Edit tour

Windows Analysis Report
http://pollyfill.io

Overview

General Information

Sample URL:	http://pollyfill.io
Analysis ID:	1466184
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1904,i,16630701791680087282,18044772249093209314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pollyfill.io" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pollyfill.io

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJh	Avira URL Cloud: Label: malware
Source: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	Avira URL Cloud: Label: malware
Source: http://ww17.pollyfill.io/favicon.ico	Avira URL Cloud: Label: malware
Source: http://pollyfill.io/?fp=5705e961739f25e027541c9b53d6b936	Avira URL Cloud: Label: malware
Source: http://ww17.pollyfill.io/display.cfm	Avira URL Cloud: Label: malware
Source: http://ww17.pollyfill.io/px.js?ch=1	Avira URL Cloud: Label: malware
Source: http://ww17.pollyfill.io/px.js?ch=2	Avira URL Cloud: Label: malware
Source: http://ww38.pollyfill.io/favicon.ico	Avira URL Cloud: Label: malware
Source: http://pollyfill.io/?fp=-5	Avira URL Cloud: Label: malware
Source: http://pollyfill.io/?fp=-3	Avira URL Cloud: Label: malware
Source: http://pollyfill.io/?	Avira URL Cloud: Label: malware
Source: https://pollyfill.io/js/fingerprint/iife.min.js	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: http://ww17.pollyfill.io

LLM: Score: 8 brands: Pollyfill.io Reasons: The URL 'http://ww17.pollyfill.io' is suspicious due to the 'ww17' subdomain, which is often used in phishing attacks. The legitimate domain for Pollyfill is 'polyfill.io', not 'pollyfill.io'. The image shows advertisements for unrelated products, which is a common tactic in phishing sites to mislead users. The presence of 'SEE IT' buttons can be a social engineering technique to entice users to click on potentially harmful links. The site does not have a prominent login form or captcha, but the overall setup and domain name raise significant concerns. DOM: 7.12.pages.csv

Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KKGWZHB
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KKGWZHB
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KKGWZHB
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KKGWZHB
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688

Source: https://www.above.com/marketplace/pollyfill.io

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.above.com/marketplace/pollyfill.io

HTTP Parser: Title: pollyfill.io - Above.com Marketplace does not match URL

Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: javascript:hideDiv()
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: validate_offer_referer_form();
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: javascript:hideDiv()
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: validate_offer_referer_form();
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: javascript:hideDiv()
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: validate_offer_referer_form();
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: javascript:hideDiv()
Source: https://www.above.com/marketplace/pollyfill.io	HTTP Parser: On click: validate_offer_referer_form();

Source: https://www.above.com/marketplace/pollyfill.io

HTTP Parser: <input type="password" .../> found

Source: https://pollyfill.io/	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTi...	HTTP Parser: No favicon
Source: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7	HTTP Parser: No favicon
Source: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgM...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket057&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.pollyfill.io%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNTd8fHx8fHw2Njg0MTFmYzdmNGM4fHx8MTcxOTkzMTM4OC41OTN8M2IzMjI1ZDcwODlhZWJhMTFkY2YxZDJkYTlhOTA0NjI1MmYyMmQzMnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxleUp6ZFdKcFpERWlPaUl5TURJME1EY3dNeTB3TURRekxUQTNNbVF0T0RrM055MDRZMk0xWW1VMU5tWXlaamNpZlE9PXxmNWVkN2NkMDNmOGY3NDMyZTQ3ZWMzYzhlZTdmNzUxZmI2N2VkNTBlfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2748662219872890&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301504%2C17301509&client_gdprApplies=0&format=r3%7Cs&nocache=4101719931390149&num=0&output=afd_ads&domain_name=ww38.pollyfill.io&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1719931390151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsi...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket057&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.pollyfill.io%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNTd8fHx8fHw2Njg0MTFmYzdmNGM4fHx8MTcxOTkzMTM4OC41OTN8M2IzMjI1ZDcwODlhZWJhMTFkY2YxZDJkYTlhOTA0NjI1MmYyMmQzMnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxleUp6ZFdKcFpERWlPaUl5TURJME1EY3dNeTB3TURRekxUQTNNbVF0T0RrM055MDRZMk0xWW1VMU5tWXlaamNpZlE9PXxmNWVkN2NkMDNmOGY3NDMyZTQ3ZWMzYzhlZTdmNzUxZmI2N2VkNTBlfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2748662219872890&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301504%2C17301509&client_gdprApplies=0&format=r3%7Cs&nocache=4101719931390149&num=0&output=afd_ads&domain_name=ww38.pollyfill.io&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1719931390151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsi...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket057&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.pollyfill.io%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNTd8fHx8fHw2Njg0MTFmYzdmNGM4fHx8MTcxOTkzMTM4OC41OTN8M2IzMjI1ZDcwODlhZWJhMTFkY2YxZDJkYTlhOTA0NjI1MmYyMmQzMnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxleUp6ZFdKcFpERWlPaUl5TURJME1EY3dNeTB3TURRekxUQTNNbVF0T0RrM055MDRZMk0xWW1VMU5tWXlaamNpZlE9PXxmNWVkN2NkMDNmOGY3NDMyZTQ3ZWMzYzhlZTdmNzUxZmI2N2VkNTBlfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2748662219872890&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301504%2C17301509&client_gdprApplies=0&format=r3%7Cs&nocache=4101719931390149&num=0&output=afd_ads&domain_name=ww38.pollyfill.io&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1719931390151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsi...	HTTP Parser: No favicon
Source: http://ww17.pollyfill.io/Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOW...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=u3dvz27msl8v	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=u3dvz27msl8v	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49826 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495
Source: global traffic	HTTP traffic detected: GET /js/fingerprint/iife.min.js HTTP/1.1Host: pollyfill.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pollyfill.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=REEgwFUAfs15BZO&MD=Phs46Fbe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&o=1719931369880 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1719931372&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1719931373&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2F&o=1719931375088&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.261.1.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://ww17.pollyfill.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2F&o=1719931375088&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=10835&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918&af=err,spa,xhr,stn,ins&ap=515&be=3715&fe=6229&dc=965&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1719931366137,%22n%22:0,%22f%22:2177,%22dn%22:2180,%22dne%22:2725,%22c%22:2725,%22ce%22:2731,%22rq%22:2731,%22rp%22:3716,%22rpe%22:4132,%22di%22:4680,%22ds%22:4680,%22de%22:4680,%22dc%22:9938,%22l%22:9938,%22le%22:9944%7D,%22navigation%22:%7B%7D%7D&fp=4697&fcp=4697 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=11502&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pollyfill.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww38.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bKKaub%252BTLQeXn1x%252BUddDquCE6FtsD8kwc5p1%252F8f9l8x0TE%252BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%252BmJFh4OCle7d%252Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%252B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%252FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%252FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%252BBce7%252BM6Mf27Xw92JKRo4Blxhi02e3oC%252BdH4wHqvmoMrwmHs8iHfU1nW%252BXyeQheG%252BR9I%252BTMTMdaYmY1amp8%252BC%252Ff%252FK0xsWufhlc9Q6%252BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%252BQcyqFxXPxkoLC%252F9ZKICFRyzcqdblV5zzv%252Bx6H7698%252F%252FAQ9BAGyM82tD%252FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%252Fmpi3cel5XgDj2m56QRjejsc6vs4W%252BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%252BzE3CsLuhgXacMo8XQ1FSQT4%252FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%252BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%252BHiaPBdxLtQ0I84%252BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%252FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%252F8R4D%252FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%252Bv%252BwxLcYP6vs%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26%26gtnp%3D0%26gtpp%3D0%26kt%3D362%26%26kbc%3Dpolly%26ki%3D22768961%26ktd%3D0%26kld%3D1003%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1719931388792 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.pollyfill.io/
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm&o=1719931390113&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm&o=1719931390113&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bKKaub%252BTLQeXn1x%252BUddDquCE6FtsD8kwc5p1%252F8f9l8x0TE%252BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%252BmJFh4OCle7d%252Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%252B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%252FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%252FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%252BBce7%252BM6Mf27Xw92JKRo4Blxhi02e3oC%252BdH4wHqvmoMrwmHs8iHfU1nW%252BXyeQheG%252BR9I%252BTMTMdaYmY1amp8%252BC%252Ff%252FK0xsWufhlc9Q6%252BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%252BQcyqFxXPxkoLC%252F9ZKICFRyzcqdblV5zzv%252Bx6H7698%252F%252FAQ9BAGyM82tD%252FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%252Fmpi3cel5XgDj2m56QRjejsc6vs4W%252BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%252BzE3CsLuhgXacMo8XQ1FSQT4%252FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%252BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%252BHiaPBdxLtQ0I84%252BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%252FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%252F8R4D%252FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%252Bv%252BwxLcYP6vs%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26%26gtnp%3D0%26gtpp%3D0%26kt%3D362%26%26kbc%3Dpolly%26ki%3D87997992%26ktd%3D0%26kld%3D1003%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1719931393209 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww17.p
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=naqthqouk82f&aqid=ABKEZoG0DffamLAP_a2owAk&psid=7840396037&pbt=bs&adbx=375&adby=132&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=641883529&csala=20%7C0%7C989%7C2069%7C339&lle=0&ifv=1&hpt=1 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm&o=1719931394977&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=e2d506k48c7t&aqid=ABKEZoG0DffamLAP_a2owAk&psid=7840396037&pbt=bv&adbx=375&adby=132&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=641883529&csala=20%7C0%7C989%7C2069%7C339&lle=0&ifv=1&hpt=1 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm&o=1719931394977&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bKKaub%252BTLQeXn1x%252BUddDquCE6FtsD8kwc5p1%252F8f9l8x0TE%252BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%252BmJFh4OCle7d%252Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%252B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%252FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%252FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%252BBce7%252BM6Mf27Xw92JKRo4Blxhi02e3oC%252BdH4wHqvmoMrwmHs8iHfU1nW%252BXyeQheG%252BR9I%252BTMTMdaYmY1amp8%252BC%252Ff%252FK0xsWufhlc9Q6%252BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%252BQcyqFxXPxkoLC%252F9ZKICFRyzcqdblV5zzv%252Bx6H7698%252F%252FAQ9BAGyM82tD%252FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%252Fmpi3cel5XgDj2m56QRjejsc6vs4W%252BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%252BzE3CsLuhgXacMo8XQ1FSQT4%252FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%252BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%252BHiaPBdxLtQ0I84%252BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%252FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%252F8R4D%252FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%252Bv%252BwxLcYP6vs%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26%26gtnp%3D0%26gtpp%3D0%26kt%3D362%26%26kbc%3Dpolly%26ki%3D75015220%26ktd%3D0%26kld%3D1003%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1719931401249 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=REEgwFUAfs15BZO&MD=Phs46Fbe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /marketplace/pollyfill.io HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/aboveGlobal.css?1716443652 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.above.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.above.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.12.0/themes/smoothness/jquery-ui.css HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/marketplace.css?1718186410 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /css/lity.min.css HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /css/jquery-ui.css HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/css/offer_new.css?1718621077 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/jquery-migrate-1.2.1.min.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /js/lity.min.js?1705557556 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/auction.js?1709635027 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/validations.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /js/login.js?1705557556 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/capswarn.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/timer.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /js/email_check.js?1705557556 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/jquery.cycle.lite.js HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /js/pswmeter.min.js HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg5.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg6.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletrans.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/css/offer_new.css?1718621077Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletrans1.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/css/offer_new.css?1718621077Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/above-mp.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/tipsy.jquery.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletick.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg1.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg2.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg3.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /marketplace/javascript/overlib_mini.js?1705557557 HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _ga=GA1.2.663184279.1719931418; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg4.jpg HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard3.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard4.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard5.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard6.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard7.png HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /4372769.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&gjid=46432527&_gid=1984477665.1719931418&_u=YEBAAEAAAAAAACAAI~&z=243793676 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletrans.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletrans1.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/above-mp.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg6.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /fb.js HTTP/1.1Host: js.hsadspixel.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4372769/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conversations-embed.js HTTP/1.1Host: js.usemessages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg5.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /analytics/1719931200000/4372769.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/saletick.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg2.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg1.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=u3dvz27msl8v HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg3.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=4372769 HTTP/1.1Host: api.hubapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.above.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard5.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard3.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard7.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e HTTP/1.1Host: api.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0X-HubSpot-Messages-Uri: https://www.above.com/marketplace/pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.above.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=4372769 HTTP/1.1Host: api.hubapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard4.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/for-sale-backgrounds/forsalebg4.jpg HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /marketplace/img/salecard6.png HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
Source: global traffic	HTTP traffic detected: GET /livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e HTTP/1.1Host: api.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/318991084?random=1719931424565&cv=11&fst=1719931424565&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/318991084/?random=1719931424565&cv=11&fst=1719931424565&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/318991084/?random=1719931424565&cv=11&fst=1719928800000&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL20DmjA08YFXGRXnBDIZABhULxCzUdKoHTLncqSifN1QXkwlc&random=1732568169&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=MYrRLCTRlKmnoeNcnFQOZfur7hesiZAB2sItD8xkFbI-1719931425-1.0.1.1-XF0SS.MAqr2ah0dz6FLalK.IidMgyt905W05v0RI_C.yTe3Z4rKPjVfs6AvTLOanO4ZEyD8VO_QN.sEW1le7zg; _cfuvid=L3.3oE.vP4RNeg6dQTZbpbcaMFgfCTHQ5ela.BtBNT0-1719931425670-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: www.above.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.above.com/marketplace/pollyfill.ioAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418; _gcl_au=1.1.546774914.1719931425; __hstc=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1; hubspotutk=0dca1bcd2cadc7edcbc1e681d60f4646; __hssrc=1; __hssc=192322805.1.1719931428243
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/318991084/?random=1719931424565&cv=11&fst=1719928800000&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL20DmjA08YFXGRXnBDIZABhULxCzUdKoHTLncqSifN1QXkwlc&random=1732568169&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=MYrRLCTRlKmnoeNcnFQOZfur7hesiZAB2sItD8xkFbI-1719931425-1.0.1.1-XF0SS.MAqr2ah0dz6FLalK.IidMgyt905W05v0RI_C.yTe3Z4rKPjVfs6AvTLOanO4ZEyD8VO_QN.sEW1le7zg; _cfuvid=L3.3oE.vP4RNeg6dQTZbpbcaMFgfCTHQ5ela.BtBNT0-1719931425670-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: www.above.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418; _gcl_au=1.1.546774914.1719931425; __hstc=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1; hubspotutk=0dca1bcd2cadc7edcbc1e681d60f4646; __hssrc=1; __hssc=192322805.1.1719931428243
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1Host: pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /?subid1=20240703-0043-072d-8977-8cc5be56f2f7 HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=22768961&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=pollyfill.io&toggle=browserjs&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /ls.php?t=668411fc&token=f5ed7cd03f8f7432e47ec3c8ee7f751fb67ed50e HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=pollyfill.io&toggle=browserjs&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=87997992&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=pollyfill.io&caf=1&toggle=answercheck&answer=yes&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=pollyfill.io&caf=1&toggle=answercheck&answer=yes&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.pollyfill.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=75015220&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww17.pollyfill.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=918vr46747696140717371; __cmpcc=1; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ; __cmpcccx68884=aBQBKLQdAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww17.pollyfill.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_242.2.dr	String found in binary or memory: <a href="http://ww17.pollyfill.io/trf?q=Polly&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RkIwRjNBRTEyQ0NENEVENyZ1dD0xNzE5OTMxMzg5NTYyJnVvPTg0NTk0MjM5Mzg2OTIxJmx0PTImcz0yJmVzPTJLc01aLlpYYWV1dXZKblo4RTZoaGZsTnpoZ3RoS2ozbGxzQ3Ayb0tvWFdKOWZ2c3p6RHRyZ3BSVFB5VGFRUkI3Tzl6Z2R6dldIa0hYYlEt%2FRV%3D2%2FRE%3D1722523389%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8mJYan9ihH-B5CNh08ug0ZjVUCUxsWkr3FIzBpDOsAe36oAVXGqmKPWxub-vemmi1SRXmIEMrH34R6ZjwaU_ZaJaBuoBC1RHOtFrrzaAwZ3lyNLScCLWhPZVVICjfv2ke3esuxrRFZcCQfWNwdTs6f4MYtrZZTexPUSedxPq7N6PqcAeK%2526u%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%2526rlid%253d076e67a2b1a0195aba4e0126a05d90fa%2FRK%3D2%2FRS%3DVXz3kFn5QhR3JKfO.Td98_3n_PI-&o=MvAWPWZoWjNr353VJ3SVqCh%2BtMYIPwLQRMzKUzuysf2Y30ACUMvfBrw8zIqv%2BFC2yBlNeEPKRtlQjOJoZnHQxV1XNqdGePFgeJGy049Hu3QlqrF7voPh88zD5Z0LDTvxMTtBN%2FJM9IKjJyEnqBsCYlzFqorN681UyWK1m3f9omu%2FraRPrA%2BMH6N0B5yR5qXGmOoqL9Q0YJCpCLLud7uIFhPVGtgqRpaIZg%2BhTFEpnE%2FKq11Av6vf%2FaN%2FVDfCGlAux3ZGpnxYaMft3r5NNUMaROuSAOVXY%2BRLgSqAdn4XAOlJ6hUnf5cN8GttMbw61DHSF54p8w7TJNRxd1jcPNIvyDADhCRqzH%2BBnKQpDWpv2xcWGzbsQtwIby%2F8Bsj%2BIbQGVHANpH8sFT%2FYfj91E9yLv08ZXBIDX11JPQ5hG752HJL5vcSZ8wYdAif55ok9%2BE7v9FhVEYaPzFyIiaNeGfFyzIGe9YzS3M64%2FJx4N9%2FD3E%2Fe9XzGxM%2B2TuGa5hZlFyFXdIyGg5K%2Bbw8CY5e89Mi5PrA4eG%2B9IIsxzHUtjja7jZpaZJotpq1brwzZZ3MphtjH9IdpF65ivjFZsF82zn3GVnawY5rAkuEdKig26n7TJQ5YPTcV8QJIsxcAOkXOG%2FOC&c=212646747698030113391963&n=Daa6dpZ%2FmS1I3u2RKJ5Wn0bws3ZQJest7BTzTyqOAOnF8qknMPVcs6a%2Bvam5NPKDNM%2Bs8CYNkSqhyuR2vYmzOUnDQiShwP%2BW6QasZ74dUvrJ0Z4UVWguxmNHvsYwZNljpxpFl3l9ufgCpgNpv9QfI0lOuk8rr1hmwTnYuI7bAUkZjP5jaKT%2BvUlAhu5qbeV63ZELazmLf6YOWxoVUldBg8ExIhIEP1FLhKlFVByjyiB3Abo1VItR6FezWE5sPFGmTEUY5%2Bd70AHPI9mfE5BWZSPlOncuNwBsKnvMOU%2BTPqQHgLq%2FfTLVl52jlQuFW2WPD5erBRF6WU1zXrHLGmBEJVgTbrNQBpEuOukqumXLGfXJQwQiFntIyZGHpjMNkc%2FPjlbtVLni1pVwtTdKgQSWnq3Na6vW15a87tBd46xxCQcpdfbdfmkbpLrxSGRbqU07rr8UcQ%2FHgrAx4uMZ%2FLezPkqEtrUSl4uN%2BJZA4MXJ8wudeD188aeUe2HlbdaVE%2FwHl3m4gwdX85HBduYZdnZCGGpPZuCV90HvJOfW6lP0guqPQWs74iqJJR2%2BkDTZ1%2B6SQ6ANYeGd2wOXOmDjWd5h834rfqUaT5Fab5STMNqiBMKMOsqwiWRrhwUVF6ntFRrL06te2ICQWnbKXo2PnunmGKCoI9U9lURTzvog9rKdqlQVMhRnMpDZFvaJI0%2F8DgW%2F3MydMimjZw9ps5k7RSKxN21e2RahuYQGTYPptXSN448SpCfXuN0MYNldiYVa1kVbOGM0H%2F0O15jMKLWjUbasd6LEXDRTL8snHs7TeEpHK98R9d6ZWUUCirOLT7Oq9QcnPBOdAf92fxu4rVigunUAchRE9lSjyxLNuFL6ornwnNlkyLHcR3Y0bUUekRLO9B7S%2FhXK1ad31dIs%2FqRB7yylG3iKzY1w3bu%2Bx225SeYkLFvPCoumdbbyTzpwO75P2xGqTZ36urf2G7Kp
Source: chromecache_172.2.dr	String found in binary or memory: <a href="http://ww17.pollyfill.io/trf?q=Polly+Pocket+Dress+Up&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RkRDNkU4QUE1MERBNEFCOSZ1dD0xNzE5OTMxNDAxNTk3JnVvPTc2NzU5ODQxMzg3NTMxJmx0PTImcz0yJmVzPWRyWFIxczluWlVGWWF1Z2RpUk1PemU1Y0dtT0FmaHlFa0ZkRlI0ZDRpMzlGN05yR0JRSlBON0MxUDFwMjlLU0hkbXlYeEZsSWlUbGdwaWct%2FRV%3D2%2FRE%3D1722523401%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8twvouJrGssb8CFNFw5GMZTVUCUwxYTzWPW5PpU0NMxf188Psd_cJfN9YqHNGIMwNkm_2u5Szd0yhcOOEJRAD9hQLBFLjPN75f9DEyWhP12xUcagcn8Ip0qrnq7pTQhb_UlUsDs1ZzF7b1BidLM0E9gv3YEF0dqmvfn3YGZ-R92v_uGEM%2526u%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%2526rlid%253d5f83b27eb7921f70fb8ad4faa59b1ad1%2FRK%3D2%2FRS%3DkfP2AVBrRT0orarkeuusSzi5FGc-&o=MvAWPWZoWjNr353VJ3SVqCh%2BtMYIPwLQRMzKUzuysf2Y30ACUMvfBrw8zIqv%2BFC2yBlNeEPKRtlQjOJoZnHQxV1XNqdGePFgeJGy049Hu3QlqrF7voPh88zD5Z0LDTvxMTtBN%2FJM9IKjJyEnqBsCYlzFqorN681UyWK1m3f9omu%2FraRPrA%2BMH6N0B5yR5qXGmOoqL9Q0YJCpCLLud7uIFhPVGtgqRpaIZg%2BhTFEpnE%2FKq11Av6vf%2FaN%2FVDfCGlAux3ZGpnxYaMft3r5NNUMaROuSAOVXY%2BRLgSqAdn4XAOlJ6hUnf5cN8GttMbw61DHSF54p8w7TJNRxd1jcPNIvyDADhCRqzH%2BBnKQpDWpv2xcWGzbsQtwIby%2F8Bsj%2BIbQGVHANpH8sFT%2FYfj91E9yLv08ZXBIDX11JPQ5hG752HJL5vcSZ8wYdAif55ok9%2BE7v9FhVEYaPzFyIiaNeGfFyzIGe9YzS3M64%2FJx4N9%2FD3E%2Fe9XzGxM%2B2TuGa5hZlFyFXdIyGg5K%2Bbw8CY5e89Mi5PrA4eG%2B9IIsxzHUtjja7jZr6jQrN9USICa%2FMnOTKNhdNIIR%2FrZ5SoTsrSb7b7z8TioCWi%2FLPJJ7pEXtku8MFK1jAHqcN0tGqybm2FH0j0RDP&c=212846747699235410572520&n=Daa6dpZ%2FmS1I3u2RKJ5WnyiCH7MK0U2Lv2jyrFs%2BM4xJwC0h6bPSAz44AZBN%2FKazTxRZ0mew4srwftLqs0DvsJXaS4GQYJsGeUGNn2L5wtadT2kJANyNEfB37rXnsuaw4Zpl0nrwltHwIHWrd9mVBIzmXZpN2TSzub6Ks7aymqDY1Rnf8LMY4zcTGGoZ7LJoeuJqiJ%2FP2K5JJQUR2K60ThZVbOMXbmtMDz3MmC21cxwh%2Fo%2FMa%2Bvg6OYAaAGCaGfM4EfG0YDHuxunuEn5K8pHu0Gwsy8JL%2Blpg05sFp02jrsXtYOJqxxb0dHmfJaxJAB8eAzkvBMmXSrwXAc9wC7wm4dOhcIM0KZJl1iuig%2BxwhQhYrqY8th3U%2Fd4IRQaGX8UDpuTgTb%2B7GPL7Wa0LdbPLVdho4nlSBHSkRzmloXfcmtu2hb8%2FMqTQC3nd%2Fql7USyhkt00svAlQUFjyjxblqaYGTEKytb1c%2B0JGTP2c8GErQgaoeaRSyfNbbFwoamMwjw1RTM%2FZdXLu1dTtdCpnekfbG9gQz6Rpt8xTCYY0kUnZkyyOhfu28du0995NS6rW0YGaN029fFQDNdvrj%2FUIwkphwithjJK5XFiZ8Eht0HxFSZ99iir6tRBLuqDnFP45HAhaSLqj4NKueUgAxPZOU%2Fprec65j5G%2B3HwYlDTDd4NiQx1%2FsA5K4d2CUMGKbKY1CLkwftJk8DB%2FFDPbLSJgAi79XBc7HLGDBsQlIe771XfakPw7eCXh9Lc%2BX48tIf6FPCRWkQEOJv%2FC%2F1IDIQtlWvFkREsaUx9EGRhwM5uSEZyRlDWXPh3%2FMeR1Dh0b2%2B0fZAwdV5PVgAUSxliC5fINOs%2BJvffwn%2FgDetZbiSBMYr%2Fm%2B%2BMQg4FLqN3py1vG5wPM2sCIIXiyECrOYMN3hCluokXtRR%2FVgp4JgGtvbGxlivEqJSEo5tSnU6cealvs
Source: chromecache_172.2.dr	String found in binary or memory: <a href="http://ww17.pollyfill.io/trf?q=Polly+Pocket+Dress+Up&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RkRDNkU4QUE1MERBNEFCOSZ1dD0xNzE5OTMxNDAxNTk3JnVvPTgyOTQ0NzgzMjg0OTY4Jmx0PTImcz0yJmVzPUU3YkhPZWp4R01rcFlHaTZJNmhjRVoyVmtOMUFHcm5kVWc5aDN6eWJxSlZyUzhJT1JxTFVrU1pEVXJ4VU5qUVlmMFNTOGV5MklQRldERjAt%2FRV%3D2%2FRE%3D1722523401%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8p3OOld8cjIomhlhM3gignzVUCUzXeUa0DrPWVAvc3z2_N1tXJY6oID0aZK2NgFpQ7kkz6mN779KUUVpjeJTbPLIBiNMcgk3gG6WV7VzoQ13JS0C6iJR0r3X1_mRTSdE6x1rXH_UA2qKFFzQ4q9X5gNJwLYEgpNeL1jBRFdKoZVrngsFI%2526u%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%2526rlid%253d81e7fa7b2d9f1b0c01a09cff3f96b744%2FRK%3D2%2FRS%3DMwxswQZYEn9MoRqSPkJ0lcjBKnY-&o=MvAWPWZoWjNr353VJ3SVqCh%2BtMYIPwLQRMzKUzuysf2Y30ACUMvfBrw8zIqv%2BFC2yBlNeEPKRtlQjOJoZnHQxV1XNqdGePFgeJGy049Hu3QlqrF7voPh88zD5Z0LDTvxMTtBN%2FJM9IKjJyEnqBsCYlzFqorN681UyWK1m3f9omu%2FraRPrA%2BMH6N0B5yR5qXGmOoqL9Q0YJCpCLLud7uIFhPVGtgqRpaIZg%2BhTFEpnE%2FKq11Av6vf%2FaN%2FVDfCGlAux3ZGpnxYaMft3r5NNUMaROuSAOVXY%2BRLgSqAdn4XAOlJ6hUnf5cN8GttMbw61DHSF54p8w7TJNRxd1jcPNIvyDADhCRqzH%2BBnKQpDWpv2xcWGzbsQtwIby%2F8Bsj%2BIbQGVHANpH8sFT%2FYfj91E9yLv08ZXBIDX11JPQ5hG752HJL5vcSZ8wYdAif55ok9%2BE7v9FhVEYaPzFyIiaNeGfFyzIGe9YzS3M64%2FJx4N9%2FD3E%2Fe9XzGxM%2B2TuGa5hZlFyFXdIyGg5K%2Bbw8CY5e89Mi5PrA4eG%2B9IIsxzHUtjja7jZoyO4U%2BO60GjFrBqYwh82rIftQqYqZQxA4wdwApPWEXHx4HMvu1lD%2BusaDY5f1gUm3DEUNG3V2PA7rDEOsZig5C&c=212846747699235410571494&n=Daa6dpZ%2FmS1I3u2RKJ5WnyiCH7MK0U2Lv2jyrFs%2BM4xJwC0h6bPSAz44AZBN%2FKazTxRZ0mew4srwftLqs0DvsJXaS4GQYJsGeUGNn2L5wtadT2kJANyNEfB37rXnsuaw4Zpl0nrwltHwIHWrd9mVBIzmXZpN2TSzub6Ks7aymqDY1Rnf8LMY4zcTGGoZ7LJoeuJqiJ%2FP2K5JJQUR2K60ThZVbOMXbmtMDz3MmC21cxwh%2Fo%2FMa%2Bvg6OYAaAGCaGfM4EfG0YDHuxunuEn5K8pHu0Gwsy8JL%2Blpg05sFp02jruYiP6XJk5UbfrA1rwwYOaHB5HE5qlmd%2FlxafoSyX8PICWsQdeCIwCWHW41Wr0AOdRq9iuYOHBXDrUi0cJ%2FXFPbN4rGXAy0A%2BuDfaA%2Bab3DWPqge3FZFqEV0mmY%2F8nc%2FDM2wvcd%2FEpWXnRAL7qZ2u6w4Ysld2QiYIeGJ9k6wilf3D%2Fd0psraTR7D3tzzUgO5GfRCjibiP%2F5rSQMZQwCqPwcZMbPIgb2Y2EmcDGnoxeWc3z9CnouRnpgoSKQHsHgErvhr%2B%2ByBuMjYGvtZ
Source: chromecache_286.2.dr	String found in binary or memory: <a href="http://ww17.pollyfill.io/trf?q=Polly+Pocket+Games&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NkM3NEJFRjMyMDFBNDBFRiZ1dD0xNzE5OTMxMzkzNjM3JnVvPTc2NjIyMzQ4MzE5MzA1Jmx0PTImcz0yJmVzPVVWUXhET0x4b0J3V1dhODBlLk9NZkx6Y3kzbTcybkdhUlI2RF9yUmpicktGU2tNcmpWa1pkM1BvazE4cTFLRjZGZmdPQVhscGt0dktzWG8t%2FRV%3D2%2FRE%3D1722523393%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8GIgq1uzt9TUwbXr6-hbcoTVUCUzdzHYJV3_D0Bn4NN23TR89UEjYIV9lYQieYG-FWSEJr_GMdJMTzJI_8jwEFPDpdLIoy3SzIuu2AKvG_mxD6mcibvGtyFD9tH4NdwOfkg4Vl6tXsy6ZR_KvbTBaXhuOKdVhe9qkgWgR-NBnZzKDoDJM%2526u%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%2526rlid%253d2e6820418834152dadae46c59a35304d%2FRK%3D2%2FRS%3D6VTx1X4Vk2NHDcjxqL08hARdmxQ-&o=MvAWPWZoWjNr353VJ3SVqCh%2BtMYIPwLQRMzKUzuysf2Y30ACUMvfBrw8zIqv%2BFC2yBlNeEPKRtlQjOJoZnHQxV1XNqdGePFgeJGy049Hu3QlqrF7voPh88zD5Z0LDTvxMTtBN%2FJM9IKjJyEnqBsCYlzFqorN681UyWK1m3f9omu%2FraRPrA%2BMH6N0B5yR5qXGmOoqL9Q0YJCpCLLud7uIFhPVGtgqRpaIZg%2BhTFEpnE%2FKq11Av6vf%2FaN%2FVDfCGlAux3ZGpnxYaMft3r5NNUMaROuSAOVXY%2BRLgSqAdn4XAOlJ6hUnf5cN8GttMbw61DHSF54p8w7TJNRxd1jcPNIvyDADhCRqzH%2BBnKQpDWpv2xcWGzbsQtwIby%2F8Bsj%2BIbQGVHANpH8sFT%2FYfj91E9yLv08ZXBIDX11JPQ5hG752HJL5vcSZ8wYdAif55ok9%2BE7v9FhVEYaPzFyIiaNeGfFyzIGe9YzS3M64%2FJx4N9%2FD3E%2Fe9XzGxM%2B2TuGa5hZlFyFXdIyGg5K%2Bbw8CY5e89Mi5PrA4eG%2B9IIsxzHUtjja7jZr2KaoouIvDeSZGHiGIoyelDawnwBOiZCq9kGhihlYux2wjoFGElUJqHpgg0H39mh19NjvcFPYKklimnP4LKsct&c=212746747698439617741901&n=Daa6dpZ%2FmS1I3u2RKJ5WnybpFtohJOPK6ULvF4c6%2Buwn2%2BKqXlQo5k7PdePSiYycFZK7iCdhkTBFkJRWZxs2Np9m92OtkGqW4Gu6dbhj1cCfCXE7ihr4mcTnWq9wImCGxTiAd7sMVjtQpXlA4gTnQPjiK0y2Fwgr9H9R%2BAhA%2BFiafqOX6rn3Krkjd%2FYnMMytDn2PyUzPa6fmZVBcnE4djsI6XTS2ndBOkqison3TSUWquA3SitOU8E9Rn4ZmDIGjegCQ4w2dldwFHkraRekcZKJ2GKVrsBomKNCZdWzph80XZT0mWjRpIyjJ0e3HQQILE70OgiTy%2B5itE7Y8FqiN9Fhz7mxiHI77dOHMiDSy997a%2FSwDlPko9O9a%2BORdtluMXT5lR%2Bwmlxm7iMZ870DmwgNJMmsY9mnrNyTIVnf0NLVQ0X2Ee3Jm%2B%2BX%2BQ2ndRkWOhH61XF4%2BdaWhFosAGUANE8AC9olE9NVXNjTA2TC63Zsp15yZT%2FHEIKQgWsKH46maN7SG%2B7V3hS
Source: chromecache_286.2.dr	String found in binary or memory: <a href="http://ww17.pollyfill.io/trf?q=Polly+Pocket+Games&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NkM3NEJFRjMyMDFBNDBFRiZ1dD0xNzE5OTMxMzkzNjM3JnVvPTc2NzU5ODQ4MTI1MzQzJmx0PTImcz0yJmVzPWdNbzVGRk5vZUNXdENPS0RxNGgwUFNGbGpOZHNzeTlOMjEweC51UWNCbTEzSlVqT3N1Wkt4eFZJZElSSUJ5VmtmUWQ0UlpwbmVwSUF6dy0t%2FRV%3D2%2FRE%3D1722523393%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8C5v9UyOzQAmZcMyxbGztJTVUCUyiWiRXIgANmlBN_2agx4KqTbDgHW5ezfj5ACynUqYuNHb0BQ31w4-EiTN_OmvutxDXwOu9ZVRa0kUPkLnevD78hB9dA5I-uMK2cGTrzvIefGpjk-Zgs1sRHg6Bhq-OTfRpIIDCoGXxrjLE-CN6aBTU%2526u%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%2526rlid%253dccf10d8d22551b0664546b0930549bbf%2FRK%3D2%2FRS%3DWQn5_I1CT0DEt3gOkd9ZVkih5t4-&o=MvAWPWZoWjNr353VJ3SVqCh%2BtMYIPwLQRMzKUzuysf2Y30ACUMvfBrw8zIqv%2BFC2yBlNeEPKRtlQjOJoZnHQxV1XNqdGePFgeJGy049Hu3QlqrF7voPh88zD5Z0LDTvxMTtBN%2FJM9IKjJyEnqBsCYlzFqorN681UyWK1m3f9omu%2FraRPrA%2BMH6N0B5yR5qXGmOoqL9Q0YJCpCLLud7uIFhPVGtgqRpaIZg%2BhTFEpnE%2FKq11Av6vf%2FaN%2FVDfCGlAux3ZGpnxYaMft3r5NNUMaROuSAOVXY%2BRLgSqAdn4XAOlJ6hUnf5cN8GttMbw61DHSF54p8w7TJNRxd1jcPNIvyDADhCRqzH%2BBnKQpDWpv2xcWGzbsQtwIby%2F8Bsj%2BIbQGVHANpH8sFT%2FYfj91E9yLv08ZXBIDX11JPQ5hG752HJL5vcSZ8wYdAif55ok9%2BE7v9FhVEYaPzFyIiaNeGfFyzIGe9YzS3M64%2FJx4N9%2FD3E%2Fe9XzGxM%2B2TuGa5hZlFyFXdIyGg5K%2Bbw8CY5e89Mi5PrA4eG%2B9IIsxzHUtjja7jZpr18lSN023zmggSz8%2FSqJyjF2CLKMaz8X5bXeodFoUyCK2G17e%2FMtFouMyXZe7BaZSIn3BzqaTwgvw5thSEf5b&c=212746747698439617742666&n=Daa6dpZ%2FmS1I3u2RKJ5WnybpFtohJOPK6ULvF4c6%2Buwn2%2BKqXlQo5k7PdePSiYycFZK7iCdhkTBFkJRWZxs2Np9m92OtkGqW4Gu6dbhj1cCfCXE7ihr4mcTnWq9wImCGxTiAd7sMVjtQpXlA4gTnQPjiK0y2Fwgr9H9R%2BAhA%2BFiafqOX6rn3Krkjd%2FYnMMytDn2PyUzPa6fmZVBcnE4djsI6XTS2ndBOkqison3TSUWquA3SitOU8E9Rn4ZmDIGjegCQ4w2dldwFHkraRekcZKJ2GKVrsBomKNCZdWzph80RZjgXJi%2FtGVianhGzmVf8GLqEkieWo2gAfVpNDHahk9LQhrLUKmQLttA35WurEHETvesSGbDYqRUuYzpUrLHKV%2FlXTDkxp0OBIbPFZBoHgOk1%2BqFlMF%2BUzU3bSd3P%2FksJZkaKfM%2Bd3fWax5eK%2BRti%2FNoOOkNzfdLZkfOIBbJQIJ73CNU5uetdZkTGMxXO8o1mL6ugLp0CTbMmmqg7sDyH5aoqHqC%2BcCsfSP6c%2Fn3jPAxqH%2FZ2Td%2FTwcFbBwsG3vS8VjKpTkiwZgkN1TcNF64sRQWMb7JLtKt96J2hs8WeumE9QVY7R5%2F9z8iplGxr%2BBNSsAlyMt9lrXVYcYEtT456mQ7ym3aHoWUy5iSr9m2gNSG9zHPUd%2FMD8L2rFhBcgDaD2NfHv%2Fc0Ann%2B0Gbt%2FwH0oeeNwYWfSUamWcZVg1JMmA%2Byto4Ij5V8%2B6Nvw%2FQBt3hejvWyrj5mfwTdGdF12KshB8MUEpnr07JnQkQ04tTVAP9LFn6Q8lH9gq%2BnWWIf31NAvXq16rSf%2FkO%2F4mWBE4ksu5DDRW5cJx4GzEYtj0PSeu7urus53N2jduooI0%2FO7dNfIsh3
Source: chromecache_246.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){YI("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr, chromecache_246.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!EC&&LC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_182.2.dr, chromecache_173.2.dr	String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: pollyfill.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ww17.pollyfill.io
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: ww38.pollyfill.io
Source: global traffic	DNS traffic detected: DNS query: c.parkingcrew.net
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: i3.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: www.adsensecustomsearchads.com
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: i2.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: www.above.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: ka-p.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.usemessages.com
Source: global traffic	DNS traffic detected: DNS query: js.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: api.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: api.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com

