f 26 26 28 6f 3d 30 2c 75 5b 30 5d 26 Data Ascii: ps:[]};return o={next:u(0),throw:u(1),return:u(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function u(u){return function(a){return function(u){if(n)throw new TypeError("Generator is already executing.");for(;o&&(o=0,u[0]&
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 65 36 30 61 62 32 62 32 62 66 38 22 7d 5b 74 5d 2b 22 2e 6a 73 22 7d 2c 73 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 3d 7b 7d 2c 72 3d 22 40 73 65 67 6d 65 6e 74 2f 61 6e 61 6c 79 74 69 63 73 2d 6e 65 78 74 3a 22 2c 73 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 69 66 28 6e 5b 74 5d 29 6e 5b 74 5d 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 7b 76 61 72 20 75 2c 61 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 66 6f 72 28 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 6c 3d 30 3b 6c 3c 63 2e 6c Data Ascii: e60ab2b2bf8"}[t]+".js"},s.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n={},r="@segment/analytics-next:",s.l=function(t,e,i,o){if(n[t])n[t].push(e);else{var u,a;if(void 0!==i)for(var c=document.getElementsByTagName("script"),l=0;l<c.l
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 50 72 6f 6d 69 73 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 66 2e 73 29 28 29 3f 5b 32 2c 5b 5d 5d 3a 5b 32 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 2e 63 61 6c 6c 28 74 68 69 73 29 5d 7d 29 29 7d 29 29 7d 2c 6e 7d 28 4e 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 30 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 Data Ascii: rototype.flush=function(){return(0,t.mG)(this,void 0,Promise,(function(){return(0,t.Jh)(this,(function(t){return(0,f.s)()?[2,[]]:[2,e.prototype.flush.call(this)]}))}))},n}(N);function q(t){for(var e=t.constructor.prototype,n=0,r=Object.getOwnPropertyNames
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6c 69 61 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 28 30 2c 74 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 50 72 6f 6d 69 73 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 75 2c 61 2c 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 28 30 2c 74 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 3d 6c 74 28 65 29 2c 72 3d 70 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 65 29 2c 69 3d 72 5b 30 5d 2c 6f 3d 72 5b 31 5d 2c 73 3d 72 5b 32 5d 2c 75 3d 72 Data Ascii: ))},n.prototype.alias=function(){for(var e=[],n=0;n<arguments.length;n++)e[n]=arguments[n];return(0,t.mG)(this,void 0,Promise,(function(){var n,r,i,o,s,u,a,c=this;return(0,t.Jh)(this,(function(t){return n=lt(e),r=p.apply(void 0,e),i=r[0],o=r[1],s=r[2],u=r
2024-06-28 16:09:58 UTC	11322	IN	Data Raw: 3d 3d 6f 3f 6f 3a 7b 7d 2c 79 3d 5b 5d 3b 72 65 74 75 72 6e 20 61 2e 73 6f 72 74 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 6e 75 6c 6c 21 3d 3d 28 65 3d 76 5b 74 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 5b 5d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 79 2e 70 75 73 68 28 74 29 7d 29 29 7d 29 29 2c 21 31 21 3d 3d 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 61 64 64 42 75 6e 64 6c 65 64 4d 65 74 61 64 61 74 61 29 26 26 28 6e 2e 5f 6d 65 74 61 64 61 74 61 3d 28 30 2c 74 2e 70 69 29 28 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 6e 2e 5f 6d 65 74 61 64 61 74 61 29 2c 7b 62 75 6e 64 6c 65 64 3a 61 2e 73 6f 72 74 28 29 2c 75 6e 62 75 6e 64 6c 65 64 3a 63 2e 73 6f 72 74 28 Data Ascii: ==o?o:{},y=[];return a.sort().forEach((function(t){var e;(null!==(e=v[t])&&void 0!==e?e:[]).forEach((function(t){y.push(t)}))})),!1!==(null==r?void 0:r.addBundledMetadata)&&(n._metadata=(0,t.pi)((0,t.pi)({},n._metadata),{bundled:a.sort(),unbundled:c.sort(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49729	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	641	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:57 UTC	648	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35236 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:24 GMT x-amz-version-id: EYWb1BkOwqM0JBhy7AHAPt11DikRQL3u Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 28 Jun 2024 11:08:08 GMT ETag: "4451062c2d96d0eb928e7a55a7c7da34" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec87b0eaae98600539e64627bd582e82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 9sT3OGYrvYgIVk5E3ZqKun1aUZ8guQOpvcE79Xm8ePX1oON-YgA4vQ== Age: 18110
2024-06-28 16:09:57 UTC	15736	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 a4 00 10 00 00 00 01 a7 bc 00 00 89 41 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 8b 6c 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 94 40 83 be 56 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a2 4b 07 20 0c 84 2f 5b 15 73 71 01 4f 36 7a f4 40 e6 6d 33 ed 95 62 82 b4 37 70 72 4b b8 07 3d b7 4c 20 46 6f cb f1 08 ba 6d 33 42 3b 95 de ac c7 9d 8b 59 10 66 ff ff 7f 4f 50 32 6e ff 71 5b 05 84 87 00 cd ea 25 23 2a 6a 4c 86 f4 3e 31 c9 71 6a 45 29 7a 4d 77 c3 95 33 28 e4 a9 8c f9 f2 9a 95 e9 d2 1e 60 cb 32 7d 37 8f bc f9 95 99 fb 7b 89 19 43 90 6a ac ed 16 ed b7 bb 9e 54 84 d6 3f 30 89 74 ae 15 5d 66 fc 77 09 0e 59 a5 eb c8 1e 00 31 d3 9d 95 0e 20 00 c1 60 00 43 2c bd e3 6f 25 70 7f b0 Data Ascii: wOF2ALl``dP@V6$(, K /[sqO6z@m3b7prK=L Fom3B;YfOP2nq[%#*jL>1qjE)zMw3(`2}7{CjT?0t]fwY1 `C,o%p
2024-06-28 16:09:57 UTC	16384	IN	Data Raw: c4 a3 65 82 d1 0e fb 27 1f 4c d5 04 65 e2 63 87 1f 41 35 2c a5 4f 03 b4 ef 1d c6 3e d3 62 09 87 4e 17 ef 93 44 5f ef b8 b4 00 30 e5 9f 05 c1 1b 4e 38 a5 83 f3 77 09 c9 98 93 f5 90 d2 ff 01 ae 6e 9b 4f f6 d1 b0 4f 89 7f 89 9c cf 1b 34 ec 0f 28 97 d4 d5 0c cb fc ee 65 6a c8 ab 59 55 c5 97 69 6a 39 36 1f bd 41 a5 a6 35 da bc 35 1c 8d 26 25 a4 c6 0e 3f b4 0d 81 ad 51 d3 e2 52 23 77 de d4 dd ed 12 94 e4 92 46 5a 51 b3 0d 2d 54 bf 85 53 ab 33 70 ea 7c e6 56 8a 21 7f 9f f9 cf ae 92 f3 87 8f c4 53 e7 7c 51 dc 3e 8d 36 75 f8 ab 78 fc aa 29 0a ec 99 61 b1 ff 53 07 aa b5 b4 f5 e2 f2 c4 f2 84 4b 16 42 f3 6a 8d 94 ef b7 44 5e c5 64 e9 d6 05 df 80 e4 40 21 12 5c 2c 52 c4 0e a7 58 f5 ac da c3 b5 96 7a 0b 6e df 68 71 02 87 b3 f2 aa 13 30 7d 1d 0c a9 dc ee ff 25 f5 47 4b Data Ascii: e'LecA5,O>bND_0N8wnOO4(ejYUij96A55&%?QR#wFZQ-TS3p\|V!S\|Q>6ux)aSKBjD^d@!\,RXznhq0}%GK
2024-06-28 16:09:57 UTC	3116	IN	Data Raw: fb d9 d9 ea 7f ca 11 39 6b 69 bf 02 ee 3f 4b db a5 ed e1 e0 80 06 9c f3 39 f6 13 9c ac 54 d1 8e da b0 d9 6a dc 61 5e d7 8e 0c f5 95 83 96 0a 47 3a cc a7 83 f5 b9 65 a2 c5 5d d8 27 2e b7 3b 89 f5 75 c9 8f fb 88 2f 78 9a 4a ab 61 5c d4 bc 0d ae 82 e0 7f 07 cf 80 bf 6f e1 ce ff df d5 44 e0 32 7d e6 a1 3f 43 3f 36 5c fd 3e 9a 5f f3 4b 45 3f 03 23 8f 21 ea 5b 03 80 20 40 72 bc a8 e0 c9 e3 d8 d9 f2 5e 87 a4 69 86 8d ff 47 19 01 23 92 c5 37 42 51 60 e7 f7 5d 99 f8 5c 63 54 98 f5 d4 17 9e c5 85 32 9a 5a 03 4b 0a 75 32 bd 70 32 34 6a 6d 0c ec 15 d4 34 fe dc 51 d8 b3 d9 ec 6b fa 28 85 f9 ad 12 9c 0d 35 2d 6c 3a f8 ce bd 35 ed f6 11 47 61 26 a7 cf d0 7a a8 64 fc f3 96 87 14 ed 8e 86 82 ab 12 1d b5 75 09 7a ca e2 f2 85 70 1e 66 7d 31 96 af b3 2b 1a 45 c9 92 c5 dd 85 Data Ascii: 9ki?K9Tja^G:e]'.;u/xJa\oD2}?C?6\>_KE?#![ @r^iG#7BQ`]\cT2ZKu2p24jm4Qk(5-l:5Ga&zduzpf}1+E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49731	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:57 UTC	628	OUT	GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 75858 Connection: close Date: Thu, 27 Jun 2024 17:46:35 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "650f21ac4fd9546e505724abe1db85e7" x-amz-server-side-encryption: AES256 x-amz-version-id: 0QTbIbK6kZmP5jqShFdjsARgPpyyKRFN Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c27d2e9d4c6e59d1b92ac8671f0bfb9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: x6JNHYPeXpZ1yyzkq1mXgLpv_TyIJT1tG91o5mESFxe1UGFLD1xlgw== Age: 80604 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 36 30 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 61 2c 69 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 61 5d 28 69 29 2c 6c 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 75 29 7d 73 2e 64 6f 6e 65 3f 74 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var
2024-06-28 16:09:58 UTC	10463	IN	Data Raw: 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 38 38 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 Data Ascii: lt&&null!==t.default)&&"undefined"===typeof t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},8854:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0})
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 69 66 28 68 26 26 64 2e 68 61 73 28 68 29 29 72 65 74 75 72 6e 3b 69 66 28 63 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 20 64 2e 61 64 64 28 68 29 2c 76 6f 69 64 20 63 2e 67 65 74 28 74 29 2e 74 68 65 6e 28 6e 2c 75 29 3b 63 6f 6e 73 74 20 70 3d 28 29 3d 3e 7b 6f 26 26 6f 28 29 2c 64 2e 61 64 64 28 68 29 7d 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 79 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 29 2c 6e 26 26 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 2c 70 28 29 7d 29 29 2c 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 Data Ascii: if(h&&d.has(h))return;if(c.has(t))return d.add(h),void c.get(t).then(n,u);const p=()=>{o&&o(),d.add(h)},m=document.createElement("script"),y=new Promise(((e,t)=>{m.addEventListener("load",(function(t){e(),n&&n.call(this,t),p()})),m.addEventListener("error
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 3d 5f 2e 67 65 74 52 6f 75 74 65 4d 61 74 63 68 65 72 28 74 29 28 65 29 3b 6e 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 47 2c 6e 29 7d 7d 69 66 28 22 74 79 70 65 22 69 6e 20 6c 29 72 65 74 75 72 6e 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 3d 3d 3d 6c 2e 74 79 70 65 3f 73 2e 63 68 61 6e 67 65 28 65 2c 6c 2e 6e 65 77 55 72 6c 2c 6c 2e 6e 65 77 41 73 2c 61 29 3a 28 58 28 7b 75 72 6c 3a 6c 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2c 72 6f 75 74 65 72 3a 73 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 29 3d 3e 7b 7d 29 29 29 3b 6c 65 74 7b 65 72 72 6f 72 3a 75 2c 70 72 6f 70 73 3a 64 2c 5f 5f 4e 5f 53 53 47 3a 66 2c 5f 5f 4e 5f 53 53 50 3a 6d 7d 3d 6c 3b 63 6f 6e 73 74 20 76 3d 6c 2e 43 6f 6d 70 6f 6e 65 6e 74 3b 69 66 28 76 26 26 76 2e Data Ascii: =_.getRouteMatcher(t)(e);n&&Object.assign(G,n)}}if("type"in l)return"redirect-internal"===l.type?s.change(e,l.newUrl,l.newAs,a):(X({url:l.destination,router:s}),new Promise((()=>{})));let{error:u,props:d,__N_SSG:f,__N_SSP:m}=l;const v=l.Component;if(v&&v.