Source: unknown

HTTP traffic detected: POST /1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=10835&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918&af=err,spa,xhr,stn,ins&ap=515&be=3715&fe=6229&dc=965&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1719931366137,%22n%22:0,%22f%22:2177,%22dn%22:2180,%22dne%22:2725,%22c%22:2725,%22ce%22:2731,%22rq%22:2731,%22rp%22:3716,%22rpe%22:4132,%22di%22:4680,%22ds%22:4680,%22de%22:4680,%22dc%22:9938,%22l%22:9938,%22le%22:9944%7D,%22navigation%22:%7B%7D%7D&fp=4697&fcp=4697 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: http://ww17.pollyfill.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://ww17.pollyfill.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:42:48 GMTServer: ApacheContent-Length: 10Keep-Alive: timeout=5, max=127Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_226.2.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_207.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_207.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_207.2.dr, chromecache_172.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_286.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_242.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_228.2.dr, chromecache_178.2.dr, chromecache_229.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_228.2.dr, chromecache_229.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_186.2.dr	String found in binary or memory: http://malsup.com/jquery/cycle/lite/
Source: chromecache_257.2.dr	String found in binary or memory: http://pollyfill.io/?
Source: chromecache_257.2.dr	String found in binary or memory: http://pollyfill.io/?fp=-3
Source: chromecache_257.2.dr	String found in binary or memory: http://pollyfill.io/?fp=-5
Source: chromecache_184.2.dr, chromecache_235.2.dr	String found in binary or memory: http://sorgalla.com/lity/
Source: chromecache_207.2.dr	String found in binary or memory: http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJh
Source: chromecache_207.2.dr	String found in binary or memory: http://ww17.pollyfill.io/Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neI
Source: chromecache_207.2.dr	String found in binary or memory: http://ww17.pollyfill.io/Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6
Source: chromecache_207.2.dr, chromecache_286.2.dr, chromecache_172.2.dr, chromecache_242.2.dr	String found in binary or memory: http://ww17.pollyfill.io/display.cfm
Source: chromecache_172.2.dr	String found in binary or memory: http://ww17.pollyfill.io/trf?q=Polly
Source: chromecache_242.2.dr	String found in binary or memory: http://ww17.pollyfill.io/trf?q=Polly&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RkIwRjNBRTEyQ
Source: chromecache_270.2.dr	String found in binary or memory: http://www.bosrup.com/web/overlib/
Source: chromecache_186.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_281.2.dr, chromecache_230.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_186.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_227.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_173.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_163.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_264.2.dr, chromecache_182.2.dr, chromecache_246.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_207.2.dr, chromecache_286.2.dr, chromecache_172.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_207.2.dr, chromecache_286.2.dr, chromecache_172.2.dr, chromecache_242.2.dr	String found in binary or memory: https://delivery.consentmanager.net
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_227.2.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_248.2.dr, chromecache_144.2.dr, chromecache_260.2.dr, chromecache_245.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_248.2.dr, chromecache_144.2.dr, chromecache_260.2.dr, chromecache_245.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_156.2.dr, chromecache_136.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_153.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_lu.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_194.2.dr, chromecache_208.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_227.2.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js)
Source: chromecache_194.2.dr, chromecache_208.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_194.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_173.2.dr	String found in binary or memory: https://google.com
Source: chromecache_173.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_230.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/4372769.js
Source: chromecache_226.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1719931200000/4372769.js
Source: chromecache_281.2.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_226.2.dr	String found in binary or memory: https://js.hs-banner.com/v2/4372769/banner.js
Source: chromecache_226.2.dr	String found in binary or memory: https://js.hsadspixel.net/fb.js
Source: chromecache_226.2.dr	String found in binary or memory: https://js.usemessages.com/conversations-embed.js
Source: chromecache_254.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-font-face.min.css?token=61d644614c);
Source: chromecache_254.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-shims.min.css?token=61d644614c);
Source: chromecache_254.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v5-font-face.min.css?token=61d644614c);
Source: chromecache_254.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.5.2/css/pro.min.css?token=61d644614c);
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_156.2.dr, chromecache_264.2.dr, chromecache_182.2.dr, chromecache_246.2.dr, chromecache_173.2.dr, chromecache_136.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_156.2.dr, chromecache_136.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_193.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_235.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_193.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_246.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_264.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_163.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_193.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_156.2.dr, chromecache_136.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_163.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_264.2.dr, chromecache_182.2.dr, chromecache_246.2.dr, chromecache_173.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_235.2.dr	String found in binary or memory: https://www.google.
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_173.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_239.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/318991084/?random
Source: chromecache_164.2.dr, chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_156.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_182.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_163.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.
Source: chromecache_211.2.dr, chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Source: chromecache_264.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_264.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49826 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@30/269@114/38

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1904,i,16630701791680087282,18044772249093209314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pollyfill.io"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1904,i,16630701791680087282,18044772249093209314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://pollyfill.io	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://www.hubspot.com	0%	URL Reputation	safe
https://fontawesome.com/license	0%	URL Reputation	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
https://api.hubspot.com/livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog	0%	Avira URL Cloud	safe
https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-font-face.min.css?token=61d644614c);	0%	Avira URL Cloud	safe
https://www.above.com/js/lity.min.js?1705557556	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1719931373&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
https://js.usemessages.com/conversations-embed.js	0%	Avira URL Cloud	safe
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.above.com/js/email_check.js?1705557556	0%	Avira URL Cloud	safe
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/img/salecard7.png	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/javascript/overlib_mini.js?1705557557	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=11502&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
http://c.parkingcrew.net/scripts/sale_form.js	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJh	100%	Avira URL Cloud	malware
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1719931372&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
https://www.above.com/css/marketplace.css?1718186410	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	100%	Avira URL Cloud	malware
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://ww17.pollyfill.io/favicon.ico	100%	Avira URL Cloud	malware
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/img/above-mp.png	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/javascript/timer.js?1705557557	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/javascript/tipsy.jquery.js?1705557557	0%	Avira URL Cloud	safe
http://pollyfill.io/?fp=5705e961739f25e027541c9b53d6b936	100%	Avira URL Cloud	malware
https://bam.nr-data.net/events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15876&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/img/salecard3.png	0%	Avira URL Cloud	safe
http://ww17.pollyfill.io/display.cfm	100%	Avira URL Cloud	malware
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg4.jpg	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://ww17.pollyfill.io/px.js?ch=1	100%	Avira URL Cloud	malware
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-shims.min.css?token=61d644614c);	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	0%	Avira URL Cloud	safe
http://ww17.pollyfill.io/px.js?ch=2	100%	Avira URL Cloud	malware
http://ww38.pollyfill.io/favicon.ico	100%	Avira URL Cloud	malware
http://pollyfill.io/?fp=-5	100%	Avira URL Cloud	malware
http://pollyfill.io/?fp=-3	100%	Avira URL Cloud	malware
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	0%	Avira URL Cloud	safe
https://js.hs-banner.com/v2	0%	Avira URL Cloud	safe
https://cdn.consentmanager.net	0%	Avira URL Cloud	safe
http://pollyfill.io/?	100%	Avira URL Cloud	malware
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
https://www.above.com/css/jquery-ui.css	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&gjid=46432527&_gid=1984477665.1719931418&_u=YEBAAEAAAAAAACAAI~&z=243793676	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	0%	Avira URL Cloud	safe
https://pollyfill.io/js/fingerprint/iife.min.js	100%	Avira URL Cloud	malware
https://bam.nr-data.net/jserrors/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15881&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
https://js-na1.hs-scripts.com/4372769.js	0%	Avira URL Cloud	safe
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://code.jquery.com/ui/1.12.0/themes/smoothness/jquery-ui.css	0%	Avira URL Cloud	safe
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
above.com	103.224.182.24	true	false	unknown
i1.cdn-image.com	208.91.196.253	true	false	unknown
js.hs-analytics.net	104.17.175.201	true	false	unknown
457694.parkingcrew.net	13.248.148.254	true	false	unknown
1376624012.rsc.cdn77.org	195.181.170.18	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.71.154	true	false	unknown
track.hubspot.com	104.16.117.116	true	false	unknown
a.delivery.consentmanager.net	87.230.98.78	true	false	unknown
i2.cdn-image.com	208.91.196.253	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
js.hs-scripts.com	104.16.141.209	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
js.usemessages.com	104.16.75.142	true	false	unknown
delivery.consentmanager.net	87.230.98.78	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.135	true	false	unknown
stackpath.bootstrapcdn.com	104.18.10.207	true	false	unknown
js.hs-banner.com	172.64.153.27	true	false	unknown
pollyfill.io	103.224.182.252	true	true	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
js.hsadspixel.net	104.17.128.172	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	unknown
api.hubspot.com	104.16.117.116	true	false	unknown
i3.cdn-image.com	208.91.196.253	true	false	unknown
www3.l.google.com	172.217.16.206	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
11489.searchmagnified.com	199.191.50.189	true	false	unknown
api.hubapi.com	104.18.242.108	true	false	unknown
td.doubleclick.net	216.58.206.66	true	false	unknown
googlehosted.l.googleusercontent.com	172.217.18.97	true	false	unknown
c.parkingcrew.net	185.53.178.30	true	false	unknown
www.adsensecustomsearchads.com	unknown	unknown	false	unknown
ww17.pollyfill.io	unknown	unknown	true	unknown
ww38.pollyfill.io	unknown	unknown	false	unknown
cdn.consentmanager.net	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
kit.fontawesome.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
www.above.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
ka-p.fontawesome.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1719931373&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
https://api.hubspot.com/livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://js.usemessages.com/conversations-embed.js	false	Avira URL Cloud: safe	unknown
https://www.above.com/js/lity.min.js?1705557556	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/javascript/overlib_mini.js?1705557557	false	Avira URL Cloud: safe	unknown
https://www.above.com/js/email_check.js?1705557556	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/img/salecard7.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=11502&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	true	Avira URL Cloud: safe	unknown
https://www.above.com/css/marketplace.css?1718186410	false	Avira URL Cloud: safe	unknown
http://c.parkingcrew.net/scripts/sale_form.js	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1719931372&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/res-arw.png	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688	false		unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	false	Avira URL Cloud: safe	unknown
http://ww17.pollyfill.io/favicon.ico	true	Avira URL Cloud: malware	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/img/above-mp.png	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/javascript/tipsy.jquery.js?1705557557	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/javascript/timer.js?1705557557	false	Avira URL Cloud: safe	unknown
http://pollyfill.io/?fp=5705e961739f25e027541c9b53d6b936	true	Avira URL Cloud: malware	unknown
https://bam.nr-data.net/events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15876&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	true	Avira URL Cloud: safe	unknown
http://ww17.pollyfill.io/	true		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88	false		unknown
https://www.above.com/marketplace/img/salecard3.png	false	Avira URL Cloud: safe	unknown
https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg4.jpg	false	Avira URL Cloud: safe	unknown
http://ww17.pollyfill.io/px.js?ch=1	true	Avira URL Cloud: malware	unknown
http://ww17.pollyfill.io/px.js?ch=2	true	Avira URL Cloud: malware	unknown
http://ww38.pollyfill.io/favicon.ico	false	Avira URL Cloud: malware	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	Avira URL Cloud: safe	unknown
https://www.above.com/css/jquery-ui.css	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&gjid=46432527&_gid=1984477665.1719931418&_u=YEBAAEAAAAAAACAAI~&z=243793676	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/jserrors/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15881&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918	true	Avira URL Cloud: safe	unknown
https://pollyfill.io/js/fingerprint/iife.min.js	false	Avira URL Cloud: malware	unknown
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/ui/1.12.0/themes/smoothness/jquery-ui.css	false	Avira URL Cloud: safe	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_264.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_187.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_156.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-font-face.min.css?token=61d644614c);	chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_163.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_228.2.dr, chromecache_229.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_248.2.dr, chromecache_144.2.dr, chromecache_260.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_186.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_194.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_187.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_163.2.dr	false	URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_207.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_286.2.dr	false	Avira URL Cloud: malware	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJh	chromecache_207.2.dr	true	Avira URL Cloud: malware	unknown
https://support.google.com/recaptcha	chromecache_193.2.dr	false	URL Reputation: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_187.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_187.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://ww17.pollyfill.io/display.cfm	chromecache_207.2.dr, chromecache_286.2.dr, chromecache_172.2.dr, chromecache_242.2.dr	true	Avira URL Cloud: malware	unknown
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_227.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-shims.min.css?token=61d644614c);	chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://www.hubspot.com	chromecache_281.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
http://pollyfill.io/?fp=-5	chromecache_257.2.dr	true	Avira URL Cloud: malware	unknown
http://pollyfill.io/?fp=-3	chromecache_257.2.dr	true	Avira URL Cloud: malware	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net	chromecache_207.2.dr, chromecache_286.2.dr, chromecache_172.2.dr, chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://js.hs-banner.com/v2	chromecache_281.2.dr	false	Avira URL Cloud: safe	unknown
http://pollyfill.io/?	chromecache_257.2.dr	true	Avira URL Cloud: malware	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_286.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_187.2.dr, chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_207.2.dr, chromecache_172.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license	chromecache_248.2.dr, chromecache_144.2.dr, chromecache_260.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://js-na1.hs-scripts.com/4372769.js	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	chromecache_187.2.dr, chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_164.2.dr, chromecache_187.2.dr, chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
103.224.182.24	above.com	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
87.230.98.78	a.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
199.191.50.189	11489.searchmagnified.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
18.66.121.135	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.17.128.172	js.hsadspixel.net	United States	13335	CLOUDFLARENETUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.248.148.254	457694.parkingcrew.net	United States	16509	AMAZON-02US	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
103.224.182.252	pollyfill.io	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	true
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.242.108	api.hubapi.com	United States	13335	CLOUDFLARENETUS	false
104.16.141.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
74.125.133.155	unknown	United States	15169	GOOGLEUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
74.125.71.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.75.142	js.usemessages.com	United States	13335	CLOUDFLARENETUS	false
76.223.26.96	unknown	United States	16509	AMAZON-02US	false
172.64.153.27	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
185.53.178.30	c.parkingcrew.net	Germany	61969	TEAMINTERNET-ASDE	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
172.217.18.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.18.244.108	unknown	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
172.217.16.206	www3.l.google.com	United States	15169	GOOGLEUS	false
195.181.170.18	1376624012.rsc.cdn77.org	United Kingdom	60068	CDN77GB	false
216.58.206.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
104.16.117.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.18

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466184
Start date and time:	2024-07-02 16:41:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pollyfill.io
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@30/269@114/38
Cookbook Comments:	Browse: http://pollyfill.io/ Browse: http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=22768961&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230 Browse: http://ww17.pollyfill.io/Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=87997992&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230 Browse: http://ww17.pollyfill.io/Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=75015220&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230 Browse: https://www.above.com/marketplace/pollyfill.io

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.186.174, 142.250.110.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 20.3.187.198, 20.166.126.56, 142.250.186.34, 142.250.181.232, 104.18.40.68, 172.64.147.188, 216.58.206.42, 142.250.185.170, 216.58.206.35, 142.250.181.238, 142.250.185.195, 216.58.206.74, 172.217.16.202, 142.250.184.234, 142.250.185.74, 216.58.212.170, 142.250.186.138, 142.250.185.106, 142.250.186.74, 142.250.185.138, 142.250.186.106, 142.250.185.202, 142.250.186.170, 142.250.185.234, 172.217.23.106, 2.16.164.106, 2.16.164.35, 142.250.185.67, 142.250.185.142, 13.107.42.14, 142.250.186.99, 142.250.186.35, 172.217.18.3
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ka-p.fontawesome.com.cdn.cloudflare.net, partner.googleadservices.com, clientservices.googleapis.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, kit.fontawesome.com.cdn.cloudflare.net, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, a1916.dscg2.akamai.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pollyfill.io

Input	Output
URL: http://ww17.pollyfill.io/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title 'Pollyfill.io' and text 'Pollyfill.io Related Searches: Polly Polly Pocket Games Polly Pocket Dress Up Privacy Policy' do not contain any login forms, create a sense of urgency, or contain a CAPTCHA.","There is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers (CVV).","The text does not contain any language that creates a sense of urgency or interest, such as 'Click here to view document' or 'To view secured document click here'.","There is no evidence of a CAPTCHA or any other anti-robot detection mechanism on the webpage."]}
Title: Pollyfill.io OCR: Pollyfill.io Related Searches: Polly Polly Pocket Games Polly Pocket Dress Up Privacy Policy
URL: http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikF Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Pollyfill.io OCR: Pollyfill.io Ads for Polly' Advertiser" SHOP PRINCESS POLLY USA TODAY - SHOP THE HOTTEST LOOKS NOW us.princesspolly.com Find The Perfect 'Fit! Shop For Everyday, Work, Party & Mare Receive Fast Shipping, Easy Returns & Afterpay! Find Your Fav New Fit At Princess Polly SEE IT Privacy Po'ic;
URL: http://ww17.pollyfill.io/Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The text 'Come and check Pocket Pally at a surprisingly law price, you'd never want to miss it.' creates a sense of urgency.","The webpage contains ads for 'Polly Pocket Dress up' and encourages users to 'Browse thousands of brands and find deals on Pocket Polly at Temu@, Shop Naw.' and 'Find deals and compare prices an polly pockets toys at Amazon.com'","These elements suggest that the webpage is trying to generate interest and potentially sell products related to 'Polly Pocket'"]}
Title: Pollyfill.io OCR: Pollyfill.io Ads for "Polly Pocket Dress up" POCKET POLLY UP TO 90% OFF - POCKET POLLY CLEARANCE u cam Come and check Pocket Pally at a surprisingly law price, you'd never want to miss it. Browse thousands of brands and find deals on Pocket Polly at Temu@, Shop Naw. SEE IT SHOP POLLY POCKETS TOYS - AMAZON.COM OFFICIAL SITE wmuamazancom/apparel/clothing Browse & discover thousands of brands. Read customer reviews & find best sellers Find deals and compare prices an polly pockets toys at Amazon.com SEE IT
URL: http://ww17.pollyfill.io Model: gpt-4o	```json{ "phishing_score": 8, "brands": "Pollyfill.io", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "polyfill.io", "reasons": "The URL 'http://ww17.pollyfill.io' is suspicious due to the 'ww17' subdomain, which is often used in phishing attacks. The legitimate domain for Pollyfill is 'polyfill.io', not 'pollyfill.io'. The image shows advertisements for unrelated products, which is a common tactic in phishing sites to mislead users. The presence of 'SEE IT' buttons can be a social engineering technique to entice users to click on potentially harmful links. The site does not have a prominent login form or captcha, but the overall setup and domain name raise significant concerns."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2248)
Category:	downloaded
Size (bytes):	190328
Entropy (8bit):	5.672765347173039
Encrypted:	false
SSDEEP:	3072:jGA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:jbj2ZpzlHYX6klvmilV
MD5:	4A3F5F25E26413D81BF2847052C0CEE0
SHA1:	ED5B5AA6F6002C6BA45D67F40B52759CCD987FE7
SHA-256:	942819B75907EF40156ADA6EDBF78E58E748F73A9C609E0D63C7F02C93097D7B
SHA-512:	5DEAB51AC3F0F903FD8AF1F652E3E3C853889983C6C5DBA7EACBB10E122413F0C88296267A48C932866566D07DF9314BBF48EB74CAA40DD3B640E0C4209B2E3E
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.adsensecustomsearchads.com",hash:"11754270700963125422",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301504,17301509",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.definePropert

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	5.405438032905692
Encrypted:	false
SSDEEP:	48:1OLNFlOLNTFZKOLNZOLNW3yOLN3AOLNgRVc+umOLN+1N0oD:1OLNFlOLNTFZKOLNZOLNW3yOLNwOLN8d
MD5:	E90E36C9FCF4283439F0C2BB5BB96254
SHA1:	ABE9B8FEEFFCBFF899A67603CDCCB93065C0480D
SHA-256:	44004199012159C073F8C965213F9E0AECD633DFE1D58641D7F497D3C7423A61
SHA-512:	0CA1D8840D764DE1A1ECA2ACFBC2ABA0A73624D2E5DFC636BA773F075CD967BC235111731B47FF4547F30F674AAFDC28FC39372B3B8FFC6B2E2730A07FD3E59D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56359), with no line terminators
Category:	downloaded
Size (bytes):	56359
Entropy (8bit):	5.908311343417257
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFW+JVEEM:4UcW6v+0Bb6hXwW4nxM
MD5:	4ADCCF70587477C74E2FCD636E4EC895
SHA1:	AF63034901C98E2D93FAA7737F9C8F52E302D88B
SHA-256:	0E04CD9EEC042868E190CBDABF2F8F0C7172DCC54AB87EB616ECA14258307B4D
SHA-512:	D3F071C0A0AA7F2D3B8E584C67D4A1ADF1A9A99595CFFC204BF43B99F5B19C4B98CEC8B31E65A46C01509FC7AF8787BD7839299A683D028E388FDC4DED678CB3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2975
Entropy (8bit):	5.111857360129139
Encrypted:	false
SSDEEP:	48:pZP3EFNwxXdwxiwxyswxtiERwt/djg5Lcfu4ulwHYg337mBY:pZvsENEE+/tg5If5337n
MD5:	B7A2DD21645CCEB3729834C633404EB6
SHA1:	C56F78F64A29A7ED6BD17F94717170C2EA249E68
SHA-256:	2715F2ABEDCED46D00151EAC4F48A778CFA6A8C95CECEF5C093F9A24A224695B
SHA-512:	8783B49EA451A7315C5362F043DFE2C373EA16F37DF65DFECAB2AE394B9EA959047A9EFE96F1AF4100FCFF43D1A1788C2D24E896C3617C1138786A3EDCD0802F
Malicious:	false
Reputation:	low
URL:	https://www.above.com/js/pswmeter.min.js
Preview:	function passwordStrengthMeter(a){. function b(){. let a=c();. d(a);. }. function c(){. let a=0,b=/(?=.[a-z])/,c=/(?=.[A-Z])/,d=/(?=.*[0-9])/,e=new RegExp("(?=.{"+j+",})");. return i.match(b)&&++a,i.match(c)&&++a,i.match(d)&&++a,i.match(e)&&++a,0==a&&0<i.length&&++a,a;. }. function d(a){. 1===a?(g.className="password-strength-meter-score psms-25",k&&(k.textContent=l[1]\|\|"Too simple"),f.dispatchEvent(new Event("onScore1",{bubbles:!0}))):. 2===a?(g.className="password-strength-meter-score psms-50",k&&(k.textContent=l[2]\|\|"Simple"),f.dispatchEvent(new Event("onScore2",{bubbles:!0}))):. 3===a?(g.className="password-strength-meter-score psms-75",k&&(k.textContent=l[3]\|\|"That's OK"),f.dispatchEvent(new Event("onScore3",{bubbles:!0}))):. 4===a?(g.className="password-strength-meter-score psms-100",k&&(k.textContent=l[4]\|\|"Great password!"),f.dispatchEvent(new Event("onScore4",{bubbles:!0}))):. (g.className="passwor

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2435
Entropy (8bit):	7.548218568783568
Encrypted:	false
SSDEEP:	48:vitvnLv8vnPX80J3WZkBz3axpNP7hTZYWw+B3KcPZcRx9GT8+l:4LEUPaBzqxp1l66DPOReQ+l
MD5:	649E1781547B0142288B406635B5AAFC
SHA1:	3B1F5797D8E7208C67F62772A0E31998A32C0607
SHA-256:	71013BA1EB5D11670E7ADFFA291893A5762CB970703B1A62A789D9DBED564869
SHA-512:	9D600F2C30150DD406DADED547F3F964DAD66424C9F559E18D2DA9128CB7CA827CE0DB7948815E2A4AD06BB0FB49BCE0608A50B06FEA80C25F798FB7FC6D4503
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/salecard3.png
Preview:	.PNG........IHDR...H...$.....*.\|f....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:89AD526B734111E7ACB584670E6AF992" xmpMM:InstanceID="xmp.iid:89AD526A734111E7ACB584670E6AF992" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>X.......IDATx..Y[lTU.=w..v...=..:T(Byt.b......$.h0~...

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6714)
Category:	downloaded
Size (bytes):	6886
Entropy (8bit):	4.9743202743666926
Encrypted:	false
SSDEEP:	96:VPVIx86SAsQLTyBpVXuqlNpIj7SuZSy8vKKKQNm2Ddzg+xSkn0qHAnkynxeVnCZE:VPMuYQpVXqbKKKI2RzHZeM
MD5:	EE5A4B6FA88D632A1882A669D8389951
SHA1:	EDC734D5C4624917244D40710EC2E4ECC03DFE81
SHA-256:	516640FAEB856DF6599D165F26EE51CE8CBAAF34F7C09D818509E75F6A48AE13
SHA-512:	F660B96E3016DFE0B9448C007C14E2D3498072DF3AA2A006D7DF2CC022BFB4F9322B82951A182F3447B73C144C5B931F95615CBAE35EEBE88ECB6B8847A05D85
Malicious:	false
Reputation:	low
URL:	https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-font-face.min.css?token=61d644614c
Preview:	/!. Font Awesome Pro 6.5.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2024 Fonticons, Inc.. */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/pro-fa-solid-900-0.woff2) format("woff2"),url(../webfonts/pro-fa-solid-900-0.ttf) format("truetype");unicode-range:u+f001,u+f004-f005,u+f007-f008,u+f00c,u+f011-f012,u+f015,u+f018-f019,u+f01c,u+f023-f025,u+f02a,u+f02c-f031,u+f03a,u+f03d,u+f04a-f04e,u+f05b,u+f060-f064,u+f067-f068,u+f06b-f06d,u+f072,u+f075,u+f077-f078,u+f07b,u+f084,u+f086,u+f091,u+f093,u+f095,u+f09c,u+f0a3,u+f0ad,u+f0b0-f0b1,u+f0c0-f0c2,u+f0c6,u+f0c8,u+f128,u+f12a,u+f155,u+f283,u+f292,u+f295}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/pro-fa-solid-900-1.woff2) format("woff2"),url(../webfonts/pro-fa-solid-900-1.ttf) format("truetype");unicode-range:u+f040,u+f0c9,u+f0cc,u+f0ce,u+f0d1,u+f0d7,u+f0dc,u+f0e0,u+f0e7-f0e8,u+f0f3,u+f106,u+f108-f109,u+f1

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32061)
Category:	downloaded
Size (bytes):	84245
Entropy (8bit):	5.369495907619158
Encrypted:	false
SSDEEP:	1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh
MD5:	E40EC2161FE7993196F23C8A07346306
SHA1:	AFB90752E0A90C24B7F724FACA86C5F3D15D1178
SHA-256:	874706B2B1311A0719B5267F7D1CF803057E367E94AE1FF7BF78C5450D30F5D4
SHA-512:	5F57CC757FFF0E9990A72E78F6373F0A24BCE2EDF3C4559F0B6FEF3CF65EDF932C0F3ECA5A35511EA11EABC0A412F1C7563282EC76F6FA005CC59504417159EB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
Preview:	/! jQuery v2.1.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.1",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	431863
Entropy (8bit):	5.372343024345125
Encrypted:	false
SSDEEP:	6144:5SK9KwI51nTb7W9/juAwiiogfk8g1PdGpNVY5B4sE7qJsGjp2Pb//iCBz+8SctJU:Kw112NVYe7qJsGFCBy1
MD5:	82E42E16575A2F3AA36B47267357A09C
SHA1:	DDD8B58727E2AC1A4EABE18F61140E192A4855E1
SHA-256:	1A18CC6FBF9E17F6367AD1B3913B0F647352D319FCF18076A0AE3D5221BA8537
SHA-512:	8AF3777F2BE68C94DD75CA1A085D35712F9BB77999EF220AE9702D8FBB579652A59AAE9E8B63FF0B3D7B39CD8038E0F8E1612A236820DBEC2FD449D263686FC7
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-6-28.16.44";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 16623
Category:	downloaded
Size (bytes):	6453
Entropy (8bit):	7.970332556505313
Encrypted:	false
SSDEEP:	96:QjLuhR6rtWrZ3moBw9ehPwR+elm9+sOZxPc50MMAlmFVxJLmSK2yfRZfkl6LW:8uhR6wFa9qY6OZxk0PAl2mwyfoqW
MD5:	25FAF5777B37F602EE72DA87F68EFD97
SHA1:	AAA6856C832A3A9532C32F8168038724EE3C5A01
SHA-256:	FE8512C4005135E51258B23966746B7EE8370BFCDB8927146A74254363CD70A6
SHA-512:	2180583384B69DCEDA6AB11E2072CE52C8B5DFAEAC2FEB7AB3C13DBF5C9F1BE8C526A078B55D2AF2E474374C80F7DCD450D86C5AA6CC0BFF75F7241AF2C2DD91
Malicious:	false
Reputation:	low
URL:	http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7
Preview:	...........[.w.....+....',.......m.A...r29B*@....Y.....--...u...2Nl.......w.S.{..F.e~..H....jN....M&lYKu....M..7...=kr...h..w....~...}.<k)O..x...u.u.T...}m....e.yr.[..'......_j.S.I...R...z._..f\6.....oR..>o..7....V}............r..i.......w...<([.q.P[..Q.b...?\...6....7..r.a.....S...^....e.^-5...q.0....R.q.......H..j.k)f.........b....9...x..N..g..S.S......./.J'.6R]....?.....l.b....S......j:{64../Y....P...&.IY....=..Nn`.5.....d...i...i...c!h.6..K........4..m.U.h~.\|...?.~..d.:3[?.f..I..z.p.!U..Y^3..>p.....?b...\|.......Az_....L...g..._.....4].m....k...75..1.l.6.q.<.{..K ).MHJ?.......I...NwB.NU]7.a...p@d....i2.V.....1M.n~6h5}G..yf.vU.gF.ITr:...P....b3..6s=.=....2.j....EA..GBQ....v.:s.J84'U0P..G..\|._..0..c.3b&../b.b..h..kRZ~....@x...!.).'.CL$ +.3.ASn........(.\U7f....Y.jw../.!y..O\]....Pwt\|'.."....p@bS.J....N...D>7P-..z...<...3..........$.X.c.eV@Q..>4 ....G.V$.....xd.:.....?....\..a..%.. .+[.r..`.k.<.}!......DEs.i..rS.0.........-

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39370)
Category:	downloaded
Size (bytes):	39373
Entropy (8bit):	5.513503001490316
Encrypted:	false
SSDEEP:	768:j07PC4LifTB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48n96:Ye3gxF8bvyB5TPCWJqHQ9c
MD5:	C5FC28C57A072765C966EE010CF77B3A
SHA1:	FAA51716230984C5CC60D0067D9165BBC5D7583D
SHA-256:	942A9BA1FE78B402E8B52B83058DBBABDE8DB6B4D1DEBF960D6D5AFE5192DB52
SHA-512:	A1F0F1A1D1F4DDCD2946E85B2DB51867EE4D2F7B436B0B126B246B8EF895B72C67EA25358F50872135DEB68957521C51E663014E225F8E0B077F7A8BCD0977D2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	922
Entropy (8bit):	5.796686830822569
Encrypted:	false
SSDEEP:	24:D1hpunQWwjx82lY2T32HEVLO19r8yJ3V1z1S8WeGTJUc:JitNn2VYJ3QeWD
MD5:	10AAE7DA08C52A6D244E8D6F805FA6D4
SHA1:	7C55E716418896915EECCA9BF14849FB9ED4333F
SHA-256:	02B7EDA11D39FBE5ED770C98D791936D3CAF3BE5D9A0CEA7877781810619801D
SHA-512:	43352F8ABB91F591DD259AA7FB8CD2EEA3DB2ABED1BF9A647FBAD54A8744A6954917EEBB3CFE67E19F96498508968C3F8151EFC67E198A3866309E3963C208DA
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/saletrans1.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:984DEB5C728711E79BF7C5074CB671A9" xmpMM:DocumentID="xmp.did:984DEB5D728711E79BF7C5074CB671A9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:984DEB5A728711E79BF7C5074CB671A9" stRef:documentID="xmp.did:984DEB5B728711E79BF7C5074CB671A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..i.....IDATx.b...?/@........s?8....IEND.B`.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	395
Entropy (8bit):	5.247561404705725
Encrypted:	false
SSDEEP:	12:UNAF4sT0O6ZRoT6pDchKayVVey90H1BGuL/6f7:R4o0OYscdwy96DGSSf7
MD5:	3BCF58C1533AC4804BABE645C98D063F
SHA1:	893492714DD255A4928AE3A8CFEE5466309D26CA
SHA-256:	3A05DE4E0BED4676C6D27C17BEFF2ED294BAF56958A06DC1830D48AABB7A1234
SHA-512:	F493EB56036D8D725BAB094F7D2C9A57DB4CF1CBCFF1EE2ACEFC1B8E5C58390C9C685071A60B2119A099BA6DBED97C3889063D0738A6E7B0CDDD11113986038B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Patua+One
Preview:	/* latin */.@font-face {. font-family: 'Patua One';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_lu.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2435
Entropy (8bit):	7.548218568783568
Encrypted:	false
SSDEEP:	48:vitvnLv8vnPX80J3WZkBz3axpNP7hTZYWw+B3KcPZcRx9GT8+l:4LEUPaBzqxp1l66DPOReQ+l
MD5:	649E1781547B0142288B406635B5AAFC
SHA1:	3B1F5797D8E7208C67F62772A0E31998A32C0607
SHA-256:	71013BA1EB5D11670E7ADFFA291893A5762CB970703B1A62A789D9DBED564869
SHA-512:	9D600F2C30150DD406DADED547F3F964DAD66424C9F559E18D2DA9128CB7CA827CE0DB7948815E2A4AD06BB0FB49BCE0608A50B06FEA80C25F798FB7FC6D4503
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...$.....*.\|f....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:89AD526B734111E7ACB584670E6AF992" xmpMM:InstanceID="xmp.iid:89AD526A734111E7ACB584670E6AF992" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>X.......IDATx..Y[lTU.=w..v...=..:T(Byt.b......$.h0~...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 84 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2137
Entropy (8bit):	7.432082533238668
Encrypted:	false
SSDEEP:	48:5xitvnLmId0J3W5GMp6oPrSuMJRJHXaKJ7v0N+ZVsz8/7YZ5:QS+P5yozSuMJRBa60YMRZ5
MD5:	DBCC211821AEF990A244A3FCBBFB9AFD
SHA1:	258A37FFF68791BBD2A0FD9F03763371B3EB5790
SHA-256:	88B5F57E461C3320B40AFE7E12D6327E0B27032F402688240DC00489F8FD10A6
SHA-512:	FEC1C3F1C303C34914E76F32A4C046CE6D9F265880F765672F427F0775B85EB69BFA911E7709AFD5793BB627C65B03D3C18FDCD60E7B0FD4E9F93ABAA575AB0E
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/salecard6.png
Preview:	.PNG........IHDR...T...$......I......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:A2B6975B734111E79E2CB8F6DB193AC0" xmpMM:InstanceID="xmp.iid:A2B6975A734111E79E2CB8F6DB193AC0" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.1g.....IDATx..YHUQ....R#..9..&.,.&........z.hx.....