2024-06-28 16:09:58 UTC	16243	IN	Data Raw: 75 74 65 4d 61 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 72 65 3a 74 2c 67 72 6f 75 70 73 3a 72 7d 3d 65 3b 72 65 74 75 72 6e 20 65 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 74 2e 65 78 65 63 28 65 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 61 3d 65 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 6e 2e 44 65 63 6f 64 65 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 64 65 63 6f 64 65 20 70 61 72 61 6d 22 29 7d 7d 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 72 5b 65 5d 2c 6e 3d 6f 5b 74 2e 70 6f Data Ascii: uteMatcher=function(e){let{re:t,groups:r}=e;return e=>{const o=t.exec(e);if(!o)return!1;const a=e=>{try{return decodeURIComponent(e)}catch(t){throw new n.DecodeError("failed to decode param")}},i={};return Object.keys(r).forEach((e=>{const t=r[e],n=o[t.po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49732	18.239.83.87	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	417	OUT	GET /truste.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	566	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20028 Connection: close Date: Mon, 24 Jun 2024 14:01:12 GMT Last-Modified: Mon, 13 May 2019 07:16:15 GMT ETag: "6dcc0db5446ac677d011c9e531400a08" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 87e83cc6e8f384d40eab78133e901302.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: Jc9FLuv6nJrN3YFmXb1HAAbWlVyCzLTVsvsR8eKUk-ijJJjFHkW_pg== Age: 353327 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 33 2e 32 20 28 37 32 36 34 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 53.2 (72643) - https://sketchapp.com -->
2024-06-28 16:09:58 UTC	3644	IN	Data Raw: 34 38 2c 31 39 2e 34 34 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 35 36 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 37 31 33 34 20 4c 37 34 2e 30 37 36 38 2c 31 39 2e 37 32 36 34 20 43 37 34 2e 30 37 36 38 2c 31 39 2e 38 37 35 34 20 37 34 2e 31 33 37 38 2c 31 39 2e 39 39 35 34 20 37 34 2e 32 35 36 38 2c 32 30 2e 30 37 34 34 20 43 37 34 2e 33 37 33 38 2c 32 30 2e 31 35 32 34 20 37 34 2e 35 32 38 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 37 30 37 38 2c 32 30 2e 31 39 34 34 20 43 37 34 2e 38 33 31 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 39 34 32 38 2c 32 30 2e 31 37 36 34 20 37 35 2e 30 34 38 38 2c 32 30 2e 31 34 36 34 20 43 37 35 2e 31 35 33 38 2c 32 30 2e 31 31 36 34 20 37 35 2e 32 34 36 38 2c 32 30 2e 30 36 38 34 20 37 35 2e 33 32 36 38 2c 32 30 2e 30 30 37 34 Data Ascii: 48,19.4444 74.0768,19.5644 74.0768,19.7134 L74.0768,19.7264 C74.0768,19.8754 74.1378,19.9954 74.2568,20.0744 C74.3738,20.1524 74.5288,20.1944 74.7078,20.1944 C74.8318,20.1944 74.9428,20.1764 75.0488,20.1464 C75.1538,20.1164 75.2468,20.0684 75.3268,20.0074

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49733	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	634	OUT	GET /_next/static/chunks/pages/_app-71ca81b130c00394.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1074763 Connection: close Date: Thu, 27 Jun 2024 17:46:36 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "953a4d6b67538e188e9b4cf4efb5154a" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: UohsE0u4UH7b1g.YY4INnXaC1WT3U5hk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1dd177f0f1668dc5abba6f90eb9da04c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: BagNYRfhE743iA_VIVrTDSaEhKZ-ZPUha7n9_CF0KC7WjMKKI3M5Pw== Age: 80603 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 2c 32 37 34 31 5d 2c 7b 32 35 36 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6b 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 45 72 72 6f 72 29 2c 21 65 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 74 29 7d 7d 2c 39 35 39 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var
2024-06-28 16:09:58 UTC	1514	IN	Data Raw: 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 6e 2c 6e 2b 74 2e 6c 65 6e 67 74 68 29 3d 3d 3d 74 7d 2c 71 3d 46 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 22 22 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 6f 3e 69 3b 29 7b 69 66 28 28 6e 3d 65 5b 69 2b 2b 5d 29 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 6e 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b Data Ascii: n)}:function(e,t,n){return e.slice(n,n+t.length)===t},q=F?String.fromCodePoint:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];for(var n,r="",o=e.length,i=0;o>i;){if((n=e[i++])>1114111)throw RangeError(n+" is not a valid code point");
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 30 2c 22 22 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 3b 21 74 68 69 73 2e 69 73 45 4f 46 28 29 3b 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 63 68 61 72 28 29 3b 69 66 28 31 32 33 3d 3d 3d 61 29 7b 69 66 28 28 73 3d 74 68 69 73 2e 70 61 72 73 65 41 72 67 75 6d 65 6e 74 28 65 2c 6e 29 29 2e 65 72 72 29 72 65 74 75 72 6e 20 73 3b 69 2e 70 75 73 68 28 73 2e 76 61 6c 29 7d 65 6c 73 65 7b 69 66 28 31 32 35 3d 3d 3d 61 26 26 65 3e 30 29 62 72 65 61 6b 3b 69 66 28 33 35 21 3d 3d 61 7c 7c 22 70 6c 75 72 61 6c 22 21 3d 3d 74 26 26 22 73 65 6c 65 63 74 6f Data Ascii: );return this.parseMessage(0,"",!1)},e.prototype.parseMessage=function(e,t,n){for(var i=[];!this.isEOF();){var a=this.char();if(123===a){if((s=this.parseArgument(e,n)).err)return s;i.push(s.val)}else{if(125===a&&e>0)break;if(35!==a\|\|"plural"!==t&&"selecto
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 69 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 49 4e 56 41 4c 49 44 5f 43 4f 4e 46 49 47 2c 74 2c 6e 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 54 29 28 74 2c 65 29 2c 74 7d 28 69 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 4d 49 53 53 49 4e 47 5f 44 41 54 41 2c 74 2c 6e 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 54 29 28 74 2c 65 29 2c 74 7d 28 69 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 Data Ascii: (i),s=function(e){function t(t,n){return e.call(this,r.INVALID_CONFIG,t,n)\|\|this}return(0,o.ZT)(t,e),t}(i),c=function(e){function t(t,n){return e.call(this,r.MISSING_DATA,t,n)\|\|this}return(0,o.ZT)(t,e),t}(i),l=function(e){function t(t,n,o){return e.call(t
2024-06-28 16:09:58 UTC	13721	IN	Data Raw: 64 65 22 7d 3b 72 65 74 75 72 6e 20 44 28 72 29 7d 2c 48 3d 7b 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 28 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 57 28 29 2c 6e 3d 4f 28 6c 29 2c 72 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 45 28 6c 2c 74 29 3b 76 61 72 20 6f 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 70 28 7b 6c 61 79 65 72 3a 22 6c 69 62 22 2c 61 70 70 47 72 6f 75 70 3a 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 61 70 70 47 72 6f 75 70 2c 61 73 73 65 74 41 6c 69 61 73 3a 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 61 73 73 65 74 41 6c 69 61 73 2c 63 6f 6e 74 65 78 74 3a 22 73 65 74 Data Ascii: de"};return D(r)},H={},W=function(){return G().replace(/-/g,"")},$=function(e){var t=W(),n=O(l),r=performance.now();E(l,t);var o=performance.now();return p({layer:"lib",appGroup:null==e?void 0:e.appGroup,assetAlias:null==e?void 0:e.assetAlias,context:"set
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 69 29 7d 7d 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 6c 65 61 72 28 29 7d 29 2c 6e 2e 63 6f 6e 74 69 6e 75 6f 75 73 50 72 6f 66 69 6c 69 6e 67 2e 6d 61 78 44 75 72 61 74 69 6f 6e 29 7d 72 65 74 75 72 6e 20 61 7d 28 65 2c 61 2c 6e 29 3b 6f 2e 70 75 73 68 28 56 28 73 2c 72 2c 65 2c 61 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 3a 76 61 72 20 63 3d 6d 65 28 7b 7d 2c 74 29 3b 63 2e 76 65 6e 64 6f 72 3d 6d 3b 76 61 72 20 6c 3d 5a 28 65 2c 63 2c 6e 29 3b 6f 2e 70 75 73 68 28 56 28 6c 2c 72 2c 65 2c 63 29 29 7d 7d 29 29 2c 6f 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6c 6f 67 67 65 72 26 26 64 28 65 2e 6c 6f 67 67 65 72 29 3b 76 61 72 20 6e 3d 66 65 28 65 2e 61 70 70 47 72 6f 75 70 2c 65 2e 61 Data Ascii: (i)}});setTimeout((function(){s.clear()}),n.continuousProfiling.maxDuration)}return a}(e,a,n);o.push(V(s,r,e,a));break;case m:var c=me({},t);c.vendor=m;var l=Z(e,c,n);o.push(V(l,r,e,c))}})),o},we=function(e,t){e.logger&&d(e.logger);var n=fe(e.appGroup,e.a
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 6f 75 74 22 3a 33 30 30 30 2c 22 76 65 6e 64 6f 72 73 22 3a 5b 22 54 4d 58 22 2c 22 42 43 22 5d 2c 22 70 72 6f 63 65 73 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 50 72 6f 66 69 6c 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6d 61 78 44 75 72 61 74 69 6f 6e 22 3a 33 36 30 30 30 30 30 7d 2c 22 6d 69 6e 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 7d 27 29 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 65 Data Ascii: out":3000,"vendors":["TMX","BC"],"processSession":true,"continuousProfiling":{"enabled":false,"maxDuration":3600000},"minTimeout":1500}')}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var i=t[r]={exports:{}};return e[r](i,i.exports,n),i.e
2024-06-28 16:09:58 UTC	1639	IN	Data Raw: 66 5d 26 26 65 28 69 5b 66 5d 29 7d 7d 7d 7d 28 65 2e 70 5b 30 5d 29 2c 74 28 65 2e 70 29 29 7d 2c 4b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 34 3d 3d 3d 65 2e 69 3f 6e 28 65 29 3a 72 28 65 29 7d 7d 29 7d 6e 2e 64 28 74 2c 7b 78 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 2c 6f 4d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 65 7d 7d 29 3b 76 61 72 20 55 2c 42 2c 48 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 2c 57 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 61 70 2c 24 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 65 74 2c 47 3d Data Ascii: f]&&e(i[f])}}}}(e.p[0]),t(e.p))},K:function(e){return 4===e.i?n(e):r(e)}})}n.d(t,{xC:function(){return Te},oM:function(){return xe}});var U,B,H="undefined"!=typeof Symbol&&"symbol"==typeof Symbol("x"),W="undefined"!=typeof Map,$="undefined"!=typeof Set,G=
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 43 28 65 2e 74 2c 74 29 7c 7c 74 20 69 6e 20 65 2e 74 3f 28 65 2e 52 5b 74 5d 3d 21 31 2c 4e 28 65 29 2c 6a 28 65 29 29 3a 64 65 6c 65 74 65 20 65 2e 52 5b 74 5d 2c 65 2e 6f 26 26 64 65 6c 65 74 65 20 65 2e 6f 5b 74 5d 2c 21 30 7d 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 68 28 65 29 2c 72 3d 52 65 66 6c 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 3b 72 65 74 75 72 6e 20 72 3f 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 31 21 3d 3d 65 2e 69 7c 7c 22 6c 65 6e 67 74 Data Ascii: operty:function(e,t){return void 0!==C(e.t,t)\|\|t in e.t?(e.R[t]=!1,N(e),j(e)):delete e.R[t],e.o&&delete e.o[t],!0},getOwnPropertyDescriptor:function(e,t){var n=h(e),r=Reflect.getOwnPropertyDescriptor(n,t);return r?{writable:!0,configurable:1!==e.i\|\|"lengt
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 65 5b 30 5d 29 29 7d 65 2e 65 78 70 6f 72 74 73 3d 75 7d 2c 31 32 32 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 31 30 34 34 29 28 29 2c 6f 3d 6e 28 34 30 32 31 30 29 2c 69 3d 72 26 26 6f 28 22 25 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 25 22 2c 21 30 29 3b 69 66 28 69 29 74 72 79 7b 69 28 7b 7d 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 31 7d 29 7d 63 61 74 63 68 28 6c 29 7b 69 3d 21 31 7d 76 61 72 20 61 3d 6e 28 33 33 34 36 34 29 2c 73 3d 6e 28 31 34 34 35 33 29 2c 63 3d 6e 28 32 37 32 39 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 Data Ascii: er"!==typeof e[0]))}e.exports=u},12296:function(e,t,n){"use strict";var r=n(31044)(),o=n(40210),i=r&&o("%Object.defineProperty%",!0);if(i)try{i({},"a",{value:1})}catch(l){i=!1}var a=n(33464),s=n(14453),c=n(27296);e.exports=function(e,t,n){if(!e\|\|"object"!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49734	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	628	OUT	GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28981 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 6FiZFoIntM4iW1bBSqG9bMk2mxxzj7BI Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 27 Jun 2024 17:46:36 GMT ETag: "37eb804273791af5f1a8acac5775fd06" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6a29cf21ce984f6a6d3f67cb902ef37e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: nGIC3k355ZYgnCofU38TI7fA0YJ1mthOTGZVtJN0wVTtUi4iBQrQxg== Age: 80603 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 35 39 5d 2c 7b 31 38 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 34 31 35 35 29 2c 73 3d 72 28 32 31 38 37 36 29 2e 42 75 66 66 65 72 2c 69 3d 72 28 39 33 30 29 2c 6f 3d 72 28 33 33 32 33 29 3b 63 6f 6e 73 74 20 61 3d 5b 22 73 74 72 61 74 65 67 79 22 2c 22 73 72 63 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 5d 2c 6c 3d 5b 22 73 74 72 61 74 65 67 79 22 5d 2c 63 3d 5b 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 2c 22 6e 6f 6e 63 65 22 5d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"]
2024-06-28 16:09:58 UTC	12398	IN	Data Raw: 6c 65 6d 65 6e 74 28 43 2c 6e 75 6c 6c 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4d 2c 6e 75 6c 6c 29 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 2c 6e 75 6c 6c 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2c 6e 75 6c 6c 29 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 50 2c 6e 75 6c 6c 29 29 29 7d 7d 2c 37 31 36 34 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 44 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4e 4f 44 45 Data Ascii: lement(C,null,_.default.createElement(M,null),_.default.createElement("body",null,_.default.createElement(b,null),_.default.createElement(P,null)))}},71647:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EDGE_UNSUPPORTED_NODE
2024-06-28 16:09:58 UTC	199	IN	Data Raw: 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 24 2f 2c 22 22 29 7d 3b 76 61 72 20 6e 2c 73 3d 28 6e 3d 72 28 36 37 32 39 34 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 64 65 66 61 75 6c 74 3a 6e 7d 2c 69 3d 72 28 37 31 36 34 37 29 3b 70 61 72 73 65 49 6e 74 28 73 2e 64 65 66 61 75 6c 74 2e 76 65 72 73 69 6f 6e 29 7d 2c 35 36 38 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 28 31 38 36 31 33 29 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 36 38 35 39 2d 30 65 33 31 38 63 61 32 34 62 34 62 36 31 33 37 2e 6a 73 2e 6d 61 70 Data Ascii: n e=e.replace(/\?$/,"")};var n,s=(n=r(67294))&&n.__esModule?n:{default:n},i=r(71647);parseInt(s.default.version)},56859:function(e,t,r){r(18613)}}]);//# sourceMappingURL=6859-0e318ca24b4b6137.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-28 16:09:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=259148 Date: Fri, 28 Jun 2024 16:09:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49735	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	628	OUT	GET /_next/static/chunks/3161-453b7f7fce0f2075.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17452 Connection: close Date: Thu, 27 Jun 2024 17:46:36 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT ETag: "4f08d7de67096486a0e610ed486ff262" x-amz-server-side-encryption: AES256 x-amz-version-id: eZDHBpkhaOKoyh.RfzjkgKvu1Bce3K5D Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ffde4ac468ae53bebcf62edbe5888ab6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: gY9AmUe85Li8W94TsL5qKueonBR9LS1O9_Ibd93mEoEjEhsksg9UFw== Age: 80603 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 36 31 5d 2c 7b 32 33 31 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6c 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 50 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 35 39 34 39 39 29 2c 69 3d 28 6e 28 35 36 38 35 39 29 2c 6e 28 36 37 32 39 34 29 29 2c 6f 3d 6e 28 34 39 31 35 33 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 7b 69 66 28 65 26 26 65 2e 63 6f 6e 66 69 67 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 69 3b 69 66 28 6f 2e 65 28 28 66 75 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return J},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((fun