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2248)
Category:	downloaded
Size (bytes):	190312
Entropy (8bit):	5.672813893461412
Encrypted:	false
SSDEEP:	3072:7GA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:7bj2ZpzlHYX6klvmilV
MD5:	82AF6C3F55BF8358AD489B4C664D0155
SHA1:	AF2BFDB35DB92AD5E40C911997267DCF7E1C6DBC
SHA-256:	850CA4198782528FC9400A690AD8CAFCC873B7FA2157E2C673A18006788038F1
SHA-512:	7C83DC971DA4A36B8EC2F9FB7B8F2878C04D565E69729CBE58BB1981E23CAB7EF821AFF7571215E5AB69A9B06DC9F41D1D237CC4C960A81A15904ADA803C4599
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"11754270700963125422",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301504,17301509",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	dropped
Size (bytes):	579423
Entropy (8bit):	7.982368559390703
Encrypted:	false
SSDEEP:	12288:ltbUyIq5tVPPCrBzFkeFlfqcbcc2GIPN52M36IyiXSXd1A:vQrqTkBzFkePfqcGGEN5J3nf
MD5:	D94DD8F312C0DE31B820F7DC8FDC42B4
SHA1:	9029923B5EC9399EAA9408BF6659C8E2782A7CCF
SHA-256:	EEEC70C009CCC824627FF3F85B7551BFCAEF387A4D073BA1B896EA166FF6EB48
SHA-512:	F15B8BB93675ACB0016DBF9B1DFDA860E1E9454AA3F6B90C366E7E706B3DE359D7CD2A3BC901C4A95BB89024AF8D0A2D26A36140643604E9E89CC1916D882544
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE............................................................................................_[.Njy5...!jDC..0....4.......B...-...I...Eb.I.8T..".8.( .B..:F.\...Ld..iDF.r..R.SW...+...@(...,r.$..9...[1.r+"....D..Q.5#q...z.^."MO;,@5r..X....T0....:_.#ew.=9)... ...GB..DbPV.r.$J..a..)k.R&.4r1...P.TT....PC.aL$.J...a...-(.@......h..4...%@....HT.b&..A...%`..E...5..{...y...A.g..3.>....58.l."#..!...P...(.....UdnP...%S...#P.B.$..N"..@.$0PVDT.BH....d...J.S#I..hI..I.%..5aq...(...$.9d.H.u...`...+..+ej$.R.........j..r.%....b,......d..gs...g...)(.....V....s.J.5..$."M...U.#r.)...={.Y 9....&.%.@.@."H..".c.$h..Q....B.b..L..Jb".".%..24..6........J....E...5........q..Z.......>..>.8....H.A..%.0.@@j....c...R.dB..9...T...v..........$j:...DB..e.)g*... .#.!.F.SR.MF.."Wr.Z.j..!b...."$.k.V.G+..1.H.d.jE.d5....lW.Ygl....k.2.....

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	921
Entropy (8bit):	5.775969727949214
Encrypted:	false
SSDEEP:	24:D1hpunQWwjx82lY2T32HEVlGyJ3VeAG/sVeF:JitNn2V1J3v3VY
MD5:	8CA54DAFFF20896D30C5744FF1B6D93C
SHA1:	9B912B35FBDEA230369E1B624C94934E2C37E67E
SHA-256:	A4E477B67D678A3DE314ADFB048D71E6279BBBB172B27E423EA8F230D9AAE637
SHA-512:	1D02E1F901D17A64D2DD4BF95AA377B986D7B17F580DD9419840C17B344B7CD224A73C2608009B14C11436CA9112CA3EE3728E805029093630129654A49FA0C2
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/saletrans.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E0DBD519728611E7BE15A822ADC4BD3E" xmpMM:DocumentID="xmp.did:E0DBD51A728611E7BE15A822ADC4BD3E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E0DBD517728611E7BE15A822ADC4BD3E" stRef:documentID="xmp.did:E0DBD518728611E7BE15A822ADC4BD3E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b```8..`.....[h[.....IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2116
Entropy (8bit):	5.083858003138481
Encrypted:	false
SSDEEP:	48:4boo+bjYkZY0FQ6BTddfew5y28aYMlPEhoot6vE+8h:Zo+HQ6BTnh5yaYMZErt6vH8h
MD5:	6F2DE6FABD3ABF39757EB35D5B352D1B
SHA1:	C61CB484DEE957BA1145B1CEEFD22F6EC90E9B6C
SHA-256:	4EAC49E1C94D5710054427F42C6CCD4FB9CF49C2F80B3FA4F8AFF1C0E799B160
SHA-512:	66261CE7978D637696F8A1AD7C6AC8DA265F21DA28823200D3D903E70E38DABA87096DF87B24E8C455F70F3246B55616A257016DFABA1D0E5EF38B5A01977298
Malicious:	false
Reputation:	low
URL:	https://www.above.com/js/login.js?1705557556
Preview:	// JavaScript Document..$(document).ready(function(){...$('#login-trigger').click(function(){....$(this).next('#login-content').slideToggle();....$(this).toggleClass('login-active');........if ($(this).hasClass('login-active')){.....$(this).find('span').html('▲')....}....else{.....$(this).find('span').html('▼')....}...}).....$(document).mouseup(function(e) ...{....var container = $("#login-trigger");....var container1 = $("#login-content");....// if the target of the click isn't the container nor a descendant of the container....if ((!container.is(e.target) && container.has(e.target).length === 0) && (!container1.is(e.target) && container1.has(e.target).length === 0)) ....{.....$("#login-content").hide('slide', {direction: 'up'}, 200);........container.removeClass('login-active');.....container.find('span').html('▼');....}...});..});....// as per RT: id=697578#txn-5780404..// get form action based on the site option selected in the login form..function get_form_act

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.950212064914748
Encrypted:	false
SSDEEP:	3:HhCkuxICkY:HUkuJkY
MD5:	B13E6AB59601D6C68BF78376A6FEEF4D
SHA1:	577E89EEB6F4C7D3DAD70A49C5A804EFE8ED1A1B
SHA-256:	86F2BC854248B2E08AFB2C39921ADE0245D8905052140AD6CB7E045CEEDF2F82
SHA-512:	DF8EBE3D76CAD2D36E6785BF3F4302C203E9997347B662F7961901E879AA43BAA4938127ADC7D22F823169C7851319BD66DD2372D3CB119D5435DE1514B23207
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkPTbot1FtgUBIFDVNaR8USBQ1TWkfF?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw1TWkfFGgA=

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.805980076276597
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA4Y6/+KVCe2TLv138EgFB5vtTGJrdcl/1t4glvllLt41rE0oA8na:VKEcDtWKo7R3evtTA2tX7m12nxLrwUnG
MD5:	8633B8E4B59FB1CE7548F028CC53E78F
SHA1:	2C8326EE9D8F677D38A91C340D0F6694954A1FB9
SHA-256:	6FCB14571420B21777DCE3C5D10FCD8F0B0ABD84F9AE201DD4DA047EF1F709F0
SHA-512:	6EB085E695D400875CA3DC5C49E336968E0238A2CD2D661D1FE60840835E538C0DC0172CD5008C54FC87ED543FC8CB4DA3B028B2CFE792B8D4D10051E3EBF029
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=3546452&time=1719931421254&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io
Preview:	{}

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	dropped
Size (bytes):	336200
Entropy (8bit):	7.972363640752049
Encrypted:	false
SSDEEP:	6144:FWAvudBfNqEsNPp2+pwN8DQYLirddrgaxo+4sqQX5BmcHrEHamWZ63Z:FWAvOi5pwN8DhiZSajTtwHU6J
MD5:	2467722028F2B298B49BE94D58274DF8
SHA1:	BEEFD963C3ADF9E69F2FCCCE3F9934034ABC9572
SHA-256:	E162A47DC7E7E64F31081D3A2475CA4F225F2B3FA37E251264E43ACBD0BD31ED
SHA-512:	DE6150F0D305F4222A4A32AF471AB423D34543EE6C107A92EE277495A50DF0023BE28C143B950E074DA96850F8175315B1C604E22DBD15AA678587E4D49CBB21
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE................................................................................................9U.J.....Pr..XS...V..H.... ......(...h.. .TR;.:aN.GM.X....X ...J...f ....S9a!a..k1D.. ..4.@..+..Z.k6.....5..P...P.J...W..$r....$@....`.t.%C. .......kA....Y,c...1B..(.J...T0.,...B...hZ.,c................)R%..B........H..T;.Z..i3T..S.+..F.._...c.....T..`...@..+....j.1!N....H....0.bGKPQ..H]4.........,..0....@.I-@..".f3%d.%sY P...`..(...H.@`....X%#.X..@......9Z...)C..!P.$....X.5.....(B..,pj0.!....1+.XQ#.B.BPD.V ..$..9U...@.j.4v4r..c...H(U..".`+.+HJ..B%P...... .J.....`..S..:,c.v..ZR1..O..R..J...#V....H...@F.p..cJ......Z.....#..2..(..........T...0@)......"$D.......X.!ef$.D.(...B...:,......`4.h.kE....X.4...8.b...@...1JH....V9..WB1.......P.6U8J!aFKG.%@...@...P..R...........W@.;.J. Pv........$!,.... ......%p.........hC......\|~

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.218881295614589
Encrypted:	false
SSDEEP:	3:fmFLQVd82nKko/cgNlI2hxROLu4kKTf4NIyXZO7NnEoiks+snwFk1gFilkPCqd73:OWVd8AKkra3Rou+4abZ2n4ggclSbDbfR
MD5:	C85057872FED71863AFE9B2FAAA5771F
SHA1:	24DFAC27D37B462C75158F1C9B347DF6A9BF3DC3
SHA-256:	FCB8B255505179F28791D67FC05593815544872CEA6E8100871B8798011702BE
SHA-512:	82C0065D8CCC583D62F2163D741EA27E4B34F6FFB138F5B85B4065CC89B50C706D1122E055E6F8DC55D01F9CF46FE32A79667D15DE7971D4A8D91C979DE1E2F3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISZAnXdYYdjVyc9hIFDbJv56USBQ0lugscEgUNfQRAVBIFDWERGgYSBQ03HPiiEgUNph75axIFDZRUAJYSBQ3l8plhEgUN6VNdkhIFDTfx0w0SBQ1z0Q6FEgUNItBShxIFDeSz-U8=?alt=proto
Preview:	CpIBCgcNsm/npRoACgcNJboLHBoACgcNfQRAVBoACgsNYREaBhoECFYYAgoHDTcc+KIaAAoHDaYe+WsaAAoHDZRUAJYaAAoHDeXymWEaAAogDelTXZIaBAhMGAIqEwgKUg8KBUAhIypfEAEY/////w8KBw038dMNGgAKBw1z0Q6FGgAKBw0i0FKHGgAKBw3ks/lPGgA=

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3225
Entropy (8bit):	7.887297656861742
Encrypted:	false
SSDEEP:	48:aF/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODbm88jgyM:ySDZ/I09Da01l+gmkyTt6Hk8nTq810h0
MD5:	4C14580A6907D78E9187109360E3986A
SHA1:	A7B112ABA1E32EEE37D6882CB0B91FC8791C7AA8
SHA-256:	4DC79B2BD0ABF05D4D37104DDA327E1881E6B2A978A0F9B36BCF4E5F4E12CB97
SHA-512:	1548DAF1B2F51C3C099D1845550768D4BBE840C91DF76CB30D1812DC4741742C0CF2E35E676363F58E233BE137BED1A49CC4BC5C09D16BEA13913AA43224D9EB
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/saletick.png
Preview:	.PNG........IHDR...2...$......i7....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (378), with no line terminators
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	5.440009323919278
Encrypted:	false
SSDEEP:	6:xWzP6AoVtJeYubJ0ZdV2H0c1uPF67M+d2b5tJeYubh0CtXnTqwpV2H0c1uPF6Aen:xWOAokYubJIdVe7HtYubdtXTqSVe7n
MD5:	CCD634EBD49AA0215B1387FA8654CC1A
SHA1:	BC84CF5470A0AAB32E678C35637D46729DFF3682
SHA-256:	F3ED89F8DD5F6E972B52143510C4B45CE9F2088D27A2E557D85002D8AE50AD63
SHA-512:	79CBC9D1FE04A09B1D83D1C23DCB1C3CC228E6F32BB1D191821FD354E8B8D2DFD616F9EE855FCD81BD341E841EDB57180BC075424867C192323976EA4B41403F
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww38.pollyfill.io&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ","_expires_":1753627392,"_path_":"/","_domain_":"pollyfill.io","_version_":1},{"_value_":"UID=00000e6f06c7fa74:T=1719931392:RT=1719931392:S=ALNI_MYPQ8ro04pbzguDH2KMguNjiP93Jw","_expires_":1753627392,"_path_":"/","_domain_":"pollyfill.io","_version_":2}]});

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10779), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38393
Entropy (8bit):	5.89521156384074
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYpcXjOkSkV8sVFMRhIYLtdiGP/bcq:C8Cg3uX1SjTZP/bcq
MD5:	4E67275BA9E22EA89AF851BC1F58DFAB
SHA1:	A9A93EDF7BBE32EB2849209F30696460631CC762
SHA-256:	A76816110C76B6E56B6F128F9CBE1CBCD89E28EA7B62045A741D384AB4997A61
SHA-512:	8DF9B2E3D157325A16FBF2083A6BACE6AA8CAE520953573750BE36F4C32C18F28215DD1999254641C1F51D881AD1A2D474C34DE1709DCEE67B0B30BDE5B5F1FB
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=75015220&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	232013
Entropy (8bit):	5.528114831051144
Encrypted:	false
SSDEEP:	3072:LNavJY1VVZLJL5hfo70CmcpPCCYCW/o1CzW7VVDzHBmIvaM4:B1VV9JLnj0DzHBmIvax
MD5:	DFF57B642DD0AC8AE2B5F47015650B3C
SHA1:	01395D633F2C92C0B71019710EFFAF6D911091DC
SHA-256:	6ADE44CC6D1871C19FE7AD7E7CF125789F6C5832AA07893F1BACF2FD2CAF4988
SHA-512:	DD13DF3B5C9BF853748146D13276630C3175B4C4611444200DE1EB4A0EE3F96E34FCD9F4DE13DBAFAAE63C8D26A0429D75E859D4A45A6AD65A3DD21244744E14
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-318991084&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14313)
Category:	downloaded
Size (bytes):	15166
Entropy (8bit):	5.511087313176943
Encrypted:	false
SSDEEP:	192:2E12ikpgnLLghzVLWrZMO44AEMO4oMO4EvUNCaOM:2ni8vzhEMoTMYM0vkpOM
MD5:	3572F9E43F3A92DD289B69610C2C8C75
SHA1:	2F9EEAB3349209B18E7695E6F9A1CA9B1F4ECEBA
SHA-256:	B52EB81D2BC42123161CC21BCA6B2BA5A31D3760F48ECE18D466C3DC93657148
SHA-512:	2BCA78A6349127517B4EC826C83056BDF3F04E0063251BBB3C81DB78C192C4E873BE7CCF61AE9FD773EE7AD361436680F26E0B7004DA7E735B9E5D941D82356F
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket057&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.pollyfill.io%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNTd8fHx8fHw2Njg0MTFmYzdmNGM4fHx8MTcxOTkzMTM4OC41OTN8M2IzMjI1ZDcwODlhZWJhMTFkY2YxZDJkYTlhOTA0NjI1MmYyMmQzMnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxleUp6ZFdKcFpERWlPaUl5TURJME1EY3dNeTB3TURRekxUQTNNbVF0T0RrM055MDRZMk0xWW1VMU5tWXlaamNpZlE9PXxmNWVkN2NkMDNmOGY3NDMyZTQ3ZWMzYzhlZTdmNzUxZmI2N2VkNTBlfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2748662219872890&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301504%2C17301509&client_gdprApplies=0&format=r3%7Cs&nocache=4101719931390149&num=0&output=afd_ads&domain_name=ww38.pollyfill.io&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1719931390151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=641883529&rurl=http%3A%2F%2Fww38.pollyfill.io%2F%3Fsubid1%3D20240703-0043-072d-8977-8cc5be56f2f7
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1440
Entropy (8bit):	4.785088643346469
Encrypted:	false
SSDEEP:	24:hoz82PAR4Wj+vcfA3z7yBF+fA3z7QIiGmCI9EdLi9pRRPjWclRRPWcuUCPKznL2m:hog2s4Wjqcfkez+fkZv9YEdLi9pvWcl1
MD5:	CEC4A60A4D3D12C901BC97E1B35936DE
SHA1:	400A40738551C0AF6ECE4A6210326305ED404B3A
SHA-256:	131CE2DF729F502CB88ACED1ACC3B342213D3E91AF1DDDF39C43A5F4E89B246A
SHA-512:	4B6EEAAC58E6DDBA7411D08ADF50EDBA2DA6B54461778C4D5095C691B4DE9F713BCF1AB146C793901F78F681B55E2169F614DCA374C5DB902A8092296DDCD9B4
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/timer.js?1705557557
Preview:	var mins.var secs;..function cd(min,sec) {. .mins = 1 * m(String(min)); // change minutes here. .secs = 0 + s(":"+String(sec)); // change seconds here (always add an additional second to your total). .redo();.}..function m(obj) {. .for(var i = 0; i < obj.length; i++) {. ..if(obj.substring(i, i + 1) == ":"). ..break;. .}. .return(obj.substring(0, i));.}..function s(obj) {. .for(var i = 0; i < obj.length; i++) {. ..if(obj.substring(i, i + 1) == ":"). ..break;. .}. .return(obj.substring(i + 1, obj.length));.}..function dis(mins,secs) {. .var disp;. .if(mins <= 9) {. ..disp = " 0";. .} else {. ..disp = " ";. .}. .disp += mins + ":";. .if(secs <= 9) {. ..disp += "0" + secs;. .} else {. ..disp += secs;. .}. .return(disp);.}..function redo() {. .secs--;. .if(secs == -1) {. ..secs = 59;. ..mins--;. .}. .//document.getElementById('disp').value = dis(mins,secs); // setup additional displays here.. document.getElementById('disp').innerHTML = dis(mins,secs); // setup additional di

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 62 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2329
Entropy (8bit):	7.475153241452789
Encrypted:	false
SSDEEP:	48:PitvnLNh7J0J3W+QY3Sdlsai+qmDeeo0/q97KtnuA:YHJPZflsaRxeeHqBG5
MD5:	9CEA6CE8FAF882D027859402AC5330BF
SHA1:	751BFCC5D12922F2ECDBD73E66917E3A907D1540
SHA-256:	4AA3C13048E3198EF592D8C49D0E11A4051CAB070A68D107129E28AEA2E8F433
SHA-512:	2134EAA9A19124F3A08B6910254252012C7FBA5DDED88D2E976B7B7CC96DD3DFCACD043C7E7A86731A82F11F8DEED98C4863DF059A22966955AD68AEE2E13B18
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/salecard7.png
Preview:	.PNG........IHDR...>...$............tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:AB87B1EE734111E7B6FCE3AA1694832A" xmpMM:InstanceID="xmp.iid:AB87B1ED734111E7B6FCE3AA1694832A" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.l.....KIDATx..{h.U..w.......[.M.3.Y.R....*j.t.....

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32157)
Category:	downloaded
Size (bytes):	239564
Entropy (8bit):	5.145982856952183
Encrypted:	false
SSDEEP:	3072:ymDzXUcSDVqCIhPxKYI7qSDzOyAskRsSSCQv+SuGC:JU5VOeYIB1CQvXuh
MD5:	870B75C273A97501E7D1FB27776BAFD0
SHA1:	A83CAF65714FF3A56ADED6088ACB525E9D305881
SHA-256:	7AB17D7C830048456601619D3A6422EB5E419B1D0BFEF58D8B1C533435D2E054
SHA-512:	72659EBCA85576B99C490BA39D39AEEFFBF1F3EBD91D9681FF7D75E7A747D10078E7AC0379D33E79CDAD20FDFA92DB28D0BA16D0892CBDB2FFE6C78DA803EF39
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js
Preview:	/! jQuery UI - v1.11.2 - 2014-10-16. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var n,a,o,r=t.nodeName.toLowerCase();return"area"===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/input\|select\|textarea\|button\|obje

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2144
Entropy (8bit):	7.415756966502314
Encrypted:	false
SSDEEP:	48:yLitvnLy20J3WORQCAPmuQa6TEw4PYh1nnzQz/ahjm:j/P2QmuwIdghhna/aY
MD5:	76380908D6615E4960997AFEBBD115DA
SHA1:	E8EDE45332D84AAFE5DE75DAABAB2599850CCF6D
SHA-256:	F72A8C84C96387E0CB63FE4FE149EC32B6887B5C274CF99D2AB63EB5C8788ECD
SHA-512:	D1C1E89F32970603D487DC896AAD62D9F455683FCF349EA52B58952CCC135FF97EFE1587DAD872D9C86864BA93F2E3CFC425E172D9C49C5B92C965E795DC651B
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/salecard4.png
Preview:	.PNG........IHDR...G...$.......'.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:92B60302734111E7A5EFC3B151F2C723" xmpMM:InstanceID="xmp.iid:92B60301734111E7A5EFC3B151F2C723" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d..{....IDATx..{l.g.....'...V3.!.P..!..*.f..F.$..a..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	231980
Entropy (8bit):	5.528002036739326
Encrypted:	false
SSDEEP:	3072:LNavJY1VVZLJL5hfoV0cmcpPCCYCW/o1CzW7VVDzHBmIva1c:B1VV9JLnj0DzHBmIvaS
MD5:	3E3C38B98FD8C3900ED8A05212979EC3
SHA1:	65598250DB43278614EF47A4C51690DF9D0C3D12
SHA-256:	07C2E2AA326D8446C1EB1366BD058A1819F463A8138711F1CC27204C98DA23C2
SHA-512:	644B3F9233665EE23E2C8F6ABF54B93B022FE0B3F0F1417A47865B452C0A777CF918E4E2CD28D38494D29B594978DDADF06800CD3F8A408345A5FED3B340CB33
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-318991084
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	downloaded
Size (bytes):	3235
Entropy (8bit):	5.044278822643233
Encrypted:	false
SSDEEP:	48:hg4OXijFUcdj8qA/p/2g3ORDyJb4GfmVY0V7bYmkFLr9Y0VYsf+usZd:hgJiUcx8qA/3O4R5m8PCHsf+usH
MD5:	ACE7BBF1E6DC530A7CCFBB08151FF8D9
SHA1:	938F604DE58398815BDDF4D7049AF67EDE85601A
SHA-256:	D56F1130B96200C85D2D091951DEA5ABF9DCA6B29FCF0E967502F3A203E54DCA
SHA-512:	98804F4801027904268A6F0C4CE4C0F07F00A54DEAAE825EFD3BC470A53D738E280668A97479305C894AC22ED36BB0B95C46864497D958020C754648BF89264B
Malicious:	false
Reputation:	low
URL:	https://www.above.com/css/lity.min.css
Preview:	/! Lity - v1.6.6 - 2016-04-22.. http://sorgalla.com/lity/..* Copyright (c) 2016 Jan Sorgalla; Licensed MIT /.....lity{z-index:9990;position:fixed;top:0;right:0;bottom:0;left:0;white-space:nowrap;background:#0b0b0b;background: rgba(0, 0, 0, 0) url("/img/overlay1.png") repeat scroll 0 0;outline:none !important;opacity:0;-webkit-transition:opacity .3s ease;-o-transition:opacity .3s ease;transition:opacity .3s ease}...lity.lity-opened{opacity:1}...lity.lity-closed{opacity:0}...lity {-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}...lity-wrap{z-index:9990;position:fixed;top:0;right:0;bottom:0;left:0;text-align:center;outline:none !important}...lity-wrap:before{content:'';display:inline-block;height:100%;vertical-align:middle;margin-right:-0.25em}...lity-loader{z-index:9991;color:#fff;position:absolute;top:50%;margin-top:-0.8em;width:100%;text-align:center;font-size:14px;font-family:Arial,Helvetica,sans-serif;opacity:0;-webkit-transition:opacity .3s ease;-

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	4.579573891615282
Encrypted:	false
SSDEEP:	192:AFI1Byx+6EW461t5ugcbXfVBcWXqcMrEzqv45UZvCLfYtWrbdBzD:AYy4o4UDcoEvD
MD5:	3BFB845276CC77BFA5F051B56E207BE5
SHA1:	BE4D6AB88C42C8269BB82A73F60967240456A81A
SHA-256:	47C069DCCB386D8B6597F16DBA8D978124638472011802759F3A9A23626B1138
SHA-512:	5FEB3BC26AAC8C7DF461C728389C1BA373CD28F00778BDC2B5A852655447584314C94E947B2422156D8B708CE25F048B5E4A8FAC1D9B38E3793EC2F4F2CC8822
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/jquery.cycle.lite.js
Preview:	/!. jQuery Cycle Lite Plugin. * http://malsup.com/jquery/cycle/lite/. * Copyright (c) 2008-2012 M. Alsup. * Version: 1.7 (20-FEB-2013). * Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. * Requires: jQuery v1.3.2 or later. */.;(function($) {."use strict";..var ver = 'Lite-1.7';.var msie = /MSIE/.test(navigator.userAgent);..$.fn.cycle = function(options) {. return this.each(function() {. options = options \|\| {};. . if (this.cycleTimeout) . clearTimeout(this.cycleTimeout);.. this.cycleTimeout = 0;. this.cyclePause = 0;. . var $cont = $(this);. var $slides = options.slideExpr ? $(options.slideExpr, this) : $cont.children();. var els = $slides.get();. if (els.length < 2) {. if (window.console). console.log('terminating; too few slides: ' + els.length);. return; // don't bother.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	48850
Entropy (8bit):	5.227555358552162
Encrypted:	false
SSDEEP:	768:/J30F0wijsCo+BFEN4KQuq7NFpvCiDumd6JQLkbilMvo0oHnNa6qAl:uF0w7CoNgFpvCiDuXcJHd/
MD5:	DE9174EC1B14E0564ADC15FC06C92C53
SHA1:	35E88FA1DAF7A78E044E42D3D304F094583CDEB2
SHA-256:	202AF728E534B3C01554EBD495725B2AF2BC801E788292091B2CECE04FDF72EE
SHA-512:	6658D4B9F6922FC0548E24E56E91D79A13C3B28DD7BD22D351D268589B00CBCD47E9198547FF68C9786331418EC81198B7EC96C88EEDF0F2745ED5FBEC8A070A
Malicious:	false
Reputation:	low
URL:	https://www.above.com/css/aboveGlobal.css?1716443652
Preview:	/***********************************************.....aboveGlobal.css...this css file includes all the common classes of...above.com registrar marketplace pages....***********************************************/....html,body {...margin:0;...padding:0;...height:100%;...min-height: 100%;..}....#wrapper {...min-height:100%;...position:relative;..}....#header..{...height: 96px;...position:fixed;....display:block;...width: 100%;...background: #fff;...z-index:999;...border-bottom:1px solid #dddddd;...top:0px;..}..@-moz-document url-prefix() {#header{height:96px;}}::-ms-backdrop, #header { height: 97px; }..#content {...font-family: "open sans";...color:#333333;...font-size:15px;....padding-top:20px;...padding-bottom:420px; /* Height of the footer /..}....#footer {...position:absolute;...bottom:0;...width:100%;... / Height of the footer */...font-family: "open sans";...font-size:15px;...background: #333333;..}....body {padding: 0;margin: 0;position: relative;font-family: "open sans",Ar

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1698, components 3
Category:	downloaded
Size (bytes):	224053
Entropy (8bit):	7.978673276646189
Encrypted:	false
SSDEEP:	6144:v0DVWTeuMyJ69hVm/kSNrHnCOBdQLB0zvnrntiMGiW9:v0ReMyJljCSdZvrnEMGR
MD5:	B6F37AFCE57D9A9955BD072E44A7CDDC
SHA1:	D764AC842FE203453365BB93AD6813C7660493C8
SHA-256:	95EEA6743A6B2FFF58D0CEBE7BE2F737093CAA053475FD2943F00BAA69A260E6
SHA-512:	DD00068B10BE9665A72411569F6159211C1CE99445E474C3BE8A96A17EFC3C5EC718909DADA5657220ECEC241106FC38F484C460841911A0F83DEFCFC2CACB49
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg1.jpg
Preview:	......JFIF.............C......................!....'#))'#&%,1?5,.;/%&6J7;ACFGF4MRLDR?EFC...C....... .. C-&-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC..........."................................................................................?g...@.`...A..H0............0h.. ..0....`.0`..."`.M....A..F.6.Rr.p0Pd.!...J..o5Zr.D."Q.WSSn..i...Nj.k:.jn.j.^uU54.jWR...sSUSx........Zh..VuU..qY.)Qn.n.I.......X..YD.$.\..Y...RkRP.T...."u.Z.P.......D.".I..N5.u.5......Z.SS`.e.%5r.U#HM..Y#V%J.h.,I.CJ.....P.&...4 ..Bi@..@.4.i@...J...............@...h.-@h.Bj....Rh.c.d.... ..h.....M...i.......i....i.0......hF.0......0..`...4.....c..U...M..f.p4......]K.u.j.k:.....]K.w...55M<..h..r.......v..T...Nj..+h[..:..t.YB%..-.qm..%.I. .H.E.H...\..........H.....%..r...5...-\.sr..fPk...&.nfn5.......4&...!. j.4.2.j.jhM ...BiI. -... ....#V..M(....!.........RY........0@..&.....&.4.j...h&..h.n.8`.....4i..........c........d........"i....4.d...A..0.A.0...O&..r....+j.m9X.Br.0a(......4gUQr.O;..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3225
Entropy (8bit):	7.887297656861742
Encrypted:	false
SSDEEP:	48:aF/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODbm88jgyM:ySDZ/I09Da01l+gmkyTt6Hk8nTq810h0
MD5:	4C14580A6907D78E9187109360E3986A
SHA1:	A7B112ABA1E32EEE37D6882CB0B91FC8791C7AA8
SHA-256:	4DC79B2BD0ABF05D4D37104DDA327E1881E6B2A978A0F9B36BCF4E5F4E12CB97
SHA-512:	1548DAF1B2F51C3C099D1845550768D4BBE840C91DF76CB30D1812DC4741742C0CF2E35E676363F58E233BE137BED1A49CC4BC5C09D16BEA13913AA43224D9EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...$......i7....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 279 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4427
Entropy (8bit):	7.8395193881133896
Encrypted:	false
SSDEEP:	96:q29Kaf1LBGQvQjpvZG4kZg5RuecsReZpCcz9XdA:Dvc5FZGvZg5RuetRebJpy
MD5:	8FC8E52E201D9ACB5BB06AE37EDC1206
SHA1:	29D2C03222EBDB6FC8A57339281CD1DF2D40832D
SHA-256:	0B7E8F59179C93398B409396DEDC6D5F173E1FD8DE15164A7CDAD23A534D2032
SHA-512:	D9CEB05DB0C09BFFF0DF77376A027B1DE36ED322049BD5E43CC052A8D7FCA99B72F26ED967E0CC039EAC63DC09A2386721577015F39B1D49E784FC1ACB00680A
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/above-mp.png
Preview:	.PNG........IHDR..............:......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:488E85DC728511E79BAFCA58D10F6027" xmpMM:DocumentID="xmp.did:488E85DD728511E79BAFCA58D10F6027"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:488E85DA728511E79BAFCA58D10F6027" stRef:documentID="xmp.did:488E85DB728511E79BAFCA58D10F6027"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...)....IDATx..\.pTW.>w.y,!.B[.M.$......5.Z\|VR.L}D.Z+...C.h2c;v....cj..(........%.(..t.y..H6!.<6...........lp...3.${.=

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	921
Entropy (8bit):	5.775969727949214
Encrypted:	false
SSDEEP:	24:D1hpunQWwjx82lY2T32HEVlGyJ3VeAG/sVeF:JitNn2V1J3v3VY
MD5:	8CA54DAFFF20896D30C5744FF1B6D93C
SHA1:	9B912B35FBDEA230369E1B624C94934E2C37E67E
SHA-256:	A4E477B67D678A3DE314ADFB048D71E6279BBBB172B27E423EA8F230D9AAE637
SHA-512:	1D02E1F901D17A64D2DD4BF95AA377B986D7B17F580DD9419840C17B344B7CD224A73C2608009B14C11436CA9112CA3EE3728E805029093630129654A49FA0C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E0DBD519728611E7BE15A822ADC4BD3E" xmpMM:DocumentID="xmp.did:E0DBD51A728611E7BE15A822ADC4BD3E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E0DBD517728611E7BE15A822ADC4BD3E" stRef:documentID="xmp.did:E0DBD518728611E7BE15A822ADC4BD3E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b```8..`.....[h[.....IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	downloaded
Size (bytes):	579423
Entropy (8bit):	7.982368559390703
Encrypted:	false
SSDEEP:	12288:ltbUyIq5tVPPCrBzFkeFlfqcbcc2GIPN52M36IyiXSXd1A:vQrqTkBzFkePfqcGGEN5J3nf
MD5:	D94DD8F312C0DE31B820F7DC8FDC42B4
SHA1:	9029923B5EC9399EAA9408BF6659C8E2782A7CCF
SHA-256:	EEEC70C009CCC824627FF3F85B7551BFCAEF387A4D073BA1B896EA166FF6EB48
SHA-512:	F15B8BB93675ACB0016DBF9B1DFDA860E1E9454AA3F6B90C366E7E706B3DE359D7CD2A3BC901C4A95BB89024AF8D0A2D26A36140643604E9E89CC1916D882544
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg3.jpg
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE............................................................................................_[.Njy5...!jDC..0....4.......B...-...I...Eb.I.8T..".8.( .B..:F.\...Ld..iDF.r..R.SW...+...@(...,r.$..9...[1.r+"....D..Q.5#q...z.^."MO;,@5r..X....T0....:_.#ew.=9)... ...GB..DbPV.r.$J..a..)k.R&.4r1...P.TT....PC.aL$.J...a...-(.@......h..4...%@....HT.b&..A...%`..E...5..{...y...A.g..3.>....58.l."#..!...P...(.....UdnP...%S...#P.B.$..N"..@.$0PVDT.BH....d...J.S#I..hI..I.%..5aq...(...$.9d.H.u...`...+..+ej$.R.........j..r.%....b,......d..gs...g...)(.....V....s.J.5..$."M...U.#r.)...={.Y 9....&.%.@.@."H..".c.$h..Q....B.b..L..Jb".".%..24..6........J....E...5........q..Z.......>..>.8....H.A..%.0.@@j....c...R.dB..9...T...v..........$j:...DB..e.)g*... .#.!.F.SR.MF.."Wr.Z.j..!b...."$.k.V.G+..1.H.d.jE.d5....lW.Ygl....k.2.....