2024-06-28 16:09:58 UTC	1068	IN	Data Raw: 72 73 69 6f 6e 3d 74 68 69 73 2e 63 70 56 65 72 73 69 6f 6e 29 2c 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 45 76 65 6e 74 53 65 6e 64 65 72 22 29 7c 7c 28 69 2e 45 76 65 6e 74 53 65 6e 64 65 72 3d 22 73 73 72 5f 73 65 72 76 65 72 22 2c 69 2e 45 76 65 6e 74 4f 72 69 67 69 6e 3d 74 68 69 73 2e 72 65 70 6f 72 74 4f 72 69 67 69 6e 29 2c 21 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 4c 6f 67 54 79 70 65 22 29 26 26 74 26 26 74 2e 6c 6f 67 54 79 70 65 26 26 28 69 2e 4c 6f 67 54 79 70 65 3d 74 2e 6c 6f 67 54 79 70 65 29 3b 5b 22 73 73 72 74 69 64 22 2c 22 74 6f 6b 65 6e 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 54 79 70 65 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 2c 22 6c 6f 63 61 6c 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 21 Data Ascii: rsion=this.cpVersion),i.hasOwnProperty("EventSender")\|\|(i.EventSender="ssr_server",i.EventOrigin=this.reportOrigin),!i.hasOwnProperty("LogType")&&t&&t.logType&&(i.LogType=t.logType);["ssrtid","token","transactionType","merchantId","locale"].forEach((e=>{!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49737	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	628	OUT	GET /_next/static/chunks/5480-57779aea7089e098.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21176 Connection: close Date: Thu, 27 Jun 2024 17:46:36 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "2be60e17e19974bb24152dd84e196d68" x-amz-server-side-encryption: AES256 x-amz-version-id: FkWUiO5PfOU4DBl7KFUnbSod4aIxkUc_ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2f7ba54d76b215238a170acfd87327d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: _tbpew-WuaxufKuNgmKQbhCW_RzOMx-QmHdO226QWxlb-UQ_5Rofww== Age: 80603 Vary: Origin
2024-06-28 16:09:58 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 38 30 5d 2c 7b 37 32 34 36 38 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 74 29 7b 76 61 72 20 72 3d 74 28 39 35 36 32 37 29 2c 73 3d 74 2e 6e 28 72 29 2c 6c 3d 74 28 36 37 32 39 34 29 2c 69 3d 74 28 35 31 32 34 35 29 2c 6e 3d 74 28 38 35 38 39 33 29 3b 65 2e 5a 3d 6f 3d 3e 7b 6c 65 74 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 72 65 6d 6f 76 65 44 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 3a 74 7d 3d 6f 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 6a 73 78 73 29 28 6c 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6e 2e 6a 73 78 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),l=t(67294),i=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(l.Fragment,{children:[(0,n.jsx
2024-06-28 16:09:58 UTC	4792	IN	Data Raw: 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 2c 6e 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 73 2c 6e 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 6f 2e 72 65 67 75 6c 61 72 3f 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 3a 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 4d 65 64 69 75 6d 22 5d 5d 5d 29 2b 22 20 6c 61 62 65 6c 20 6c 65 66 74 22 2c 63 68 69 6c 64 72 65 6e 3a 6f 2e 6c 69 6e 65 49 74 65 6d 44 65 73 63 72 69 70 74 69 6f 6e 3f 28 30 2c 63 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 31 30 30 31 32 31 31 35 37 22 2c 5b 65 28 29 2c 6f 2e 66 6f 6e 74 53 69 7a 65 3f 6f 2e 66 6f 6e 74 53 69 7a 65 3a 6e 2e 66 6f Data Ascii: xtforINTUIT-Regular",n.fontSize.xxs,n.colors.gray03,o.regular?"AvenirNextforINTUIT-Regular":"AvenirNextforINTUIT-Medium"]]])+" label left",children:o.lineItemDescription?(0,c.jsx)("div",{className:s().dynamic([["2100121157",[e(),o.fontSize?o.fontSize:n.fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49738	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	628	OUT	GET /_next/static/chunks/5669-00d69eb446cd722f.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:58 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13688 Connection: close Date: Thu, 27 Jun 2024 17:46:37 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "988cd6d581a566a28851eb19cfb5c40f" x-amz-server-side-encryption: AES256 x-amz-version-id: VzptuHkkYoehH6Rx7cAsf9B5_mqpkofq Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 416dae0837568c2bb7cea7ae5c6bba22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 7z-mQIfTpBPOfBtyF4HW_FPsosfHY-5mX_sZO65YTxlCX_Rhb-tLLg== Age: 80602 Vary: Origin
2024-06-28 16:09:58 UTC	13688	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 36 39 5d 2c 7b 39 39 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 73 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 20 74 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 39 35 36 32 37 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 38 36 38 39 36 29 2c 72 3d 73 28 34 34 30 31 32 29 2c 61 3d 73 28 32 33 32 34 30 29 2c 6c 3d 73 28 38 35 38 39 33 29 2c 64 3d 65 3d 3e 7b 6c 65 74 7b 63 64 6e 3a 6e 2c 69 6e 74 6c 3a 73 7d 3d 65 3b 63 6f 6e 73 74 20 74 3d 73 2e 66 6f 72 6d 61 74 4d 65 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49739	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:58 UTC	602	OUT	GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:09:59 UTC	769	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2166 Connection: close Date: Fri, 28 Jun 2024 15:09:45 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 May 2023 22:45:06 GMT ETag: "c71029d7cad3b0f0ea0213efc1363143" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: E7wHygb93mjT94RMsLj7LnaK6DP7uXYr Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1b412557b82dda96e078541f9ee8dfb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: qoIS_lJEjQ6eAzT8Ln9pqYpKvCJLIfU5ClBcpd0_bi-3n55gvjyUjg== Age: 3615
2024-06-28 16:09:59 UTC	2166	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 65 31 37 38 39 63 38 30 33 61 65 61 35 61 36 65 32 30 64 65 63 61 35 30 38 36 34 37 62 64 66 36 22 2c 22 61 70 70 65 6e 64 46 69 65 6c 64 73 54 6f 45 76 65 6e 74 50 72 6f 70 73 22 3a 7b 7d 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 49 64 46 72 6f 6d 55 72 6c 50 61 72 61 6d 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 4c 6f 63 61 74 69 6f 6e 4c 69 73 74 65 6e 69 6e 67 22 3a 74 72 75 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 66 6f 72 63 65 48 74 74 70 73 22 3a Data Ascii: {"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-28 16:09:59 UTC	511	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=41 Date: Fri, 28 Jun 2024 16:09:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-06-28 16:09:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49743	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	628	OUT	GET /_next/static/chunks/2352-55a0b477131a1625.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:59 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19658 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: IX1pmYuFvR2yjnwte.QCghPc6eSAAvhb Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 27 Jun 2024 17:46:38 GMT ETag: "f49e5eac9cb32884c0a137322f2173b6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a66afeef05dba31abba2c6cbc2eaa73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: lOa2T5HziN0kGOVsmYb9rom-Tw7eofVPXjyMohg50x2pBhwY7TDSSQ== Age: 80602 Vary: Origin
2024-06-28 16:09:59 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 35 32 5d 2c 7b 35 36 38 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 39 35 36 32 37 29 2c 73 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 36 37 32 39 34 29 2c 61 3d 6e 28 34 34 30 31 32 29 2c 72 3d 6e 28 31 34 30 36 37 29 2c 63 3d 6e 28 35 34 36 32 33 29 2c 6c 3d 6e 28 37 30 36 37 38 29 2c 64 3d 6e 28 34 34 39 34 37 29 2c 6d 3d 6e 28 35 31 32 34 35 29 2c 70 3d 6e 28 38 35 38 39 33 29 3b 74 2e 5a 3d 65 3d 3e 7b 6c 65 74 7b 68 69 64 65 3a 74 2c 6f 6e 43 6f 6e 74 69 6e 75 65 3a 6e 2c 68 65 61 64 65 72 49 6e 74 6c 3a 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),a=n(44012),r=n(14067),c=n(54623),l=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i
2024-06-28 16:09:59 UTC	3274	IN	Data Raw: 6d 53 74 79 6c 69 6e 67 3a 6f 2c 74 68 65 6d 65 3a 70 2c 61 72 69 61 4c 61 62 65 6c 3a 79 7d 3d 65 2c 62 3d 28 30 2c 73 2e 5a 29 28 65 2c 6d 29 3b 72 65 74 75 72 6e 28 30 2c 64 2e 6a 73 78 73 29 28 72 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 64 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 37 36 38 34 36 39 33 39 38 22 2c 5b 74 3f 6c 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 3a 6c 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 6f 7c 7c 22 22 2c 69 2c 22 71 62 6f 22 3d 3d 3d 70 3f 22 23 32 63 61 30 31 63 20 61 75 74 6f 20 31 70 78 3b 22 3a 22 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 20 61 75 74 6f 20 31 70 78 3b 22 5d 5d 5d 29 2b Data Ascii: mStyling:o,theme:p,ariaLabel:y}=e,b=(0,s.Z)(e,m);return(0,d.jsxs)(r.Fragment,{children:[(0,d.jsxs)("div",{className:a().dynamic([["768469398",[t?l.colors.error:l.colors.gray05,o\|\|"",i,"qbo"===p?"#2ca01c auto 1px;":"-webkit-focus-ring-color auto 1px;"]]])+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49744	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	628	OUT	GET /_next/static/chunks/9211-e5b247be522986a8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:59 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15251 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0bzK2C7mg20V4qPdPXNmw3qhkIRFfYzM Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 27 Jun 2024 17:46:38 GMT ETag: "4722b48bc39c7f5fe282df00b69848f6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c0f1616474eb5ab66a150ca4467bd724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: K7kdi5WU8aNV4P_RjgbRWgniMLEf0opXQHegPCB-NRYX8DW53wCJtw== Age: 80602 Vary: Origin
2024-06-28 16:09:59 UTC	15251	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 31 5d 2c 7b 38 36 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 73 29 7b 73 2e 64 28 6f 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 72 3d 73 28 35 39 34 39 39 29 2c 63 3d 73 28 39 35 36 32 37 29 2c 6c 3d 73 2e 6e 28 63 29 2c 74 3d 73 28 36 37 32 39 34 29 2c 6e 3d 73 28 34 34 30 31 32 29 2c 61 3d 73 28 35 34 34 39 30 29 2c 69 3d 73 28 35 31 34 35 39 29 2c 64 3d 73 28 37 30 36 37 38 29 2c 78 3d 73 28 38 35 38 39 33 29 3b 76 61 72 20 70 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6c 6f 72 3a 6f 3d 22 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9211],{86553:function(e,o,s){s.d(o,{Z:function(){return f}});var r=s(59499),c=s(95627),l=s.n(c),t=s(67294),n=s(44012),a=s(54490),i=s(51459),d=s(70678),x=s(85893);var p=e=>{let{color:o="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49741	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	628	OUT	GET /_next/static/chunks/6019-d03ad3086a0b9def.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:59 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26755 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: taMeExHNFC69Bpfqpbwz31MiM_HTavfa Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 27 Jun 2024 17:46:38 GMT ETag: "e3ec417c67d46d4f1d09d7f9218ef174" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a44309111e5e1050ff485adaa4681ad0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: tjTKgLj08i7HrdKT3JZG_FMXPvALqEOlUiQWo5SeEGzLn_Z3unlxIA== Age: 80602 Vary: Origin
2024-06-28 16:09:59 UTC	15748	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 31 39 2c 36 37 32 31 5d 2c 7b 38 39 32 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 76 61 72 20 73 3d 74 28 39 35 36 32 37 29 2c 6e 3d 74 2e 6e 28 73 29 2c 61 3d 74 28 36 37 32 39 34 29 2c 6f 3d 74 28 35 34 34 39 30 29 2c 63 3d 74 28 35 37 32 33 30 29 2c 6c 3d 74 28 35 31 34 35 39 29 2c 72 3d 74 28 36 37 32 31 29 2c 64 3d 74 28 35 31 32 34 35 29 2c 6d 3d 74 28 38 35 38 39 33 29 3b 63 6f 6e 73 74 20 78 3d 65 3d 3e 7b 63 6f 6e 73 74 7b 67 72 61 74 75 69 74 79 56 61 6c 75 65 3a 69 2c 69 6e 76 6f 69 63 65 4e 75 6d 62 65 72 3a 74 2c 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6019,6721],{89228:function(e,i,t){var s=t(95627),n=t.n(s),a=t(67294),o=t(54490),c=t(57230),l=t(51459),r=t(6721),d=t(51245),m=t(85893);const x=e=>{const{gratuityValue:i,invoiceNumber:t,i
2024-06-28 16:09:59 UTC	11007	IN	Data Raw: 69 6c 64 72 65 6e 3a 5b 69 26 26 28 30 2c 63 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 22 64 61 74 61 2d 63 79 22 3a 22 69 6e 76 6f 69 63 65 2d 73 75 6d 6d 61 72 79 5f 63 6f 6d 70 61 6e 79 2d 6c 6f 67 6f 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 31 32 36 30 38 35 37 36 33 22 2c 5b 69 3f 6f 2e 66 6f 6e 74 53 69 7a 65 2e 73 6d 3a 6f 2e 66 6f 6e 74 53 69 7a 65 2e 6d 73 5d 5d 5d 29 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 63 2e 6a 73 78 29 28 22 69 6d 67 22 2c 7b 73 72 63 3a 69 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 31 32 36 30 38 35 37 36 33 22 2c 5b 69 3f 6f 2e 66 6f 6e 74 53 69 7a 65 2e 73 6d 3a 6f 2e 66 6f 6e 74 53 69 7a 65 2e 6d 73 5d 5d 5d 29 2b 22 20 69 6d 61 67 65 22 7d 29 Data Ascii: ildren:[i&&(0,c.jsx)("div",{"data-cy":"invoice-summary_company-logo",className:n().dynamic([["3126085763",[i?o.fontSize.sm:o.fontSize.ms]]]),children:(0,c.jsx)("img",{src:i,className:n().dynamic([["3126085763",[i?o.fontSize.sm:o.fontSize.ms]]])+" image"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49742	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	628	OUT	GET /_next/static/chunks/3883-6f87e03a1b65d28c.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:59 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 60254 Connection: close Date: Thu, 27 Jun 2024 17:28:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "aadf50b1a44deb0f096dbfdc9a9743ad" x-amz-server-side-encryption: AES256 x-amz-version-id: HQQaXmWJstJbT8HQN5_9QViCuWDyCmAV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 411234c039d8f1de63b7f2192e5e24d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: kLQW-mPpJHO3GRko5RiLVNvmfo4uab-bnSBF6pHZSgsB8E3CuG3_QA== Age: 81711 Vary: Origin
2024-06-28 16:09:59 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 38 33 5d 2c 7b 33 36 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 76 61 72 20 6f 3d 73 28 35 39 34 39 39 29 2c 61 3d 73 28 39 35 36 32 37 29 2c 6e 3d 73 2e 6e 28 61 29 2c 69 3d 73 28 36 37 32 39 34 29 2c 72 3d 73 28 38 36 38 39 36 29 2c 6c 3d 73 28 34 34 30 31 32 29 2c 63 3d 73 28 32 33 32 34 30 29 2c 64 3d 73 28 33 37 30 30 34 29 2c 6d 3d 73 28 35 31 32 34 35 29 2c 70 3d 73 28 38 35 38 39 33 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3883],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Objec
2024-06-28 16:09:59 UTC	16384	IN	Data Raw: 22 3a 22 4d 65 73 73 61 67 65 22 2c 73 74 79 6c 65 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 44 3f 22 32 34 70 78 22 3a 22 30 70 78 22 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 30 31 38 36 36 36 32 34 37 22 2c 5b 50 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 31 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 44 3f 22 32 35 70 78 22 3a 22 35 70 78 22 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 44 3f 22 31 30 30 70 78 22 3a 22 32 31 30 70 78 22 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 63 6f 6c Data Ascii: ":"Message",style:{marginTop:D?"24px":"0px"},className:a().dynamic([["3018666247",[P?"block":"none",y.colors.gray05,y.colors.gray01,y.breakpoints.sm,D?"25px":"5px",y.breakpoints.sm,y.breakpoints.sm,y.breakpoints.sm,D?"100px":"210px",y.breakpoints.sm,y.col
2024-06-28 16:09:59 UTC	16384	IN	Data Raw: 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 73 2c 6f 29 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 47 28 4f 62 6a 65 63 74 28 73 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 64 2e 5a 29 28 65 2c 74 2c 73 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: yDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function U(e){for(var t=1;t<arguments.length;t++){var s=null!=arguments[t]?arguments[t]:{};t%2?G(Object(s),!0).forEach((function(t){(0,d.Z)(e,t,s[t])})):Object.getOwnPropertyDescriptors?Object.def
2024-06-28 16:09:59 UTC	11102	IN	Data Raw: 69 74 79 3a 31 3b 7d 7d 22 2c 22 2e 63 6f 6e 74 61 69 6e 65 72 2e 6a 73 78 2d 32 38 30 38 38 33 34 35 30 34 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6f 70 61 63 69 74 79 43 68 61 6e 67 65 2d 6a 73 78 2d 32 38 30 38 38 33 34 35 30 34 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6f 70 61 63 69 74 79 43 68 61 6e 67 65 2d 6a 73 78 2d 32 38 30 38 38 33 34 35 30 34 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 73 3b 7d 22 2c 22 2e 63 6f 6e 74 61 69 6e 65 72 2e 6a 73 78 2d 32 38 30 38 38 33 34 35 30 34 20 2e 63 61 72 64 2e 6a 73 78 2d 32 38 30 38 38 33 34 35 30 34 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 Data Ascii: ity:1;}}",".container.jsx-2808834504{-webkit-animation-name:opacityChange-jsx-2808834504;animation-name:opacityChange-jsx-2808834504;-webkit-animation-duration:2s;animation-duration:2s;}",".container.jsx-2808834504 .card.jsx-2808834504{cursor:pointer;padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49745	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	635	OUT	GET /_next/static/chunks/pages/index-d2971633ac2e2613.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:09:59 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 18832 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: hwbCqLpxBXc0_XIg8hvhctLSqFqztt_w Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 27 Jun 2024 17:46:39 GMT ETag: "7ef4984a9e579daa2f76a3e9aa21d4f7" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1dd177f0f1668dc5abba6f90eb9da04c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: hl_hUHtwbIS4GvHH1NX1H5t6WkC0b5b0qHCaELWGdA-sQXIvIjRXVw== Age: 80601 Vary: Origin
2024-06-28 16:09:59 UTC	15748	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 30 35 5d 2c 7b 38 39 39 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 73 28 39 35 36 32 37 29 2c 61 3d 73 2e 6e 28 74 29 2c 69 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 34 34 30 31 32 29 2c 72 3d 73 28 33 36 34 35 36 29 2c 63 3d 73 28 35 35 31 34 36 29 2c 6c 3d 73 28 33 37 35 39 30 29 2c 64 3d 73 28 35 31 32 34 35 29 2c 6d 3d 73 28 38 35 38 39 33 29 3b 6e 2e 5a 3d 28 30 2c 72 2e 24 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 73 61 6c 65 3a 6e 7d 3d 65 3b 72 65 74 75 72 6e 7b 70 61 79 6d 65 6e 74 44 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5405],{89974:function(e,n,s){"use strict";var t=s(95627),a=s.n(t),i=s(67294),o=s(44012),r=s(36456),c=s(55146),l=s(37590),d=s(51245),m=s(85893);n.Z=(0,r.$j)((function(e){let{sale:n}=e;return{paymentD
2024-06-28 16:09:59 UTC	3084	IN	Data Raw: 30 37 4a 4e 71 51 64 6d 75 22 2c 6f 6e 48 69 64 65 3a 28 29 3d 3e 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 73 68 6f 75 6c 64 53 68 6f 77 55 6e 70 61 79 61 62 6c 65 53 75 72 76 65 79 3a 21 31 7d 29 7d 29 2c 28 30 2c 53 2e 6a 73 78 29 28 77 2c 7b 7d 29 2c 28 30 2c 53 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 34 34 36 38 37 36 39 33 22 2c 5b 41 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 41 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 41 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 41 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 66 6c 65 78 20 66 6c 65 78 2d 61 6e 79 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 Data Ascii: 07JNqQdmu",onHide:()=>this.setState({shouldShowUnpayableSurvey:!1})}),(0,S.jsx)(w,{}),(0,S.jsxs)("div",{className:a().dynamic([["244687693",[A.breakpoints.md,A.breakpoints.md,A.breakpoints.md,A.breakpoints.md]]])+" main-wrapper flex flex-any",children:[(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49746	13.227.222.191	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	392	OUT	GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:00 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2166 Connection: close Date: Fri, 28 Jun 2024 15:09:45 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 May 2023 22:45:06 GMT ETag: "c71029d7cad3b0f0ea0213efc1363143" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: E7wHygb93mjT94RMsLj7LnaK6DP7uXYr Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46293c8f7848e2378b777a1f48183614.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: 0_MJyfxjOsBvtZBgQrfrsEeBP_cU6JTFHOOWkQPIUB-KtKwRuct8yA== Age: 3616
2024-06-28 16:10:00 UTC	2166	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 65 31 37 38 39 63 38 30 33 61 65 61 35 61 36 65 32 30 64 65 63 61 35 30 38 36 34 37 62 64 66 36 22 2c 22 61 70 70 65 6e 64 46 69 65 6c 64 73 54 6f 45 76 65 6e 74 50 72 6f 70 73 22 3a 7b 7d 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 49 64 46 72 6f 6d 55 72 6c 50 61 72 61 6d 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 4c 6f 63 61 74 69 6f 6e 4c 69 73 74 65 6e 69 6e 67 22 3a 74 72 75 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 66 6f 72 63 65 48 74 74 70 73 22 3a Data Ascii: {"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49747	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	586	OUT	GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:00 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9270 Connection: close Date: Mon, 15 Apr 2024 22:20:27 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Fri, 12 Apr 2024 21:39:45 GMT ETag: "00e9c65cbba11c07c4bf4a6e2727b8ea" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: 1lCjHefPzcRt0EbQDFkkb.6FnzhNuKxa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d3039ad83798b26ecb9f9f1e666afe26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: EfSPknxOavElXDr5OXJv0jffVynSN9Ldiu9gcfVncEF1QOCN-HFedw== Age: 6371374
2024-06-28 16:10:00 UTC	9270	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 2c 65 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 61 62 6c 65 64 29 3f 6e 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49748	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:09:59 UTC	644	OUT	GET /_next/static/1.24.4-release_1.24.4-ca589f4/_buildManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2993 Connection: close Date: Thu, 27 Jun 2024 17:46:39 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT ETag: "a26fb56af1fd0d427b005908eba5950e" x-amz-server-side-encryption: AES256 x-amz-version-id: G0IxfE365jqN1e9oy2MxQ_aKMgLnf98Z Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a1794152acd53f12f14f902d8899b420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: KQ_5R9TiAGd0bxY3baDmuE9md_WocTx0GJsPMBQdb8qYp4hO_4_v4A== Age: 80602 Vary: Origin
2024-06-28 16:10:00 UTC	2993	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 61 2c 63 2c 74 2c 69 2c 6e 2c 64 2c 72 2c 70 2c 66 2c 75 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 65 2c 73 2c 61 2c 63 2c 69 2c 72 2c 70 2c 75 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 64 32 39 37 31 36 33 33 61 63 32 65 32 36 31 33 2e 6a 73 22 5d 2c 22 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 22 3a 5b 65 2c 73 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 2d 65 34 36 32 30 34 33 65 31 Data Ascii: self.__BUILD_MANIFEST=function(e,s,a,c,t,i,n,d,r,p,f,u){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,a,c,i,r,p,u,"static/chunks/pages/index-d2971633ac2e2613.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e462043e1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49750	34.217.155.134	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	745	OUT	POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive Content-Length: 480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:00 UTC	480	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 30 39 3a 35 37 2e 38 35 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 35 33 2e 31 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 32 62 62 62 66 32 62 38 35 30 61 38 34 38 32 36 62 31 62 37 63 35 65 37 62 39 33 32 66 35 38 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 30 39 3a 35 37 2e 38 35 33 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 30 39 3a 35 37 2e 38 35 33 5a 22 2c 22 73 74 61 74 75 Data Ascii: {"sent_at":"2024-06-28T16:09:57.854Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.53.1"}}{"type":"session"}{"sid":"2bbbf2b850a84826b1b7c5e7b932f583","init":true,"started":"2024-06-28T16:09:57.853Z","timestamp":"2024-06-28T16:09:57.853Z","statu
2024-06-28 16:10:00 UTC	415	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:00 GMT Content-Type: application/json Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin X-Frame-Options: SAMEORIGIN
2024-06-28 16:10:00 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49751	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	642	OUT	GET /_next/static/1.24.4-release_1.24.4-ca589f4/_ssgManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 77 Connection: close Date: Thu, 27 Jun 2024 17:46:40 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 x-amz-version-id: SWr_3oW3poCxgf9dy4.0QUHtuQRvVV9n Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ddcfcdf22c7ea27fb2a066c5c7d99ad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: fB5mzk8Onv_QCtfQQ4rGO7CitFdJGzekSFCaVMK50ctYveyLMBWwhQ== Age: 80601 Vary: Origin
2024-06-28 16:10:00 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49752	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	628	OUT	GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21018 Connection: close Date: Thu, 27 Jun 2024 17:46:40 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:14 GMT ETag: "9507d9bd19ef23cfa07cf7346001111b" x-amz-server-side-encryption: AES256 x-amz-version-id: O0.TSiX0yPCbV9FMKh.dtfCqfR3d8Cv4 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a66afeef05dba31abba2c6cbc2eaa73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: I5FqnR2iEVu5j66bDDVpvWVoLhF_VyqpT8E09cuDXL-ReTFBRy-oUA== Age: 80601 Vary: Origin
2024-06-28 16:10:00 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 36 36 5d 2c 7b 33 32 37 36 36 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 4c 3d 65 28 39 35 36 32 37 29 2c 61 3d 65 2e 6e 28 4c 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 41 43 43 4f 55 4e 54 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",
2024-06-28 16:10:00 UTC	4634	IN	Data Raw: 2e 38 32 31 31 39 33 32 2c 33 38 2e 31 30 39 33 36 34 37 20 35 32 2e 38 32 31 31 39 33 32 2c 33 38 2e 35 31 31 36 36 31 38 20 43 35 32 2e 38 32 31 31 39 33 32 2c 33 38 2e 39 31 33 39 35 38 39 20 35 32 2e 39 30 37 38 38 32 36 2c 33 39 2e 36 30 38 38 33 35 37 20 35 33 2e 33 37 36 30 30 35 33 2c 33 39 2e 36 30 38 38 33 35 37 20 43 35 33 2e 38 33 39 37 39 33 36 2c 33 39 2e 36 30 38 38 33 35 37 20 35 33 2e 39 32 32 31 34 38 35 2c 33 38 2e 39 31 33 39 35 38 39 20 35 33 2e 39 32 32 31 34 38 35 2c 33 38 2e 35 31 31 36 36 31 38 20 5a 20 4d 35 37 2e 30 39 39 33 31 35 2c 33 38 2e 35 31 31 36 36 31 38 20 43 35 37 2e 30 39 39 33 31 35 2c 33 39 2e 34 34 32 32 32 37 38 20 35 36 2e 37 31 33 35 34 37 32 2c 34 30 2e 30 32 33 33 32 33 36 20 35 36 2e 30 32 30 30 33 32 2c 34 Data Ascii: .8211932,38.1093647 52.8211932,38.5116618 C52.8211932,38.9139589 52.9078826,39.6088357 53.3760053,39.6088357 C53.8397936,39.6088357 53.9221485,38.9139589 53.9221485,38.5116618 Z M57.099315,38.5116618 C57.099315,39.4422278 56.7135472,40.0233236 56.020032,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49753	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	628	OUT	GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21200 Connection: close Date: Thu, 27 Jun 2024 17:46:40 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "5d3acbee67e89b42766e3833a9ef5b9a" x-amz-server-side-encryption: AES256 x-amz-version-id: gXM..k6RUlLVpO6s2CXtS4QyTfsBPUkG Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d1867b092f625a3679893299e10edaee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 3g_-HqsR_ictzePDu9o0_ir9345Mzgh-oNkLyzkxSyYArhGaD1K42w== Age: 80601 Vary: Origin
2024-06-28 16:10:00 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 38 32 5d 2c 7b 38 38 34 38 32 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 61 3d 65 28 39 35 36 32 37 29 2c 4c 3d 65 2e 6e 28 61 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 52 4f 55 54 49 4e 47 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",
2024-06-28 16:10:00 UTC	4816	IN	Data Raw: 31 32 2e 34 31 38 36 36 35 32 2c 33 2e 35 35 38 33 30 37 37 33 20 31 32 2e 37 37 32 33 30 37 32 2c 33 20 31 33 2e 34 30 34 39 33 33 34 2c 33 20 43 31 34 2e 30 33 33 36 33 30 33 2c 33 20 31 34 2e 33 38 33 33 34 32 39 2c 33 2e 35 35 38 33 30 37 37 33 20 31 34 2e 33 38 33 33 34 32 39 2c 34 2e 34 35 32 33 38 30 39 35 20 5a 20 4d 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 34 35 32 33 38 30 39 35 20 43 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 30 36 35 38 36 30 32 32 20 31 33 2e 38 32 35 33 37 34 35 2c 33 2e 33 39 30 34 32 34 39 39 20 31 33 2e 34 30 34 39 33 33 34 2c 33 2e 33 39 30 34 32 34 39 39 20 43 31 32 2e 39 38 30 35 36 33 2c 33 2e 33 39 30 34 32 34 39 39 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e 30 36 35 38 36 30 32 32 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e Data Ascii: 12.4186652,3.55830773 12.7723072,3 13.4049334,3 C14.0336303,3 14.3833429,3.55830773 14.3833429,4.45238095 Z M13.9000322,4.45238095 C13.9000322,4.06586022 13.8253745,3.39042499 13.4049334,3.39042499 C12.980563,3.39042499 12.9019759,4.06586022 12.9019759,4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49756	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	1834	OUT	GET /portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf HTTP/1.1 Host: connect.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 intuit-realmid: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cb5ca-3a6f-4b6d-b098-52e7b22218ba Accept: application/pdf baggage: sentry-environment=production,sentry-release=1.24.4-release_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7 sentry-trace: a0f688fae52e4dc5956d99cda5d485e7-812c2af4d9752987-0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:03 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: application/pdf Transfer-Encoding: chunked Connection: close x-spanid: 2f480ddc-d326-161e-91ee-9ec792a0b141 x-amzn-trace-id: Root=1-667ee058-3eaf37e20a9160086a8d850b X-Content-Type-Options: nosniff Set-Cookie: AWSALB=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/ Set-Cookie: AWSALBCORS=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store x-envoy-upstream-service-time: 2857 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cb5ca-3a6f-4b6d-b098-52e7b22218ba x-request-id: cp-cb5ca-3a6f-4b6d-b098-52e7b22218ba server: istio-envoy
2024-06-28 16:10:03 UTC	15358	IN	Data Raw: 35 66 66 61 0d 0a 25 50 44 46 2d 31 2e 34 0a 25 d3 eb e9 e1 0a 31 20 30 20 6f 62 6a 0a 3c 3c 2f 43 72 65 61 74 6f 72 20 28 43 68 72 6f 6d 69 75 6d 29 0a 2f 50 72 6f 64 75 63 65 72 20 28 53 6b 69 61 2f 50 44 46 20 6d 31 31 32 29 0a 2f 43 72 65 61 74 69 6f 6e 44 61 74 65 20 28 44 3a 32 30 32 34 30 36 32 38 31 36 31 30 30 33 2b 30 30 27 30 30 27 29 0a 2f 4d 6f 64 44 61 74 65 20 28 44 3a 32 30 32 34 30 36 32 38 31 36 31 30 30 33 2b 30 30 27 30 30 27 29 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 2f 63 61 20 31 0a 2f 42 4d 20 2f 4e 6f 72 6d 61 6c 3e 3e 0a 65 6e 64 6f 62 6a 0a 36 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 58 4f 62 6a 65 63 74 0a 2f 53 75 62 74 79 70 65 20 2f 49 6d 61 67 65 0a 2f 57 69 64 74 68 20 31 36 38 0a 2f 48 65 69 67 Data Ascii: 5ffa%PDF-1.4%1 0 obj<</Creator (Chromium)/Producer (Skia/PDF m112)/CreationDate (D:20240628161003+00'00')/ModDate (D:20240628161003+00'00')>>endobj3 0 obj<</ca 1/BM /Normal>>endobj6 0 obj<</Type /XObject/Subtype /Image/Width 168/Heig
2024-06-28 16:10:03 UTC	9220	IN	Data Raw: 31 cb 90 bb 7f 9f 32 21 3f 65 ea f9 4a 9e eb 44 a5 00 7f 98 8e 05 79 c3 97 3a dc f3 37 80 9f 01 e5 08 94 11 50 3c 50 32 a1 4c 80 32 05 4a 39 94 42 28 e3 08 fc 2f 31 91 2b 47 33 d8 94 9e 1b ec 1a b4 97 7d 0b 15 f7 d2 b1 1b ed ed 47 c3 a1 db d7 01 ec 1e f9 9b 12 84 93 d7 a7 a0 c9 b0 8e 81 39 a2 33 48 51 81 6c b7 af fb a5 87 99 8c 26 85 bf cc 09 28 f0 a5 e6 04 d7 02 ed eb f1 5b 68 8b dc 4e 42 5b 48 9b 3b 87 d6 93 71 d8 8b c0 6f 22 6b a8 c3 e8 51 50 e0 6c 6a 03 32 c9 73 08 c5 72 06 24 c8 eb 10 32 b0 6f f5 7c 03 54 b6 c3 c8 06 76 e7 ed 74 31 02 b2 a2 9d 60 d5 17 48 af e7 4a b8 96 0a 91 f5 ff 72 82 ff a7 9f d3 72 79 43 6e 1f 44 ad a8 43 1e 41 f0 3d 3e 00 ee 60 a8 6e 82 ba 59 7e ff bf 78 e8 e4 9e 6b c1 96 b7 e7 e2 27 91 51 31 1f 9c 87 6a cd 23 91 f6 35 8f d8 ce Data Ascii: 12!?eJDy:7P<P2L2J9B(/1+G3}G93HQl&([hNB[H;qo"kQPlj2sr$2o\|Tvt1`HJrryCnDCA=>`nY~xk'Q1j#5