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	dropped
Size (bytes):	263365
Entropy (8bit):	7.944595318105681
Encrypted:	false
SSDEEP:	6144:gLyEVdc1u13Bx7Pp9bmTPpXOFDeO3TNSMWpuBouDo6b:81M1u1f72TBInT6puBouF
MD5:	C52F0CC6B3DA8079328D9A28D1EFAF58
SHA1:	FD4CCD37876FF8366EEA414C3AA4B3B7FC4B7286
SHA-256:	F6EFFA3BAC6EA4A1BA93246A45F43CFDEDD3C46BE0CAA3C5C2F477C62E70176A
SHA-512:	979E92EA2E2DAA22B075E1373A0F2DD4F5A0797E7F41F510C747005AD5DF5E9537EEAE9571C4E0D6141DB57654C46EB53FA6B812C2862EA07CB2A3A52DC33587
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................%!'&$!$#).;2),8,#$3F48=?BCB(1HMH@M;AB?...C...........?$??????????????????????????????????????????????????............................................................................................M..Y.(.....E@.Q.."...cR3jU.% .".. Yj...X...).......E...FEIE.AE.....B.%....FB... .i%.....RU..-.J.KV.-.P3n&.h..3r........T(....@............(....P....IH.....!@H.)....A.....T........P....(..@..Q.).JY,Y,......$R..E..Z.%..B.@U..J2.b.l.X...B.U..A..T..%....FT.....)J.H.....Q`..@...h..Z....R.P...R....).B...... ..............@..................... ....(.H.. @.A......PP........P.BX.r.r...P...(...5V......@...R..T.ADYB,XE.T.T.....(.R.. d...,J$.)@.(.....R.e...-,.%F....A..X.P... (...@@.... ..........E.......P............. @........)..P .7.AB...(..E.%....(,...)`U..!.H...*...ed.B.P....T.%..Z%E...((..B...QB..J..DX.....)T....P.X..KU...%.....r.H.D.,X.(...!E@...............HZA-.T.D. P!H................ .$.A..E.D.P....'.@..............(,.E..P..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	44892
Entropy (8bit):	5.347687749764926
Encrypted:	false
SSDEEP:	384:+GOf0wtb9ZSq99NnMU8OhqqtJXZ0q99HnCafOWJ3tsIZfq994n9zqOTYstn5ZWqY:+N1pXzv1EIMwi
MD5:	6FE19CDF1C28ABD696E76E7A035160A0
SHA1:	E2C721A6B6B15077103B49FC51CAC9CF41301931
SHA-256:	F4148470EECC57D1935A0A072EA3CC9C0036C5F66E556F285C7BF55381F9584A
SHA-512:	97845EE424F56D35CCBA8B385D9D6F57BD7CEAB26950C82A0FCF17E289707EF051C4F0984493B389E9AE42F07D82995DA61B7C148BF55F234DD42A255CCADEB8
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1868
Entropy (8bit):	5.124583178576462
Encrypted:	false
SSDEEP:	48:0WrrTrkTohhtBTf/kPfSopL5opBCvHCowJL:LrrTrZhhtN/gpH/Za
MD5:	A60682C1D6D55235BA30170CF214E550
SHA1:	B61AEAB8A1CCFE05C4941B7198073CC3816CAAF7
SHA-256:	D13AAD49A9C3399CE31B39937CFE96EC65B8CE987D4E9DA70D0FDE40AE91B4BF
SHA-512:	1EF38624933AD8C6FCA53C521DD1F04136EEAE3BBE9A362B696202A572CAE93DC1BE838AE651536CE9A3FD2046938DEDC9502F5B94A165123EAA358B971DD04B
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/capswarn.js?1705557557
Preview:	// JavaScript Document....$(function(){..//Initialize to hide caps-lock-warning..$('.caps-lock-warning').hide();....//Sniff for Caps-Lock state..$("#password").keypress(function(e) {..var s = String.fromCharCode( e.which );..if((s.toUpperCase() === s && s.toLowerCase() !== s && !e.shiftKey)\|\|..(s.toUpperCase() !== s && s.toLowerCase() === s && e.shiftKey)) {..this.caps = true; // Enables to do something on Caps-Lock keypress..$(this).next('.caps-lock-warning').show();..} else if((s.toLowerCase() === s && s.toUpperCase() !== s && !e.shiftKey)\|\|..(s.toLowerCase() !== s && s.toUpperCase() === s && e.shiftKey)) {..this.caps = false; // Enables to do something on Caps-Lock keypress..$(this).next('.caps-lock-warning').hide();....}//else else do nothing if not a letter we can use to differentiate..});....//Toggle warning message on Caps-Lock toggle (with some limitation)..$(document).keydown(function(e){..if(e.which==20){ // Caps-Lock keypress..var pass = document.getElementById("password");.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17658)
Category:	downloaded
Size (bytes):	18253
Entropy (8bit):	5.613005837912891
Encrypted:	false
SSDEEP:	384:JqTfkYjguOeer0HbhUEAY2dnrFB7PeaeP1EmZ7eiMiHO/:JAkYBO3r0QNKae/KilHO/
MD5:	6C9CC3DD6B9A3F9815BA2BE7AE4EB4C4
SHA1:	03FB8C0E025E584E6F39F944128656218A5C3499
SHA-256:	994F6552FE5F0BEE8F20D5C6C36D1852F43074E52A06C9FAE6827F3E4103AD6A
SHA-512:	A8199000BF9BC6BF21CD7A400F27783AE5496C86FA92DF430643F15AB0D99032E5463E1D81DD9DF2A666F8D0C2909FBB7AB21E09F2549F1C894174951FC0A4C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(n,v){if(!(v=(n=null,X.trustedTypes),v)\|\|!v.createPolicy)return n;try{n=v.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(z){X.console&&X.console.error(z.message)}return n},X=this\|\|self,U=function(n){return n};(0,eval)(function(n,v){return(v=f())&&n.eval(v.createScript("1"))===1?function(z){return v.createScript(z)}:function(z){return""+z}}(X)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var vK=function(n,v,U,X,f){q(((X=(U=(X=F((v&=(f=v&4,3),n)),F(n)),e(X,n)),f&&(X=nY(""+X)),v)&&q(O(X.length,2),U,n),X),U,n)},O=function(n,v,U,X){for(X=(v\|(U=[],0))-1;X>=0;X--)U[(v\|0)-1-(X\|0)]=n>>X*8&255;return U},T=function(n,v,U,X,f,y){if(n.W.length){(n.j=(n.j&&0(),true),n).pK=v;try{y=n.C(),n.V=y,n.S=0,n.g=0,n.s=y,f=jH(n,v),v=U?0:10,X=n.C()-n.V,n.u+=X,n.Ep&&n.Ep(X-n.A,n.X,n.H,n.S),n.X=false,n.H=false,n

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54044), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	99003
Entropy (8bit):	5.684130182142181
Encrypted:	false
SSDEEP:	1536:C8Cg3j8w6dsrsqEEUqNlbAm3hIhkeXbx42ZIhESvopIaJDZPhbcKm:Czg3/6dsrsqEEz2kI2eXbx42ZIs3bcKm
MD5:	FCFF8EC6C044E4BA4662F3789849D000
SHA1:	85F0716AE728A74AF50372A437583D8606E9F5D8
SHA-256:	8EAC599B633D2097B9BE13E2419EA0D363F3D40DA3025D64D17AC5315B858CA2
SHA-512:	E2BD8C9F7CF026D4EDF58EAA508396D7D0B786516E82641E9D272EF0CF11EE5F786270252FE2E8B49FD75EBCBE64A0BB002CAA97F4A0954EA0400D0B7C943371
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.787190602698568
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKvUjfXNIqHWaee:PLKdXNQKv2fXLHL
MD5:	F66834120FACCB628F46EB0FC62F644C
SHA1:	15406E8EA9C7C2E6EF5C775BE244FE166933BFCB
SHA-256:	8F063AE681A530A407EA4D17859790D9E45FD81CE5B3BB6202FC9E30CEF95996
SHA-512:	7C596E61967FE787BC29D262C945D7EB4E02F9F574D3C8C664F333C9C3B4DD4AFF1DFCDE8F34BE1ACFAF8C05423C1C118A4BFD50684A7CD9F90E5F40FBC89653
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.112017425770222
Encrypted:	false
SSDEEP:	48:j2X4UtzykpBJK76kDfFONwtKShwe3dCm5QuKBZfiBPym/93EUu1sZljxmNT8Qis/:jwtm0X8dFOdMTBmiBqicsEtu5NZk/
MD5:	3884E25B4E3570F8A23468394A331C94
SHA1:	358AB3C2926D01C603CCA2888BC45025DA813550
SHA-256:	D247EDCB9AF459E71E1CA2033BB417D07A5FC86A6DAC9158578F922D64383E33
SHA-512:	7F12FB8CCF4BCC5535987C9C0AD35D52FF5FAA458F76310A4ABC75905BB3F8635E3CD8E7AFAAB6B0B501FE9026038043B7E8AB55DB37FB5B652F447A39979006
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.............................................,...~...................................................................................................................................~...,.......................................................................................................................................................................................................................................1...................................................................................................................................................................1.......................1...........................................................................................................................................................................1..................................................................................................................................................

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/318991084?random=1719931424565&cv=11&fst=1719931424565&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	108058
Entropy (8bit):	5.385014744984452
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbdxVgPfY6iYeiUf88xBepe07H:5y+qRuZtdSk6IxLdJ0nM0R83BUtVaT8
MD5:	344EFADE4DD61DA5C37A305190473FA4
SHA1:	667F9FB62BACFA0B831726045F1E5A6455DB566D
SHA-256:	7276A34BA50669D6BA84F2E1CA2A2954704D81845E4BFE18DBC86A34C9846F8F
SHA-512:	9ED5DEC6FC037393A3B1F5363EFEE5038D80A635E15ED98D34E96893BF9EFC4B5C67EC372251D0461715574B7760A4456FCE498397743D9C7D287D88DD2A5DD5
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	downloaded
Size (bytes):	515961
Entropy (8bit):	7.989069386104248
Encrypted:	false
SSDEEP:	12288:GLVa4vLI35/2s6jpc12eSOgWLWtNCzIEB9BaXmNdILr2z0Fg8UQ5eyg4:6Tm5u9qg88N0IEB8odXz0er4
MD5:	061F67E056259D7FB48EF7B096D5C699
SHA1:	23163981CAD7E8BE8D5B8CBEFEE30BD37F7DC690
SHA-256:	064B9FACFE2586AF98430567BD49A172E2AFDA6B178A816CFA0086CB7EF0994E
SHA-512:	E7EA72C710FB1DF36255616115EA047153FFCDBF010027A66C59F77D327EB3646B8688A31DEAFBEE5DA371B888BBD7E6A5B120285C5C5F40B61CE097AC56EE24
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg4.jpg
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE............................................................................................^..G,..l..e..[...M.Y+.LA...Z.m-,W[K..2\..[...c...U.\........+CV.j.EL..r.-......../x.x.G.;...."..X@.!.......A H..4C.$..!..@.0...F! .0B0..al....[SD....-...#!".%i..D@)....).lRY)..=Yt...n.R..+.a..X..#T..+.T.4.........6@(.J.f-.... H@,$@ ..d.L.9.......gJ.......+.!^.ev...DDK.%..4EA@T.......${X1.@.. ......X.C+K..d#..V..Kt]...+f.1ad..Q......[....-Vf....,.....k...BA.. ..`...c.........s=U8..^.....id..@.... HH.....!.....%0`.....#.#..$.h6..,...xi\..j.n.....6.....).HE5.JfsX.DD.1a...L...WXK`Q.il]6..K..b(...R#.YD.... B.-.P%.JP.....(.i.-[-$%.DH@($.....1BRV..5...$)...[33S-Jl...K.D.#[!.k.....b.TJDJD......0HB..$B."..54...d0.....b.m.XY.Kt_-.fm...a.Y$...Y...sW....-)..f.h..-(a.S`.[.A...]f....v........s.s.....s...@..P...!$..!....$

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.pollyfill.io/track.php?domain=pollyfill.io&toggle=browserjs&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	922
Entropy (8bit):	5.796686830822569
Encrypted:	false
SSDEEP:	24:D1hpunQWwjx82lY2T32HEVLO19r8yJ3V1z1S8WeGTJUc:JitNn2VYJ3QeWD
MD5:	10AAE7DA08C52A6D244E8D6F805FA6D4
SHA1:	7C55E716418896915EECCA9BF14849FB9ED4333F
SHA-256:	02B7EDA11D39FBE5ED770C98D791936D3CAF3BE5D9A0CEA7877781810619801D
SHA-512:	43352F8ABB91F591DD259AA7FB8CD2EEA3DB2ABED1BF9A647FBAD54A8744A6954917EEBB3CFE67E19F96498508968C3F8151EFC67E198A3866309E3963C208DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:984DEB5C728711E79BF7C5074CB671A9" xmpMM:DocumentID="xmp.did:984DEB5D728711E79BF7C5074CB671A9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:984DEB5A728711E79BF7C5074CB671A9" stRef:documentID="xmp.did:984DEB5B728711E79BF7C5074CB671A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..i.....IDATx.b...?/@........s?8....IEND.B`.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.648751656165808
Encrypted:	false
SSDEEP:	3:qVZqcMsMgs0UL3AE+FoJRx+QVBK3z:qzsgs0HE+2XVBmz
MD5:	E96DDCEB1C305B9AD21EAAE42522C26F
SHA1:	AD08AE39A71ED5BA992B8B5DABC450D046354696
SHA-256:	9221CFEDFC5E03790F46C7890BCA21FCC47C5788D89DAB0AA0799C492B6AE78A
SHA-512:	1CC850F76467645447E9935F4DE13EDE698727B4FB598C7BD36DE2779596D8B5A85CB94B0CF1FB2259AD1D988F1F199E3F4C310DFDC22FCDD378B8E773F0DBD5
Malicious:	false
Reputation:	low
URL:	https://pollyfill.io/favicon.ico
Preview:	<html><body><h1>403 Forbidden</h1>.Request forbidden by administrative rules..</body></html>..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10612
Entropy (8bit):	5.215033939115487
Encrypted:	false
SSDEEP:	192:8OhspKc90krvn4JdjJVfOCL5J55gIwpx4jJxR6iktyEyUtM:NpHJ55sYL0Xa
MD5:	CEC2BB1CECED69D78192A174ABFE2060
SHA1:	BD8CF76E0E870122032A1FFF18A9D2506AA6F9B7
SHA-256:	6E801599D4601CF297A9574A160A8AFF092912B8E9BD25EE6580FAF82543D702
SHA-512:	1E2AB82FB7739E4A19BA6BB4373CDC741C40D6E9965519B3AF88B22878ED9576BA58B97CED6612FC19CBCB876BB8393736D2D783EAE1423EEF1DA2ECCF0B5FE4
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/css/offer_new.css?1718621077
Preview:	@charset "utf-8";./* CSS Document /...gray {. color:#4D4D4D.}..red {. color:#DD0003.}.#errmsg { color:#FF0000; }...divider {. border-bottom:1px dotted #CCC;. height: 20px;.}..ul.payopt {list-style: none; height:70px;}..ul.payopt li { float:left; margin-right:4px}...cardSprite {. width:50px;. height:70px;. display:inline-block;.}..visa {. background:url(/img/sprite_cards.gif);. background-position:0px 0px;.}..master {. background:url(/img/sprite_cards.gif);. background-position:-50px 0px;.}..amex {. background:url(/img/sprite_cards.gif);. background-position:-100px 0px;.}..paypal {. background:url(/img/sprite_cards.gif);. background-position:-150px 0px;.}...bankwire {. background:url(/img/sprite_cards.gif);. background-position:-200px 0px;.}...secSite {. width:70px;. height:70px;. display:inline-block;. background:url(/img/sprite_cards.gif);. background-position:-250px 0px;.}../#content{padding-bottom:0px !important}*/.#content1 {.font-family: "open sans";.color:

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ww38.pollyfill.io/ls.php?t=668411fc&token=f5ed7cd03f8f7432e47ec3c8ee7f751fb67ed50e
Preview:	{"success":true}

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	1955
Entropy (8bit):	5.247461189255852
Encrypted:	false
SSDEEP:	48:4QqumpcdIwmpvYWPiud5kpwkAFx6dkpwEFxOkpwm3FI:dRUcd3IvpaukekAu+eETeKG
MD5:	72D09477AACB30B4A7553B92D6CB42A5
SHA1:	94EC070FF199298D02DFB735302F53C9B93720C1
SHA-256:	8C6F5DAD15C1DAD734CE00FCF749693C8DFA6609DDBF4C8A30D0FE42C2398F62
SHA-512:	C4B23DD4743E2804B085C56400840F7115D726FA3CBE56571A6B8FAAEE27581CC2A872385D95D3560E0438BC37FE22B6228A8BA62EE51924796C00FDCAFF0E4E
Malicious:	false
Reputation:	low
URL:	https://js.hs-scripts.com/4372769.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1719931200000/4372769.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['useV2Wildcard', true]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/4372769/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-4372769",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":4372769,"data-hsjs-env":"prod","data-hsjs-hublet"

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators
Category:	downloaded
Size (bytes):	34240
Entropy (8bit):	5.66430270686102
Encrypted:	false
SSDEEP:	384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y
MD5:	63F9FD621D1FBD53B7C5856E58C11CCD
SHA1:	A46973C2FBDBFEB159E0D717A90F88307E274012
SHA-256:	C6BC28686490ABA34A53AB3B709AFA1FD73C21E60FEB25608B09F23EFE170089
SHA-512:	D4DF433C7368EC078FBC473398A4AB21E6DA20950AC4DB34338623296887DB40320B05B9BDE6130E43D2B55C82B81A56B60BAB0D6A4C97DF54A0CB7A8F09325B
Malicious:	false
Reputation:	low
URL:	https://pollyfill.io/js/fingerprint/iife.min.js
Preview:	/*.. FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com).. * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license... .. This software contains code from open-source projects:.. * MurmurHash3 by Karan Lyons (https://github.com/karanlyons/murmurHash3.js).. */..var FingerprintJS=function(e){"use strict";var n=function(){return n=Object.assign\|\|function(e){for(var n,t=1,r=arguments.length;t<r;t++)for(var o in n=arguments[t])Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o]);return e},n.apply(this,arguments)};function t(e,n,t,r){return new(t\|\|(t=Promise))((function(o,a){function i(e){try{u(r.next(e))}catch(n){a(n)}}function c(e){try{u(r.throw(e))}catch(n){a(n)}}function u(e){var n;e.done?o(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(i,c)}u((r=r.apply(e,n\|\|[])).next())}))}function r(e,n){var t,r,o,a,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return a={next:

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1339), with CRLF line terminators
Category:	downloaded
Size (bytes):	34132
Entropy (8bit):	5.138769056980379
Encrypted:	false
SSDEEP:	768:74yP5twsEEBv7WV9ylB0VQPAVPQ0l5rzPwfL8npq/fb0:8Sep+fb0
MD5:	4388194CA25D7020DB6AEF97BE384330
SHA1:	FCD17609D3722848269052DE88FB5585F7D6EFC1
SHA-256:	28E8833941F30721DD2D1571FF4E49704FCD00E71CFD4181CF2EE884F01AA82B
SHA-512:	83E5EA967F70D55379A30C8E5A69E99E9DB619C0719439C1AADBB828B23605CCDEDB38FA263E7AE76BF7F2042746088D206E53066CC5CD8AE272A2625DC3DB41
Malicious:	false
Reputation:	low
URL:	https://www.above.com/css/jquery-ui.css
Preview:	/! jQuery UI - v1.10.3 - 2013-05-03.. http://jqueryui.com..* Includes: jquery.ui.core.css, jquery.ui.accordion.css, jquery.ui.autocomplete.css, jquery.ui.button.css, jquery.ui.datepicker.css, jquery.ui.dialog.css, jquery.ui.menu.css, jquery.ui.progressbar.css, jquery.ui.resizable.css, jquery.ui.selectable.css, jquery.ui.slider.css, jquery.ui.spinner.css, jquery.ui.tabs.css, jquery.ui.tooltip.css..* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureH

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	36564
Entropy (8bit):	5.274871558121385
Encrypted:	false
SSDEEP:	192:n0OW0QYpynb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURH4N/v:yYpynb/+vaW1e071F5fyBELDS25ulak
MD5:	3BFC176D69C2B71A38C126F18B493C64
SHA1:	3C42763D09FF39C1954EC8B0264D748828F19FD3
SHA-256:	38AB5953A468C8084DB2452A42BDC59A6BE197BAB8DAD4105C040B63186155E9
SHA-512:	A7D1B472D7351C28AAF76DD1F4D203BD49CCF823FCE4C0A978C355F82FE811AD2B604ED1FBCF28D59FCDB2C15F3A3F940B63D65BA53F3C34327F01BE90EAC980
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.12.0/themes/smoothness/jquery-ui.css
Preview:	/! jQuery UI - v1.12.0 - 2016-07-08. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=9

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64667)
Category:	downloaded
Size (bytes):	69177
Entropy (8bit):	5.300095999433197
Encrypted:	false
SSDEEP:	1536:QFx9kTUaEMs2VcnZXPNtWulscVDXflllzlIgEXBjXl1CoEFfOpDw6usi5T/rWPWh:QNDlHlzlIgEXBFFe
MD5:	A4DBC3CBEEB23EC024A464535749FF37
SHA1:	695805A9E437BBA46AEA1D1BA93F5C1C38A03AE6
SHA-256:	73EC137455E793570DFC0EA3092A37DD5217961D83FD8138980EA25F55E41CCF
SHA-512:	A0AE5D61D2E10F4CD813FBF209CD5E498395A2F6CE8D4CD0B2D974866E6DBE23053D787C9CF972D73DB234917FF46732858678EAD6BCA5108EC478559911B1C4
Malicious:	false
Reputation:	low
URL:	https://js.hs-analytics.net/analytics/1719931200000/4372769.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.671. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];.var _paq = _paq \|\| [];._hsq.push(['setTrackingGate', 'AnalyticsTracking:CleanCookies']);._hsq.push(['setPortalId', 4372769]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '192322805']);._hsq.push(['addHashedCookieDomain', '243576986']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/4372769.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ **/ (function() {.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.us

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
URL:	http://c.parkingcrew.net/scripts/sale_form.js
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 62 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2329
Entropy (8bit):	7.475153241452789
Encrypted:	false
SSDEEP:	48:PitvnLNh7J0J3W+QY3Sdlsai+qmDeeo0/q97KtnuA:YHJPZflsaRxeeHqBG5
MD5:	9CEA6CE8FAF882D027859402AC5330BF
SHA1:	751BFCC5D12922F2ECDBD73E66917E3A907D1540
SHA-256:	4AA3C13048E3198EF592D8C49D0E11A4051CAB070A68D107129E28AEA2E8F433
SHA-512:	2134EAA9A19124F3A08B6910254252012C7FBA5DDED88D2E976B7B7CC96DD3DFCACD043C7E7A86731A82F11F8DEED98C4863DF059A22966955AD68AEE2E13B18
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...>...$............tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:AB87B1EE734111E7B6FCE3AA1694832A" xmpMM:InstanceID="xmp.iid:AB87B1ED734111E7B6FCE3AA1694832A" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.l.....KIDATx..{h.U..w.......[.M.3.Y.R....*j.t.....

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4799)
Category:	downloaded
Size (bytes):	4910
Entropy (8bit):	5.298674364467997
Encrypted:	false
SSDEEP:	96:hrFpr9gY7wGxzvvEqlKL/fVQpg89u3zog:hrrrqKwwvllWNzog
MD5:	829ABBBB8E5657A57FEEB1638C9DE770
SHA1:	55536627A01886BE6C3E2F5CE1D54683AD95C540
SHA-256:	34EE4A5F5E711F4770173073D9ABC75B35B909DDD8B774183A55BFB02BBF1FC8
SHA-512:	00854508F79868825587496052974AC90FC812363307136031D6A067E5CCB9495AEF4AE9BF8C319F188766ADF71BA126BB7BF08F40F042EB85F1C758456F44BB
Malicious:	false
Reputation:	low
URL:	https://www.above.com/js/lity.min.js?1705557556
Preview:	/! Lity - v1.6.6 - 2016-04-22. http://sorgalla.com/lity/.* Copyright (c) 2016 Jan Sorgalla; Licensed MIT */.!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(c){return b(a,c)}):"object"==typeof module&&"object"==typeof module.exports?module.exports=b(a,require("jquery")):a.lity=b(a,a.jQuery\|\|a.Zepto)}("undefined"!=typeof window?window:this,function(a,b){"use strict";function c(){o[p>0?"addClass":"removeClass"]("lity-active")}function d(a){var c=b.Deferred();return w?(a.one(w,c.resolve),setTimeout(c.resolve,500)):c.resolve(),c.promise()}function e(a,c,d){if(1===arguments.length)return b.extend({},a);if("string"==typeof c){if("undefined"==typeof d)return"undefined"==typeof a[c]?null:a[c];a[c]=d}else b.extend(a,c);return this}function f(a){for(var b,c=decodeURI(a).split("&"),d={},e=0,f=c.length;f>e;e++)c[e]&&(b=c[e].split("="),d[b[0]]=b[1]);return d}function g(a,c){return a+(a.indexOf("?")>-1?"&":"?")+b.param(c)}function h(a){return b('<span class="lity-err

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2680), with no line terminators
Category:	downloaded
Size (bytes):	2680
Entropy (8bit):	5.858338907029435
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08zPA7Isl7lMMltG9scQhb6:aJd6SUtJfNrVlCWWWdtqjZnPAvTEE2
MD5:	552D06101D67780EE054B5BDC7136F9F
SHA1:	56D6E97A0B2C4B42CE2A57AEF9AD0E2BE81F7FA3
SHA-256:	676D2F5E6F3FA208B476B92F2474B311EEB7FA0145F0ED1D86BCF52F7B92B2EF
SHA-512:	BAECD28431FF6611A1065C68C484CFA4C3D49F2AAF5DA77C71C51B35B86B0FFCD94DF44A4A36E5DB8C064DD1FA939E8CF8DC030FD538383BAFFE6411FA7D95E9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/318991084/?random=1719931424565&cv=11&fst=1719931424565&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7085), with CRLF line terminators
Category:	downloaded
Size (bytes):	7200
Entropy (8bit):	5.225040554629268
Encrypted:	false
SSDEEP:	96:tBnSz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:znSzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	512B871A2830E44259BC3CE3343AFCD0
SHA1:	875BCE76A77590C3C438BBC6E014B39C23C8C88D
SHA-256:	C4D24F6B27CC7CEEA56FBEC786BB1F486FDAD9A1F998F760F76D1F44671E105C
SHA-512:	7C31817254B71D4CAC10120AA2829614311658E468036D27EB43B063B392620C4611EC3DB3B3600DA3E48FB82A41C5579C048FBD9022156F038B2B6CB5D946B5
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/jquery-migrate-1.2.1.min.js?1705557557
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /..jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHo

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10779), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33733
Entropy (8bit):	5.816705451406041
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYAhc91Okoi9F2hlpCbfyCeLt9MemdiGP/bcq:C8Cg3d9ro4FvUhwZP/bcq
MD5:	EE5F5631705F0BF88B21160698D373E3
SHA1:	FB58603ED4A2BF81D722F584CBBE791B9812ADF4
SHA-256:	163184712F3BDEF99AA145344D3BBF19AEC2E6544F1CEA57E1233BA6D8F26CF8
SHA-512:	C52AA37A80BB441E1B6A4FD6C47E8369454F8399EC7E96A99D5A387A44DFC7C589C1AEA029D037CDF23372D24CF08EAAFEEE275C78A7A405CBEBB506A1213712
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=22768961&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65364)
Category:	downloaded
Size (bytes):	688610
Entropy (8bit):	4.919567135036735
Encrypted:	false
SSDEEP:	6144:BbezK+f1M3FVE4x/6U7PJvJHU1VF/R56WzeHE7NKQeC7EKSH07rKL9o7NK0i7TJB:xezKmWrE6/CVZG
MD5:	6ED82EDFD850ADB009574CA5CB007E96
SHA1:	E389505680D0C9E5ED99A31731C3407F9BD5C0CB
SHA-256:	01A3066991F4AF85D35AAA0068AA00054F9762F39C263853F49518D5F9784C4B
SHA-512:	643BDCDBD07E14098E6EAE56359C865BFCB8863B9515B54FA12C5F833097128102F3C7B4DC63DB0FECB8CF2D1E33CA4A528B938AE7B9227AE0C9B609570F9ABB
Malicious:	false
Reputation:	low
URL:	https://ka-p.fontawesome.com/releases/v6.5.2/css/pro.min.css?token=61d644614c
Preview:	/!. Font Awesome Pro 6.5.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2024 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Pro");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-duotone,.fa-light,.fa-regular,.fa-sharp,.fa-sharp-solid,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fasl,.fasr,.fass,.fast,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fal,.far,.fas,.fat{font-family:"Font Awesome 6 Pro"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-classic.fa-duotone,.fa-duotone,.fad{font-family:"Font Awesome 6 Duotone"}.fa-sharp,.fasl,.fasr,.fass,.fast{font-family:"Font Awesome 6 Sharp"}.fa-sharp,.fass{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-siz

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4467)
Category:	downloaded
Size (bytes):	249604
Entropy (8bit):	5.5675911488365335
Encrypted:	false
SSDEEP:	3072:JavJY1VdZLr2hfb700mspPCCYCW/R1r4DzHBmIvaYnuzWyW+YZDOp5lWB:J1Vd9rG1DzHBmIvaYnuzWyW+1pC
MD5:	A1D274A190A78370C369461ADFB5A872
SHA1:	4B0559B4CCA01D1098AA6F320E24F950F712BFC8
SHA-256:	2351144615B9E1F817FBE80A5E053DEED064A2B738247A65C32846B3CEAC5DDA
SHA-512:	0769BC834FA12BAF071741F70E05836B06F6AC79446462F01EB4B9914515C93D7D59607E1315C1C3C422134AF60DF75ED9D08D26D03AA38A63D164A4CDB1FB96
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KKGWZHB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-62880640-4","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__c","vtp_value":"ContactUs"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"CompleteRegistration"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__c","vtp_value":"ClicktoCall"},{"functio

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.pollyfill.io/track.php?domain=pollyfill.io&caf=1&toggle=answercheck&answer=yes&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27250)
Category:	downloaded
Size (bytes):	27422
Entropy (8bit):	4.849647614614947
Encrypted:	false
SSDEEP:	192:VP2xxbl74K9YUpfPHH5PNjbp8S1cZQRG1B8tzmePAMRMJV68NzQAmnRt:Qd74K9YIZPNjR1FRG1WPAMUNNzQAmnRt
MD5:	0E69A46FDC15BF505BD110574879FA16
SHA1:	75967FF3C4B125976D4E1B2773C86A9A5D191ECA
SHA-256:	1F3387F11826BE4923A2D3A8C1542780ABD6D4C66CE13F2DE770F2E386989593
SHA-512:	BFD02B53F5101A27DEA3E54C1CD8961CFA0A61E834E09365E238B11EEBB3E2498AB0FD123FD259E707DB9B033BABF74D19CD15D4BF5356E0B39E2CE2EF54AD57
Malicious:	false
Reputation:	low
URL:	https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-shims.min.css?token=61d644614c
Preview:	/!. Font Awesome Pro 6.5.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2024 Fonticons, Inc.. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Pro";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	78386
Entropy (8bit):	5.175440185574192
Encrypted:	false
SSDEEP:	1536:9KldyyCkeMzBoqLntIlejkMGMURUr/Aad3LSr+7IF4pDU:uB5nS2DAa9+5Wq
MD5:	39DB25CE7C11876DBD0C5FB8590B5D0D
SHA1:	129DCFC2D973867B1745FFF4E4FAC2EA8108DF93
SHA-256:	4304204147A73B443D0C498057AF2A96A839B0827B1B4CB7418B47464B32159A
SHA-512:	47690B318968D57B4FC00A68B77DE67D250D4BB40B0FA9E243CB03B047D1DB7F3A34D014129E265405774B9188A748F7C259FC386DDC9959B2F1B85FF29FAD89
Malicious:	false
Reputation:	low
URL:	https://www.above.com/css/marketplace.css?1718186410
Preview:	/***********************************************...marketplace.css..this css file includes all the classes of..above.com/markeplace home & internal pages...***********************************************/..html {overflow-y: scroll;}...mpcontentbg{padding:110px 15px 50px 15px;/overflow:auto/}..mpcontentDiv{margin:auto;width:1280px;min-width:1280px;min-height:500px;font-size:15px;line-height: 1.50;}..#contentinMp a:link {color:#127EE1; text-decoration: none ; }.#contentinMp a:visited {color:#127EE1; text-decoration: none ;}.#contentinMp a:hover {color:#127EE1;text-decoration: underline;}../ buttons style */...button_style2{font-family:arial;font-size:12px;color:#aaaaaa;cursor:pointer;padding:0px 8px 0px 8px;background: url('/marketplace/img/btn_bg_disable.gif') repeat-x;border-radius:4px;-moz-border-radius:3px;border:1px solid #cccccc;height:24px;-webkit-appearance: none;}..button_style2:hover{background: url('/marketplace/img/btn_bg_disable.gif') repeat-x;}...button_style3 {back

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1698, components 3
Category:	dropped
Size (bytes):	224053
Entropy (8bit):	7.978673276646189
Encrypted:	false
SSDEEP:	6144:v0DVWTeuMyJ69hVm/kSNrHnCOBdQLB0zvnrntiMGiW9:v0ReMyJljCSdZvrnEMGR
MD5:	B6F37AFCE57D9A9955BD072E44A7CDDC
SHA1:	D764AC842FE203453365BB93AD6813C7660493C8
SHA-256:	95EEA6743A6B2FFF58D0CEBE7BE2F737093CAA053475FD2943F00BAA69A260E6
SHA-512:	DD00068B10BE9665A72411569F6159211C1CE99445E474C3BE8A96A17EFC3C5EC718909DADA5657220ECEC241106FC38F484C460841911A0F83DEFCFC2CACB49
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................!....'#))'#&%,1?5,.;/%&6J7;ACFGF4MRLDR?EFC...C....... .. C-&-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC..........."................................................................................?g...@.`...A..H0............0h.. ..0....`.0`..."`.M....A..F.6.Rr.p0Pd.!...J..o5Zr.D."Q.WSSn..i...Nj.k:.jn.j.^uU54.jWR...sSUSx........Zh..VuU..qY.)Qn.n.I.......X..YD.$.\..Y...RkRP.T...."u.Z.P.......D.".I..N5.u.5......Z.SS`.e.%5r.U#HM..Y#V%J.h.,I.CJ.....P.&...4 ..Bi@..@.4.i@...J...............@...h.-@h.Bj....Rh.c.d.... ..h.....M...i.......i....i.0......hF.0......0..`...4.....c..U...M..f.p4......]K.u.j.k:.....]K.w...55M<..h..r.......v..T...Nj..+h[..:..t.YB%..-.qm..%.I. .H.E.H...\..........H.....%..r...5...-\.sr..fPk...&.nfn5.......4&...!. j.4.2.j.jhM ...BiI. -... ....#V..M(....!.........RY........0@..&.....&.4.j...h&..h.n.8`.....4i..........c........d........"i....4.d...A..0.A.0...O&..r....+j.m9X.Br.0a(......4gUQr.O;..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6180)
Category:	downloaded
Size (bytes):	6291
Entropy (8bit):	5.385775361243276
Encrypted:	false
SSDEEP:	96:u8nR+xSW/ksk6n15/AgxUaV4Xi4cLAUd9fz6TgXsdBt3xjDEYrLo:pA4W/kL6L/AOUk4GLxz6TIsjEYrc
MD5:	B233EA75981268A81228CD819E8FD5EB
SHA1:	6297B5453C90C5C35EFE4B813754CD09C0D97C65
SHA-256:	C114A5641B9988AECB7A00C47BD1D37D912883FF4EF9C3B9FE6AD21603AB1066
SHA-512:	85689FC4A4C41DC0D1F33CFDD613AAA814D14F901508EFBE35DAD56E47D214BA3EEDA046F168B6DEEE78FCF17B0998B56FC8C76641A9EE2CFA58C7ED40235341
Malicious:	false
Reputation:	low
URL:	https://js.hsadspixel.net/fb.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.809/bundle.production.js",ids:{}}];t.dlbpr=function(e,n){var i=o[e];if(!i.r){i.r=window["__webpack_require_"+i.name+"__"];if(!i.r)throw new Error("dlb "+i.name+" not loaded");i.r.linkDlb(t,i.ids)}return i.r(n)};t.m=e;t.c=n;t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})};t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};t.t=function(e,n){1&n&&(e=t(e));if(8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);t.r(o);Object.defineProperty(o,"default",{enumerable:!0,value:e});if(2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o};t.n=f

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2144
Entropy (8bit):	7.415756966502314
Encrypted:	false
SSDEEP:	48:yLitvnLy20J3WORQCAPmuQa6TEw4PYh1nnzQz/ahjm:j/P2QmuwIdghhna/aY
MD5:	76380908D6615E4960997AFEBBD115DA
SHA1:	E8EDE45332D84AAFE5DE75DAABAB2599850CCF6D
SHA-256:	F72A8C84C96387E0CB63FE4FE149EC32B6887B5C274CF99D2AB63EB5C8788ECD
SHA-512:	D1C1E89F32970603D487DC896AAD62D9F455683FCF349EA52B58952CCC135FF97EFE1587DAD872D9C86864BA93F2E3CFC425E172D9C49C5B92C965E795DC651B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G...$.......'.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:92B60302734111E7A5EFC3B151F2C723" xmpMM:InstanceID="xmp.iid:92B60301734111E7A5EFC3B151F2C723" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d..{....IDATx..{l.g.....'...V3.!.P..!..*.f..F.$..a..