2024-06-28 16:10:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49755	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	2093	OUT	POST /portal/rest/experiments HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cc2f6-30e7-4e8f-8e72-c88856af4312 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea baggage: sentry-environment=production,sentry-release=1.24.4-release_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7 user-signed-in: false sentry-trace: a0f688fae52e4dc5956d99cda5d485e7-ad30ac4f97b31568-0 sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	302	OUT	Data Raw: 7b 22 64 6f 6d 61 69 6e 49 64 22 3a 22 49 4e 56 4f 49 43 45 3a 31 33 38 34 35 30 35 30 34 37 35 32 37 32 34 32 31 5f 31 35 22 2c 22 72 65 61 6c 6d 49 64 22 3a 22 31 33 38 34 35 30 35 30 34 37 35 32 37 32 34 32 31 22 2c 22 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 22 2c 22 72 65 63 69 70 69 65 6e 74 45 6d 61 69 6c 22 3a 22 6e 65 77 5f 6d 65 6d 62 65 72 40 74 79 65 74 79 38 34 35 2e 6f 6e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 63 6f 6e 74 65 78 74 4d 61 70 22 3a Data Ascii: {"domainId":"INVOICE:13845050475272421_15","realmId":"13845050475272421","token":"scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea","recipientEmail":"new_member@tyety845.onmicrosoft.com","contextMap":
2024-06-28 16:10:02 UTC	1100	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 429 Connection: close x-spanid: dd6ee995-7efc-e315-6027-6e927f4699a2 x-amzn-trace-id: Root=1-667ee058-48ccb8c1520beba1256bd18d X-Content-Type-Options: nosniff Set-Cookie: AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/ Set-Cookie: AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"1ad-++DtZaTNbbCa5i1rCc05mDr5MvA" Vary: Accept-Encoding x-envoy-upstream-service-time: 1115 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cc2f6-30e7-4e8f-8e72-c88856af4312 x-request-id: cp-cc2f6-30e7-4e8f-8e72-c88856af4312 server: istio-envoy
2024-06-28 16:10:02 UTC	429	IN	Data Raw: 7b 22 49 58 50 32 5f 32 37 37 37 38 39 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 31 31 35 37 38 38 2c 22 65 78 70 65 72 69 6d 65 6e 74 54 79 70 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 56 65 72 73 69 6f 6e 22 3a 34 2c 22 61 73 73 69 67 6e 6d 65 6e 74 49 64 22 3a 22 52 45 41 4c 4d 5f 4f 52 5f 43 4f 4d 50 41 4e 59 5f 49 44 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 46 6c 61 67 73 22 3a 34 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 43 50 22 2c 22 62 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 22 53 42 53 45 47 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 49 58 50 32 5f 32 37 37 37 38 39 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 62 65 6c 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 32 36 31 32 34 36 Data Ascii: {"IXP2_277789":{"experimentId":115788,"experimentType":"DEFAULT","experimentVersion":4,"assignmentId":"REALM_OR_COMPANY_ID","experimentFlags":4,"application":"CP","businessUnit":"SBSEG","experimentKey":"IXP2_277789","country":"US","label":null,"id":261246

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49757	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	2120	OUT	POST /portal/rest/invoice/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 67 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c1c8b-797e-4254-a368-208501e491e8 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea baggage: sentry-environment=production,sentry-release=1.24.4-release_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7 sentry-trace: a0f688fae52e4dc5956d99cda5d485e7-83603838211ce2e1-0 sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	67	OUT	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 56 49 45 57 45 44 22 2c 22 61 70 70 53 6f 75 72 63 65 4f 66 66 65 72 69 6e 67 22 3a 22 49 6e 74 75 69 74 2e 73 62 65 2e 73 61 6c 73 61 2e 70 6c 61 74 66 6f 72 6d 22 7d Data Ascii: {"status":"VIEWED","appSourceOffering":"Intuit.sbe.salsa.platform"}
2024-06-28 16:10:02 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:01 GMT Transfer-Encoding: chunked Connection: close x-spanid: e122bbe8-c8f9-dccb-531f-f57bd7bd2fed x-amzn-trace-id: Root=1-667ee058-3284e9f17030eaa0310895df Set-Cookie: AWSALB=RjfvtaKs0t/VG4evtnOD2+E8fAqHCgdD7wx28XmWGsfRBYOkCJHxjxzJQX/bAmNQhZwmTzxfpHt6kp2mZGRdcgB+o7doktDdxrMQYVy2dwxXTpaGcPI6jqPYTIKN; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/ Set-Cookie: AWSALBCORS=RjfvtaKs0t/VG4evtnOD2+E8fAqHCgdD7wx28XmWGsfRBYOkCJHxjxzJQX/bAmNQhZwmTzxfpHt6kp2mZGRdcgB+o7doktDdxrMQYVy2dwxXTpaGcPI6jqPYTIKN; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store x-envoy-upstream-service-time: 726 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c1c8b-797e-4254-a368-208501e491e8 x-request-id: cp-c1c8b-797e-4254-a368-208501e491e8 server: istio-envoy
2024-06-28 16:10:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49758	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	2106	OUT	POST /portal/rest/reporting/prometheus/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 84 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c739d-d64c-4725-a2b0-fb94c862c2f6 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea baggage: sentry-environment=production,sentry-release=1.24.4-release_1.24.4-ca589f4,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=a0f688fae52e4dc5956d99cda5d485e7 user-signed-in: false sentry-trace: a0f688fae52e4dc5956d99cda5d485e7-8f1788af180386ec-0 sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:00 UTC	84	OUT	Data Raw: 7b 22 66 6c 6f 77 22 3a 22 69 6e 76 6f 69 63 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6f 66 66 65 72 69 6e 67 49 64 22 3a 22 51 42 4f 22 2c 22 69 73 53 61 6c 65 73 43 68 65 63 6b 6f 75 74 49 6e 76 6f 69 63 65 22 3a 74 72 75 65 7d Data Ascii: {"flow":"invoice","locale":"en_US","offeringId":"QBO","isSalesCheckoutInvoice":true}
2024-06-28 16:10:02 UTC	1089	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:01 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 2 Connection: close x-spanid: ea08015e-7238-7fd6-1e6a-4ead5fb6cd92 x-amzn-trace-id: Root=1-667ee058-37a0257a4e548df610df3057 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=g/1BxnefTnhsopsgh1DKAPzin3Kn49m+ILhm8RCzm1fQ3Sk+4p6X7O7uTqHs1Py3qoA1K/uuO2HlyyfJNn8K8vIkIkR8jrOENXk/iU9k0bQjKoxnnIEDV9PSzszP; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/ Set-Cookie: AWSALBCORS=g/1BxnefTnhsopsgh1DKAPzin3Kn49m+ILhm8RCzm1fQ3Sk+4p6X7O7uTqHs1Py3qoA1K/uuO2HlyyfJNn8K8vIkIkR8jrOENXk/iU9k0bQjKoxnnIEDV9PSzszP; Expires=Fri, 05 Jul 2024 16:10:00 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Vary: Accept-Encoding x-envoy-upstream-service-time: 449 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c739d-d64c-4725-a2b0-fb94c862c2f6 x-request-id: cp-c739d-d64c-4725-a2b0-fb94c862c2f6 server: istio-envoy
2024-06-28 16:10:02 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49754	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POrVY6DuSCNGz6g&MD=vVlEBouK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-28 16:10:02 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3776a95d-4bac-4c23-a522-8ac462ae50c7 MS-RequestId: 3fd9d748-f238-4fa3-bb99-18917c49c26a MS-CV: +xmW5S2M2EajmyDA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 28 Jun 2024 16:10:00 GMT Connection: close Content-Length: 24490
2024-06-28 16:10:02 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-06-28 16:10:02 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49759	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:00 UTC	583	OUT	GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:02 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1559 Connection: close Date: Mon, 15 Apr 2024 22:20:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 Apr 2024 21:40:58 GMT ETag: "3867b2388b619ff7fddc29ef359fc9aa" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: _X2O40MRL5bhxRtE3NZ0M.QynfGo0la8 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b8e900270aa30d899882e71796feca9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: K7_i3_hqPIvdn8Tm6E-3rcxDc13csROCekot1rh8soQyl9z8oX2R5Q== Age: 6371374
2024-06-28 16:10:02 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 33 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6e 61 62 6c 65 64 29 3f 65 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49760	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:01 UTC	1810	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 5473 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c418a-79fa-48f1-8695-6362463195a6 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; AWSALBCORS=FkoFP35RVx0c6F+6wDpAb90oP2GFeHaZbGmnMtSPQWeDMt3PmUB7i3pOPGEH+sEODzRTf1i15oTdTG6kR5bbeJp/rYHJQTPtTRLAkhHXDdsQ08xeY+e99fDnfi+5; ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:01 UTC	5473	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 30 39 3a 35 38 2e 35 37 32 5a 22 2c 22 65 76 65 6e 74 22 3a 22 76 69 65 77 53 61 6c 65 22 2c 22 61 63 74 69 6f 6e 22 3a 22 72 65 6e 64 65 72 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 63 72 65 65 6e 22 3a 22 69 6e 64 65 78 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 70 61 67 65 73 2f 69 6e 64 65 78 2e 70 61 67 65 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 7d 2c 22 73 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d Data Ascii: {"messages":[{"data":{"timestamp":"2024-06-28T16:09:58.572Z","event":"viewSale","action":"render","activityInfo":{"screen":"index"},"logInfo":{"logLevel":"info","logger":"pages/index.page","logType":"contextual"},"sessionInfo":{"sessionId":"281585c6-1f0a-
2024-06-28 16:10:02 UTC	1102	IN	HTTP/1.1 201 Created Date: Fri, 28 Jun 2024 16:10:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: e0bfab23-918d-9a68-8e39-f07a4a38c66e x-amzn-trace-id: Root=1-667ee059-0dab0c5f51b86f1a25e8a47c X-Content-Type-Options: nosniff Set-Cookie: AWSALB=gqWRAZ5vw9+FETaH/9T6GIw2z2T44qp2h7kmWPRoNBjaO/LuiL4Oz4FlKW9dPFw0ve6Rkmaw3bRwXwhrtVTfzQO9SoejZG8DVuUnRaxwcOVDVP3Omqd+p9YK8LFM; Expires=Fri, 05 Jul 2024 16:10:01 GMT; Path=/ Set-Cookie: AWSALBCORS=gqWRAZ5vw9+FETaH/9T6GIw2z2T44qp2h7kmWPRoNBjaO/LuiL4Oz4FlKW9dPFw0ve6Rkmaw3bRwXwhrtVTfzQO9SoejZG8DVuUnRaxwcOVDVP3Omqd+p9YK8LFM; Expires=Fri, 05 Jul 2024 16:10:01 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 229 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c418a-79fa-48f1-8695-6362463195a6 x-request-id: cp-c418a-79fa-48f1-8695-6362463195a6 server: istio-envoy
2024-06-28 16:10:02 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49761	34.210.192.119	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:02 UTC	525	OUT	GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8
2024-06-28 16:10:02 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 28 Jun 2024 16:10:02 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49762	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:02 UTC	605	OUT	GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:03 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1655 Connection: close Date: Fri, 28 Jun 2024 16:10:04 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Mon, 03 Jun 2024 14:40:12 GMT ETag: "d151cb0874ed5e13006e5f38364ec01e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: i2ncOaRW_yaUuTEZyHsZKDaGAnZswmH9 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 94faae20b0f122c4555025f52a2fd744.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: h1C1EQV8FnL05BtP2cbTGa4-8vn-koVk9YRuw1JShAfgzzx9PfWahw==
2024-06-28 16:10:03 UTC	1655	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 6d 6f db 36 10 fe de 5f a1 70 80 2b 21 0c 6d 77 6d ba 59 e1 86 ac 05 ba 0e e9 5a ac db 8a c1 30 0c 46 64 1c 26 32 a9 91 54 bc cc d6 7f df 91 7a b1 ec c4 5d 3f 6d 40 10 f3 e5 ee 78 af cf 9d 56 52 71 bd 9a 3e 5d 68 bd c8 c5 09 e3 2b 6d b8 3d 51 62 f5 5a 14 f6 e9 2c a2 d1 14 0d a5 72 62 61 98 93 5a d9 e1 9d 00 16 33 cc f4 72 09 5b c2 4e c7 fc e5 a5 60 5f bf e4 cf b8 78 c1 9f 5f 9e 7e 4b 6e 2c 9a a5 ab 83 b2 2f 34 e3 c2 04 e9 57 a5 ca bc dc 38 89 d6 91 11 ae 34 2a 6a 18 d1 43 c6 b7 5b 45 d0 8c 76 bc 3a 59 b7 eb 48 c5 0a 76 da c4 77 cc 44 02 33 6c a9 9a 8e 66 98 c3 cf 78 86 33 f8 79 36 c3 25 1d e1 9c 4e 67 69 79 66 49 2e d4 c2 5d a7 e5 f1 71 c2 a8 9d 96 33 fc fe f2 46 64 8e 14 46 3b ed ee 0b 41 ae 99 7d bf 52 1f 8c 2e 84 71 Data Ascii: Wmo6_p+!mwmYZ0Fd&2Tz]?m@xVRq>]h+m=QbZ,rbaZ3r[N`_x_~Kn,/4W84*jC[Ev:YHvwD3lfx3y6%NgiyfI.]q3FdF;A}R.q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49764	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/p HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 1636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:03 UTC	1636	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 30 2e 37 32 30 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 74 2f 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 3f 63 74 61 3d 76 69 65 77 69 6e 76 6f 69 63 65 6e 6f 77 26 6c 6f 63 61 6c 65 3d 65 6e Data Ascii: {"timestamp":"2024-06-28T16:10:00.720Z","integrations":{},"type":"page","properties":{"path":"/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea","referrer":"","search":"?cta=viewinvoicenow&locale=en
2024-06-28 16:10:03 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:4d1bf042-1111-4a05-b8f1-01839d7b7a0d\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 44df0c63-7961-4106-a48c-5a9c2531753b intuit_received_at: 1719591003161 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:1\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49766	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 1690 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:03 UTC	1690	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 30 2e 37 33 31 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 76 69 65 77 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 6f 72 67 22 3a 22 73 62 73 65 67 22 2c 22 70 75 72 70 6f 73 65 22 3a 22 70 72 6f 64 22 2c 22 73 63 6f 70 65 22 3a 22 63 6f 75 6e 74 65 72 70 61 72 74 5f 70 6f 72 74 61 6c 22 2c 22 73 63 6f 70 65 5f 61 72 65 61 22 3a 22 63 68 65 63 6b 6f 75 74 5f 26 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 22 2c 22 73 63 72 65 65 6e 22 3a 22 63 70 5f 63 68 65 63 6b 6f 75 74 22 2c 22 6f 62 6a 65 63 74 22 3a 22 74 72 61 6e 73 61 Data Ascii: {"timestamp":"2024-06-28T16:10:00.731Z","integrations":{},"event":"transaction:viewed","type":"track","properties":{"org":"sbseg","purpose":"prod","scope":"counterpart_portal","scope_area":"checkout_&_shopping_cart","screen":"cp_checkout","object":"transa
2024-06-28 16:10:03 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:1934ef33-5672-40fa-b9fd-2b9bb27e59e5\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 56ff7b75-9d33-48b0-a765-d7b922ace629 intuit_received_at: 1719591003110 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:1;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49763	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 3622 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:03 UTC	3622	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 30 2e 37 33 34 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 49 6e 76 6f 69 63 65 5f 76 69 65 77 5f 69 6e 5f 63 70 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 69 6e 74 75 69 74 5f 61 63 73 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 22 2c 22 73 73 72 74 69 64 22 3a 22 32 38 31 35 38 Data Ascii: {"timestamp":"2024-06-28T16:10:00.734Z","integrations":{},"event":"Invoice_view_in_cp","type":"track","properties":{"intuit_acstoken":"scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea","ssrtid":"28158
2024-06-28 16:10:03 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:d9205d37-152a-414a-b9db-487b6b438e0e\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 1b45f0df-a0f0-4a57-adb1-fa9a3b3ac6e3 intuit_received_at: 1719591003179 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:3;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49765	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:03 UTC	2768	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 30 2e 37 33 38 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 76 69 65 77 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 5f Data Ascii: {"timestamp":"2024-06-28T16:10:00.738Z","integrations":{},"event":"transaction:viewed","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature_
2024-06-28 16:10:03 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:4c39f4c3-09e4-4234-b4e9-5767cac85759\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: ef5e5c01-edf3-44e7-a596-7cef1222f237 intuit_received_at: 1719591003198 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:10:33 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49767	52.41.204.106	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	846	OUT	GET /portal/rest/invoice/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
2024-06-28 16:10:03 UTC	1143	IN	HTTP/1.1 302 Found Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 96 Connection: close x-spanid: 9c385d9c-54ab-6d73-0b7c-58182474bcca x-amzn-trace-id: Root=1-667ee05b-4b19ee930f67749818a9e5ac X-Content-Type-Options: nosniff Set-Cookie: AWSALB=HQ8O2BK07LEkTAT8Aw7HdfaSuq71M8eQMWwW65WJa2o9LdIMS+eQ1n7ddA0rS6F/qHTWTChCTxuKLTJUKKPsZ15yjtaKdw9JASrC9C4tgeMAHsGmdJwn7mItYJyq; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/ Set-Cookie: AWSALBCORS=HQ8O2BK07LEkTAT8Aw7HdfaSuq71M8eQMWwW65WJa2o9LdIMS+eQ1n7ddA0rS6F/qHTWTChCTxuKLTJUKKPsZ15yjtaKdw9JASrC9C4tgeMAHsGmdJwn7mItYJyq; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Location: https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect Vary: Accept, Accept-Encoding x-envoy-upstream-service-time: 22 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee05b-4b19ee930f67749818a9e5ac x-request-id: 1-667ee05b-4b19ee930f67749818a9e5ac server: istio-envoy
2024-06-28 16:10:03 UTC	96	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 71 75 69 63 6b 62 6f 6f 6b 73 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 3f 63 69 64 3d 63 70 5f 63 6f 6e 6e 65 63 74 2d 69 6e 74 75 69 74 2d 63 6f 6d 5f 72 65 64 69 72 65 63 74 Data Ascii: Found. Redirecting to https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49769	52.41.204.106	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	755	OUT	GET /portal/rest/reporting/prometheus/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
2024-06-28 16:10:03 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: c71a0de0-dd8c-c92f-2b8a-735b2abb6254 x-amzn-trace-id: Root=1-667ee05b-0d92c9f622fcb9987c60debd X-Content-Type-Options: nosniff Set-Cookie: AWSALB=yMDZKah09NosmbzZM/NFxjtjXwPJ1A5Mo/8yNpflmZBu70yLKVtV80WC/aYarqhd2HYQfXeoeBG7yHimzBR3zEDzQlOg0LGA9KE4qNBbzzkUOccyZevPYD/zcv1g; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/ Set-Cookie: AWSALBCORS=yMDZKah09NosmbzZM/NFxjtjXwPJ1A5Mo/8yNpflmZBu70yLKVtV80WC/aYarqhd2HYQfXeoeBG7yHimzBR3zEDzQlOg0LGA9KE4qNBbzzkUOccyZevPYD/zcv1g; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 21 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee05b-0d92c9f622fcb9987c60debd x-request-id: 1-667ee05b-0d92c9f622fcb9987c60debd server: istio-envoy
2024-06-28 16:10:03 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49768	52.41.204.106	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	741	OUT	GET /portal/rest/experiments HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
2024-06-28 16:10:03 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: b73014b7-0737-47ab-0307-876d06496aa2 x-amzn-trace-id: Root=1-667ee05b-4a7c6d2147cffc507413da4e X-Content-Type-Options: nosniff Set-Cookie: AWSALB=nLGFGZ8gf+jN69IUY10PxL4ovRYAO3symnNhLQFI74E1ec/7PkW4c/b5qAxUrA/jncyOI0AGM5EzHoffD47bvkj6GPzqZ2d6yyuGoq9XhooCDyFbUa/SRHzzhKRE; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/ Set-Cookie: AWSALBCORS=nLGFGZ8gf+jN69IUY10PxL4ovRYAO3symnNhLQFI74E1ec/7PkW4c/b5qAxUrA/jncyOI0AGM5EzHoffD47bvkj6GPzqZ2d6yyuGoq9XhooCDyFbUa/SRHzzhKRE; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 14 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee05b-4a7c6d2147cffc507413da4e x-request-id: 1-667ee05b-4a7c6d2147cffc507413da4e server: istio-envoy
2024-06-28 16:10:03 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49770	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:03 UTC	1865	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 6220 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c0d9a-6504-46fe-b87e-1593fa13c354 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; AWSALB=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; AWSALBCORS=D4tBBZPN1XEROm/pFvevDRWqIJ5HDMdYuGZ11gaRvnL1kgWN9ErmyvwLAVJHlikn0/lT/YQNTjRL0fv9gkvXUEfEn7oTShLNMG+DYiA5cpnNgl4gfLrAt8XnxK+6; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
2024-06-28 16:10:03 UTC	6220	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 30 2e 37 35 37 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 72 6f 66 69 6c 69 6e 67 22 2c 22 61 63 74 69 6f 6e 22 3a 22 50 4f 53 54 3a 20 2f 72 65 73 74 2f 69 6e 76 6f 69 63 65 2f 3a 74 6f 6b 65 6e 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 22 7d 2c 22 6e 65 74 77 6f 72 6b 22 3a 7b 22 69 6e 74 75 69 74 54 Data Ascii: {"messages":[{"data":{"timestamp":"2024-06-28T16:10:00.757Z","event":"profiling","action":"POST: /rest/invoice/:token","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound"},"network":{"intuitT
2024-06-28 16:10:03 UTC	1101	IN	HTTP/1.1 201 Created Date: Fri, 28 Jun 2024 16:10:03 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 7eda8a9d-ff9e-fff7-85e1-75dc970b8fca x-amzn-trace-id: Root=1-667ee05b-7b8dd919091609823bc0bf43 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=0KEOkRyOQ2yZv68xDD2TGOQ1cXHqrPCtBRxpHvfuLHQmKlfdDsWCB64b/2tlyZ8mpkN8QT5Bls6yzIZUpOdXMiaa2PBu9Rci/COpkeXhud7Y9jYEPr8eL9kIn663; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/ Set-Cookie: AWSALBCORS=0KEOkRyOQ2yZv68xDD2TGOQ1cXHqrPCtBRxpHvfuLHQmKlfdDsWCB64b/2tlyZ8mpkN8QT5Bls6yzIZUpOdXMiaa2PBu9Rci/COpkeXhud7Y9jYEPr8eL9kIn663; Expires=Fri, 05 Jul 2024 16:10:03 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 17 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c0d9a-6504-46fe-b87e-1593fa13c354 x-request-id: cp-c0d9a-6504-46fe-b87e-1593fa13c354 server: istio-envoy
2024-06-28 16:10:03 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49773	52.41.204.106	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:04 UTC	849	OUT	GET /portal/rest/pdf/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea/invoice.pdf HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; AWSALB=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG; AWSALBCORS=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG
2024-06-28 16:10:04 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Fri, 28 Jun 2024 16:10:04 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: 061139aa-3744-a27e-f201-b1ea53f352b1 x-amzn-trace-id: Root=1-667ee05c-32dcece20df095633ed94d4d X-Content-Type-Options: nosniff Set-Cookie: AWSALB=46k7jEoM84pqZX+fuluMEecpHKyhiHMgVXJS+NYO5+asJRW7tWJ8jAjMkGgqLpLoQNo0XgZDtT8kKHt5JjMVglW6W1LN5xZhIDWEp8Gtprx/t/bkfSBh8dXM68lD; Expires=Fri, 05 Jul 2024 16:10:04 GMT; Path=/ Set-Cookie: AWSALBCORS=46k7jEoM84pqZX+fuluMEecpHKyhiHMgVXJS+NYO5+asJRW7tWJ8jAjMkGgqLpLoQNo0XgZDtT8kKHt5JjMVglW6W1LN5xZhIDWEp8Gtprx/t/bkfSBh8dXM68lD; Expires=Fri, 05 Jul 2024 16:10:04 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 26 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee05c-32dcece20df095633ed94d4d x-request-id: 1-667ee05c-32dcece20df095633ed94d4d server: istio-envoy
2024-06-28 16:10:04 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49772	99.86.8.175	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:04 UTC	589	OUT	GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:05 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21911 Connection: close Date: Fri, 28 Jun 2024 16:10:06 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Mon, 03 Jun 2024 14:40:11 GMT ETag: "c467a63b2e7c3a99be423ace649014d8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: V.SxMmReU8g28xcE4bFlqm5TAakYuTpt Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b8e900270aa30d899882e71796feca9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: AeNuwNqenJYDoUROqXwfW_gkTEy_-gFRcmR6nP7uwVImP4TWXF0cEA==
2024-06-28 16:10:05 UTC	8176	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 69 7b db 38 b2 30 fa fd fe 0a 99 b7 a3 90 11 ac d5 ab 64 46 6f 96 4e 27 3d d9 4e c7 e9 3e 13 45 c9 a1 25 c8 62 22 91 6a 92 b2 e3 58 9a df 7e ab 0a 0b c1 45 b2 32 db 99 fb 3c ef 4c c7 22 41 a0 50 d8 0a 85 42 2d f6 b5 1f 8c c3 eb fa 35 bf 58 78 a3 af bf c6 61 b0 f8 1c 78 73 fe f9 45 90 f0 cb c8 4b fc 30 70 77 c9 b4 5a 0d 86 4e 7d b1 8c a7 f6 60 d0 1c b2 5b ab f6 f8 65 cb ea 4e 96 c1 08 bf db 09 e3 2c 72 6e ad 65 cc 2b 71 12 f9 a3 c4 ea a9 8f 15 f8 ec dc 5e 79 51 85 bb 49 3d 09 df c1 f7 e0 d2 76 7a 11 4f 96 51 50 69 b9 ae cb eb 33 1e 5c 26 d3 be d5 b4 6a bc cb d7 49 9d 7f 5b 84 51 12 bb 69 1d ce ad 2c 91 d4 2f 79 f2 fe fc c9 b3 e5 6c f6 57 ee 45 b6 53 b3 f6 ad 1a 64 91 1f 5e 85 41 32 85 d4 56 fe c3 53 2f e1 b6 03 a9 e7 66 Data Ascii: i{80dFoN'=N>E%b"jX~E2<L"APB-5XxaxsEK0pwZN}`[eN,rne+q^yQI=vzOQPi3\&jI[Qi,/ylWESd^A2VS/f
2024-06-28 16:10:05 UTC	8192	IN	Data Raw: bd da e4 d6 61 f4 15 3d a6 31 20 19 9b 6e fd 19 5e 73 a2 24 56 9e c1 1b 95 07 bd ca 83 86 a3 24 01 01 1e c5 d5 15 66 ee d6 33 e3 23 3f 1a 2c 6d 60 e1 82 ec 71 1e 95 6d 9c a1 bb 84 39 d7 4a b5 04 22 d2 1f 36 45 5d 7a c2 43 97 0d 92 61 4e b1 7e 77 99 0a 9c 86 a9 f9 95 ff 11 19 ed 7b a1 f3 3f 95 fd 0a fa d5 12 1e 90 34 e4 e5 0e a2 96 52 c8 22 63 11 f2 9d c2 b7 bc 6a b2 38 8c 55 3a 5d fa 69 2b 09 57 68 8a bf 2a 2d 43 20 e7 14 2f de 49 8a f5 f6 f8 bf 5f e5 8e 8b 25 d3 45 1e 67 84 ce 56 7f d3 21 99 0b 9d af e5 82 47 9f 5d ce 8c e3 8f 9b 01 60 73 c3 59 d1 ad e1 97 a8 7b 2b 3c 01 01 34 c3 5f 50 cb 74 07 94 f7 1d b4 c6 bb fa ee 96 63 3b 5d 78 29 9c e4 29 db bc a4 ed 19 9e 93 5c 13 31 13 7d a4 26 91 99 62 7a 53 02 2e 13 3a f2 bf 5e 1f ff 57 e9 b9 5b 79 73 eb ed 10 Data Ascii: a=1 n^s$V$f3#?,m`qm9J"6E]zCaN~w{?4R"cj8U:]i+Wh*-C /I_%EgV!G]`sY{+<4_Ptc;]x))\1}&bzS.:^W[ys
2024-06-28 16:10:05 UTC	5543	IN	Data Raw: 32 b8 ea 81 a2 21 19 e4 3b 23 a4 ee 1d c2 90 d3 35 34 e2 86 b3 fb 47 31 73 84 e3 9b 2d 88 08 dc 33 a1 23 09 fd c8 e9 47 06 a3 99 1d 65 f4 99 b6 61 2b cf b4 41 8d ba 34 a3 86 a7 cc e0 23 2c f2 34 42 c7 5b 9d 64 93 c5 6a a6 42 25 87 d9 3c b1 54 16 b9 1e 30 45 86 09 37 8f ba 19 ec 70 ba f5 b2 76 99 3d a5 a9 22 a2 67 8d 0d bf cb d2 14 50 cb 8e 90 49 f3 5d bc 19 5c ad 46 76 c0 52 33 fb fc 5d 9f 4f f6 f0 a3 cc 4d 38 0a 6a 8c b8 52 7a 85 fa 7d bf 7b bb 5e e7 cf 61 d4 10 b7 a4 47 b2 87 64 81 f4 16 b9 32 6e f2 ea ea 09 5e af fc 31 46 24 03 6a 80 4e 6d 2e c2 70 c6 3d 33 98 8a b8 5b 2e 29 4b 25 00 fd 1d 8a 98 5d 76 57 39 a5 7a 1f e1 b5 36 4a eb 59 69 bf d3 0d 54 8a 3f 7a c8 48 1b 93 bb d8 12 97 cc ae 91 03 9d 09 b0 a0 98 4f cb 36 88 46 b9 45 1c 43 e0 43 55 10 ce bd Data Ascii: 2!;#54G1s-3#Gea+A4#,4B[djB%<T0E7pv="gPI]\FvR3]OM8jRz}{^aGd2n^1F$jNm.p=3[.)K%]vW9z6JYiT?zHO6FECCU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49774	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:05 UTC	1865	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c3f94-9b9f-46db-aef2-f858c6238d01 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; AWSALB=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG; AWSALBCORS=HL5nEbQzMp/9tgIksUYmF4Vr2hKJGO/pIo4tx6piUyA6h5yhz/qzQLW+oE1vGQMACrhi1mQpNIcntJiemIRfHb3rDVxvG1ESjyf/wZxXUq0sMiPxIxNEP4N4YeFG
2024-06-28 16:10:05 UTC	2155	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 32 2e 33 35 32 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 64 66 22 2c 22 61 63 74 69 6f 6e 22 3a 22 47 45 54 3a 20 2f 70 6f 72 74 61 6c 2f 72 65 73 74 2f 70 64 66 2f 69 6e 76 6f 69 63 65 2f 3a 74 6f 6b 65 6e 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 22 7d 2c 22 6e 65 74 77 6f 72 6b 22 3a 7b 22 69 6e 74 Data Ascii: {"messages":[{"data":{"timestamp":"2024-06-28T16:10:02.352Z","event":"pdf","action":"GET: /portal/rest/pdf/invoice/:token","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound"},"network":{"int
2024-06-28 16:10:05 UTC	1101	IN	HTTP/1.1 201 Created Date: Fri, 28 Jun 2024 16:10:05 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 27b03bfd-55e7-92c1-df48-51745a7537c0 x-amzn-trace-id: Root=1-667ee05d-13d46d2345e719e04ecbb05f X-Content-Type-Options: nosniff Set-Cookie: AWSALB=IcUEIaIM9uKIU/MrmpZmBl0m2FFxwLSpMkblozUgsQxt5/1L7jALqaxDYOTo3Qbu3f7M+oMK28ET4EIRW/vuKp3ZlUuzSpsqg+58mU+Pd63r+3SfG/4KS/nHsSmC; Expires=Fri, 05 Jul 2024 16:10:05 GMT; Path=/ Set-Cookie: AWSALBCORS=IcUEIaIM9uKIU/MrmpZmBl0m2FFxwLSpMkblozUgsQxt5/1L7jALqaxDYOTo3Qbu3f7M+oMK28ET4EIRW/vuKp3ZlUuzSpsqg+58mU+Pd63r+3SfG/4KS/nHsSmC; Expires=Fri, 05 Jul 2024 16:10:05 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 16 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c3f94-9b9f-46db-aef2-f858c6238d01 x-request-id: cp-c3f94-9b9f-46db-aef2-f858c6238d01 server: istio-envoy
2024-06-28 16:10:05 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49775	34.217.155.134	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:05 UTC	745	OUT	POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive Content-Length: 140 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:05 UTC	140	OUT	Data Raw: 7b 7d 0a 7b 22 74 79 70 65 22 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 39 35 39 31 30 30 33 2e 35 33 32 2c 22 64 69 73 63 61 72 64 65 64 5f 65 76 65 6e 74 73 22 3a 5b 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 31 7d 5d 7d Data Ascii: {}{"type":"client_report"}{"timestamp":1719591003.532,"discarded_events":[{"reason":"sample_rate","category":"transaction","quantity":1}]}
2024-06-28 16:10:06 UTC	415	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:05 GMT Content-Type: application/json Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin X-Frame-Options: SAMEORIGIN
2024-06-28 16:10:06 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49778	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:07 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:07 UTC	2635	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 30 34 2e 33 30 33 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 73 75 72 76 65 79 3a 76 69 65 77 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 5f 65 6c 69 67 69 Data Ascii: {"timestamp":"2024-06-28T16:10:04.303Z","integrations":{},"event":"survey:viewed","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature_eligi
2024-06-28 16:10:07 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:07 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:6e6fff1a-e49a-4af6-aed5-bd9e14e4b131\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:37 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:37 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 61311fa8-4405-4efd-a921-2accf2985c29 intuit_received_at: 1719591007513 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:4;Path=/;Expires=Fri, 28-Jun-2024 16:10:37 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49779	34.210.192.119	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:07 UTC	686	OUT	GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1
2024-06-28 16:10:07 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 28 Jun 2024 16:10:07 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49777	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:07 UTC	683	OUT	GET /_next/static/chunks/8367.159e6dc789fa4500.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be
2024-06-28 16:10:07 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1451 Connection: close Date: Thu, 27 Jun 2024 17:46:46 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "9e8147554b71674b97e01b1328ed325c" x-amz-server-side-encryption: AES256 x-amz-version-id: eXiZiORz2Um4Tm.jU9JSL3qEJhGRvvZL Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 134cb849e01fafad6f264ff9633b073e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: sB_4Uzut6gsVU7Khju60qpBOiiCmwaRkwk4h2ZNNfuEOXtAGaj8lbA== Age: 80602 Vary: Origin