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (399), with no line terminators
Category:	downloaded
Size (bytes):	399
Entropy (8bit):	4.784464577653341
Encrypted:	false
SSDEEP:	6:RVNY0FGvL2gNukVNY0F+rGLivL2gNukVNY0F9SvvL2gNukVNY0F+SvL2gf:m0wtO0NetO04tO0Dtf
MD5:	40690C4C377764D3AF0102F05D5D1BDF
SHA1:	D1EEA36DE79FF939C315CA3885791EB01D88A0B4
SHA-256:	C7609E41CD656F1E5832369A5A70D8FBA4237E3CE6230C71D257F84CBFEB4FA9
SHA-512:	381670870F12003BD366B83C6E97F51475E91D0E5F53194694AB96A3391B6A097ACE9E8BD1B0857CAFFB2F833EC3045D85F1C28BF9684F3F5299B8F7C9A829D0
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/61d644614c.css
Preview:	@import url(https://ka-p.fontawesome.com/releases/v6.5.2/css/pro.min.css?token=61d644614c);@import url(https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-shims.min.css?token=61d644614c);@import url(https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v5-font-face.min.css?token=61d644614c);@import url(https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v4-font-face.min.css?token=61d644614c);

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	5.173684952385118
Encrypted:	false
SSDEEP:	24:cdsKNVvPCwkrGFAFybrPXvMXc7RdoFynaYJ36nGTwdnOCDkMxifu+T:cecTKybrPXkWRkyx0dnjDPxifu+T
MD5:	9818BAD86BDC1C35CFBDFB0D088FD098
SHA1:	DBC0C06ACA5F55B1B008F4A8E21973325C83B0D7
SHA-256:	3DD78B39432617BB7636B0243ACF2141B76A03055D1B9AFAF6ECDEA05FA51A5A
SHA-512:	639E2A5D591374F672F9ED80C555213CD2418AA4496425098AD4A5DC7D4B2A0F10FE607003E507108E2F6EC7F431B4C7076101940C49769859DB337CF2E51503
Malicious:	false
Reputation:	low
URL:	https://pollyfill.io/
Preview:	<html>.<head>.<title>pollyfill.io</title>.<script type="text/javascript" src="/js/fingerprint/iife.min.js"></script>.<script type="text/javascript">.var redirect_link = 'http://pollyfill.io/?';..// Set a timeout of 300 microseconds to execute a redirect if the fingerprint promise fails for some reason.function fallbackRedirect() {..window.location.replace(redirect_link+'fp=-7');.}..try {..const rdrTimeout = setTimeout(fallbackRedirect, 300);..var fpPromise = FingerprintJS.load({monitoring: false});..fpPromise....then(fp => fp.get())....then(....result => { .....var fprt = 'fp='+result.visitorId;.....clearTimeout(rdrTimeout);.....window.location.replace(redirect_link+fprt);...});.} catch(err) {..fallbackRedirect();.}..</script>.<style> body { background:#101c36 } </style>.</head>.<body bgcolor="#ffffff" text="#000000">.<div style='display: none;'><a href='http://pollyfill.io/?fp=-3'>Click here to enter</a></div>.<noscript><meta http-equiv="refresh" content="0; URL=http://pollyfill.io/?f

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	4.745940648925481
Encrypted:	false
SSDEEP:	12:ArzA/RzvXlMU1MUHMUPuioMUJWpsUMl2MlfDYApsbAXZMoXZsAVHsAMIOaHXWAMd:kzoz1MU1MUHMUPu7MUOsUMQMNzs8XOo0
MD5:	03365FBAE3BE54A4C49FBD804F21E87F
SHA1:	DF7B8A06766F5284C693E9763F8D8AF83066355D
SHA-256:	BE67D87CA5A2C45DD4D4448A03FBFE56B32BF6EC06310874319C15C52B544309
SHA-512:	98A70759315334A525C71C8A52D91A408063CAD72A021ED91FDD855B5F1AF0E48385442695D3F62F9AF283D0B2B9C0A4A7B69A9BA6C53015C2A582405BCD3FD5
Malicious:	false
Reputation:	low
URL:	https://www.above.com/js/email_check.js?1705557556
Preview:	function email_check(str) {....var at="@"...var dot="."...var lat=str.indexOf(at)...var lstr=str.length...var ldot=str.lastIndexOf(dot)....if (str.indexOf(at)==-1 \|\| str.indexOf(at)==0 \|\| str.indexOf(at)+1==lstr \|\| str.indexOf(at,(lat+1))!=-1){... return false...}....if (str.indexOf(dot)==-1 \|\| str.indexOf(dot)==0 \|\| ldot+1 == lstr){... return false...}.... if (str.substring(lat-1,lat)==dot \|\| str.substring(lat+1,lat+2)==dot){... return false... }.... if (str.indexOf(dot,(lat+2))==-1){... return false... }...... if (str.indexOf(" ")!=-1){... return false... }.. .. return true.......}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.112017425770222
Encrypted:	false
SSDEEP:	48:j2X4UtzykpBJK76kDfFONwtKShwe3dCm5QuKBZfiBPym/93EUu1sZljxmNT8Qis/:jwtm0X8dFOdMTBmiBqicsEtu5NZk/
MD5:	3884E25B4E3570F8A23468394A331C94
SHA1:	358AB3C2926D01C603CCA2888BC45025DA813550
SHA-256:	D247EDCB9AF459E71E1CA2033BB417D07A5FC86A6DAC9158578F922D64383E33
SHA-512:	7F12FB8CCF4BCC5535987C9C0AD35D52FF5FAA458F76310A4ABC75905BB3F8635E3CD8E7AFAAB6B0B501FE9026038043B7E8AB55DB37FB5B652F447A39979006
Malicious:	false
Reputation:	low
URL:	https://www.above.com/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.............................................,...~...................................................................................................................................~...,.......................................................................................................................................................................................................................................1...................................................................................................................................................................1.......................1...........................................................................................................................................................................1..................................................................................................................................................

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51460)
Category:	downloaded
Size (bytes):	51632
Entropy (8bit):	4.862779687727462
Encrypted:	false
SSDEEP:	768:JW3/uTUXL7HwGd/JTl7H4DS/cT87HMwnol8//5/vA9sBI7HUVFdSPC0:JWWi7HwcJ7H4DI7HMe/IUI7HUVFdT0
MD5:	5716B7AE4E79FEF1E4C18B21FD6E16D5
SHA1:	80EC06D38C41437404AC557690BFA2C685A2AE0C
SHA-256:	1580A6A19CB081A84215F13B42F765469BEB87D7401F16349760CD067FC4DA71
SHA-512:	9C853848DB8A52CA28F5415A282D63D70E5CDDAED030A0F192E4985D655F697A950E6BF7349640F086AB36AD1D3FD2D959138719EE13D737143E470E6035AFCD
Malicious:	false
Reputation:	low
URL:	https://ka-p.fontawesome.com/releases/v6.5.2/css/pro-v5-font-face.min.css?token=61d644614c
Preview:	/!. Font Awesome Pro 6.5.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2024 Fonticons, Inc.. */@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(../webfonts/pro-fa-brands-400-0.woff2) format("woff2"),url(../webfonts/pro-fa-brands-400-0.ttf) format("truetype");unicode-range:u+e007,u+e013,u+e01a,u+e01e,u+e049,u+e052,u+e055-e057,u+e077-e084,u+e087-e088,u+f081-f082,u+f08c,u+f092,u+f099-f09b,u+f0d2-f0d5,u+f0e1,u+f113,u+f136,u+f13b-f13c,u+f15a,u+f167-f169,u+f16b-f16e,u+f170-f171,u+f173-f174,u+f179-f17e,u+f180-f181,u+f184,u+f189-f18d,u+f194,u+f198,u+f19a-f19b,u+f19e,u+f1a0-f1a9,u+f1b4,u+f1bc,u+f1be,u+f1e8,u+f1ed,u+f1f0-f1f1,u+f20e,u+f210,u+f213-f214,u+f232,u+f23a,u+f26b,u+f270,u+f288,u+f299,u+f2a6,u+f2b0,u+f2c5-f2c6,u+f2e0,u+f368,u+f379,u+f392-f393,u+f39f,u+f3a9,u+f3ab-f3ac,u+f3c0,u+f3c7,u+f3ca,u+f3e2,u+f3eb-f3ec,u+f3ef,u+f3f8,u+f3fe,u+f419,u+f41b,u+f4d5,u+f4e4,u+f4f8-f4f9,u

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 279 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4427
Entropy (8bit):	7.8395193881133896
Encrypted:	false
SSDEEP:	96:q29Kaf1LBGQvQjpvZG4kZg5RuecsReZpCcz9XdA:Dvc5FZGvZg5RuetRebJpy
MD5:	8FC8E52E201D9ACB5BB06AE37EDC1206
SHA1:	29D2C03222EBDB6FC8A57339281CD1DF2D40832D
SHA-256:	0B7E8F59179C93398B409396DEDC6D5F173E1FD8DE15164A7CDAD23A534D2032
SHA-512:	D9CEB05DB0C09BFFF0DF77376A027B1DE36ED322049BD5E43CC052A8D7FCA99B72F26ED967E0CC039EAC63DC09A2386721577015F39B1D49E784FC1ACB00680A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............:......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:488E85DC728511E79BAFCA58D10F6027" xmpMM:DocumentID="xmp.did:488E85DD728511E79BAFCA58D10F6027"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:488E85DA728511E79BAFCA58D10F6027" stRef:documentID="xmp.did:488E85DB728511E79BAFCA58D10F6027"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...)....IDATx..\.pTW.>w.y,!.B[.M.$......5.Z\|VR.L}D.Z+...C.h2c;v....cj..(........%.(..t.y..H6!.<6...........lp...3.${.=

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	111163
Entropy (8bit):	5.26525596929366
Encrypted:	false
SSDEEP:	1536:YEE6FkAb8IFDuIf8eGwRcZMCKmQ0Vf7OzYBZjZr:YEE1AI+GDwa0VsfjZr
MD5:	0F097C9123C4A3FC6CD831FAD3565C78
SHA1:	0C671D3B9B3F1021095DDBEF9276720B68116DF2
SHA-256:	D1967251958E5E4D971B3104C456BBA6ADC868A173E53751D17DB654A1B50E10
SHA-512:	65B592B6FEDF9242BBFB2AAC9FA7AAA09956F8282133B3E3A5F15C07230F61324D2C6540440297C69BCC3BD7BEA9F3F4DC11346B0706D2AA55C92E1E1CB88300
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.261.1.min.js
Preview:	/! For license information please see nr-spa-1.261.1.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.261.1.PROD"]=self["webpackChunk:NRBA-1.261.1.PROD"]\|\|[]).push([[478],{9527:(t,e,i)=>{i.d(e,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i(2838),o=i(2614);class c extends r.J{constructor(t,e,i){super(i),this.endpoint=t,this.opts=e\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),(0,a.Q)(this.unload.bind(this)),this.sharedContext?.ee.on(o.tS.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(t,e){this.interval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.timeoutHandle\|\|(null==t&&(t=this.interval),this.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	311363
Entropy (8bit):	5.570671715954704
Encrypted:	false
SSDEEP:	3072:HmW4lgOZavJY1VVZLQFL0hfoV0kmopPCCYCW/viNSoz/BmIvaoZwgOfvb0VH4:N4fZ1VV9QFLQpLoz/BmIvaoZuvb0VY
MD5:	80857E69ACE0AEA80CE7434F65CB34A7
SHA1:	3668B11879DBB1C287F1ECE839D713487338953F
SHA-256:	355C267F99FDED2CF1E9EE9903BD8D0E05E8D69E68258A91CC9A9B118169CFA0
SHA-512:	A2AF11BF5CFC549FAB5456199A9FCB39F6D722AA9B0E967C2783F1F3BE4BE1A0A9D47AFE2BFF5248B1E20A7A87495F222C9E81E822267A0DAC8CCE4A205B7506
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-DQB7CZVNQD&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":16,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2331
Entropy (8bit):	7.467960012167047
Encrypted:	false
SSDEEP:	48:EitvnLRr0J3WuFC5RakL/HQIH8FniSsvDgqwcWVc/ume0w:PJPuFC6IbcFnDs5wcWgu70w
MD5:	EC613CE41ECA3B5D98706B1912F1C8CA
SHA1:	4555DD8E6280384C6AB10F311075BDB9D0DB38BE
SHA-256:	123E5C1578CCC41F785B8B544C56261BDA8EEF9A0123FD612FC0F7A871DC4A37
SHA-512:	5CA3A93F1F34E38A38A610E62A7BCB89BCFCCCEF71C6E12072420D052E52BC2BE6DD02FB42BC96A4DB924C9CB02AF6891583A2CD05997B6018F742F0D5F8D155
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/salecard5.png
Preview:	.PNG........IHDR...K...$........e....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:9AA0BC73734111E799B087B080700903" xmpMM:InstanceID="xmp.iid:9AA0BC72734111E799B087B080700903" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7......MIDATx..ylTU..g.C....\*.#...(.h.5..L....$jX.B

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	downloaded
Size (bytes):	336200
Entropy (8bit):	7.972363640752049
Encrypted:	false
SSDEEP:	6144:FWAvudBfNqEsNPp2+pwN8DQYLirddrgaxo+4sqQX5BmcHrEHamWZ63Z:FWAvOi5pwN8DhiZSajTtwHU6J
MD5:	2467722028F2B298B49BE94D58274DF8
SHA1:	BEEFD963C3ADF9E69F2FCCCE3F9934034ABC9572
SHA-256:	E162A47DC7E7E64F31081D3A2475CA4F225F2B3FA37E251264E43ACBD0BD31ED
SHA-512:	DE6150F0D305F4222A4A32AF471AB423D34543EE6C107A92EE277495A50DF0023BE28C143B950E074DA96850F8175315B1C604E22DBD15AA678587E4D49CBB21
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg5.jpg
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE................................................................................................9U.J.....Pr..XS...V..H.... ......(...h.. .TR;.:aN.GM.X....X ...J...f ....S9a!a..k1D.. ..4.@..+..Z.k6.....5..P...P.J...W..$r....$@....`.t.%C. .......kA....Y,c...1B..(.J...T0.,...B...hZ.,c................)R%..B........H..T;.Z..i3T..S.+..F.._...c.....T..`...@..+....j.1!N....H....0.bGKPQ..H]4.........,..0....@.I-@..".f3%d.%sY P...`..(...H.@`....X%#.X..@......9Z...)C..!P.$....X.5.....(B..,pj0.!....1+.XQ#.B.BPD.V ..$..9U...@.j.4v4r..c...H(U..".`+.+HJ..B%P...... .J.....`..S..:,c.v..ZR1..O..R..J...#V....H...@F.p..cJ......Z.....#..2..(..........T...0@)......"$D.......X.!ef$.D.(...B...:,......`4.h.kE....X.4...8.b...@...1JH....V9..WB1.......P.6U8J!aFKG.%@...@...P..R...........W@.;.J. Pv........$!,.... ......%p.........hC......\|~

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	downloaded
Size (bytes):	263365
Entropy (8bit):	7.944595318105681
Encrypted:	false
SSDEEP:	6144:gLyEVdc1u13Bx7Pp9bmTPpXOFDeO3TNSMWpuBouDo6b:81M1u1f72TBInT6puBouF
MD5:	C52F0CC6B3DA8079328D9A28D1EFAF58
SHA1:	FD4CCD37876FF8366EEA414C3AA4B3B7FC4B7286
SHA-256:	F6EFFA3BAC6EA4A1BA93246A45F43CFDEDD3C46BE0CAA3C5C2F477C62E70176A
SHA-512:	979E92EA2E2DAA22B075E1373A0F2DD4F5A0797E7F41F510C747005AD5DF5E9537EEAE9571C4E0D6141DB57654C46EB53FA6B812C2862EA07CB2A3A52DC33587
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg6.jpg
Preview:	......JFIF.............C...........................%!'&$!$#).;2),8,#$3F48=?BCB(1HMH@M;AB?...C...........?$??????????????????????????????????????????????????............................................................................................M..Y.(.....E@.Q.."...cR3jU.% .".. Yj...X...).......E...FEIE.AE.....B.%....FB... .i%.....RU..-.J.KV.-.P3n&.h..3r........T(....@............(....P....IH.....!@H.)....A.....T........P....(..@..Q.).JY,Y,......$R..E..Z.%..B.@U..J2.b.l.X...B.U..A..T..%....FT.....)J.H.....Q`..@...h..Z....R.P...R....).B...... ..............@..................... ....(.H.. @.A......PP........P.BX.r.r...P...(...5V......@...R..T.ADYB,XE.T.T.....(.R.. d...,J$.)@.(.....R.e...-,.%F....A..X.P... (...@@.... ..........E.......P............. @........)..P .7.AB...(..E.%....(,...)`U..!.H...*...ed.B.P....T.%..Z%E...((..B...QB..J..DX.....)T....P.X..KU...%.....r.H.D.,X.(...!E@...............HZA-.T.D. P!H................ .$.A..E.D.P....'.@..............(,.E..P..

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	downloaded
Size (bytes):	509948
Entropy (8bit):	7.985138530199581
Encrypted:	false
SSDEEP:	12288:9eAU/viXb/Y1wiMdPqBc13OoOR1pGjsf6qGVscWF0rFLL0o:JU/viXb/YmaBc1+pGCYsFKpnN
MD5:	F8B9FC7190D71DCC388A68D5533A93D0
SHA1:	FAF25D15259AA67EDF31E0C1C12950BA6E6E5A77
SHA-256:	399F8AFE30091CEB4D42C5B6D12730354BE0A9762EE28CDCCBDE0BEEA27FBB33
SHA-512:	5F97CC242AEECD58CF6E0824C4655D556E4EAB3065E0A63E26BEA8F65CF37A5DD77EACA899F26E0EA2EC51CC8308AE3B79887E68DA55DAD1278FE0C2F46A730E
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/img/for-sale-backgrounds/forsalebg2.jpg
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."................................................................................O.(..P...m6.v.uh..%.E,..8.q..!...B..itt.[...U.u..0V.C.T....0j..A....,..z...xRQ...AU.....T./.P.2J..hn.Q5$%C....QBEC..\.Q.%..b..Ff...P...U..h.k.....@.HV`c...(.!F].I..b.....RA....`].+..Y\N.X.w...zk.._..:E.]..0.P.o.b..U.....=B../\..t....\....5u.Ms...u..].z.P.K-.}.0m....i.R.#.$.....Da&..4.fM...T:..mI..;..`vRS...h..E.(..`..$....adhU4F....@.T.e.h...p...EwV..@.5T........^.P...t.X....R].b.=.....sY.E..D..3EMZ..l ....V...z.%...k...9_;F.E...h....H.#Ik.5.....#.L.`.......L.t.K..,A...\.\&Q.#........!......(aQ...&.H.(..H.....M"Y..(..`Y...(.m..h.DJ*bE....B&.....%.@.T:.....ai.v.-..`...%]..L;...AWt9$.PDp,,de\....Pbga@.I..$!..A.uV8...VL]...@..21rk=.r...z.on.....r.j)...bT%..B..tf^.R.........p..6z.=.N.....P. S.MeS........!...p..wRY.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3235), with CRLF line terminators
Category:	downloaded
Size (bytes):	37219
Entropy (8bit):	5.520231620444087
Encrypted:	false
SSDEEP:	768:jpfPubeCfSphzdcsv0s/FyjllqdnYQ2jO/Ea:0RSpvv02ollqdnijO/V
MD5:	EBDAB84EB06767DDB0C8FB406C832DA9
SHA1:	1BEF302C303FCFDC92B7391C724D3533FC0A92E4
SHA-256:	A161F84F77A4DA38E322F2181E1EE6BCA6F7D95AE3EFF6BDDD1BBFDD51F2DAB4
SHA-512:	843267E0D2E2D0103B72C764CF3F5C414C6ED0C5C4127DDED2453A12B94A94AE2D43114AEB3EB20EB9B9B092222D4F7484318C8B909E6A6093FA1E838E20E933
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/overlib_mini.js?1705557557
Preview:	//\/////..//\ overLIB 4.21 - You may not remove or change this notice...//\ Copyright Erik Bosrup 1998-2004. All rights reserved...//\..//\ Contributors are listed on the homepage...//\ This file might be old, always check for the latest version at:..//\ http://www.bosrup.com/web/overlib/..//\..//\ Please read the license agreement (available through the link above)..//\ before using overLIB. Direct any licensing questions to erik@bosrup.com...//\..//\ Do not sell this as your own work or remove this copyright notice. ..//\ For full details on copying or changing this script please read the..//\ license agreement at the link above. Please give credit on sites that..//\ use overLIB and submit changes of the script so other people can use..//\ them as well...//\/////..//\ THIS IS A VERY MODIFIED VERSION. DO NOT EDIT OR PUBLISH. GET THE ORIGINAL!..var olLoaded=0,pmStart=10000000,pmUpper=10001000,pmCount=pmStart+1,pmt='',pms=new Array(),olInfo=new Info('4.21',1),FREPLACE=0,FBE

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2331
Entropy (8bit):	7.467960012167047
Encrypted:	false
SSDEEP:	48:EitvnLRr0J3WuFC5RakL/HQIH8FniSsvDgqwcWVc/ume0w:PJPuFC6IbcFnDs5wcWgu70w
MD5:	EC613CE41ECA3B5D98706B1912F1C8CA
SHA1:	4555DD8E6280384C6AB10F311075BDB9D0DB38BE
SHA-256:	123E5C1578CCC41F785B8B544C56261BDA8EEF9A0123FD612FC0F7A871DC4A37
SHA-512:	5CA3A93F1F34E38A38A610E62A7BCB89BCFCCCEF71C6E12072420D052E52BC2BE6DD02FB42BC96A4DB924C9CB02AF6891583A2CD05997B6018F742F0D5F8D155
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...$........e....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:9AA0BC73734111E799B087B080700903" xmpMM:InstanceID="xmp.iid:9AA0BC72734111E799B087B080700903" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7......MIDATx..ylTU..g.C....\*.#...(.h.5..L....$jX.B

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	115
Entropy (8bit):	4.906032249668358
Encrypted:	false
SSDEEP:	3:YVMCXI5s+YVMdTWWUVPBwWFLXZfTJSkmKFLNoWYY:YLzzoUV5wALXZfTzmKrofY
MD5:	AD959A2F1667D84C5CE17284370579BF
SHA1:	E5328E5B2F7E498E1E69C7EECC1FE20D280FCBD8
SHA-256:	2E28D7D0B7FB2980DBDA3FCADF3E4ECEBAAA90CFF223D6242BDF726394CDAA60
SHA-512:	C34D3DD358B6F432C0CCAD13BFEE812EE470A3DA9CB082DA57BA956EA218E330DBD6C2884B18B3BC86EBBC1E6E2D4AC881C5BC4A17CF2E7709F29C7AA706DBF6
Malicious:	false
Reputation:	low
Preview:	{"pixels":{"ADWORDS":[{"pixelId":"318991084","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	dropped
Size (bytes):	515961
Entropy (8bit):	7.989069386104248
Encrypted:	false
SSDEEP:	12288:GLVa4vLI35/2s6jpc12eSOgWLWtNCzIEB9BaXmNdILr2z0Fg8UQ5eyg4:6Tm5u9qg88N0IEB8odXz0er4
MD5:	061F67E056259D7FB48EF7B096D5C699
SHA1:	23163981CAD7E8BE8D5B8CBEFEE30BD37F7DC690
SHA-256:	064B9FACFE2586AF98430567BD49A172E2AFDA6B178A816CFA0086CB7EF0994E
SHA-512:	E7EA72C710FB1DF36255616115EA047153FFCDBF010027A66C59F77D327EB3646B8688A31DEAFBEE5DA371B888BBD7E6A5B120285C5C5F40B61CE097AC56EE24
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE............................................................................................^..G,..l..e..[...M.Y+.LA...Z.m-,W[K..2\..[...c...U.\........+CV.j.EL..r.-......../x.x.G.;...."..X@.!.......A H..4C.$..!..@.0...F! .0B0..al....[SD....-...#!".%i..D@)....).lRY)..=Yt...n.R..+.a..X..#T..+.T.4.........6@(.J.f-.... H@,$@ ..d.L.9.......gJ.......+.!^.ev...DDK.%..4EA@T.......${X1.@.. ......X.C+K..d#..V..Kt]...+f.1ad..Q......[....-Vf....,.....k...BA.. ..`...c.........s=U8..^.....id..@.... HH.....!.....%0`.....#.#..$.h6..,...xi\..j.n.....6.....).HE5.JfsX.DD.1a...L...WXK`Q.il]6..K..b(...R#.YD.... B.-.P%.JP.....(.i.-[-$%.DH@($.....1BRV..5...$)...[33S-Jl...K.D.#[!.k.....b.TJDJD......0HB..$B."..54...d0.....b.m.XY.Kt_-.fm...a.Y$...Y...sW....-)..f.h..-(a.S`.[.A...]f....v........s.s.....s...@..P...!$..!....$

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	115
Entropy (8bit):	4.906032249668358
Encrypted:	false
SSDEEP:	3:YVMCXI5s+YVMdTWWUVPBwWFLXZfTJSkmKFLNoWYY:YLzzoUV5wALXZfTzmKrofY
MD5:	AD959A2F1667D84C5CE17284370579BF
SHA1:	E5328E5B2F7E498E1E69C7EECC1FE20D280FCBD8
SHA-256:	2E28D7D0B7FB2980DBDA3FCADF3E4ECEBAAA90CFF223D6242BDF726394CDAA60
SHA-512:	C34D3DD358B6F432C0CCAD13BFEE812EE470A3DA9CB082DA57BA956EA218E330DBD6C2884B18B3BC86EBBC1E6E2D4AC881C5BC4A17CF2E7709F29C7AA706DBF6
Malicious:	false
Reputation:	low
URL:	https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=4372769
Preview:	{"pixels":{"ADWORDS":[{"pixelId":"318991084","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688
Preview:	<html></html>

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	4.137675479518442
Encrypted:	false
SSDEEP:	192:9iM4pa7W7FuSBWCe4SByTdPd588KtnCnUaCOxzMB0p9o:tWpHlxfnWO0D
MD5:	21B6549EA38B9EF14E93E9A547B4FBA9
SHA1:	D8FA578C31C3BBC842251F05D65F36682D8B353F
SHA-256:	44CCCEB9930F4BDB377EAC732129F35AB8F413C779F0EB684310B93CBB19017E
SHA-512:	79710E7F3FC9E5C2DFB93A19D95BBF1A478B7EC7B20AFB79C03CA5A6BADBAF2042FDE15518D3D8E3674287B713F7D8DA4C949E31791900204E9DDA5DA536FCFD
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/tipsy.jquery.js?1705557557
Preview:	// JavaScript Document.// tipsy, facebook style tooltips for jquery.// version 1.0.0a.// (c) 2008-2010 jason frame [jason@onehackoranother.com].// released under the MIT license..(function($) {. . function fixTitle($ele) {. if ($ele.attr('title') \|\| typeof($ele.attr('original-title')) != 'string') {. $ele.attr('original-title', $ele.attr('title') \|\| '').removeAttr('title');. }. }. . function Tipsy(element, options) {. this.$element = $(element);. this.options = options;. this.enabled = true;. fixTitle(this.$element);. }. . Tipsy.prototype = {. show: function() {. var title = this.getTitle();. if (title && this.enabled) {. var $tip = this.tip();. . $tip.find('.tipsy-inner')[this.options.html ? 'html' : 'text'](title);. $tip[0].className = 'tipsy'; // reset classname in case of dynamic gravity. $tip.remove().c

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (497), with CRLF line terminators
Category:	downloaded
Size (bytes):	63683
Entropy (8bit):	5.277607426598875
Encrypted:	false
SSDEEP:	1536:68f57gXbZlZnIINeLL4WxBZMKqkJaCVn7l:pxBZMKq0
MD5:	71A9F640AC87069AA8C9F51BDD43A633
SHA1:	814EA30AA3C7C3E562CE039C9226114168C6B2D5
SHA-256:	4FB7419767EA26388B5DC69FE9ABDABB02598724C228E86FA8C5C8F0FAE1C419
SHA-512:	92808B058DD6DA0C88F6EDC1B1922512249F4A92057101E6D942904EF1AB4C97EBBC7930D01030EF6F8DF771D4B6422FE5A39AEB39A84118C8376156A35E5CE3
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/auction.js?1709635027
Preview:	//function added for get stats data..var tab_to_show="";..function get_summary_data(graph_mode,domain_id,domain_name,user_id,type,job_id,from_date,to_date,portfolio_id){...var reported_flag.=document.getElementById('reported_flag').value;...var revenue_flag.=document.getElementById('revenue_flag').value;...var hits=unique=reported='';...var obj_display_rec.=document.getElementById('display_rec');...var days..=document.getElementById('displayday').value;.. var data_type="json";.. if (graph_mode == "summary") {.. data_type="text".. }......document.getElementById('displaychart').value=graph_mode;....if(obj_display_rec !== null){....if(graph_mode != 'summary')....{.....obj_display_rec.style.display='none';....}....else....{.....obj_display_rec.style.display='';....}...}......if(graph_mode == 'traffic'){....var obj_trafic = document.getElementById('traffic_graph_legend');....if(document.getElementById('ahit').checked)....{.....hits='on';....}....else{hits='off';}....if(docum

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11759
Entropy (8bit):	5.275725207058518
Encrypted:	false
SSDEEP:	192:wcSgd4Erffgd41rffgd4qfhJBirJ7d4VS/3f0qhd4N3f0qhd4hrqJ239DxB:Zd4EbYd41bYd4qM97d42PJd4NPJd4ntr
MD5:	44AC8089F992D6F1A906BA7C5E09D756
SHA1:	2F3527866E59951180997E26B4CDE7C5E78BDF33
SHA-256:	C6E0970E64CE8C2DBC0756D1F7DAD29ADB6ACA546D7E81FBB3FBF0A6F7F72096
SHA-512:	EC2084D9301C6BC19F5718CAAE5FC2F8AF8A5ED94986216DC345FB54A632EE4DBD0780955A1244832A3EBECBE26725ACAA20E6E0FF4302C1AD7AD71762F1747A
Malicious:	false
Reputation:	low
URL:	https://www.above.com/marketplace/javascript/validations.js?1705557557
Preview:	/.. File :- validations.js.. * Purpose :- File contains all validation used for validating bids input from various interfaces.. * Creator :- Vishal Rane.. * Created Date :- 01/06/2012.. * @param .. * @param .. /..../..function validate_max_bid()..Purpose :- To validate max bid amount enterd from various interface by bidders..Inputs .:-..auction_id :- String of comma sperated auctions ids..Output.:-....Populate error message in div if any..*/..function validate_max_bid(auction_id,dev_server,session_id)..{...var error_str="";......var user_verified .= document.getElementById('user_verified').value;...var email_confirmed .= document.getElementById('email_confirmed').value;.....//if user is been blocked from placing bids then show error message...//change is carried out with reference ...if(bid_block_user=='1'){.....error_str = "<tr><td class='errorDiv'>"+error_array["not_allowed_to_place_bids"]+"</td></tr>";.........error_str='<table cellspacing="1" align="center" border="0" cla

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:I6MdLn:Nwn
MD5:	6608DD3E21CA3BEABD4BDFA625A0B221
SHA1:	E926D0F8694A4BC4013308AFACA7AF51E4C9FD9F
SHA-256:	C75EB01138771BFB2A5517AEAE882356733782767C4560CC9601C34D2591CA75
SHA-512:	FB9A38C874CD26E779EAA5ACFFFCCD3835620A41ADBFE9B086C6A213BF0596F4F98823487F9C79B8F02F649B8B2E4D3232FFCB78106147B3FF671ED7809BBD51
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/favicon.ico
Preview:	No favicon

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64952)
Category:	downloaded
Size (bytes):	72445
Entropy (8bit):	5.412984080569498
Encrypted:	false
SSDEEP:	1536:zyLcbbg0qb17QRA3iovGlNORlHakoOoz0y5gTNNty4jfKRYGCgGBT3E:9lNilbo52TNnXy6u
MD5:	AB8232D64F705CE331FEB27E10D076D6
SHA1:	0543B5FFC398F969170D0243E755958CA934DE0A
SHA-256:	C60271267E189ADB791B4A2C377676B6D63329A46E30CAD39FFF60DD9546C5E0
SHA-512:	4C509012FA36E8E663B3F5A8380F22363625D1954705685F374DD061DA60D2701FC5E75F9BC95F84AA68E96E23F64F948EFAB79EA585A47306E97FC7E9FC2754
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/v2/4372769/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.trellian.com']);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.above.com']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var i=t[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,n);i.l=!0;return i.exports}n.m=e;n.c=t;n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1713, components 3
Category:	dropped
Size (bytes):	509948
Entropy (8bit):	7.985138530199581
Encrypted:	false
SSDEEP:	12288:9eAU/viXb/Y1wiMdPqBc13OoOR1pGjsf6qGVscWF0rFLL0o:JU/viXb/YmaBc1+pGCYsFKpnN
MD5:	F8B9FC7190D71DCC388A68D5533A93D0
SHA1:	FAF25D15259AA67EDF31E0C1C12950BA6E6E5A77
SHA-256:	399F8AFE30091CEB4D42C5B6D12730354BE0A9762EE28CDCCBDE0BEEA27FBB33
SHA-512:	5F97CC242AEECD58CF6E0824C4655D556E4EAB3065E0A63E26BEA8F65CF37A5DD77EACA899F26E0EA2EC51CC8308AE3B79887E68DA55DAD1278FE0C2F46A730E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."................................................................................O.(..P...m6.v.uh..%.E,..8.q..!...B..itt.[...U.u..0V.C.T....0j..A....,..z...xRQ...AU.....T./.P.2J..hn.Q5$%C....QBEC..\.Q.%..b..Ff...P...U..h.k.....@.HV`c...(.!F].I..b.....RA....`].+..Y\N.X.w...zk.._..:E.]..0.P.o.b..U.....=B../\..t....\....5u.Ms...u..].z.P.K-.}.0m....i.R.#.$.....Da&..4.fM...T:..mI..;..`vRS...h..E.(..`..$....adhU4F....@.T.e.h...p...EwV..@.5T........^.P...t.X....R].b.=.....sY.E..D..3EMZ..l ....V...z.%...k...9_;F.E...h....H.#Ik.5.....#.L.`.......L.t.K..,A...\.\&Q.#........!......(aQ...&.H.(..H.....M"Y..(..`Y...(.m..h.DJ*bE....B&.....%.@.T:.....ai.v.-..`...%]..L;...AWt9$.PDp,,de\....Pbga@.I..$!..A.uV8...VL]...@..21rk=.r...z.on.....r.j)...bT%..B..tf^.R.........p..6z.=.N.....P. S.MeS........!...p..wRY.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 84 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2137
Entropy (8bit):	7.432082533238668
Encrypted:	false
SSDEEP:	48:5xitvnLmId0J3W5GMp6oPrSuMJRJHXaKJ7v0N+ZVsz8/7YZ5:QS+P5yozSuMJRBa60YMRZ5
MD5:	DBCC211821AEF990A244A3FCBBFB9AFD
SHA1:	258A37FFF68791BBD2A0FD9F03763371B3EB5790
SHA-256:	88B5F57E461C3320B40AFE7E12D6327E0B27032F402688240DC00489F8FD10A6
SHA-512:	FEC1C3F1C303C34914E76F32A4C046CE6D9F265880F765672F427F0775B85EB69BFA911E7709AFD5793BB627C65B03D3C18FDCD60E7B0FD4E9F93ABAA575AB0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...$......I......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8" xmpMM:DocumentID="xmp.did:A2B6975B734111E79E2CB8F6DB193AC0" xmpMM:InstanceID="xmp.iid:A2B6975A734111E79E2CB8F6DB193AC0" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BCD89634173E711803ED345D0BF1CC8" stRef:documentID="xmp.did:1BCD89634173E711803ED345D0BF1CC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.1g.....IDATx..YHUQ....R#..9..&.,.&........z.hx.....