2024-06-28 16:10:07 UTC	1451	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 33 36 37 5d 2c 7b 35 38 33 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6c 29 7b 6c 2e 72 28 74 29 3b 6c 28 36 37 32 39 34 29 3b 76 61 72 20 73 3d 6c 28 38 35 38 39 33 29 3b 74 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 74 3d 31 32 2c 68 65 69 67 68 74 3a 6c 3d 31 32 2c 63 6f 6c 6f 72 3a 69 3d 22 23 38 44 39 30 39 36 22 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 6c 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 32 20 31 32 22 2c 76 65 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8367],{58367:function(e,t,l){l.r(t);l(67294);var s=l(85893);t.default=e=>{let{width:t=12,height:l=12,color:i="#8D9096"}=e;return(0,s.jsxs)("svg",{width:t,height:l,viewBox:"0 0 12 12",ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49788	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:15 UTC	2031	OUT	POST /portal/rest/reporting/prometheus/pageLoad HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 114 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c54ff-1362-4193-bc46-6e8dbacb7105 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; AWSALB=IcUEIaIM9uKIU/MrmpZmBl0m2FFxwLSpMkblozUgsQxt5/1L7jALqaxDYOTo3Qbu3f7M+oMK28ET4EIRW/vuKp3ZlUuzSpsqg+58mU+Pd63r+3SfG/4KS/nHsSmC; AWSALBCORS=IcUEIaIM9uKIU/MrmpZmBl0m2FFxwLSpMkblozUgsQxt5/1L7jALqaxDYOTo3Qbu3f7M+oMK28ET4EIRW/vuKp3ZlUuzSpsqg+58mU+Pd63r+3SfG/4KS/nHsSmC; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:10:15 UTC	114	OUT	Data Raw: 7b 22 66 6c 6f 77 22 3a 22 69 6e 76 6f 69 63 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6f 66 66 65 72 69 6e 67 49 64 22 3a 22 51 42 4f 22 2c 22 69 73 53 61 6c 65 73 43 68 65 63 6b 6f 75 74 49 6e 76 6f 69 63 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 49 6e 4d 73 22 3a 31 31 31 31 30 2e 38 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"flow":"invoice","locale":"en_US","offeringId":"QBO","isSalesCheckoutInvoice":true,"timeInMs":11110.899999999994}
2024-06-28 16:10:16 UTC	1089	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:16 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 2 Connection: close x-spanid: 97e6907c-f429-7938-25da-392e967e3b29 x-amzn-trace-id: Root=1-667ee067-7a843b2b7836eafc477da734 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R; Expires=Fri, 05 Jul 2024 16:10:15 GMT; Path=/ Set-Cookie: AWSALBCORS=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R; Expires=Fri, 05 Jul 2024 16:10:15 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Vary: Accept-Encoding x-envoy-upstream-service-time: 384 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c54ff-1362-4193-bc46-6e8dbacb7105 x-request-id: cp-c54ff-1362-4193-bc46-6e8dbacb7105 server: istio-envoy
2024-06-28 16:10:16 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49789	18.239.83.84	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:15 UTC	850	OUT	GET /favicon.png HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:10:16 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2785 Connection: close Date: Thu, 27 Jun 2024 17:46:52 GMT Last-Modified: Mon, 13 May 2019 07:16:14 GMT ETag: "7dbe4596b420ff7fdac169a69e4bbfc9" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 06cdb267b93af0cbfcd6cc564136784a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 2ag-XbN6UWKTxC26zC-xWVpVmGaTQZN68rAbAEmoEj0JvWqLwpr9Nw== Age: 80605 Vary: Origin
2024-06-28 16:10:16 UTC	2785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 83 49 44 41 54 78 da ec 5d 4f 68 14 57 18 9f 59 c5 8b 4a a3 07 2d 06 21 a8 d0 14 ab 89 d0 1c b4 07 37 da 16 4b 0b d9 80 97 52 ad c9 a9 a0 d0 c4 0a f5 60 a9 46 f4 60 a1 35 16 14 3c ed fa a7 f4 62 c9 06 5a da c6 7f 9b 8b 3d 58 e8 6a 5b 9a 83 d1 2d 45 a9 15 34 45 bd d8 4b df 6f 7c 23 9b 75 76 f7 cd ec 7b 6f de 9b f9 7e 30 6c 48 26 3b 33 ef fb 7d 7f df fb de 38 0e 81 40 48 2f dc 34 3e f4 ea d3 5b da d8 47 77 c0 9f 2a bf bf ff 43 85 08 60 bf 80 b3 ec a3 83 1f 5d ec f0 05 de 16 f2 ab 4a fc b3 cc 8e 3f f9 67 99 91 64 86 08 60 8e b0 21 e4 2c 17 74 Data Ascii: PNGIHDR>atEXtSoftwareAdobe ImageReadyqe<IDATx]OhWYJ-!7KR`F`5<bZ=Xj[-E4EKo\|#uv{o~0lH&;3}8@H/4>[Gw*C`]J?gd`!,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49790	18.239.83.87	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:16 UTC	613	OUT	GET /favicon.png HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:10:17 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2785 Connection: close Date: Thu, 27 Jun 2024 17:46:52 GMT Last-Modified: Mon, 13 May 2019 07:16:14 GMT ETag: "7dbe4596b420ff7fdac169a69e4bbfc9" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ca0e18fe48e6994b3446a58a1e05c1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: gR_4cPX4PQt56GRgEDeuN87JIYJMkZB04Mi98scVUb6pW_kdn_4V9A== Age: 80606 Vary: Origin
2024-06-28 16:10:17 UTC	2785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 83 49 44 41 54 78 da ec 5d 4f 68 14 57 18 9f 59 c5 8b 4a a3 07 2d 06 21 a8 d0 14 ab 89 d0 1c b4 07 37 da 16 4b 0b d9 80 97 52 ad c9 a9 a0 d0 c4 0a f5 60 a9 46 f4 60 a1 35 16 14 3c ed fa a7 f4 62 c9 06 5a da c6 7f 9b 8b 3d 58 e8 6a 5b 9a 83 d1 2d 45 a9 15 34 45 bd d8 4b df 6f 7c 23 9b 75 76 f7 cd ec 7b 6f de 9b f9 7e 30 6c 48 26 3b 33 ef fb 7d 7f df fb de 38 0e 81 40 48 2f dc 34 3e f4 ea d3 5b da d8 47 77 c0 9f 2a bf bf ff 43 85 08 60 bf 80 b3 ec a3 83 1f 5d ec f0 05 de 16 f2 ab 4a fc b3 cc 8e 3f f9 67 99 91 64 86 08 60 8e b0 21 e4 2c 17 74 Data Ascii: PNGIHDR>atEXtSoftwareAdobe ImageReadyqe<IDATx]OhWYJ-!7KR`F`5<bZ=Xj[-E4EKo\|#uv{o~0lH&;3}8@H/4>[Gw*C`]J?gd`!,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49793	52.41.204.106	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:17 UTC	899	OUT	GET /portal/rest/reporting/prometheus/pageLoad HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006; AWSALB=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R; AWSALBCORS=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R
2024-06-28 16:10:17 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Fri, 28 Jun 2024 16:10:17 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: 70954ebf-7b69-5891-b177-2a721b5325b9 x-amzn-trace-id: Root=1-667ee069-571790960e7f427d02aea4ae X-Content-Type-Options: nosniff Set-Cookie: AWSALB=CoT98VSXyv509wucuunpCFj+jarHp0OH/KWNU7NaP0uNmhQ/+xP+yYjkZLr+UM4q1JUTNdbqpuTquZqRvRF5ItctebEpsRX/jnLVGYSPmInusMoSxc0bBPDz7qJ9; Expires=Fri, 05 Jul 2024 16:10:17 GMT; Path=/ Set-Cookie: AWSALBCORS=CoT98VSXyv509wucuunpCFj+jarHp0OH/KWNU7NaP0uNmhQ/+xP+yYjkZLr+UM4q1JUTNdbqpuTquZqRvRF5ItctebEpsRX/jnLVGYSPmInusMoSxc0bBPDz7qJ9; Expires=Fri, 05 Jul 2024 16:10:17 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 42 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee069-571790960e7f427d02aea4ae x-request-id: 1-667ee069-571790960e7f427d02aea4ae server: istio-envoy
2024-06-28 16:10:17 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49794	52.43.112.129	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:17 UTC	2005	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2095 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: 281585c6-1f0a-4086-94d4-35aa8435f479 sec-ch-ua-mobile: ?0 Intuit-RealmId: 13845050475272421 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLTc0NzVhMmNiNjg5ZTQ3Yjc5ZjEyNjFhMWM5ZTMwYzgxMTI4YTg2YzljMThkNDFiZWE0YWZkZThmNzcxYzk1NmNlM2FjYjdkZTQyMWE0NDRmYWI2Njg5ZmQ2NGIwMzVlYSIsInJlYWxtSWQiOiIxMzg0NTA1MDQ3NTI3MjQyMSJ9LCJpYXQiOjE3MTk1OTA5OTUsImV4cCI6MTcxOTYxOTc5NX0.lxQ1wrecpBjIL5Tg7qUBYIX0Ukz25sTImJXmsbh7-lw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c13ce-bbfc-40e2-8476-41bdbe0e4c2d Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:13845050475272421_15 Intuit-ACSToken: scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea?cta=viewinvoicenow&locale=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006; AWSALB=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R; AWSALBCORS=HxB+ZMCHiRdULKRv/vM1w/BWJEoi5zzwM0u/QoS60j0SCwnzt/nVicOg+80cC47MvOFGm3OlNOeJN5nu+NLSngQLCQTfexJjHjxLQ6P1Bgq23XqGI2AV1WlUVF+R
2024-06-28 16:10:17 UTC	2095	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 31 34 2e 39 34 38 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 72 6f 66 69 6c 69 6e 67 22 2c 22 61 63 74 69 6f 6e 22 3a 22 50 4f 53 54 3a 20 2f 70 6f 72 74 61 6c 2f 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 2f 70 72 6f 6d 65 74 68 65 75 73 2f 70 61 67 65 4c 6f 61 64 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 Data Ascii: {"messages":[{"data":{"timestamp":"2024-06-28T16:10:14.948Z","event":"profiling","action":"POST: /portal/rest/reporting/prometheus/pageLoad","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound
2024-06-28 16:10:17 UTC	1101	IN	HTTP/1.1 201 Created Date: Fri, 28 Jun 2024 16:10:17 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 566ef846-c16c-636a-b7f8-a384820f24db x-amzn-trace-id: Root=1-667ee069-7f8f7e8f32557fb9637c0193 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4; Expires=Fri, 05 Jul 2024 16:10:17 GMT; Path=/ Set-Cookie: AWSALBCORS=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4; Expires=Fri, 05 Jul 2024 16:10:17 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 21 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c13ce-bbfc-40e2-8476-41bdbe0e4c2d x-request-id: cp-c13ce-bbfc-40e2-8476-41bdbe0e4c2d server: istio-envoy
2024-06-28 16:10:17 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49798	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:29 UTC	634	OUT	POST /v2/segment/sbseg-qbo-clickstream/m HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:29 UTC	224	OUT	Data Raw: 7b 22 73 65 72 69 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 43 6f 75 6e 74 65 72 22 2c 22 6d 65 74 72 69 63 22 3a 22 61 6e 61 6c 79 74 69 63 73 5f 6a 73 2e 69 6e 74 65 67 72 61 74 69 6f 6e 2e 69 6e 76 6f 6b 65 22 2c 22 76 61 6c 75 65 22 3a 31 2c 22 74 61 67 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 74 72 61 63 6b 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 41 64 57 6f 72 64 73 20 4e 65 77 22 2c 22 74 79 70 65 22 3a 22 63 6c 61 73 73 69 63 22 2c 22 6c 69 62 72 61 72 79 22 3a 22 61 6e 61 6c 79 74 69 63 73 2e 6a 73 22 2c 22 6c 69 62 72 61 72 79 5f 76 65 72 73 69 6f 6e 22 3a 22 6e 65 78 74 2d 31 2e 37 30 2e 30 22 7d 7d 5d 7d Data Ascii: {"series":[{"type":"Counter","metric":"analytics_js.integration.invoke","value":1,"tags":{"method":"track","integration_name":"Google AdWords New","type":"classic","library":"analytics.js","library_version":"next-1.70.0"}}]}
2024-06-28 16:10:30 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 16:10:29 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:8ec2b220-fe62-4805-b888-6d3c7b8d8643\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:10:59 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:10:59 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:0;Path=/;Expires=Fri, 28-Jun-2024 16:10:59 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49799	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:30 UTC	623	OUT	GET /v2/segment/sbseg-qbo-clickstream/m HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:10:31 UTC	1109	IN	HTTP/1.1 204 No Content Date: Fri, 28 Jun 2024 16:10:30 GMT Content-Type: text/plain Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:0\|g:eed64837-0bd0-4b6e-9403-711badd4095b\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:11:00 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:11:00 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty Set-Cookie: ADRUM_BT1=R:0\|i:636215\|e:2\|d:0;Path=/;Expires=Fri, 28-Jun-2024 16:11:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49804	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:39 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POrVY6DuSCNGz6g&MD=vVlEBouK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-28 16:10:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 414196bf-f602-4a25-b9a6-ef786c201209 MS-RequestId: 84c95283-b744-4e73-b7b6-3e7e1a1d442e MS-CV: XUA+BZ4JgE+meA09.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 28 Jun 2024 16:10:39 GMT Connection: close Content-Length: 30005
2024-06-28 16:10:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-06-28 16:10:39 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49813	54.213.166.94	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:10:56 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2642 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:10:56 UTC	2642	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 30 3a 35 34 2e 34 39 36 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 73 75 72 76 65 79 3a 65 6e 67 61 67 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 5f 65 6c 69 67 Data Ascii: {"timestamp":"2024-06-28T16:10:54.496Z","integrations":{},"event":"survey:engaged","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature_elig
2024-06-28 16:10:56 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:10:56 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:8f0cba4c-972a-4030-8994-28c0aad662a2\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:11:26 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:11:26 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 3c592c4f-b60d-4430-a418-80cce6428250 intuit_received_at: 1719591056740 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:11:26 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.16	49814	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:12 UTC	462	OUT	GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-06-28 16:11:13 UTC	431	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=900 Content-Length: 19569 Content-Type: application/json; charset=utf-8 ETag: "1209068092" Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:b183296d-485b-49fc-81c7-a511e61d1309 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 42A8D258380D4F76BD401F57A2C968C3 Ref B: EWR311000103047 Ref C: 2024-06-28T16:11:13Z Date: Fri, 28 Jun 2024 16:11:12 GMT Connection: close
2024-06-28 16:11:13 UTC	2249	IN	Data Raw: 7b 22 73 22 3a 35 30 30 30 2c 22 6e 22 3a 33 2c 22 65 22 3a 5b 7b 22 65 22 3a 22 2a 2e 61 7a 72 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 35 30 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 31 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 6e 72 62 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 34 32 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 61 66 64 78 74 65 73 74 2e 7a 30 31 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 35 30 30 2c 22 6d 22 3a 31 7d 2c 7b Data Ascii: {"s":5000,"n":3,"e":[{"e":".azr.footprintdns.com","w":5000,"m":128},{"e":".clo.footprintdns.com","w":2000,"m":1},{"e":".clo.footprintdns.com","w":100,"m":128},{"e":".nrb.footprintdns.com","w":420,"m":3},{"e":"afdxtest.z01.azurefd.net","w":500,"m":1},{
2024-06-28 16:11:13 UTC	1549	IN	Data Raw: 61 35 37 65 61 61 66 37 22 7d 2c 7b 22 65 22 3a 22 62 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 62 79 31 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 62 79 34 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 62 7a 36 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 62 7a 37 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 Data Ascii: a57eaaf7"},{"e":"b-ring-fallback.msedge.net","w":50,"m":3},{"e":"by1prdapp02-canary.netmon.azure.com","w":3,"m":128},{"e":"by4prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"bz6prdapp01-canary.netmon.azure.com","w":3,"m":1},{"e":"bz7prdapp01-canary
2024-06-28 16:11:13 UTC	4096	IN	Data Raw: 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 76 6c 30 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 63 76 6c 30 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 76 6c 30 38 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e Data Ascii: m":128},{"e":"c-ring.msedge.net","w":2000,"m":3},{"e":"c-ring-fallback.msedge.net","w":50,"m":3},{"e":"cvl02prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"cvl02prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"cvl08prdapp01-canary.n
2024-06-28 16:11:13 UTC	4096	IN	Data Raw: 38 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 77 22 3a 31 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 77 22 3a 31 2c 22 6d 22 3a 38 7d 2c 7b 22 65 22 3a 22 67 76 78 30 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 67 76 78 30 31 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 67 76 78 31 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e Data Ascii: 8},{"e":"graph.microsoft.com","w":1,"m":1},{"e":"graph.microsoft.com","w":1,"m":8},{"e":"gvx01prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"gvx01prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"gvx11prdapp01-canary-opaph.netmon.
2024-06-28 16:11:13 UTC	4096	IN	Data Raw: 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 6f 73 61 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6f 73 61 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6f 73 61 32 33 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6f 73 61 32 33 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 Data Ascii: net","w":50,"m":3},{"e":"osa20prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"osa22prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"osa23prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"osa23prdapp02-canary.netmon.azure.com","w":3
2024-06-28 16:11:13 UTC	3483	IN	Data Raw: 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 73 70 6f 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 73 70 6f 76 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 73 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 73 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 73 74 61 74 69 63 2d 65 63 73 74 2e 6c 69 63 64 6e 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c Data Ascii: sedge.net","w":2000,"m":3},{"e":"spo-ring-fallback.msedge.net","w":50,"m":3},{"e":"spov-ring-fallback.msedge.net","w":50,"m":3},{"e":"s-ring.msedge.net","w":2000,"m":3},{"e":"s-ring-fallback.msedge.net","w":50,"m":3},{"e":"static-ecst.licdn.com","w":2000,

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.16	49815	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:13 UTC	2230	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1707317755 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 60 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Device-ClientSession: B2DC660161784379B3117A8C8CEC12A1 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 1256 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-06-28 16:11:13 UTC	1256	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 35 35 66 30 38 33 62 65 65 36 39 65 34 31 39 39 38 34 37 66 33 34 64 30 37 38 38 35 62 32 61 39 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 74 6f 74 61 6c 6e 75 6d 62 65 72 4f 66 45 6e 74 72 69 65 73 22 3a 22 30 22 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>55f083bee69e4199847f34d07885b2a9</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","totalnumberOfEntries":"0"
2024-06-28 16:11:13 UTC	426	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B6B5C9C7B96E429297F7B60894638BB0 Ref B: EWR30EDGE0314 Ref C: 2024-06-28T16:11:13Z Date: Fri, 28 Jun 2024 16:11:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.16	49816	13.107.4.254	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:16 UTC	481	OUT	GET /apc/trans.gif?a75363d0418258491551ead6717ca895 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: c-ring.msedge.net Connection: Keep-Alive
2024-06-28 16:11:16 UTC	700	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Fri, 07 Jun 2024 05:16:46 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: EWR30 X-Frontend: AFD X-Machinename: EWR30EDGE0114 X-Userhostaddress: 8.46.123.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FE9E2BB100F547329DD1E6DE11A3518C Ref B: EWR30EDGE0114 Ref C: 2024-06-28T16:11:16Z Date: Fri, 28 Jun 2024 16:11:16 GMT Connection: close
2024-06-28 16:11:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.16	49817	13.107.4.254	443

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:17 UTC	481	OUT	GET /apc/trans.gif?3d4619f8959a0bb944ce9eb8ccf482ff HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: c-ring.msedge.net Connection: Keep-Alive
2024-06-28 16:11:17 UTC	703	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Fri, 07 Jun 2024 05:16:46 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: EWR30r4a X-Frontend: AFD X-Machinename: EWR30EDGE0712 X-Userhostaddress: 8.46.123.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9A3B5C89F58E40D6885091A8B88C180E Ref B: EWR30EDGE0712 Ref C: 2024-06-28T16:11:17Z Date: Fri, 28 Jun 2024 16:11:16 GMT Connection: close
2024-06-28 16:11:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49821	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:22 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:11:22 UTC	2705	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 31 3a 31 39 2e 32 36 36 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 5f 63 6f 6e 74 61 63 74 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 69 6e 74 75 69 74 5f 61 63 73 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 22 2c 22 73 73 72 74 69 64 22 Data Ascii: {"timestamp":"2024-06-28T16:11:19.266Z","integrations":{},"event":"click_contact_information","type":"track","properties":{"intuit_acstoken":"scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea","ssrtid"
2024-06-28 16:11:22 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:11:22 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:0afdc324-ebac-4c39-98a4-7ac112d51b31\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:11:52 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:11:52 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 0a771226-5466-4c56-b9cd-0b4413dc9e36 intuit_received_at: 1719591082367 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:11:52 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49819	99.86.114.118	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:22 UTC	823	OUT	GET /_next/static/chunks/9844.724333c7af959b0a.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:11:23 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1001 Connection: close Date: Fri, 28 Jun 2024 16:11:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "809d00f1de64fbefbc1d5d0799370e9f" x-amz-server-side-encryption: AES256 x-amz-version-id: Xl_a7YO.CitQK0k5Qokx3JSfgI4FnP0s Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7176d7cdb1755c0cca0750416f1054ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR61-C1 X-Amz-Cf-Id: FOrYsccyzlQBzV_o0feJ16zmsX6HTs0li3jR5ZntmcAzqsIuCRpUFA== Vary: Origin
2024-06-28 16:11:23 UTC	1001	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 34 34 5d 2c 7b 34 39 38 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 74 2e 72 28 72 29 3b 74 28 36 37 32 39 34 29 3b 76 61 72 20 6f 3d 74 28 35 31 32 34 35 29 2c 73 3d 74 28 38 35 38 39 33 29 3b 72 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 72 3d 31 38 2c 68 65 69 67 68 74 3a 74 3d 32 30 2c 63 6f 6c 6f 72 3a 69 3d 6f 2e 63 6f 6c 6f 72 73 2e 62 6c 61 63 6b 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 61 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9844],{49844:function(e,r,t){t.r(r);t(67294);var o=t(51245),s=t(85893);r.default=e=>{let{width:r=18,height:t=20,color:i=o.colors.black,"aria-label":a}=e;return(0,s.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49820	99.86.114.118	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:22 UTC	823	OUT	GET /_next/static/chunks/4299.ddfe61a9bd4e8832.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006
2024-06-28 16:11:22 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 893 Connection: close Date: Thu, 27 Jun 2024 18:42:37 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Jun 2024 07:19:15 GMT ETag: "01e9efb3e7fb6632e90114510f269816" x-amz-server-side-encryption: AES256 x-amz-version-id: 7c36Gz7g4y6k5SFcetABUak4w_ZSaYWG Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c334b6410f9d489eb2a951a4371f3d18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR61-C1 X-Amz-Cf-Id: GJtNbOXc5rEhHVNeCJamnGwoZicKdpnguU7TS4rWAQNeH5ZVIM54tQ== Age: 77326 Vary: Origin
2024-06-28 16:11:22 UTC	893	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 39 5d 2c 7b 36 34 32 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 74 2e 72 28 72 29 3b 74 28 36 37 32 39 34 29 3b 76 61 72 20 73 3d 74 28 38 35 38 39 33 29 3b 72 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 72 3d 31 39 2c 68 65 69 67 68 74 3a 74 3d 32 30 2c 63 6f 6c 6f 72 3a 6e 3d 22 23 30 30 30 30 30 30 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 69 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4299],{64299:function(e,r,t){t.r(r);t(67294);var s=t(85893);r.default=e=>{let{width:r=19,height:t=20,color:n="#000000","aria-label":i}=e;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49822	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:27 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2646 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:11:27 UTC	2646	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 31 3a 32 34 2e 39 31 32 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 65 6e 67 61 67 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 Data Ascii: {"timestamp":"2024-06-28T16:11:24.912Z","integrations":{},"event":"transaction:engaged","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature
2024-06-28 16:11:27 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:11:27 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:67059b74-f3b7-49fb-89e2-5bd841ed83e8\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:11:57 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:11:57 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: ffaf69b8-2ef8-4720-92f2-1a1c931f15cf intuit_received_at: 1719591087199 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:3;Path=/;Expires=Fri, 28-Jun-2024 16:11:57 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49824	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:34 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2805 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:11:34 UTC	2805	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 31 3a 33 32 2e 33 33 38 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 65 6e 67 61 67 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 Data Ascii: {"timestamp":"2024-06-28T16:11:32.338Z","integrations":{},"event":"transaction:engaged","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature
2024-06-28 16:11:34 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:11:34 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:cc039264-d6e2-4db9-ba29-0ea5b04223a7\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: e2a565b3-4fa1-4ab5-b022-dd4cb2a15d13 intuit_received_at: 1719591094628 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49825	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:34 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2707 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:11:34 UTC	2707	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 31 3a 33 32 2e 33 34 30 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 5f 76 69 65 77 5f 69 6e 76 6f 69 63 65 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 69 6e 74 75 69 74 5f 61 63 73 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 37 34 37 35 61 32 63 62 36 38 39 65 34 37 62 37 39 66 31 32 36 31 61 31 63 39 65 33 30 63 38 31 31 32 38 61 38 36 63 39 63 31 38 64 34 31 62 65 61 34 61 66 64 65 38 66 37 37 31 63 39 35 36 63 65 33 61 63 62 37 64 65 34 32 31 61 34 34 34 66 61 62 36 36 38 39 66 64 36 34 62 30 33 35 65 61 22 2c 22 73 73 72 74 69 64 22 3a 22 32 38 31 35 38 Data Ascii: {"timestamp":"2024-06-28T16:11:32.340Z","integrations":{},"event":"click_view_invoice","type":"track","properties":{"intuit_acstoken":"scs-v1-7475a2cb689e47b79f1261a1c9e30c81128a86c9c18d41bea4afde8f771c956ce3acb7de421a444fab6689fd64b035ea","ssrtid":"28158
2024-06-28 16:11:34 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:11:34 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:c422f6a6-eccf-4073-bb49-7124fb33670e\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 78dfeadd-063b-4a9f-895c-d94b282d5a48 intuit_received_at: 1719591094631 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:3\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49823	44.228.239.27	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:34 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2809 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-28 16:11:34 UTC	2809	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 36 2d 32 38 54 31 36 3a 31 31 3a 33 32 2e 33 34 31 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 65 6e 67 61 67 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 32 38 31 35 38 35 63 36 2d 31 66 30 61 2d 34 30 38 36 2d 39 34 64 34 2d 33 35 61 61 38 34 33 35 66 34 37 39 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 4f 22 2c 22 66 65 61 74 75 72 65 Data Ascii: {"timestamp":"2024-06-28T16:11:32.341Z","integrations":{},"event":"transaction:engaged","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"281585c6-1f0a-4086-94d4-35aa8435f479","product_name":"QBO","feature
2024-06-28 16:11:34 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Fri, 28 Jun 2024 16:11:34 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:083ed2fe-aa6b-4243-827f-1517729a16fd\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT Set-Cookie: SameSite=None;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 916b0430-5f60-4bff-95e6-4b5a2c7b87c1 intuit_received_at: 1719591094651 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:2;Path=/;Expires=Fri, 28-Jun-2024 16:12:04 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49826	172.217.18.4	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:43 UTC	675	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fconnect.intuit.com&oit=3&cp=26&pgcl=4&gs_rn=42&psi=36xeMSuxvWiNwaAx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49831	52.26.102.158	443	4308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-28 16:11:44 UTC	1177	OUT	GET / HTTP/1.1 Host: connect.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=aad0231e-6e9a-4d5a-8bf1-6565721449a8; ajs_anonymous_id=f82b141a-88f2-464b-89cc-46e5ef2550be; priorityCode=3468337910; AKES_GEO=US~NJ; akid=gip127.0.0.1_gsip2.16.240.161_clip127.0.0.1_rclip127.0.0.1; _gcl_au=1.1.418337010.1719591006; AWSALB=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4; AWSALBCORS=ySix0IYcMA468WRHqcBS0CNYw6vy3tuo5CPv9ol6499jBXCq4I8y5BWqvxomsiWjGWnJaN0H61H1CK4HlESpy45/+iCxW/tkyz1mrCzbWNQJ2S+vYZaaY+exfdA4
2024-06-28 16:11:44 UTC	1143	IN	HTTP/1.1 302 Found Date: Fri, 28 Jun 2024 16:11:44 GMT Content-Type: text/html;charset=utf-8 Content-Length: 192 Connection: close x-spanid: 579f6567-cb2b-db5f-8b27-747a93c1f26b x-amzn-trace-id: Root=1-667ee0c0-3e4fec8443e3ff4a7b6cb4d0 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=0wr8ca1wAPAbw1SdTkCHPjaTRj3jRt9A+yyA/qYo8C3KJ3stq5Bry5c+ixv+fW7HQpYZb3YzVVJmUsSybY4cHRqeB94ZBKKVsPcZ/iDrClE5R7lAaIXkakASR9zu; Expires=Fri, 05 Jul 2024 16:11:44 GMT; Path=/ Set-Cookie: AWSALBCORS=0wr8ca1wAPAbw1SdTkCHPjaTRj3jRt9A+yyA/qYo8C3KJ3stq5Bry5c+ixv+fW7HQpYZb3YzVVJmUsSybY4cHRqeB94ZBKKVsPcZ/iDrClE5R7lAaIXkakASR9zu; Expires=Fri, 05 Jul 2024 16:11:44 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Location: https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect Vary: Accept, Accept-Encoding x-envoy-upstream-service-time: 13 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-667ee0c0-3e4fec8443e3ff4a7b6cb4d0 x-request-id: 1-667ee0c0-3e4fec8443e3ff4a7b6cb4d0 server: istio-envoy
2024-06-28 16:11:44 UTC	192	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 71 75 69 63 6b 62 6f 6f 6b 73 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 3f 63 69 64 3d 63 70 5f 63 6f 6e 6e 65 63 74 2d 69 6e 74 75 69 74 2d 63 6f 6d 5f 72 65 64 69 72 65 63 74 22 3e 68 74 74 70 73 3a 2f 2f 71 75 69 63 6b 62 6f 6f 6b 73 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 3f 63 69 64 3d 63 70 5f 63 6f 6e 6e 65 63 74 2d 69 6e 74 75 69 74 2d 63 6f 6d 5f 72 65 64 69 72 65 63 74 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect">https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect</a></p>

Target ID:	0
Start time:	12:09:44
Start date:	28/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://link.edgepilot.com/s/00344350/68BCtRZJtEijZV_Ss2rZtg?u=http://links.notification.intuit.com/ls/click?upn=u001.4HBRtPy8j6uXsK2aeX2RzAh5EFPhCIIFV3VEN-2Fx7CtL7yL0rqbEG5To4Yn7gWqQ9aLy0xQjXtfA1aWI51jOBcqCnHJrGOKkWEpk76XMNtCoKiYVPGVkYW4pqtGDVg3d1U5Hawh-2FacRZuCYTGyVuxWYYGm1-2F-2B4hsBImPSqAX0WX3WjCQTX7xXTplELi0c8bhBMfCl4SB-2Bc0p0RIFmi7WZNzk9OTy5SlZeZ4SOIQ0m44FTGZZ-2BVW-2F74ns4dkgKMbfXAWbjmeVOhbMp4L31WSel0Q-3D-3DSGIL_0QuT3MQptWCJ1pg0LLnMrMXZS5Gfo-2BwHAS-2BWm85DSt59SXq1v644VkncAfohMG6uQ86Db24jQzSfWbP-2F-2FZhau7caH92-2Fm-2BoTAs0GoBGn8EDYy4V1QCxaWW-2BqABO73nrgD-2B1uZqozRBTgELcO3bonhgIhDcQ4w-2BH5fiTFzmcQdBh3HWOLyzkBB21IAUZA3UfB74S9zvum86We-2FL-2F5T9u31iyqDT1ED148vr9QkfvP-2B3onCpVd-2BY-2FUsV-2BkYLFueSX9C-2FwjbktjnU75ob3oHwC7gGKH-2BiCGvcxjZ3pQ4lnasAVtku8mzy9YF6LnbnjZdPTMuH8b6OTXIWtdjQMwEAhr-2B-2FrCAo-2Fj12QgpwTlA2mxzSs7sxzU47f-2B52JlmDxzqA8fxe9gpbqHcrWhgK2nSyvT0KUKzpgMzj8zmj3eVdomtTmB-2B2vCMWVnlzOKHH5RcaoFiZ4WpQRi6xruNN-2Bhc9Fbz0rmLyxOJ3BgPxZOvn1DbCGJ-2BX4ObZa-2BOAapP4EwipPjIpJJydtcUWnUVcfmzsaW7yxQveSrL6feOlvICEl2Z2qd9GTvWA5IJHTtkPMhaEDJPWqK8IVB7wEWEDU0b5PUzOuerAY59Rqk5bFwEJP4169h-2F-2Fl02ldRKEXKceYuqBGYB7WiSdq4ngSVE3uhlpUHjCrSxafgTVscGTnlLBJ7XiTpzZg2cJgkxwP2snhedIHS
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:09:45
Start date:	28/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,6084139276363326004,14724677063656091726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\9d020c28-282c-418c-90be-b3bc5b4b441d.tmp

C:\Users\user\Downloads\cd01622f-886a-4bbb-a51f-cbafff62a06e.tmp

C:\Users\user\Downloads\downloaded.pdf (copy)

C:\Users\user\Downloads\downloaded.pdf.crdownload (copy)

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144