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	86924
Entropy (8bit):	5.529748769897138
Encrypted:	false
SSDEEP:	768:jp2ME4p6jZJ9SZuw2BUNkClna84++nRbOGOWmh7gqr5H0KtoaUMDb1D1656Q9dJ5:wlTFlmB+CxFMmgN6811ABAr5hR
MD5:	D5ED42FDC505D7812288EE600ABEC355
SHA1:	CED96C4993841C0477D7782FB410C44CF9E13D97
SHA-256:	753B5D77684B20581DDDD43B3A944BCA93A44DA9E6DEE0C8232CA6ED8A40EAD5
SHA-512:	119F601B48A840C62F0D6828167C597A9D6CCA225DEF2BD5F40FADF2845C9C8E9A8C4F1BB9CD9C880B80591FD6561B3199C6F9BC100AF6314604684CDB98BAD3
Malicious:	false
Reputation:	low
URL:	https://js.usemessages.com/conversations-embed.js
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};i.t=function(e,t){1&t&&(e=i(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);i.r(s);Object.defineProperty(s,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var n in e)i.d(s,n,function(t){return e[t]}.bind(null,n));return s};i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};i.d(t,"a",t);return t};i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};i.p="//static.hsappstatic.net/conversations-embed/static-1.16706/";i(i.s=0)}([function(e,t,i){"use strict"

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10779), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38322
Entropy (8bit):	5.906426802278454
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY7cwiOkd5hvxJTx0v5uTiZBpXx6dTldiGP/bcq:C8Cg3IwydDJ+XxurZP/bcq
MD5:	653BBE067D0E427455C664ADE1C1C7F1
SHA1:	FE67E70D9612A72587474FCD1507587E9524B03D
SHA-256:	9CC2EA83EC1F6A14FE60CF386F6AA8D495FC5A6BF02F428D7F80B0D9F654502D
SHA-512:	4FC84BD740A32770ED663E1241A81F5C4ECC6592F4835E09630AF77C1AEAA9ADD3029BE6D8C41609AD83E35D45E4105BA169BD94A05D97CA6933B1A88CEEC671
Malicious:	false
Reputation:	low
URL:	http://ww17.pollyfill.io/Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7hUHfdN1yGojb%2B7kA22jJFIoZUe7sjLBl8u1ewtMsFNgPx8hkjAmOKJx45c6JY53HBy1HLI4CBVViy%2FDgeBFMDWJsSo6IrGcFMBYnj9ySafTAsId0lSIWrfFWX2a0Hljc6JB4ndK4pDbRQth1fAJXlSyTGNzVnZuvaDe6FhzscG126z0IucZMkzHsstwXKmGN2BFc1Trhk%2FOxq5zTl75ddizPEzxREYaD5nN81I1wZUzw8Rk9N4rlNYRUCyRLj2zJ%2BBce7%2BM6Mf27Xw92JKRo4Blxhi02e3oC%2BdH4wHqvmoMrwmHs8iHfU1nW%2BXyeQheG%2BR9I%2BTMTMdaYmY1amp8%2BC%2Ff%2FK0xsWufhlc9Q6%2BnR4lwE0bVG8NZ6NSqtm182orb8P4wkAs5XKenQHtCTzoh%2BQcyqFxXPxkoLC%2F9ZKICFRyzcqdblV5zzv%2Bx6H7698%2F%2FAQ9BAGyM82tD%2FZdGh7Y4KwXJUjpU8gU6JnS06fehTRkOKafWnc1rlBgAqF8FwnQPb7XObeslTXNyd%2Fmpi3cel5XgDj2m56QRjejsc6vs4W%2BV6BqZEV9HBcrBhqYenusEfmwo84TGhMAL2JfRWj1lX5JCCiSx31g61%2BzE3CsLuhgXacMo8XQ1FSQT4%2FWpu83YfeCSYJpsYQ3irzkwUeBrAS2fSx%2BVa96ZIsNtHsfk0gkpzl2U9unDV1IkqN3WsBA9ejpe37BV1Hd7nZYZzb1croJ6t5GGCmHSqytiQHPim%2BHiaPBdxLtQ0I84%2BwMqUqjx8LKPujZb0gegik2CkA4hPEAzrmT336NtA3QplCZ%2FV1Hp4vjGh8s3Z6op8OYxXJEAjm4lJJ2Uh8dfzi%2F8R4D%2FLtI1UB3G1wzQ52mza8DMeYT0hL1titxoAXfM9KsadVVwtFNAHOhJNuYl6aUFpskeQopvuU2EzlCl3polB8G5moluoOwO3b3C%2Bv%2BwxLcYP6vs&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&&gtnp=0&gtpp=0&kt=362&&kbc=polly&ki=87997992&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 16:42:23.413940907 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 2, 2024 16:42:33.023330927 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 2, 2024 16:42:42.993012905 CEST	49735	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:42.997911930 CEST	49736	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:42.997942924 CEST	80	49735	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:42.998009920 CEST	49735	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:42.998153925 CEST	49735	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:43.002808094 CEST	80	49736	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:43.002881050 CEST	49736	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:43.003237009 CEST	80	49735	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:43.604511976 CEST	80	49735	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:43.604525089 CEST	80	49735	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:43.604629040 CEST	49735	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:43.605047941 CEST	49735	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:43.609860897 CEST	80	49735	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.076452017 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.076497078 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.076559067 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.077121973 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.077136040 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.752901077 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.780628920 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.780659914 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.781132936 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.781189919 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.781912088 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.781949043 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.786626101 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.786717892 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.790658951 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:44.790673971 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:44.836040020 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.035550117 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:45.035630941 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:45.035741091 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.037724018 CEST	49739	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.037738085 CEST	443	49739	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:45.303208113 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.303240061 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.303400993 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.304342985 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.304356098 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.329818010 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.329844952 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:45.330013037 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.330427885 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:45.330437899 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:45.950814962 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.951143026 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.951162100 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.952208996 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.952291965 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.954051971 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:45.954119921 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:45.956515074 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:45.956562042 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:45.956634045 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:45.960416079 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:45.960433006 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:46.006088018 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:46.006103992 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:46.042543888 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.055299044 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:46.062006950 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.062035084 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.062519073 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.069756031 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.069834948 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.072169065 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.116511106 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.233572960 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:46.233628035 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:46.233690977 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:46.290762901 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:46.290787935 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:46.377863884 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.377890110 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.377931118 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.377960920 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.377993107 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.378011942 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.383392096 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.383408070 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.383491039 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.383521080 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.384198904 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.384263992 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.384265900 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.384306908 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.387150049 CEST	49741	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.387164116 CEST	443	49741	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.465740919 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.465791941 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.465874910 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.466489077 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:46.466506004 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:46.614639997 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:46.614769936 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:46.765816927 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:46.765841961 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:46.766238928 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:46.794684887 CEST	49672	443	192.168.2.4	173.222.162.32
Jul 2, 2024 16:42:46.794742107 CEST	443	49672	173.222.162.32	192.168.2.4
Jul 2, 2024 16:42:46.818978071 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:46.819960117 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:46.864499092 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:46.974694967 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:46.974782944 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:46.977452993 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:46.977473021 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:46.977724075 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:47.007342100 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.007411957 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.007473946 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.007570028 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.007586956 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.007601023 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.007606983 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.030073881 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:47.090537071 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.090567112 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.090684891 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.091022015 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.091036081 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.175112009 CEST	49747	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.180039883 CEST	80	49747	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.180107117 CEST	49747	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.222109079 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.224443913 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.224478960 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.225766897 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.227857113 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.227930069 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.228460073 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.268517971 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.412019014 CEST	49736	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.417437077 CEST	80	49736	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.474884987 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.474957943 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.475075006 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.621053934 CEST	80	49736	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.621077061 CEST	80	49736	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.621133089 CEST	49736	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.743568897 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.743685007 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.841145992 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.841175079 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.841499090 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.845156908 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:47.889936924 CEST	49744	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.889978886 CEST	443	49744	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.891330004 CEST	49736	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.892508984 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:47.896078110 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.896119118 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.896183968 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.896374941 CEST	80	49736	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.896714926 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:47.896730900 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:47.945887089 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:47.973983049 CEST	49723	80	192.168.2.4	93.184.221.240
Jul 2, 2024 16:42:47.979125023 CEST	80	49723	93.184.221.240	192.168.2.4
Jul 2, 2024 16:42:47.979206085 CEST	49723	80	192.168.2.4	93.184.221.240
Jul 2, 2024 16:42:47.988543987 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.032052994 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:48.032125950 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:48.032196045 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:48.048475981 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:48.048502922 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:48.048517942 CEST	49746	443	192.168.2.4	184.28.90.27
Jul 2, 2024 16:42:48.048523903 CEST	443	49746	184.28.90.27	192.168.2.4
Jul 2, 2024 16:42:48.143156052 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143183947 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143191099 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143249989 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143268108 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.143296957 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143320084 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143357038 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.143385887 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.143385887 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.143385887 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.143403053 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.143954992 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.144031048 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.144041061 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.144208908 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:48.144273043 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:48.847121954 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:48.891413927 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.309809923 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.309843063 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.310486078 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.313247919 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.313323975 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.314315081 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.324774027 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:49.324825048 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:49.324847937 CEST	49743	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:42:49.324856997 CEST	443	49743	20.12.23.50	192.168.2.4
Jul 2, 2024 16:42:49.356499910 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.552509069 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.552597046 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:49.552661896 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.553277969 CEST	49748	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:49.553297997 CEST	443	49748	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:50.102494955 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:50.108141899 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:50.108306885 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:50.108453035 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:50.113279104 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.091824055 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.091837883 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.091921091 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.091972113 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.091991901 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092005014 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092019081 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092030048 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092040062 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092041969 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.092078924 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.092080116 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.092648983 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092660904 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.092705965 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.098640919 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.098654032 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.098665953 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.098705053 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.115910053 CEST	49754	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.116668940 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.122390985 CEST	80	49754	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.122541904 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.122549057 CEST	49754	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.122641087 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.123249054 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.123296022 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:51.123405933 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.123502016 CEST	49754	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.124026060 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.124042988 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:51.124207020 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.125433922 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.125479937 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.125621080 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.126033068 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.126046896 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.129699945 CEST	80	49754	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.130182981 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.144243956 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.200550079 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.200572968 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.200584888 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.200647116 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.200818062 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.200829983 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.200875998 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.201853037 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.201864958 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.201911926 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.201984882 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202056885 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.202145100 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202156067 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202167034 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202202082 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.202318907 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202332973 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202395916 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.202482939 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202495098 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202548981 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.202836037 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.202908993 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.202991962 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.203008890 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.203063011 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.203185081 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.203349113 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.203393936 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.204442978 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.204454899 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.204515934 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.223248959 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.223267078 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.223325968 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.223365068 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.272196054 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.503556967 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503585100 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503597021 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503609896 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503652096 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.503725052 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.503756046 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503767014 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503773928 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503783941 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503819942 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.503871918 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.503902912 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503914118 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503926992 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.503941059 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504005909 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504005909 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504229069 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504240036 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504251003 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504261971 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504277945 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504287958 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504290104 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504307985 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504309893 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504321098 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504332066 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504343033 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504354954 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504364967 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.504416943 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504416943 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.504416943 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505108118 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505117893 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505130053 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505141973 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505155087 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505166054 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505177975 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505188942 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505202055 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505212069 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505212069 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505212069 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505224943 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505235910 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505249023 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505266905 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505266905 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505346060 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.505981922 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.505992889 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506005049 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506014109 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506021023 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506031036 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506042004 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506053925 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.506057978 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.506124973 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.506124973 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.507149935 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.507253885 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.509331942 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.509419918 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.509430885 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.509526968 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.541729927 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:51.548413038 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:51.548491955 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:51.548655987 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:51.556318045 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.557300091 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:51.591773987 CEST	80	49754	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.602214098 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:51.618083000 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.618139029 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:51.618195057 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.618432045 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:51.618448019 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:51.633198977 CEST	49754	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.649204016 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:51.809727907 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.810010910 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.810039997 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.811108112 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.811175108 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.815670013 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.815751076 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.868885040 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:51.868912935 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:51.916879892 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.017859936 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.017885923 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.017899036 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.017941952 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.017977953 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.017990112 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.017999887 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.018027067 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.018049955 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.018125057 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.018141031 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.018151999 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.018173933 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.027292967 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.029872894 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.031357050 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.034678936 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.036328077 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.036403894 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.036514997 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.036757946 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.036777973 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.036856890 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.037867069 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.037940979 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.039711952 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.039824009 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.041871071 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.072508097 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.083561897 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.083594084 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.095815897 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.099675894 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.101610899 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.101682901 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.101913929 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.105012894 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.105079889 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.105216980 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.107637882 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.110687971 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.125906944 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.128957987 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.128972054 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.128983974 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.129024029 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.129051924 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.129100084 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.133832932 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.133846998 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.133858919 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.133874893 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.133887053 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.133898020 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.133929014 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.138624907 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.138638020 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.138688087 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.138695955 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.138711929 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.138722897 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.138741970 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.138787985 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.143440008 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.143452883 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.143464088 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.143512964 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.219270945 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.240675926 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240703106 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240710974 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240751982 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240751982 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.240771055 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240780115 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240808010 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.240845919 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.240845919 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.240871906 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.247673988 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.252736092 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.252796888 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.252937078 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.258057117 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.270989895 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.338437080 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.338459015 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.338526964 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.338560104 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.338613033 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.367908001 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.367929935 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.368010998 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.368046999 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.368091106 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.412322044 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.412352085 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.412471056 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.412508011 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.412549019 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.441405058 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.441438913 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.441507101 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.441539049 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.441553116 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.441804886 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.465034962 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.465060949 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.465132952 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.465164900 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.465203047 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.489654064 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.489677906 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.489717960 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.489746094 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.489768982 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.489782095 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.492559910 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.509758949 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.509777069 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.509836912 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.509855986 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.509896040 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.521400928 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.521419048 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.521467924 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.521486044 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.521527052 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.527115107 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.527425051 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.527494907 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.528834105 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.528911114 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.530055046 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.530137062 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.530286074 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.530309916 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.534182072 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.535798073 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.535825968 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.535866022 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.535892963 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.535911083 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.536005020 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.545672894 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.545700073 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.545769930 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.545797110 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.545855045 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.559541941 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.559557915 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.559617043 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.559638023 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.559673071 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.571872950 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.571923971 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.572158098 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572201014 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572211981 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572222948 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.572252035 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.572352886 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572371960 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572384119 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572392941 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572400093 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572402000 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.572415113 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.572431087 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.572467089 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.572695971 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.572710991 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.572767973 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.572778940 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.572813034 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.576977015 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.577049017 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.577059984 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.577083111 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.577107906 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.577143908 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.579452038 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579531908 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579586029 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.579588890 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579600096 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579643965 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.579668999 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579680920 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579720020 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.579777956 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579788923 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579875946 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579895973 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.579900026 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.579940081 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.584176064 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.584191084 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.584240913 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.584249973 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.584279060 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.584467888 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.584542990 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.584553957 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.584589958 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.600449085 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.600470066 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.600518942 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.600550890 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.600564003 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.600606918 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.602958918 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.602973938 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.603013992 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.603025913 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.603053093 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.603072882 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.611572981 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.611588955 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.611649036 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.611656904 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.611697912 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.623797894 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.630403996 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.630420923 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.630481958 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.630508900 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.630561113 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.640439034 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.640460014 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.640505075 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.640532017 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.640546083 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.640597105 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.659734011 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.659760952 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.659842014 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.659878016 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.659924984 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.663068056 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.663083076 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.663094044 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.663110018 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.663129091 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.663162947 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.667108059 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.667124033 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.667195082 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.667222977 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.667263985 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.670110941 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.672230959 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.672259092 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.672271013 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.672312975 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.672349930 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.672389030 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.678656101 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.678673029 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.678765059 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.678795099 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.678833008 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.692183971 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.694269896 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.694294930 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.694355965 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.694386959 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.694425106 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.697865009 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.698112011 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.698301077 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.698983908 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.698999882 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.699071884 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.699090004 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.699131012 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.700789928 CEST	80	49747	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:52.700930119 CEST	80	49747	103.224.182.252	192.168.2.4
Jul 2, 2024 16:42:52.700980902 CEST	49747	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:42:52.703383923 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.705792904 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.705816031 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.705878973 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.705894947 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.705935001 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.709609985 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.709820986 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.709862947 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.709873915 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.709903955 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.709922075 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.709943056 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.710481882 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.710525990 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.710529089 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.710537910 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.710578918 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.710635900 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.710649014 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.710683107 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.714354038 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.714432955 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.714576006 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.715482950 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.715543985 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.715553999 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.715641022 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:52.715688944 CEST	49759	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.715706110 CEST	443	49759	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.724811077 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.724860907 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.724869013 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.724889994 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.724945068 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.724987030 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.724987030 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.725006104 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.725042105 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.725066900 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.725121021 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.725127935 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.725142002 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.725162029 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.725188971 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.725779057 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:52.725791931 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:52.726537943 CEST	49757	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:52.726553917 CEST	443	49757	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:52.799045086 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.799071074 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.799082994 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.799103022 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:52.799149990 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:53.173109055 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:53.226989031 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:53.308643103 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:42:53.356472969 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:42:53.369220018 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.390621901 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.390654087 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.391069889 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.394700050 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.394764900 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.398706913 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.444499016 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.681731939 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.681821108 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.682054043 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.682770014 CEST	49765	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.682790041 CEST	443	49765	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.691276073 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.691339970 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:53.691544056 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.691939116 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:53.691955090 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.323302984 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.323580980 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.323610067 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.323968887 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.324398041 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.324450970 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.324600935 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.372499943 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.633872032 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.633897066 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.633965969 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.633971930 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.634010077 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.634938002 CEST	49767	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:54.634957075 CEST	443	49767	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:54.664082050 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:54.664130926 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:54.664191961 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:54.665421963 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:54.665436983 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.311317921 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.311775923 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.311809063 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.312158108 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.313385963 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.313447952 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.313875914 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.360506058 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.685271978 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.685301065 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.685383081 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.685415983 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.685463905 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.685491085 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.685506105 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.711469889 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.711499929 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.711566925 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.711605072 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.711771965 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.742763996 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.742790937 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.742872953 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.742903948 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.742940903 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.784248114 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.784267902 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.784324884 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.784338951 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.784379005 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.816658020 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.816678047 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.816724062 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.816735029 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.816781998 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.840157986 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.840190887 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.840235949 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.840249062 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.840293884 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.857302904 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.857361078 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.857378006 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.857391119 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.857409000 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.857438087 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.857459068 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.857817888 CEST	49768	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:42:55.857834101 CEST	443	49768	195.181.170.18	192.168.2.4
Jul 2, 2024 16:42:55.859713078 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:55.859764099 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:55.859821081 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:56.353907108 CEST	49740	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:42:56.353950024 CEST	443	49740	142.250.74.196	192.168.2.4
Jul 2, 2024 16:42:56.354579926 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:56.354638100 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.354710102 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:56.354953051 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:56.354964972 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.995419025 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.995666981 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:56.995702028 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.996067047 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.997049093 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:56.997119904 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:56.997426987 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.044507980 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.304670095 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.304769039 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.304840088 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.312926054 CEST	49769	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.312951088 CEST	443	49769	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.331501961 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:57.336368084 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:57.338298082 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.338368893 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.338424921 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.338936090 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.338963985 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.346318007 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.346349001 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.346483946 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.347014904 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.347027063 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.432562113 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:42:57.479013920 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:42:57.877372980 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.877851963 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.877893925 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.878917933 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.878983974 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.880352020 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.880419970 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.881020069 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.881040096 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.926457882 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.976963043 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.979439020 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.979705095 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.979733944 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.979758024 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.979770899 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.979820967 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.979839087 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.987023115 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987051964 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987093925 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.987124920 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987196922 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.987207890 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987236977 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987267017 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987282038 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.987298965 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.987361908 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:57.994564056 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.994582891 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.994927883 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:57.995752096 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.995821953 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.996984005 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.997056007 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:57.997226000 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:57.997231960 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:58.037908077 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:58.040782928 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.068682909 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068738937 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068768978 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068813086 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.068850994 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068871975 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068922043 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.068931103 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068938017 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.068964005 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.069735050 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.069767952 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.069787025 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.069803953 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.069822073 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.069839001 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.070460081 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.070509911 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.070522070 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076023102 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076313019 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076333046 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076384068 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.076409101 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076603889 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076734066 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076764107 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076790094 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.076802969 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.076813936 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.077425003 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.077712059 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.128115892 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.128190994 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.128226042 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157612085 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157689095 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.157701969 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157721996 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157777071 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.157787085 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157839060 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157887936 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.157896996 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.157973051 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.158025980 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.158035040 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.159935951 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.159945965 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.159970045 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.159981012 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.159991026 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.159997940 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.160015106 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.160048962 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.160077095 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.165385008 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.165462017 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.165497065 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.165520906 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.165532112 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.166985989 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.167001009 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.167035103 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.167047977 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.167057037 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.167089939 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.167146921 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.189332008 CEST	49770	443	192.168.2.4	162.247.243.39
Jul 2, 2024 16:42:58.189367056 CEST	443	49770	162.247.243.39	192.168.2.4
Jul 2, 2024 16:42:58.230257034 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.230285883 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.230418921 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.230637074 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.230652094 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.284071922 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:58.284159899 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:58.284235954 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:58.372288942 CEST	49771	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:42:58.372327089 CEST	443	49771	87.230.98.78	192.168.2.4
Jul 2, 2024 16:42:58.700355053 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.700623989 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.700650930 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.701754093 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.701812029 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.703090906 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.703202963 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.703306913 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.703321934 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.756644964 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.837260008 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.837383032 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.837450027 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.838216066 CEST	49772	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.838232040 CEST	443	49772	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.882889032 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.882939100 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.883007050 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.884006023 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.884032011 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.898307085 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.898349047 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:58.898405075 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.898612022 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:58.898633003 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.383985043 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.384253979 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.384293079 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.384687901 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.385021925 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.385101080 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.385169029 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.385456085 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.385624886 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.385639906 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.386665106 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.386723995 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.387115955 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.387182951 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.387271881 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.387286901 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.430525064 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.430562973 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.430583000 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.520217896 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.520340919 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.520437002 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.520669937 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.520756006 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.520876884 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.521758080 CEST	49773	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.521785021 CEST	443	49773	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.522615910 CEST	49774	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.522629023 CEST	443	49774	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.527870893 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.527901888 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:42:59.528167009 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.528397083 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:42:59.528412104 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.032062054 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.032373905 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.032399893 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.032757044 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.033204079 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.033204079 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.033271074 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.086843967 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.165061951 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.165143967 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:00.166574001 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.166574001 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.477440119 CEST	49775	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:00.477464914 CEST	443	49775	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.214418888 CEST	49776	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.245348930 CEST	49747	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.245570898 CEST	49747	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.256269932 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.256319046 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.256462097 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.256963015 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.256979942 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.261229038 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.261239052 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.261435986 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.262340069 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.262356997 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.264818907 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.264858961 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.265007019 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.265820980 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.265836954 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.279668093 CEST	80	49776	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.279687881 CEST	80	49747	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.279709101 CEST	80	49747	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.279767990 CEST	49776	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.280317068 CEST	49776	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.285079002 CEST	80	49776	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.738281965 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.738548040 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.738621950 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.738651037 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.738754034 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.738790035 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.739146948 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.739655972 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.739732027 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.739753008 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.739787102 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.739833117 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.740081072 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.740088940 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.740449905 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.740535021 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.740575075 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.740595102 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.740606070 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.747116089 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.747365952 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.747381926 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.747745037 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.748044014 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.748100042 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.748151064 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.788499117 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.796263933 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.865793943 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.865911961 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.865976095 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.867429018 CEST	49779	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.867454052 CEST	443	49779	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.873141050 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.873239040 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.873300076 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.874141932 CEST	49778	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.874205112 CEST	443	49778	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.876944065 CEST	80	49776	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.877650976 CEST	80	49776	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.877681971 CEST	49776	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.877722979 CEST	49776	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.879951000 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.880048037 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.880256891 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.880692959 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.880723953 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.880798101 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.881181002 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:03.881191015 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:03.882025957 CEST	49777	443	192.168.2.4	162.247.243.29
Jul 2, 2024 16:43:03.882044077 CEST	443	49777	162.247.243.29	192.168.2.4
Jul 2, 2024 16:43:03.882580042 CEST	80	49776	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.617827892 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.618083000 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:04.618098021 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.618474007 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.620899916 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:04.620954990 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.621279955 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:04.668502092 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.863461971 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.863554001 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:04.863610983 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:04.953569889 CEST	49780	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:04.953608990 CEST	443	49780	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.254925013 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.254964113 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.255026102 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.255265951 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.255283117 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.806279898 CEST	49782	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.806745052 CEST	49783	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.812983036 CEST	80	49782	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.813040018 CEST	80	49783	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.813096046 CEST	49782	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.813121080 CEST	49783	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.867197990 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.930260897 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.930658102 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.930669069 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.931162119 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.932308912 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.932368994 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:05.932769060 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:05.980494976 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.036041021 CEST	49783	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.040908098 CEST	80	49783	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.133025885 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.133100033 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.133193016 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.250603914 CEST	49781	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.250639915 CEST	443	49781	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.447376013 CEST	80	49783	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.447433949 CEST	80	49783	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.448251963 CEST	49783	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.546011925 CEST	49783	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.551240921 CEST	80	49783	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.604295015 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.604338884 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:06.604473114 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.604908943 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:06.604919910 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.031127930 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:07.031332970 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:07.031393051 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:07.324512959 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.324795961 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:07.324815035 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.325206995 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.325675011 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:07.325726986 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.325845003 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:07.372503042 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.582108974 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.582179070 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.582232952 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:07.582732916 CEST	49784	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:07.582747936 CEST	443	49784	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:07.720438957 CEST	49756	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:07.720546961 CEST	443	49756	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:07.975334883 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:07.980283976 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:07.980490923 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:07.980566025 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:07.985289097 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.668994904 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669025898 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669038057 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669125080 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:08.669131041 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669143915 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669154882 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:08.669183016 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:08.669218063 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:08.927608013 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:08.932590008 CEST	80	49786	185.53.178.30	192.168.2.4
Jul 2, 2024 16:43:08.932681084 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:08.934910059 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:08.939855099 CEST	80	49786	185.53.178.30	192.168.2.4
Jul 2, 2024 16:43:09.253012896 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:09.258152008 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:09.258172035 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:09.258183002 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:09.597007990 CEST	80	49786	185.53.178.30	192.168.2.4
Jul 2, 2024 16:43:09.605207920 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:09.610260963 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:09.649660110 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:09.703130007 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:09.703187943 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:09.703242064 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:09.703564882 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:09.703573942 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:09.815845966 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:09.821243048 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:09.826170921 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:09.833493948 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:09.835448027 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:09.835500002 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:09.835571051 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:09.835825920 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:09.835843086 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:09.838265896 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:09.838342905 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:09.838553905 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:09.843465090 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.012379885 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012398958 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012417078 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012428045 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012429953 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012437105 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012454033 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.012502909 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.012537956 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012546062 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012614965 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.012840986 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012912989 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.012991905 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.013012886 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.013070107 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.013092995 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.017316103 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.017363071 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.017373085 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.017483950 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.020689011 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:10.042665958 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.042737007 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.042881966 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.043498039 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.043555021 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.043685913 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.043706894 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.043721914 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.044215918 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.044234991 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.050997019 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.051067114 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.051234007 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.051651955 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.051677942 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.066406012 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:10.104690075 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104737043 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104762077 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104863882 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104870081 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104991913 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.104991913 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.104991913 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.105062008 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105067968 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105140924 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105176926 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.105501890 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105556965 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105566025 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105701923 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105706930 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.105746984 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.105746984 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.106131077 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.106149912 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.106281996 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.106352091 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:10.106395006 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.106395006 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:10.137304068 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.142072916 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.142136097 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.142350912 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.148411036 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.276510954 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:10.281338930 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:10.281698942 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:10.281698942 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:10.286498070 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:10.389487028 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.389759064 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.389777899 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.390194893 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.390259027 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.390939951 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.390969992 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.391253948 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.391307116 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.437510014 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.437551022 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:10.468704939 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.468786955 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.468839884 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.468852997 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.468856096 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.468899965 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.468959093 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469130993 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469141006 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469151974 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469166994 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.469168901 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469178915 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.469183922 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.469221115 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.483984947 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:10.494442940 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.496680021 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.496704102 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.497766972 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.497845888 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.498328924 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.498383999 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.498557091 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.498563051 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.546991110 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.558401108 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.558417082 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.558468103 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.573303938 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.578121901 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.578190088 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.578361988 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:10.583086967 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:10.618381977 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618422031 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618443966 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618457079 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618468046 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618479967 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.618520975 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.618534088 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618640900 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618653059 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618675947 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.618690968 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.618761063 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618812084 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.618861914 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.623228073 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.630505085 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.634476900 CEST	49796	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.635804892 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.639919996 CEST	80	49796	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.640008926 CEST	49796	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.640341043 CEST	49796	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.645231009 CEST	80	49796	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.673633099 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.674506903 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.675684929 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.675733089 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.676253080 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.676270962 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.677529097 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.678399086 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.678515911 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.679270029 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.679446936 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.680512905 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.680625916 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.684303999 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.684643030 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.684727907 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.684890032 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.684938908 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.688062906 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.689730883 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.689742088 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.689799070 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.690166950 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.690192938 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.690599918 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.691415071 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.691484928 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.691924095 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.691941977 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.699090958 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.699737072 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.699764013 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.700151920 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.700515985 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.700608015 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:10.731420994 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.731478930 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.731535912 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.731542110 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.731545925 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.731597900 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.731858969 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.731946945 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732003927 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.732173920 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732227087 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732235909 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732275009 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.732611895 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732623100 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732633114 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732666969 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.732692003 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.732713938 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732723951 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.732755899 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.734414101 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.734469891 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.734479904 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.734534025 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.734561920 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.734783888 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.739046097 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.754065990 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:10.769768000 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.774569988 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.774672985 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.774908066 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:10.779491901 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.779544115 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.779577971 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.779608965 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.779611111 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.779619932 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:10.779634953 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.779654026 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.784991980 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.785037994 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.785063982 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.785064936 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.785083055 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.785111904 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.791021109 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.791076899 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.791091919 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.793170929 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:10.793207884 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:10.793324947 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:10.793581963 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:10.793597937 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:10.797164917 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.797219992 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.797233105 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.850756884 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.852091074 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:10.872179985 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.872312069 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.872396946 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.872436047 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.872492075 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.874938011 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.875005960 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.875020981 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.875614882 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.878981113 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.878998995 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.879076958 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.879096031 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.879143953 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.880825043 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.886837959 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.886926889 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.887000084 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.887018919 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.887155056 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.887851954 CEST	49792	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:10.887883902 CEST	443	49792	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:10.892817020 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.898972034 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.899032116 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.899033070 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.899049997 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.899120092 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.904362917 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.909460068 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:10.910068989 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.910118103 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.910147905 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.910165071 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.910397053 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.915811062 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.922771931 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.922816038 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.922831059 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.922852993 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.922899961 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.929636002 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.929702997 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.929773092 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.929791927 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.964814901 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.964855909 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.964875937 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.964895010 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.964946032 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.965188026 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.965598106 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.965653896 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.965661049 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.965699911 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.965737104 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.965742111 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.967390060 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.967448950 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.967456102 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.971730947 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.971786976 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.971792936 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.977458000 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.977546930 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.977572918 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.982887983 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.982949972 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.982965946 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.988312006 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.988368988 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.988378048 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.993675947 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.993736029 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.993752956 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.998117924 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:10.998194933 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:10.998209000 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.003180027 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.003225088 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.003237963 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.007841110 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.007889986 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.007905006 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.012362957 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.012414932 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.012428999 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.016417027 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.016499043 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.016510963 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.020349979 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.020395994 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.020406008 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.024295092 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.024375916 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.024385929 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.028076887 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.028117895 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.028130054 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.031711102 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.031747103 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.031757116 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.035540104 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.035635948 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.035645962 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.038950920 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.039211035 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.039221048 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.042622089 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.042684078 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.042694092 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.046309948 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.046341896 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.046353102 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.046361923 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.046547890 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.056871891 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057238102 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057265043 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057275057 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.057290077 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057323933 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.057358980 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057929993 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.057981968 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.057987928 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.059736967 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.059767962 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.059791088 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.059797049 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.059830904 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.059845924 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.064155102 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.064198971 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.064208984 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.064259052 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.064296961 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.064302921 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.069844007 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.069900990 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.069921017 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.070072889 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.070101976 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.070111990 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.070122004 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.070525885 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.075292110 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.075445890 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.075537920 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.075551033 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.080825090 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.080857992 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.080861092 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.080877066 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.080903053 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.080914021 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.085948944 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.085974932 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.085992098 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.085997105 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.086010933 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.086026907 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.090440989 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.090481997 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.090491056 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.090600014 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.090629101 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.090643883 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.090651035 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.090681076 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.090962887 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.095676899 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.095735073 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.095741987 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.097264051 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.097316027 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.097322941 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.100641966 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.100673914 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.100687027 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.100693941 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.100747108 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.101500988 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.104724884 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.104773998 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.104794979 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.104803085 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.104841948 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.105825901 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.108997107 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.109045029 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.109092951 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.109102011 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.109441042 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.112852097 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.113012075 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.113049030 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.113058090 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.113065958 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.113553047 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.113601923 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.117530107 CEST	80	49796	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.141640902 CEST	49789	443	192.168.2.4	142.250.185.132
Jul 2, 2024 16:43:11.141665936 CEST	443	49789	142.250.185.132	192.168.2.4
Jul 2, 2024 16:43:11.143699884 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.143923044 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.143973112 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.143984079 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.143987894 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.144102097 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.144134998 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144146919 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144157887 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144167900 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144179106 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144270897 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.144303083 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.144303083 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.144303083 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.148845911 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.148885012 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.148895979 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.149066925 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.155205965 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155282974 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155318022 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155329943 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155390978 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155392885 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.155392885 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.155402899 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155504942 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155508995 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.155515909 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.155702114 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.155961037 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.156034946 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.156810045 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.157152891 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157448053 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157489061 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157500029 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157510042 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.157546997 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.157567024 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157578945 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157608986 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.157723904 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157735109 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157746077 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157778025 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.157834053 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.157866955 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.160443068 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.160511017 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.160522938 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.160552979 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.160624981 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.160624981 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.162316084 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.162362099 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.162373066 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.162424088 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.163758993 CEST	49796	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.199098110 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.208455086 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213641882 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213696957 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213706970 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213781118 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:11.213783026 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213866949 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213876963 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213887930 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.213917971 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:11.213948011 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:11.214003086 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.214018106 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.214052916 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:11.230982065 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231201887 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231241941 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231254101 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231311083 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.231339931 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.231379032 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231389999 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231401920 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231434107 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.231520891 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231535912 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231563091 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.231631041 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.231668949 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.234622955 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.234674931 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.234687090 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.234762907 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.234839916 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.234894037 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.236099958 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.236124039 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.236130953 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.236192942 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.248410940 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248454094 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248466015 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248536110 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.248596907 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248610973 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248621941 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248653889 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.248678923 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.248821020 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248929977 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248934984 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248946905 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.248986006 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.249005079 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.249032021 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249100924 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249111891 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249186993 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.249409914 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249461889 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249475956 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249531031 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.249531031 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.249587059 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249599934 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.249644041 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.250107050 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.250380039 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.250438929 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.250457048 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.250478983 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.250516891 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.253458977 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.291851044 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.297374010 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.297389030 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:11.297452927 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:11.320177078 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.320205927 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.320215940 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.320249081 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.320265055 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.320296049 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.320307016 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.347843885 CEST	80	49782	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:11.348057032 CEST	80	49782	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:11.348165035 CEST	49782	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:11.360656977 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.361270905 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.361318111 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.361378908 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.361745119 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.361763954 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.376768112 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.381730080 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.439383984 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.439636946 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.439663887 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.440176010 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.440191984 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.440238953 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.440253019 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.440264940 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.440287113 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.440968037 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.442053080 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.442132950 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.475625992 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:11.490446091 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.490525007 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:11.526077986 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:11.539628029 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:11.991925001 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.992244959 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.992316008 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.993531942 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.993894100 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.994025946 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:11.994040966 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:11.994081020 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.038991928 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.297405005 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.297646999 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.297722101 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.298044920 CEST	49802	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.298110962 CEST	443	49802	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.302844048 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.302881956 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.303040028 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.303450108 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.303462029 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.391475916 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.391510010 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:12.391658068 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.391686916 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:12.391690016 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.391724110 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.391961098 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.391971111 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:12.392342091 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:12.392354965 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:12.934170961 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.937897921 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.937911034 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.939080954 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.940325022 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.940536976 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:12.943099022 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:12.988501072 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:13.054783106 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.055104017 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.055135012 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.055471897 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.055488110 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.055540085 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.055546999 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.055588007 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.056154013 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.058381081 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.058437109 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.058948994 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.058955908 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.108755112 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.127017021 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.127705097 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.127727985 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.128143072 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.128159046 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.128205061 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.128212929 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.128267050 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.128267050 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.128884077 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.130264044 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.130372047 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.130749941 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.130764961 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.170824051 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.241908073 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:13.242088079 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:13.242141962 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:13.243702888 CEST	49805	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:13.243717909 CEST	443	49805	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:13.326567888 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.326636076 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.326903105 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.327575922 CEST	49806	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.327594042 CEST	443	49806	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.400230885 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.401892900 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.401949883 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.438859940 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:13.439517975 CEST	49807	443	192.168.2.4	172.217.18.97
Jul 2, 2024 16:43:13.439555883 CEST	443	49807	172.217.18.97	192.168.2.4
Jul 2, 2024 16:43:13.444123983 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:13.444137096 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:13.445245981 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434232950 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434262991 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434273005 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434315920 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.434335947 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434360027 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434370041 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434402943 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.434402943 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.434781075 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434848070 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434856892 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.434937000 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.435009003 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.435019970 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.435029030 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.435039997 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.435055017 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.435086966 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.435456991 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.435556889 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.438420057 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438507080 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438518047 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438591003 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438601971 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438692093 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.438692093 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.438725948 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438740015 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438775063 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.438878059 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438889027 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438894033 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438903093 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438914061 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.438940048 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.438993931 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.439593077 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439645052 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439655066 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439690113 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.439862967 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439908028 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439917088 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.439917088 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.439956903 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.440016985 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.440026045 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.440114975 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.492803097 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:14.492850065 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:14.492964983 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:14.493386984 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:14.493405104 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:14.509320021 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:14.515501022 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.515585899 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:14.515768051 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:14.521032095 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.526704073 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:14.572390079 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.572424889 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:14.572552919 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.572782040 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.572823048 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:14.572875023 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.573564053 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.573577881 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:14.573961973 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:14.573975086 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:14.575356960 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:14.576920986 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:14.581852913 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:14.793607950 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:14.812392950 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:14.815329075 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:14.817393064 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:14.821305037 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:14.975768089 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975788116 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975800037 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975820065 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975831032 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975842953 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975853920 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.975852966 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:14.975908995 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:14.976006031 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.976016998 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:14.976052999 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.008104086 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:43:15.026247978 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:15.052874088 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:43:15.072899103 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:15.123495102 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.167345047 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.174160004 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.174191952 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.175698042 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.191466093 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.191721916 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.192224026 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.192289114 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.221263885 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.266964912 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.266980886 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.267366886 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.267381907 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.267460108 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.267467976 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.267559052 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.267972946 CEST	49813	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.268105030 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.272928953 CEST	80	49813	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.273000002 CEST	49813	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.303153992 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.304286957 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.304367065 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.305618048 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.307185888 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.309314013 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.309330940 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.309917927 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.309933901 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.309986115 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.309993982 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.310064077 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.310252905 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.310262918 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.310372114 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.310645103 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.311916113 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.311981916 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.312285900 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.312395096 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.312922955 CEST	49813	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.313523054 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.313534975 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.314081907 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.317650080 CEST	80	49813	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.318814993 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.356045008 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.359424114 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.367062092 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.369555950 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.371927023 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.372050047 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.374222994 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.374387980 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.374449015 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.374707937 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.379117966 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.379543066 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.382641077 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.382700920 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.382764101 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.382796049 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.382880926 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.382957935 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.386032104 CEST	49809	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:15.386061907 CEST	443	49809	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:15.402069092 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402133942 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402144909 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402190924 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.402296066 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402363062 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.402379990 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402390957 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402400970 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.402426004 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.402981043 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403037071 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.403152943 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403199911 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403279066 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.403284073 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403297901 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403307915 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403346062 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.403919935 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.403963089 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.403971910 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.404987097 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.404998064 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.405006886 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.405112028 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.405112028 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.407236099 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.407275915 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.407349110 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.482455969 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:15.487353086 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:15.495574951 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.495640993 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.495971918 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.496961117 CEST	49811	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.496984959 CEST	443	49811	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.502605915 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.507401943 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.507658958 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.509391069 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.514178038 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.569242954 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:15.569341898 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:15.569451094 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:15.574842930 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.574927092 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:15.574986935 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:15.680350065 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:43:15.738025904 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:43:15.762420893 CEST	80	49813	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775600910 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775655985 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775666952 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775731087 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.775768995 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775779009 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775794029 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775804996 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.775810957 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.775845051 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.775973082 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.776230097 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.776261091 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.776282072 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.776302099 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.780654907 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.780776024 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.780838013 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.815804958 CEST	49813	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.830562115 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830682039 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830739021 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830744028 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830794096 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.830840111 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.830841064 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830912113 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830921888 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.830952883 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.831059933 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.831069946 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.831079006 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.831101894 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.831139088 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835369110 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835419893 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835431099 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835480928 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835526943 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835536957 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835575104 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835640907 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835650921 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835660934 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835669041 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835679054 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835686922 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835707903 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835728884 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835802078 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835860014 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.835901976 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.835902929 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.840262890 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.840286016 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.840384960 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.865138054 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.865173101 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.865184069 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.865242004 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.865259886 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.865303993 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.887505054 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.919733047 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.919781923 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.919791937 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.919852972 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.919857025 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.919913054 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.925143957 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925196886 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925208092 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925276041 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.925324917 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925337076 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925385952 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.925548077 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925560951 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925592899 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.925635099 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925657034 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925663948 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.925674915 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.925697088 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.926501989 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.926551104 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.926561117 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.926593065 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.926668882 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.926681042 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.926707029 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.927262068 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.927305937 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.927347898 CEST	80	49816	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.969441891 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.970798016 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970854044 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970900059 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970912933 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.970913887 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970958948 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.970968008 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970978975 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.970983982 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.971046925 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.971199036 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.971239090 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.971249104 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.971251965 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.971293926 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:15.975723982 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.975781918 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.975791931 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:15.975830078 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:16.017621040 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:16.036796093 CEST	49812	443	192.168.2.4	142.250.185.161
Jul 2, 2024 16:43:16.036823988 CEST	443	49812	142.250.185.161	192.168.2.4
Jul 2, 2024 16:43:16.061225891 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:16.061240911 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:16.061255932 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:16.061260939 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:16.061307907 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:16.061825991 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:16.106671095 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:16.746964931 CEST	49787	443	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:16.746999979 CEST	443	49787	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:17.005445004 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.005498886 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.005569935 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.085678101 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.085711956 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.088196039 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.132498026 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:17.289094925 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:17.289828062 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:17.289891005 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.558792114 CEST	49801	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.558830976 CEST	443	49801	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:17.661541939 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:17.666723013 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:17.749304056 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.749752998 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.749772072 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.752837896 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.758714914 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.759054899 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.759061098 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.760114908 CEST	80	49817	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:17.764576912 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:17.802824020 CEST	49817	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:17.805718899 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:17.847327948 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.847358942 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:17.847517967 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.848532915 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:17.848550081 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.061075926 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:18.061171055 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:18.061259985 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:18.425182104 CEST	49820	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:18.425221920 CEST	443	49820	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:18.490056038 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.491631031 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:18.491661072 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.492342949 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.493418932 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:18.493509054 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.494724989 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:18.540493011 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.597472906 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:18.597529888 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:18.597604036 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:18.597826004 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:18.597839117 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:18.801162958 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.801268101 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:18.801470995 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:18.803570986 CEST	49821	443	192.168.2.4	172.217.16.206
Jul 2, 2024 16:43:18.803586006 CEST	443	49821	172.217.16.206	192.168.2.4
Jul 2, 2024 16:43:19.225392103 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.225868940 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:19.225895882 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.226250887 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.226768017 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:19.226821899 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.227015018 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:19.272509098 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.570720911 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.570822001 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:19.570894003 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:19.571847916 CEST	49822	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:19.571898937 CEST	443	49822	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:21.329201937 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:21.337723017 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:21.337732077 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:21.338407040 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427197933 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427221060 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427232981 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427269936 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427279949 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427294016 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427299023 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427309990 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427321911 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427331924 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427333117 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427345991 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427355051 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427360058 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427360058 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427401066 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427742958 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427788019 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427798033 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.427807093 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.427841902 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430015087 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430062056 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430073023 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430123091 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430159092 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430183887 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430202007 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430228949 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430272102 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430779934 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430876017 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430886984 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430902958 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430912971 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430921078 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430926085 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.430964947 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.430982113 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.431644917 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431655884 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431667089 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431710005 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.431730986 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431741953 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431751966 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.431778908 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.431818962 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.431920052 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432056904 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432068110 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432110071 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.432193995 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432204008 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432240963 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.432353973 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432363987 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.432398081 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.502352953 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:22.502389908 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:22.502449989 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:22.503029108 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:22.503041029 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:22.520052910 CEST	80	49755	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:22.520109892 CEST	49755	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:22.545748949 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.550620079 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.644599915 CEST	80	49760	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.723946095 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.728835106 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.761703968 CEST	49760	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.785721064 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.790530920 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829519987 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829663992 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829725027 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.829783916 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829799891 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829852104 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.829953909 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.829969883 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830014944 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.830318928 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830379963 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830394983 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830432892 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.830519915 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830532074 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.830564976 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.831104040 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.831152916 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.831227064 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839309931 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839364052 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839374065 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839385033 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.839418888 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.839503050 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839513063 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839550972 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.839714050 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839773893 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839778900 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839843035 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.839934111 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839943886 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.839991093 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.840706110 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.840754032 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.840764999 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.840795994 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.840838909 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.840945005 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.840962887 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.840971947 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.841006041 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.886167049 CEST	80	49764	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.923854113 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.923964024 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.923974037 CEST	80	49761	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:22.924014091 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.924014091 CEST	49761	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:22.945944071 CEST	49764	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:23.148783922 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.342695951 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.398180962 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.398202896 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.398663044 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.442038059 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.442131042 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.442375898 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.442409992 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635174036 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635199070 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635210991 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635298014 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.635313034 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635323048 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.635374069 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.667939901 CEST	49823	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.667953968 CEST	443	49823	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.728172064 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.728207111 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:23.728270054 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.729144096 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:23.729161978 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.378114939 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.378417969 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.378437996 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.378786087 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.379211903 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.379282951 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.379393101 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.420502901 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.596545935 CEST	80	49786	185.53.178.30	192.168.2.4
Jul 2, 2024 16:43:24.596605062 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:24.688911915 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.689002991 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.689053059 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.689757109 CEST	49824	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.689773083 CEST	443	49824	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.695749998 CEST	49786	80	192.168.2.4	185.53.178.30
Jul 2, 2024 16:43:24.696568966 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.696611881 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.696676970 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.697062969 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:24.697073936 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:24.700560093 CEST	80	49786	185.53.178.30	192.168.2.4
Jul 2, 2024 16:43:25.344783068 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.345437050 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.345455885 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.345803976 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.346396923 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.346450090 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.346563101 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.388547897 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.397650003 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.662125111 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:25.662214994 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:25.662256956 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.662328959 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.662369967 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:25.669447899 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.698414087 CEST	49825	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:25.698446035 CEST	443	49825	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.709578037 CEST	49791	443	192.168.2.4	195.181.170.18
Jul 2, 2024 16:43:25.709603071 CEST	443	49791	195.181.170.18	192.168.2.4
Jul 2, 2024 16:43:25.853372097 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.853466034 CEST	443	49790	87.230.98.78	192.168.2.4
Jul 2, 2024 16:43:25.853600979 CEST	49790	443	192.168.2.4	87.230.98.78
Jul 2, 2024 16:43:26.533070087 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:26.533119917 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:26.533313036 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:26.533778906 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:26.533788919 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.157097101 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.157200098 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.160974026 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.160983086 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.161241055 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.172157049 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.212507010 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.376571894 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.376594067 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.376611948 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.376693964 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.376709938 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.376815081 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.377008915 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.377053976 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.377075911 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.377083063 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.377108097 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.377394915 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:27.377441883 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.387677908 CEST	49826	443	192.168.2.4	20.12.23.50
Jul 2, 2024 16:43:27.387698889 CEST	443	49826	20.12.23.50	192.168.2.4
Jul 2, 2024 16:43:33.545600891 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.545644999 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:33.545963049 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.546235085 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.546317101 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:33.546381950 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.546498060 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.546509027 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:33.546816111 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:33.546838045 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.146939039 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.147728920 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.147762060 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.148621082 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.148866892 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.148932934 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.148996115 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.149010897 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.150037050 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.150124073 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.151043892 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.151139975 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.151721954 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.151730061 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.152298927 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.152357101 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.197208881 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.197212934 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.197228909 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.245228052 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.566214085 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.613208055 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.613250971 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654721975 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654736042 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654781103 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654803991 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654803991 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.654815912 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654841900 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654856920 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.654874086 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.654874086 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.654889107 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.656223059 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.656256914 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.656284094 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.656285048 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.656306982 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.656322002 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.656337976 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.656339884 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.656364918 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.671096087 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.671145916 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.671220064 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.672571898 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.672594070 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.672677994 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.673015118 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.673027992 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.673121929 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.673312902 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.673320055 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.673372984 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.675826073 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.676242113 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.676266909 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.676600933 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.676618099 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.676841974 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.676851988 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.677088976 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.677098989 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.681530952 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.681561947 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:34.681622028 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.681642056 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.681674957 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:34.681727886 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.682826996 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.682842970 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:34.683101892 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:34.683116913 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:34.683381081 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:34.683392048 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:34.683460951 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:34.683671951 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:34.683686018 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:34.709209919 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.716495037 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726080894 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726094961 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726140976 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726167917 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726197004 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.726212025 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.726243973 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.726275921 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.744364023 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.744386911 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.744431019 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.744445086 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.744472027 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.744488001 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.745855093 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.745873928 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.745925903 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.745934963 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.745985985 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.757838964 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:34.757870913 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:34.758013010 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:34.758215904 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:34.758229017 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:34.837251902 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.837280989 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.837341070 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.837368965 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.837383032 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.837414980 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.838068008 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.838084936 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.838146925 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.838157892 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.838326931 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.838368893 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.844125032 CEST	49827	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.844141006 CEST	443	49827	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.844672918 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.844708920 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.844825029 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.845302105 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.845314980 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906862974 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906888008 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906896114 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906929970 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906949043 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906956911 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.906970978 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.906991959 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.907008886 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.907008886 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.928998947 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.929017067 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.929037094 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.929075956 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.929085970 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.929147005 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.981292009 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.995748043 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995759010 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995784044 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995814085 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.995817900 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995826006 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995836020 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995893955 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.995893955 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.995906115 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.995945930 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.996325016 CEST	49828	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.996345043 CEST	443	49828	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.996690989 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.996737003 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:34.996891975 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.998112917 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:34.998126030 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.155500889 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.155703068 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.155719042 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.156783104 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.156837940 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.157784939 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.157840014 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.157927990 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.158587933 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.158781052 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.158807039 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.160209894 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.160259962 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.161134958 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.161201000 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.161303043 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.204494953 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.208501101 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.210992098 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.210993052 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.211005926 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.211007118 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.245146036 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.245372057 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.245390892 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.246562958 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.246624947 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.247622967 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.247687101 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.247776031 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.258816004 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.258819103 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.274368048 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274410009 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274437904 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274461985 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274476051 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.274488926 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274507046 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.274569988 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274609089 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.274616003 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274646997 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274688959 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.274694920 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.274754047 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.275098085 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.275125027 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.275175095 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.275182009 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.275214911 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.275420904 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.275432110 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.276506901 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.276568890 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.276879072 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.276930094 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.277004957 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.277013063 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.277851105 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.278141022 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.278150082 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.279166937 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.279222012 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.279294014 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.279489040 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.279540062 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.279622078 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.290127039 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290178061 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290235996 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.290239096 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290246964 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.290247917 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.290266037 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290298939 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.290301085 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290313959 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290348053 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.290355921 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290900946 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290955067 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.290963888 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.290999889 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.291029930 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.291043997 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.291052103 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.291109085 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.294926882 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.295011997 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.295388937 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.295403957 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.295727968 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.296030045 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.296109915 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.296248913 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.320636034 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.320638895 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.320661068 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.320689917 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.320700884 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.328013897 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.328186035 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.328203917 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.329246044 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.329292059 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.329658985 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.329706907 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.329808950 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.329817057 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.336604118 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.336626053 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.336642981 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.336648941 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.336662054 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.348543882 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349087954 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349149942 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.349152088 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349164009 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349210978 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349219084 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.349226952 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.349262953 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.356826067 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.356920004 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.356956005 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.357000113 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.357012987 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.357023954 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.357053041 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.362880945 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.362921000 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.362948895 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.362951994 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.362983942 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363014936 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.363461018 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363524914 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363540888 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.363564968 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363606930 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363612890 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.363624096 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.363670111 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.364147902 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364191055 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364312887 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364345074 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364356041 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.364377022 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364392996 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.364413977 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364507914 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.364520073 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.364962101 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.365107059 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.365115881 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.365128040 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.365180969 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.365200996 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.365269899 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.365291119 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.365312099 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.365324020 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.365369081 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.365585089 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.366183996 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.366236925 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.366276026 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.366292000 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.366321087 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.366369963 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.367562056 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.378804922 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.378850937 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.378890038 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.378901005 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.378921986 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.378936052 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.379189968 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379228115 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.379235029 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379285097 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379417896 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379446983 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379456997 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.379465103 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.379486084 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.380024910 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380062103 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380065918 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.380078077 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380139112 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.380146980 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380275965 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380306959 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380347967 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.380356073 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.380393028 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.380919933 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381036043 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381063938 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381074905 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.381083965 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381166935 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381212950 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.381221056 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381258011 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.381673098 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381886959 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.381925106 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.381932974 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.382222891 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.384727001 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.384943962 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.384953976 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.385441065 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.385792971 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.385879040 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.385989904 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.413608074 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.413682938 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.428756952 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.428781986 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.432502985 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.441899061 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442032099 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442073107 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442090034 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.442100048 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442161083 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.442199945 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442321062 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442380905 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.442389011 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442538023 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.442703962 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.442709923 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.443526983 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.443576097 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.443591118 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.443597078 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.443639994 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.450936079 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.451040030 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.451103926 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.451112032 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.451138020 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.451186895 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.451420069 CEST	49843	443	192.168.2.4	151.101.130.137
Jul 2, 2024 16:43:35.451431990 CEST	443	49843	151.101.130.137	192.168.2.4
Jul 2, 2024 16:43:35.452395916 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452559948 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452568054 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452619076 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.452652931 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452842951 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452889919 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452902079 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.452919006 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.452953100 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453085899 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453134060 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453135014 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453146935 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453182936 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453185081 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453195095 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453228951 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453630924 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453645945 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.453658104 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453711033 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453732014 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.453747988 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.453792095 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454016924 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.454029083 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.454216003 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454261065 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454273939 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454293013 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454308033 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454308987 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454333067 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454341888 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454353094 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454360962 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454399109 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454406977 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.454514027 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.454962969 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.455029964 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.455054045 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.455099106 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.455239058 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.455286980 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.455481052 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.455535889 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.455621958 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.455677032 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.456070900 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.456192970 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.456341982 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.456347942 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.467969894 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.467986107 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.468022108 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.468031883 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.468048096 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.468090057 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.468101025 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.468174934 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.468220949 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.468415022 CEST	49841	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.468434095 CEST	443	49841	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.509126902 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.510559082 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.510771990 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.510829926 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.510842085 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.510885954 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.511107922 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.511178017 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.511354923 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.512456894 CEST	49833	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.512465000 CEST	443	49833	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.512933016 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.512989998 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.513060093 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.518063068 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.518107891 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.530469894 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.540584087 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.540647030 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.540740967 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.540771008 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.540796041 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.540819883 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.540836096 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.541060925 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541096926 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541114092 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.541131973 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541169882 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.541699886 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541728020 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541749001 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.541770935 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.541788101 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542006969 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542052984 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542064905 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542197943 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542221069 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542232990 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542272091 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542365074 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542418003 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542428970 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542478085 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.542553902 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542853117 CEST	49840	443	192.168.2.4	104.18.10.207
Jul 2, 2024 16:43:35.542874098 CEST	443	49840	104.18.10.207	192.168.2.4
Jul 2, 2024 16:43:35.547672987 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547734022 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547755957 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547795057 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547795057 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.547836065 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.547857046 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547858953 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.547888041 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.547911882 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.571361065 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.571376085 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599008083 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599018097 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599049091 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599067926 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599075079 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.599080086 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599100113 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.599116087 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.599138975 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.600366116 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.600409031 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.600449085 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.600477934 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.600495100 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.610997915 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.611182928 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.611197948 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.612245083 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.612299919 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.612632990 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.612690926 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.613012075 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.613018990 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.613337040 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.613409042 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.613462925 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.613468885 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.613703012 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.613743067 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.615823030 CEST	49842	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:35.615833998 CEST	443	49842	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:35.624778986 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624788046 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624819994 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624828100 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624842882 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.624850988 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624862909 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624876022 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.624928951 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.624938011 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624958992 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.624998093 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.625439882 CEST	49831	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.625449896 CEST	443	49831	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.625736952 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.625780106 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.625917912 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.626507998 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.626526117 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630835056 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630867958 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630913019 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630927086 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.630944014 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630958080 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.630964041 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.631104946 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.633477926 CEST	49832	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.633495092 CEST	443	49832	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.633773088 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.633815050 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.633893013 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.634382963 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.634402037 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.636256933 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.636300087 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.636323929 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.636337042 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.636349916 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.636362076 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.636383057 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.661883116 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.686227083 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.686250925 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.686260939 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.686310053 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.686336994 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.686352015 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.686374903 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.686402082 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.687735081 CEST	49844	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.687747955 CEST	443	49844	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688167095 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688185930 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688236952 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688457966 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688502073 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688523054 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688544989 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688558102 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688568115 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.688591957 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688623905 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688795090 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.688808918 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.690257072 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.690300941 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.690325975 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.690340996 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.690360069 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.690466881 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.690519094 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.691375017 CEST	49834	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.691385984 CEST	443	49834	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.691643000 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.691668034 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.691957951 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.692287922 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.692306042 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.845007896 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.845110893 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.845165968 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.845180035 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.845221996 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.847805023 CEST	49845	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.847822905 CEST	443	49845	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.848216057 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.848242998 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:35.848320961 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.849137068 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:35.849150896 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.117163897 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.117803097 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.117829084 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.118195057 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.118771076 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.118828058 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.118927956 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.164501905 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.169341087 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.227787971 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.232307911 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.239339113 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.239351988 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.239509106 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.239537001 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.240117073 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.240287066 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.241082907 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.241210938 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.243958950 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.244045019 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.244193077 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.244546890 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.284509897 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.292521954 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.318110943 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.321031094 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.370932102 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.370959997 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.371196985 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.371212959 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.372410059 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.372430086 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.372504950 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.374838114 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.374876976 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.374938011 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.389738083 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.389885902 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.390549898 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.390753984 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391253948 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391294956 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391304970 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391335011 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391380072 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.391381025 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391393900 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.391417980 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.392220020 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.392230034 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.393359900 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.393371105 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.438822985 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.438853025 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.438920975 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.438937902 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.438972950 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.440337896 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.440344095 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.458801985 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.458827019 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.458899975 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.458961964 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.464226961 CEST	49852	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.464246988 CEST	443	49852	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464756012 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464796066 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464845896 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464875937 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.464890957 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464909077 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.464924097 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.464934111 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.464966059 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.465060949 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.465100050 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.465174913 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.466592073 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.466605902 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.468264103 CEST	49853	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.468276978 CEST	443	49853	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.473378897 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.487243891 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.487277985 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.488327980 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.488460064 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.488509893 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.502243996 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.502348900 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.502492905 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.502509117 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.521049023 CEST	49752	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:36.525990009 CEST	80	49752	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:36.527851105 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.527863979 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.527888060 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.527931929 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.527940989 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.527949095 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.527987003 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.529128075 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.529138088 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.529158115 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.529215097 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.529220104 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.529243946 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.529259920 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.529288054 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.529436111 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.530401945 CEST	49850	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.530416012 CEST	443	49850	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.552336931 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.561745882 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.561765909 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.561841965 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.561846018 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.561893940 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.562930107 CEST	49854	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.562944889 CEST	443	49854	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.563601971 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.563657045 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.563802958 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.563904047 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.567591906 CEST	49855	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.567601919 CEST	443	49855	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.600337029 CEST	49754	80	192.168.2.4	199.191.50.189
Jul 2, 2024 16:43:36.605199099 CEST	80	49754	199.191.50.189	192.168.2.4
Jul 2, 2024 16:43:36.710119963 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.710208893 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.710761070 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.784146070 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.784189939 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.784508944 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.785422087 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.785479069 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.785594940 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.786794901 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.786807060 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.787163019 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.787183046 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.815471888 CEST	49856	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.815493107 CEST	443	49856	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.916963100 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.917017937 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.917282104 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.917727947 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.917768002 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.917823076 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.918438911 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.918454885 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.918705940 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.919019938 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.919034004 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.919320107 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.919334888 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.919805050 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:36.919819117 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:36.922261953 CEST	49724	80	192.168.2.4	93.184.221.240
Jul 2, 2024 16:43:36.931612015 CEST	80	49724	93.184.221.240	192.168.2.4
Jul 2, 2024 16:43:36.931696892 CEST	49724	80	192.168.2.4	93.184.221.240
Jul 2, 2024 16:43:37.069092035 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.070291042 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.070321083 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.070693970 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.071713924 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.071785927 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.072185993 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.112602949 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.224379063 CEST	49758	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:37.229336977 CEST	80	49758	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:37.302145958 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.302177906 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.302242041 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.302252054 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.302297115 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.307032108 CEST	49857	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.307053089 CEST	443	49857	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.388267994 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.388315916 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.388375998 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.388901949 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.388915062 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.391593933 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.392996073 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.393006086 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.393353939 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.394005060 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.394067049 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.394329071 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.440507889 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.525288105 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.525603056 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.525623083 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.526637077 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.526696920 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.527971983 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.528042078 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.528109074 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.528779984 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.528814077 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.529112101 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.529119015 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.529774904 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.529829979 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.530742884 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.530800104 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.531050920 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.531059027 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.535569906 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.535897970 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.535906076 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.536923885 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.536984921 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.537772894 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.537827015 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.538197041 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.538203955 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.575333118 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.575383902 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.590502024 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.623583078 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.623608112 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.623656034 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.623683929 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.623698950 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.623739958 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.641191006 CEST	49858	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.641206980 CEST	443	49858	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.641599894 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.641633987 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.641690016 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.642537117 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.642558098 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.679224014 CEST	49762	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:37.684089899 CEST	80	49762	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:37.768770933 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.768852949 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.768896103 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.769407988 CEST	49862	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.769422054 CEST	443	49862	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.769937992 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.769967079 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.770021915 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.770529032 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.770543098 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798259020 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798284054 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798291922 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798319101 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798342943 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798345089 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.798363924 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.798376083 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.798398972 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.799333096 CEST	49763	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:37.804617882 CEST	80	49763	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:37.813493967 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813518047 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813525915 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813551903 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813566923 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.813577890 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813587904 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.813616991 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.813630104 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.847805023 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.847834110 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.847875118 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.847892046 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.847906113 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.847934008 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.850855112 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.850884914 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.850918055 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.850936890 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.850950956 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.895340919 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.898612976 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.898889065 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.898900986 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.899245024 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.899883986 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.899955034 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.900083065 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.903083086 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.903101921 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.903143883 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.903172016 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.903191090 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.903211117 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.940136909 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.940152884 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.940208912 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.940241098 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.940280914 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.941663027 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.941684008 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.941720963 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.941740990 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.941764116 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.941772938 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.943938971 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.943955898 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.943995953 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.944014072 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.944055080 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.944492102 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.961318016 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.961338997 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.961395025 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.961422920 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.961469889 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.964049101 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.964068890 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.964112043 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.964124918 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.964159012 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.964174032 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.965816975 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.965837955 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.965903997 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.965910912 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.965941906 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.966099977 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.992794037 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.992813110 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.992891073 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:37.992928028 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:37.993304968 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.004837990 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.005136013 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.005163908 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.005511045 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.005883932 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.005956888 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.006043911 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.031629086 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.031655073 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.031748056 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.031748056 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.031774998 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.031976938 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.032459974 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.032490015 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.032558918 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.032558918 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.032572031 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.032851934 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.033396006 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.033413887 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.033657074 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.033670902 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.033795118 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.034348011 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.034363031 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.034427881 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.034437895 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.034656048 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.048501015 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.050592899 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.050611019 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.050805092 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.050823927 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.050997972 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.055479050 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.070686102 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.070702076 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.070980072 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.070993900 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.071130037 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.072092056 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.072107077 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.072195053 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.072204113 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.072345018 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.080041885 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.080059052 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.080142021 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.080142021 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.080173969 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.080270052 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.085107088 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.085123062 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.085205078 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.085205078 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.085226059 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.085340977 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.086007118 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.086028099 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.086098909 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.086098909 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.086107016 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.086249113 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.097467899 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.097486019 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.097584963 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.097608089 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.097708941 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.118763924 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.118786097 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.118973017 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.119008064 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.119069099 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.121238947 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.121253014 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.121393919 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.121401072 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.121412039 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.121454000 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.121459007 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.121484995 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.121490955 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.125747919 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.133117914 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.133208036 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.133454084 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.138690948 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.138710976 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.138850927 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.138875961 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.138936996 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.139733076 CEST	49861	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.139753103 CEST	443	49861	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.141467094 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.141493082 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.145580053 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.147432089 CEST	49859	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.147432089 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.147442102 CEST	443	49859	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.147460938 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.148137093 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.148169994 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.149777889 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.150211096 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.150223017 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.166013002 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.166049957 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.166137934 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.166137934 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.166148901 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.166208982 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.233664989 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.233692884 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.233762980 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.233788967 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.233823061 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.233880997 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.242465019 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.242486954 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.242554903 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.242578030 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.242980957 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.258703947 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.259092093 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.259109020 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.259478092 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.261840105 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.261908054 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.262073040 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.274876118 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.274894953 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.275069952 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.275089979 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.275219917 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.301968098 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.302006006 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.302114010 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.302114010 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.302130938 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.302249908 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.308505058 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.310678005 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.310678005 CEST	49863	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.310724020 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.310741901 CEST	443	49863	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.310941935 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.311836958 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.311851025 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.370218039 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.370301008 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.370330095 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.370445013 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.370445013 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.370470047 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.370652914 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.373460054 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.373482943 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.373859882 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.375653028 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.375653028 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.375684023 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.375746965 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.410692930 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.410726070 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.410823107 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.410824060 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.410851955 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.413620949 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.422384024 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.438560963 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.438584089 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.438646078 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.438646078 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.438672066 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.438713074 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.497072935 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.497117043 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.497189999 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.497222900 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.497643948 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.551392078 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.551424980 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.551531076 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.551531076 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.551547050 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.555506945 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.557544947 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.557575941 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.558549881 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.558581114 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.558680058 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.606190920 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.606216908 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.606285095 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.606296062 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.606426954 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.622730017 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.622760057 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.622809887 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.622809887 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.622818947 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.623491049 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.644155025 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.644210100 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.644243956 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.644243956 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.644268990 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.644588947 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.730640888 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.748712063 CEST	49860	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.748730898 CEST	443	49860	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.749249935 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.749284029 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.749445915 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.750665903 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.750680923 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.752374887 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.753226995 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.753236055 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.753596067 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.754198074 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.754262924 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.754344940 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.759056091 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.759103060 CEST	49867	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.759114981 CEST	443	49867	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.759776115 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.759792089 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.760293961 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.764153004 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.764153004 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.764168978 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.764245033 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.767551899 CEST	49866	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.767568111 CEST	443	49866	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.796515942 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.804392099 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.910094976 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.926359892 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.926378012 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.932225943 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.966897964 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:38.967509985 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:38.968878984 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.012499094 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.032210112 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.032238960 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.032285929 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.032294035 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.032321930 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.032350063 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.034060001 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034090996 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034111023 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034121037 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034142017 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034141064 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.034151077 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034177065 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.034183025 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.034202099 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.073348045 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.074857950 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.074881077 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.074918032 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.074933052 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.074965954 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.074980974 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.086189985 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.086220980 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.086261034 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.086287022 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.086318016 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.109436035 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.109487057 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.109553099 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.114258051 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.114284039 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.121081114 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.121109009 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.121164083 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.121193886 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.121212959 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.121233940 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.137336016 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.143364906 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143389940 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143397093 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143434048 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143449068 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.143471956 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143481970 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.143507004 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.143532038 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.153651953 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.153670073 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.153708935 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.153719902 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.153722048 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.153742075 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.153748989 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.153760910 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.153786898 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.176641941 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.176661015 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.176703930 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.176743031 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.176757097 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.176781893 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.176800013 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.179968119 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.179997921 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.180073977 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.180079937 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.180124044 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.221940041 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.221976042 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.222073078 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.222430944 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.222455978 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.232278109 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.232310057 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.232357025 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.232372046 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.232399940 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.232412100 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.238698959 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.238729954 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.238780975 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.238795042 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.238817930 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.238836050 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.268836021 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.268923044 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.268953085 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.268965006 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.268997908 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.269010067 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.272423983 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.272458076 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.272490978 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.272500038 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.272531986 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.272548914 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.274880886 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.274914980 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.274945021 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.274950027 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.274991035 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.277734041 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.277770996 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.277802944 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.277806997 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.277838945 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.277851105 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.280443907 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.280477047 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.280514002 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.280519962 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.280545950 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.280558109 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.297416925 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.297449112 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.297507048 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.297523975 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.297574997 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.297574997 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.298934937 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.298964024 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.299004078 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.299012899 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.299052000 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.299071074 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.301630974 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.301646948 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.301697016 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.301703930 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.301736116 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.301755905 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.303966999 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.303985119 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.304044962 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.304052114 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.304092884 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.306442022 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.306457996 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.306492090 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.306499004 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.306521893 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.306529999 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.318864107 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.318888903 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.318945885 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.318952084 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.318988085 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.319006920 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.320709944 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.320729017 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.320780039 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.320786953 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.320811033 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.320830107 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.323045015 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.323069096 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.323115110 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.323121071 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.323160887 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.334247112 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.334279060 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.334320068 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.334342003 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.334352970 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.334373951 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.356972933 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.357006073 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.357044935 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.357055902 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.357085943 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.357110023 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.358586073 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.358619928 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.358656883 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.358663082 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.358704090 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.360259056 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.360280991 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.360351086 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.360358000 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.360408068 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.362848043 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.362865925 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.362876892 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.362903118 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.362907887 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.362951994 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.364360094 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.364388943 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.364418030 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.364423990 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.364451885 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.364471912 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.385840893 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.385862112 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.385910034 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.385930061 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.385942936 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.385967016 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.387919903 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.387943983 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.387989044 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.387996912 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.388022900 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.388041973 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.390147924 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.390167952 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.390223980 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.390232086 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.390269995 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.391222954 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.391238928 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.391283035 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.391288042 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.391350985 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.392267942 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.392287016 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.392352104 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.392358065 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.392395020 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.393861055 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.393882036 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.393919945 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.393924952 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.393959045 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.393978119 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.395453930 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.395473003 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.395510912 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.395517111 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.395545959 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.395562887 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.396518946 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.396559954 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.396575928 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.396580935 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.396609068 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.396610975 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.396647930 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.402543068 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.402575970 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.402621031 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.402631998 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.402659893 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.402679920 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.403283119 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.403304100 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.403340101 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.403347015 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.403381109 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.403403044 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.407210112 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.407227993 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.407274008 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.407279968 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.407340050 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.407376051 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.414134026 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.414155006 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.414216042 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.414222002 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.414274931 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.415648937 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.415663958 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.415704012 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.415708065 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.415759087 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.416996002 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.417012930 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.417057991 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.417062044 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.417092085 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.417109966 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.420768023 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.420799017 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.420835018 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.420841932 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.420881987 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.448285103 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.448311090 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.448349953 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.448400021 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.448405027 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.448441982 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.449526072 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.449585915 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.474641085 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.474651098 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.475179911 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.476881027 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.476950884 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.477041960 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.481429100 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.481450081 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.481498957 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.481533051 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.481555939 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.481570959 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.482604980 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.482621908 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.482681036 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.482700109 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.482739925 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484054089 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484071970 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484110117 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484127998 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484144926 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484173059 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484488010 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484497070 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484509945 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484575987 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484581947 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.484631062 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.484673977 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.485084057 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.486418009 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:39.486466885 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:39.486515045 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:39.486936092 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.487226009 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:39.487240076 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:39.490108013 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.490926027 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.491194963 CEST	49869	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.491219044 CEST	443	49869	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.495847940 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.495870113 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.495915890 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.495935917 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.495975018 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.497140884 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.497158051 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.497190952 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.497205973 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.497226954 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.497236967 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.498478889 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.498495102 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.498536110 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.498548985 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.498570919 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.498591900 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.503180027 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.503200054 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.503246069 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.503267050 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.503298044 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.503320932 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.504312038 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.504328966 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.504404068 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.504404068 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.504414082 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.504453897 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.505281925 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.505300999 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.505333900 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.505342007 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.505367994 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.505386114 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.520505905 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.539997101 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.540040016 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.540091991 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.540105104 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.540147066 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.541239023 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.541281939 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.541310072 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.541313887 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.541342020 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.541353941 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.542476892 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.542498112 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.542531013 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.542536974 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.542563915 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.542582989 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.544179916 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.544199944 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.544230938 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.544235945 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.544267893 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.544286013 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.545180082 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.545208931 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.545238018 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.545243979 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.545268059 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.545289040 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.545814037 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.570770025 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.570787907 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.570851088 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.570878029 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.570893049 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.570914984 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.572005033 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.572021008 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.572058916 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.572066069 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.572103024 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.572112083 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.586888075 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.586908102 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.586954117 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.586958885 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587003946 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.587021112 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587035894 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587080002 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.587086916 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587125063 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.587600946 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587615967 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587646008 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.587650061 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.587687016 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.587698936 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611283064 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611310005 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611346960 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611357927 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611386061 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611407042 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611821890 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611881971 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611887932 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611922026 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.611927032 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.611982107 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624142885 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624161959 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624197006 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624209881 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624238014 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624265909 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624389887 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624404907 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624433994 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624438047 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.624461889 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.624501944 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.625020027 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.625036955 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.625065088 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.625068903 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.625098944 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.625108957 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.629358053 CEST	49868	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.629380941 CEST	443	49868	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842173100 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842201948 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842240095 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842258930 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842278957 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.842293024 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.842343092 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.843086004 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.843112946 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.843161106 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.843189955 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.843205929 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.843230963 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.844055891 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.844072104 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.844108105 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.844114065 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.844140053 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.844160080 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.845949888 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.845968008 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.846020937 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.846028090 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.846065998 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.848776102 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.848793030 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.848849058 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.848855019 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.848897934 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.850438118 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.851089954 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.851835966 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.851855993 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.851891994 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.851906061 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.851924896 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.853005886 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.853056908 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.853063107 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.853072882 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.853096008 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.853128910 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.855050087 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855070114 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855123997 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.855129957 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855166912 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.855741024 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855756044 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855802059 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.855807066 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.855845928 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.857515097 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857530117 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857573986 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.857574940 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857589006 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857613087 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.857613087 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857642889 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.857650042 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857687950 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.857692003 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.857739925 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.872807026 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.872828007 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.873006105 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.873029947 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.873189926 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.873235941 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.873337030 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.873369932 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.873944998 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:39.874036074 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:39.874339104 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.874403954 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.875982046 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.876998901 CEST	49870	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.877012968 CEST	443	49870	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.880237103 CEST	49871	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:39.880255938 CEST	443	49871	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:39.916507959 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.037885904 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.037885904 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.037908077 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.038032055 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.092341900 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.092366934 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.131122112 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.131150961 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.131189108 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.131273985 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.131305933 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.131341934 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.140438080 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.151859999 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.152323961 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.152345896 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.153301001 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.153616905 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.154964924 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.155163050 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.155386925 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.155406952 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.161947966 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.162026882 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.162102938 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.165497065 CEST	49874	443	192.168.2.4	216.239.36.181
Jul 2, 2024 16:43:40.165518999 CEST	443	49874	216.239.36.181	192.168.2.4
Jul 2, 2024 16:43:40.172341108 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.209650993 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.243889093 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:40.243935108 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:40.244005919 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:40.245460987 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:40.245471954 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:40.262898922 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.262931108 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.263025045 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.264097929 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.264097929 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.264113903 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.264125109 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.264808893 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.264842987 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.264869928 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.265249968 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.265455961 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.265466928 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.265849113 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.265861988 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.266885042 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.266896009 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.266922951 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.266931057 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.266937017 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.266964912 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.266972065 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.267030954 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.267030954 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.267719984 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.267745018 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.269464970 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.269476891 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.269511938 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.270005941 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.270020008 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.292876005 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.292892933 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.293111086 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.293121099 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.293226004 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.294724941 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.294743061 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.294902086 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.294909954 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.295006037 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.361673117 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.361695051 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.361809015 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.361824036 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.361896038 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.390023947 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.390042067 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.390260935 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.390271902 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.390583038 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.391311884 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.391326904 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.391453981 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.391460896 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.391586065 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.425873041 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.426033974 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.427609921 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.470035076 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.470058918 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.470217943 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.470237970 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.470329046 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.471462965 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.471478939 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.471585035 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.471585989 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.471595049 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.476001978 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.494746923 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.494772911 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.494885921 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.494885921 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.494894981 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.495105982 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.562433958 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.562459946 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.562561989 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.562589884 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.562602997 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.562796116 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.605393887 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.605412960 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.605509996 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.605509996 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.605535030 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.606151104 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.608082056 CEST	49875	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:40.608107090 CEST	443	49875	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:40.630929947 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.630953074 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.631390095 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.631409883 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.631608009 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.698359966 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.698386908 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.698489904 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.698491096 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.698512077 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.698601961 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.740777969 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.740804911 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.740983963 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.741004944 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.741058111 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.766505957 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.766530037 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.766628981 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.766647100 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.766671896 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.767136097 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.833436966 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.833467007 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.833555937 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.833555937 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.833585024 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.833818913 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.863065004 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.864876032 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.876255035 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.876277924 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.877460957 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.877481937 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.881514072 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.881548882 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.881787062 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.893872023 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.900918007 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:40.902117968 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.902153015 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.902245998 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.902245998 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.902255058 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.902578115 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.906399012 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.906399012 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.922396898 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.922398090 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.937464952 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.953464031 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:40.969341993 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.969364882 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.969470978 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:40.969487906 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:40.973481894 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.011315107 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.011338949 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.011435032 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.011466980 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.011518955 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.037550926 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.037564993 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.037657976 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.037683964 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.037724972 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.103960991 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.103982925 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.104027033 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.104053974 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.104083061 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.104083061 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.105551958 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.105567932 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.105614901 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.105623007 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.105665922 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.173630953 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.173646927 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.173721075 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.173746109 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.173789978 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.214799881 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.214821100 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.214886904 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.214911938 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.214952946 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.240686893 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.240833044 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.240863085 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.240945101 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.240945101 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.240961075 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.240997076 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.242305994 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.242336035 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.242702007 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.242722034 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.243328094 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.243343115 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.243499994 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.243514061 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.243560076 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.243753910 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.243773937 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.243982077 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.244000912 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.244206905 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.244365931 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.244374990 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.244385958 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.244952917 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.245008945 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.246556997 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.246611118 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.246613979 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.250200033 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.250267982 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.255081892 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.255342007 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.257868052 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.257972002 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.261795998 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.261885881 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.262556076 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.262677908 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.263653040 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.263861895 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.266519070 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.266704082 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.271128893 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.272980928 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.273437977 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.273454905 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.273624897 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.273643017 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.273664951 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.273682117 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.273741961 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.273749113 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.306960106 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.306986094 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.307027102 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.307049990 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.307064056 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.307102919 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.308310032 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.308326006 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.308371067 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.308379889 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.308423042 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.312664032 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.316500902 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.316512108 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.319336891 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.319355011 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.319355965 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.375040054 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.375065088 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.375116110 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.375149965 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.375169039 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.375189066 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.376303911 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.376318932 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.376375914 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.376384020 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.376420975 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.412271023 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.437500954 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.437530994 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.437577963 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.437606096 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.437621117 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.437669992 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.438453913 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438505888 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438532114 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438548088 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.438549042 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438556910 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438606977 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.438621998 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438657045 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438692093 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.438694954 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.438736916 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.439747095 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.439773083 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.439810991 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.439825058 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.439847946 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.439886093 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.442948103 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.442986012 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443015099 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.443020105 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443052053 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.443068027 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.443263054 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443300962 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443348885 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.443361998 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443434954 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.443475008 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.455210924 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.455818892 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.455869913 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.470696926 CEST	49880	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.470732927 CEST	443	49880	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.473963022 CEST	49876	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.473984957 CEST	443	49876	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.474591017 CEST	49879	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.474611998 CEST	443	49879	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.474883080 CEST	49878	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.474901915 CEST	443	49878	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.479731083 CEST	49873	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.479737997 CEST	443	49873	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.481703043 CEST	49877	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.481719017 CEST	443	49877	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.483120918 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.483150005 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.483226061 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.485099077 CEST	49881	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:41.485112906 CEST	443	49881	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:41.487723112 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:41.487742901 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:41.493024111 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.493057013 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.493113995 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.493570089 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.493586063 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.962709904 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.965145111 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.965172052 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.966248989 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.966304064 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.973134995 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:41.973167896 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:41.973217010 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:41.973737001 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.973814964 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:41.974672079 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:41.974689960 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:41.975496054 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:41.975507021 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.005300045 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.005333900 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.005388975 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.005614042 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.005628109 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.117886066 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:42.136673927 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.175820112 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.176248074 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.176300049 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:42.176327944 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.176343918 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.176388025 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:42.186603069 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:42.186616898 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.187112093 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.193492889 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:42.193576097 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.199892044 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:42.211920977 CEST	49886	443	192.168.2.4	104.16.141.209
Jul 2, 2024 16:43:42.211935997 CEST	443	49886	104.16.141.209	192.168.2.4
Jul 2, 2024 16:43:42.240500927 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.303077936 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.303103924 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.303180933 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.303381920 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.303412914 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.303488016 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.305461884 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.305470943 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.305614948 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.305778027 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.305785894 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.305831909 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.306124926 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.306139946 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.306224108 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.306485891 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.306493998 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.306535006 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.306901932 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.306936026 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.307049990 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.307342052 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.307375908 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.307455063 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.308062077 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.308069944 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.308188915 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.309336901 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.309350014 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.309567928 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.309578896 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.309747934 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.309756041 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.309935093 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.309948921 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.310291052 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.310303926 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.310431004 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.310451031 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.310648918 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.310658932 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.310997009 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.311007023 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.311233997 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.311244011 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.402299881 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.402426958 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.402478933 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:42.470724106 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.470742941 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.470900059 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.471899033 CEST	49884	443	192.168.2.4	74.125.71.154
Jul 2, 2024 16:43:42.471918106 CEST	443	49884	74.125.71.154	192.168.2.4
Jul 2, 2024 16:43:42.473738909 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.473750114 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.628421068 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.628663063 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.628685951 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.629668951 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.629720926 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.630034924 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.630079985 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.630225897 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.630234003 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.632653952 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.635473013 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.635485888 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.635827065 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.636266947 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.636343956 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.636385918 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.680499077 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.750647068 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.750682116 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.786648035 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.788676023 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.788934946 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.889969110 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.890053988 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.890117884 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.904689074 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.910820007 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.912018061 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.912931919 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.914571047 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.920783997 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.920785904 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.942008972 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.942184925 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.942266941 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.942918062 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.948354959 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.950396061 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.955516100 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.955543041 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.956420898 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.956429005 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.956693888 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.956747055 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.956773996 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.956783056 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.957021952 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.957029104 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.957389116 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.957401037 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.957516909 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.957524061 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.957861900 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.957920074 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.957978010 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.958039999 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.958374023 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.958395004 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.958683014 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.958689928 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.958703041 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.958760023 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.958930016 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.958950996 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.959295988 CEST	49888	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:42.959336042 CEST	443	49888	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:42.959661007 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.959670067 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.959717035 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.959882975 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.959928989 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.959954977 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.959968090 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.960016966 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.960113049 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.960129023 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.960159063 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.960288048 CEST	49890	443	192.168.2.4	74.125.133.155
Jul 2, 2024 16:43:42.960304022 CEST	443	49890	74.125.133.155	192.168.2.4
Jul 2, 2024 16:43:42.960832119 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.960951090 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.961098909 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.961220980 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.961328030 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.961811066 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.961890936 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.962680101 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.962773085 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.964116096 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.964221001 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.964335918 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.964449883 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.964581966 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.965137005 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.965274096 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.965348959 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.965353966 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.965375900 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.965490103 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.965775967 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.965787888 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.965930939 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.965940952 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.966044903 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.966052055 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.966095924 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.966103077 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.966300011 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:42.966309071 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:42.966341019 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:42.966348886 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:42.966459990 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.966466904 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.966495991 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:42.966505051 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:42.966578960 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:42.966597080 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:42.997054100 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.997350931 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.997371912 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.998831034 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:42.998878956 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.999874115 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:42.999984026 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.000193119 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.000200987 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.075915098 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.075963974 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.075965881 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:43.075978994 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.076023102 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:43.076030970 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.076210976 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.076256990 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:43.076262951 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.076311111 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.076349020 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:43.076530933 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.076571941 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.076577902 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.076596022 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.076639891 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.076653004 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.076805115 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.076843977 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.076853037 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.077272892 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.077303886 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.077312946 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.077321053 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.077353954 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.077408075 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.078296900 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.078339100 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.078346968 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.079040051 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079078913 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079088926 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.079103947 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079148054 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.079154015 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079541922 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079581976 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.079588890 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079596996 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.079649925 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.079655886 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.079756975 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.079798937 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.079804897 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.080043077 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080075979 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080085039 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.080090046 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080128908 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.080184937 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080230951 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.080249071 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.080250025 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.080250025 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.080370903 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080410957 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080446005 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080461025 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.080467939 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.080499887 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.081017017 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.081048012 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.081053972 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.081058979 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.081091881 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.083923101 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.083965063 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.083966970 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.083980083 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.084017992 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.084023952 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.108922958 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.108922958 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.135035038 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.135121107 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.135196924 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.140954018 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142349958 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142373085 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142380953 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142419100 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.142430067 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142453909 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.142457962 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.142501116 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.144143105 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.144226074 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.144268990 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.166860104 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.166907072 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.166923046 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.166939974 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.166953087 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.166984081 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.167196989 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.167241096 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.167325974 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.167373896 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.167412043 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.167427063 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.168087959 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.168113947 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.168132067 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.168140888 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.168176889 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.168260098 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.168977976 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169008017 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169018030 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.169027090 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169060946 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.169156075 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169477940 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169528961 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.169544935 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169670105 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169708014 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.169714928 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169903040 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169907093 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169935942 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.169945002 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.169950962 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.169959068 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.169966936 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.170001984 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.170002937 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.170012951 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.170056105 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.170532942 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.170576096 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.170577049 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.170589924 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.170622110 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.171015024 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.171607971 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.171641111 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.171657085 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.171696901 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.171713114 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171736956 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.171775103 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.171794891 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171837091 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171844959 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.171852112 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171885014 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.171888113 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.171892881 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171926975 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.171931982 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171947002 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.171953917 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.171971083 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.171972990 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.171988964 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.171993017 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.172034979 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.172205925 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.172291040 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.172298908 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.172318935 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.172322989 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.172333956 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.172380924 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.172384977 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.172419071 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.172424078 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.172547102 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.172612906 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.172617912 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173121929 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.173170090 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.173185110 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173207045 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.173207045 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.173219919 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.173233032 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.173238039 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173259974 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.173261881 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173268080 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.173301935 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173302889 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.173314095 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.173350096 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.173355103 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174027920 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.174066067 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.174073935 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.174086094 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174132109 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174132109 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.174154997 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174207926 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.174213886 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174263000 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174299955 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.174300909 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174312115 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.174346924 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.199793100 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.199825048 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.199884892 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.200906038 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.200938940 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.200958967 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201000929 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201001883 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.201001883 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.201034069 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201065063 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.201088905 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.201143026 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201167107 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201174021 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201188087 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201195002 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201198101 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201205015 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.201236010 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.201253891 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.203098059 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.203130960 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.203191042 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.204339981 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.204356909 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.205524921 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.205535889 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.227077961 CEST	49896	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.227097034 CEST	443	49896	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.227334023 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.227349997 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.227389097 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.227411032 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.227420092 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.227511883 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.227554083 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.227622032 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.228369951 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.228384018 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.228954077 CEST	49893	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.228990078 CEST	443	49893	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.229446888 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.229484081 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.229533911 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.230591059 CEST	49900	443	192.168.2.4	104.17.128.172
Jul 2, 2024 16:43:43.230614901 CEST	443	49900	104.17.128.172	192.168.2.4
Jul 2, 2024 16:43:43.231471062 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.231487036 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.231736898 CEST	49891	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.231750011 CEST	443	49891	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.232162952 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.232203960 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.232268095 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235372066 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235395908 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235414028 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235457897 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235481024 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235483885 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235483885 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235502005 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235512972 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235528946 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235562086 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235569954 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235860109 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235871077 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235891104 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235898972 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235904932 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235908985 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235913038 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235939026 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.235941887 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.235968113 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.257463932 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.257536888 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.257606030 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.257618904 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.257652044 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.257690907 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.257975101 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.258023024 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.258196115 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.258240938 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.258652925 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.258685112 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.258698940 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.258706093 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.258729935 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.258749008 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.259506941 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.259557009 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.259701014 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.259753942 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.260163069 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260205030 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260210991 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.260222912 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260256052 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.260370970 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260376930 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.260431051 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.260565996 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.260618925 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.260632038 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.260701895 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.260740995 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.260920048 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260927916 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.260957956 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.260968924 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.261259079 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.261296988 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.261298895 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.261310101 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.261332035 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.261442900 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.261892080 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.261944056 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.261950016 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.261970997 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262012959 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262017965 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262056112 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262110949 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262156010 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262224913 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262247086 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.262252092 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262270927 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262274981 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.262275934 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262295961 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.262307882 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.262326002 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.262337923 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262343884 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262365103 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.262387991 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.262398958 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.262420893 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.289786100 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.289844036 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.289870024 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.289885998 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.289938927 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.289967060 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.289978981 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.297595978 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.297626972 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.297672033 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.297715902 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.297720909 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.297739983 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.297758102 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.297806025 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.319374084 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.319438934 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.319459915 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.319473982 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.319503069 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.319503069 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.324361086 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.324374914 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.324398041 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.324404955 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.324414968 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.324448109 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.324465036 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.386818886 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.386878014 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.386895895 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.386914015 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.386970043 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.386970043 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.392802000 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.392816067 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.392829895 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.392838001 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.392860889 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.392893076 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.392908096 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.393366098 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.393423080 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.393474102 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.393474102 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.393485069 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.393579960 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.394947052 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.394995928 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.395056009 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.395056009 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.395062923 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.395152092 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.408034086 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.408066034 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.408097982 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.408103943 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.408160925 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.408160925 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.417253971 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.417268038 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.417284966 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.417315960 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.417352915 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.417361975 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.417390108 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.419047117 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.419058084 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.419070005 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.419091940 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.419121027 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.419126987 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.419148922 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.420713902 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.420749903 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.420764923 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.420778036 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.420778036 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.420787096 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.420795918 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.420820951 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.433509111 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.433602095 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.433623075 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.433638096 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.433675051 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.433675051 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.471721888 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.472137928 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.472196102 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.480447054 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.480493069 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.480505943 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.480515957 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.480585098 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.482104063 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.482126951 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.482187986 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.482207060 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.482283115 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.482286930 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.482314110 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.482361078 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.482391119 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483768940 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483791113 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483814001 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483824968 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.483833075 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483834028 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.483891964 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.483896017 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.483921051 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.484836102 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.484855890 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.484889984 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.484898090 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.484954119 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.484954119 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.485421896 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.485444069 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.485470057 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.485475063 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.485558987 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.506225109 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.506275892 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.506337881 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.506380081 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.506397009 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.507041931 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.507093906 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.507097960 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.507121086 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.507143021 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.508058071 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.508097887 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.508120060 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.508146048 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.508162975 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.508162975 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.509063959 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509100914 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509125948 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.509146929 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509165049 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.509896040 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509929895 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509948969 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.509965897 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.509975910 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.530334949 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.530397892 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.530456066 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.530456066 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.530467033 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.530510902 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.552833080 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.552896023 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.552932978 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.552964926 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.552985907 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.553014040 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.553056955 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.553067923 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.553107023 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.553184986 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.553226948 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.616688013 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.616719007 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.616763115 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.616779089 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.616827965 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.616827965 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.617480040 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.617499113 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.617531061 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.617546082 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.617578983 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.618172884 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.618191957 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.618217945 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.618251085 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.618256092 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.618333101 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.618904114 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.618921995 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.618983984 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.618989944 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.619021893 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.619021893 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.619489908 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.619508028 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.619544983 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.619549990 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.619571924 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.619599104 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.634589911 CEST	49899	443	192.168.2.4	172.64.153.27
Jul 2, 2024 16:43:43.634629011 CEST	443	49899	172.64.153.27	192.168.2.4
Jul 2, 2024 16:43:43.659471035 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.659523010 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.659554958 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.659570932 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.659585953 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.659621000 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.659621000 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.684212923 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.684906960 CEST	49898	443	192.168.2.4	104.17.175.201
Jul 2, 2024 16:43:43.684938908 CEST	443	49898	104.17.175.201	192.168.2.4
Jul 2, 2024 16:43:43.687541962 CEST	49897	443	192.168.2.4	104.16.75.142
Jul 2, 2024 16:43:43.687560081 CEST	443	49897	104.16.75.142	192.168.2.4
Jul 2, 2024 16:43:43.688671112 CEST	49895	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.688689947 CEST	443	49895	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.688956976 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.688981056 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.689038992 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.689512014 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.689526081 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.695091963 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.705559015 CEST	49892	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.705588102 CEST	443	49892	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.706178904 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.706198931 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.706267118 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.707416058 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.707427979 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.711456060 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:43.711498976 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:43.711553097 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:43.711925030 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:43.711937904 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:43.712147951 CEST	49894	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.712161064 CEST	443	49894	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.712472916 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.712517977 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.712574959 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.713645935 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.713664055 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.722542048 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:43.722570896 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:43.722645044 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:43.723036051 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:43.723050117 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:43.837152004 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.837353945 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.837382078 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.837779045 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.838143110 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.838212013 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.838278055 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.852154016 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.852394104 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.852412939 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.852799892 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.853159904 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.853229046 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.853312969 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:43.854458094 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.854635954 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.854662895 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.855936050 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.855998039 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.856295109 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.856415987 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.856424093 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.856535912 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.867363930 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.868288994 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.868319035 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.869358063 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.869416952 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.870098114 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.870161057 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.870279074 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.870290995 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.884510040 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.900501966 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:43.912719011 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:43.912759066 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:43.945616961 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.067871094 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.089592934 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.089637995 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.089735985 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.089945078 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.089960098 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.090323925 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.090924978 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.090953112 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.092067003 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.092124939 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.092417002 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.092498064 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.092550993 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.110775948 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.110791922 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.110840082 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.110865116 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.110939026 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.117454052 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.129607916 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.129631996 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.129664898 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.129708052 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.129724979 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.129751921 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.140506983 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.159257889 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.159290075 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.159332037 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.159353971 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.159424067 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.159441948 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.159739017 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159780979 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159815073 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159832001 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.159847975 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159857988 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159893036 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.159908056 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.159948111 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.159954071 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.164994955 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.165103912 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.165127993 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169075012 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169107914 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169131041 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169156075 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169183016 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.169215918 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.169228077 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.172653913 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.172678947 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.172729015 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.172753096 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.172791958 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.174990892 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.175018072 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.175057888 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.175061941 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.175075054 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.175101995 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.196995974 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.197061062 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.197073936 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.197087049 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.197118998 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.197164059 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.198565960 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.198590040 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.198659897 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.198688984 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.198700905 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.204365969 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.204579115 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.204596043 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.205585957 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.205657959 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.206676960 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.206751108 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.206911087 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.206918001 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.206950903 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.207220078 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.207246065 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.208270073 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.208319902 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.209237099 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.209299088 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.209371090 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.222759962 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.222783089 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.222860098 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.222887039 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.224648952 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.224673033 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.224718094 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.224740028 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.224751949 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.224781036 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.244469881 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.244501114 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.244543076 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.245388985 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.248114109 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.248138905 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.248192072 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.248203039 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.248236895 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.249419928 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.249475002 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.249531984 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.249557018 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.249604940 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.249608994 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.249973059 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.249990940 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.250030994 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.250037909 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.250072956 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.250092030 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.252511978 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.254201889 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.254281044 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.254291058 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261378050 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261415005 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261478901 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.261498928 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261511087 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261540890 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.261570930 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261601925 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.261614084 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.261645079 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.263550997 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.264679909 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.266520977 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.270972013 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.270999908 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.271030903 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.271042109 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.271095037 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.272635937 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.272687912 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.272706985 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.272758961 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.272916079 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.272922993 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.276626110 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.278306961 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.278374910 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.278388023 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.282943964 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.282974005 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.283004999 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.283015966 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.283194065 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.284789085 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.284843922 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.284857988 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.290009022 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.290254116 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.290307999 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.290329933 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.291565895 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.291589975 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.291620016 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.291629076 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.291656017 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.291675091 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.294385910 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.294573069 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.294585943 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.294958115 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.295142889 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.295152903 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.296109915 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.296165943 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.296191931 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.298154116 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.298221111 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.298576117 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.298635960 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.298763037 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.298769951 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.300698042 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.300726891 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.300776005 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.300786972 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.300879002 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.307384014 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.307414055 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.307421923 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.307461023 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.307476997 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.307497025 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.307521105 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.308465004 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.308500051 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.314990044 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.315064907 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.315078974 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.317706108 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.317728996 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.317862034 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.317892075 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.317986012 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.319046021 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.319072008 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.319120884 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.319129944 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.319159985 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.319178104 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.321060896 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.321113110 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.321130037 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.325444937 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.325664043 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.325675964 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.326138973 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.326195955 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.326205015 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.326320887 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.326400995 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.326600075 CEST	49905	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.326615095 CEST	443	49905	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.329581022 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.329642057 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.330024958 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.330208063 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.330214977 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.330756903 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.330980062 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.331002951 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.334896088 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.334983110 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.335325003 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.335489988 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.336061954 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.336074114 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.336556911 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337652922 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337665081 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337682009 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337690115 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337728024 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.337739944 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.337763071 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.338970900 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.338979959 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.338992119 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.338999033 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.339020967 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.339037895 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.339075089 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.339864016 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.339901924 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.339942932 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.339971066 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.340017080 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.340023041 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.340048075 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.340146065 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.340241909 CEST	49904	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:44.340256929 CEST	443	49904	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:44.341013908 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.341037989 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.341101885 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.341116905 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.341207027 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.343389988 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.343408108 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.343487024 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.343496084 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.343730927 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.344228029 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.344247103 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.344285965 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.344293118 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.344324112 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.344341040 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.368330002 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368344069 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368386984 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.368388891 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368412971 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368419886 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368438959 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.368441105 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.368464947 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.383188963 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.383243084 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.383261919 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.383275986 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.383317947 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.384644032 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.384658098 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.384718895 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.384748936 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.384896040 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.384902954 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.384942055 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.384948969 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385469913 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385478020 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385488033 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385495901 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385528088 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.385539055 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.385564089 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.387151957 CEST	49913	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.387172937 CEST	443	49913	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.388937950 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.388967037 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.389034033 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.389465094 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.389482021 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.391602993 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.391643047 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.391653061 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.391658068 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.391671896 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.391680002 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.391700983 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.391722918 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.404000998 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.404031992 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.404078960 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.404113054 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.404129028 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.404146910 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.405278921 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.405298948 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.405342102 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.405350924 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.405361891 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.405384064 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.406765938 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.406790972 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.406840086 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.406847954 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.406879902 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.406898975 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.418014050 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418025017 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418067932 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.418068886 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418086052 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418097973 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418111086 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.418111086 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.418123960 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418138027 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.418145895 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.418157101 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.426402092 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.426424980 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.426466942 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.426484108 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.426506996 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.426522017 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.427474976 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.427494049 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.427534103 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.427541018 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.427562952 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.427583933 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.428191900 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.428214073 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.428255081 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.428270102 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.428282976 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.429337025 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.429352045 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.429408073 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.429414988 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.429471016 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.430006981 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430027008 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430068016 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.430077076 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430087090 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.430679083 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430696011 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430732965 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.430747986 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.430759907 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.430780888 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.432643890 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.432658911 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.432727098 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.432733059 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.456962109 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.456974030 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457086086 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457102060 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.457106113 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457118988 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457134962 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457164049 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.457279921 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.457279921 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.504524946 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.504736900 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.504795074 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.504811049 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.505563974 CEST	49911	443	192.168.2.4	104.18.242.108
Jul 2, 2024 16:43:44.505589008 CEST	443	49911	104.18.242.108	192.168.2.4
Jul 2, 2024 16:43:44.510674953 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510684013 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510725021 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510740995 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510751963 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510754108 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.510771036 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510782957 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.510797977 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.510804892 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.510823011 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.513302088 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513309956 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513335943 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513345003 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513350964 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513365984 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.513372898 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513380051 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.513403893 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.513439894 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.516521931 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.516522884 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.516522884 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.516530991 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.517832041 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.517865896 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.517900944 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.517918110 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.517935991 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.517951012 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.527338982 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.527390003 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.527453899 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.528058052 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.528070927 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.531908989 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.531956911 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.532164097 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.532187939 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.532217026 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.533344030 CEST	49909	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.533370972 CEST	443	49909	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.533727884 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.533766031 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.533818007 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.534434080 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.534452915 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542013884 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542042971 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542083025 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.542114019 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542133093 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.542152882 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.542746067 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542764902 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542808056 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.542824984 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.542848110 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.542862892 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.543381929 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543399096 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543466091 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.543484926 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543565989 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.543787956 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543803930 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543839931 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.543850899 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.543872118 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.543886900 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.544630051 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.544646978 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.544682026 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.544704914 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.544723988 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.544749022 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.545196056 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.545214891 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.545262098 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.545283079 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.545295000 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.545363903 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.560259104 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.560347080 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.560404062 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.561117887 CEST	49912	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.561141968 CEST	443	49912	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.561590910 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.561629057 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.561685085 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.562164068 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.562177896 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.563121080 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.563170910 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.563354015 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.563355923 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.563401937 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.564392090 CEST	49910	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.564421892 CEST	443	49910	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.564718008 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.564735889 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.564811945 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.566272020 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.566287041 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567240000 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567250013 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567286968 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567296982 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567297935 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.567343950 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.567358971 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567395926 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.567755938 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567764997 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567806959 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567835093 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.567836046 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567852020 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.567878008 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.567878008 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.569046021 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.569067001 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.569102049 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.569109917 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.569133997 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.585731030 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.585757971 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.585803032 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.585815907 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.585844040 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.585865021 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.603192091 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.603210926 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.603252888 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.603267908 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.603285074 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.610788107 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.610810041 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.610866070 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.610874891 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.610908031 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.610927105 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.632215023 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.632246017 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.632299900 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.632313013 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.632339954 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.632355928 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.635435104 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.635451078 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.635487080 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.635518074 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.635529995 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.635554075 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.635574102 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.635811090 CEST	49907	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.635838032 CEST	443	49907	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.653445959 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.653472900 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.653526068 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.653538942 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.653563976 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.653579950 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.663642883 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.663660049 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.663716078 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.663728952 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665014029 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665021896 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665034056 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665040970 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665066957 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.665077925 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.665102005 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.666692019 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.666735888 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.666749001 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.666752100 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.666766882 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.666778088 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.666780949 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.666810989 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.666832924 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.667504072 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.667521954 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.667566061 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.667573929 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.667599916 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.668828011 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.668842077 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.668891907 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.668910027 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.669821978 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.669836044 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.669876099 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.669892073 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.669915915 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.678930044 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.678951979 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.679011106 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.679044962 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.679754019 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.680141926 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.680159092 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.680190086 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.680201054 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.680222034 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.680237055 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.720988035 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721019983 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721059084 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721088886 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721112013 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721127987 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721412897 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721472025 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721487045 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721509933 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.721543074 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721570015 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721785069 CEST	49906	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.721801043 CEST	443	49906	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.734225035 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.734251976 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.734288931 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.734319925 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.734349012 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.735028028 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.735044956 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.735079050 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.735116005 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.735136032 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.735172033 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.742295027 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.742636919 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.742670059 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.743796110 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.743849039 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.744318962 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.744476080 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.744488001 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.745064974 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.775386095 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.775404930 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.775471926 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.775500059 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776124954 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776173115 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776181936 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.776187897 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776206017 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776220083 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.776223898 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.776243925 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.776992083 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.777008057 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.777040005 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.777056932 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.777070999 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.798496962 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.798521996 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.798578978 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.798610926 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.798624992 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.799102068 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.799119949 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.799154997 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.799161911 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.799190998 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.818454027 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:44.818485975 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:44.839200020 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.839226007 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.839267015 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.839297056 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.839313030 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.858684063 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.858870983 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.858890057 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.859183073 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.859452963 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.859520912 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.859535933 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.868807077 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.868828058 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.868835926 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.868913889 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.868937969 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.868952990 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.869493008 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.869509935 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.869549036 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.869561911 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.869570017 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.869597912 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.900511980 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:44.905992985 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906013012 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906095982 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.906114101 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906698942 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906734943 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906750917 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906760931 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.906764030 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906784058 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.906800985 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.940078974 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940102100 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940130949 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940149069 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.940164089 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940195084 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.940753937 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940763950 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940779924 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940788031 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940814018 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.940823078 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.940843105 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.946476936 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:44.974212885 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.974237919 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.974284887 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.974318027 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:44.974334002 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:44.995934010 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.996296883 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.996321917 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.997328043 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.997380018 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.997714043 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.997775078 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:44.997838974 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:44.997848034 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:45.007397890 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.007412910 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.007447958 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.007468939 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.007479906 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.007507086 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.008164883 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.008192062 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.008202076 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.008215904 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.008233070 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.008238077 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.008268118 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.010453939 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:45.041723967 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.041749954 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.041779995 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.041804075 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.041825056 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.041837931 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.051095009 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:45.051582098 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.051701069 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.051744938 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.052244902 CEST	49921	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.052265882 CEST	443	49921	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.052609921 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:45.052670002 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:45.053047895 CEST	49915	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:45.053071022 CEST	443	49915	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:45.068489075 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.068514109 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.068562984 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.068766117 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.068775892 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.091790915 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:45.091855049 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.144304991 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.144314051 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.144350052 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.144362926 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.144373894 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.144397020 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.144411087 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.144443989 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.144885063 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145098925 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145102978 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145107031 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145111084 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145123005 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145132065 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145145893 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145179987 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145185947 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145317078 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145613909 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145633936 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145636082 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145663977 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145669937 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.145693064 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145709038 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.145998955 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.146130085 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.146156073 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.146265030 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.146294117 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.146317005 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.146321058 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.146332979 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.146364927 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.146589994 CEST	49908	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.146600008 CEST	443	49908	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.174488068 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.175672054 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.175688028 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.177285910 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.177350044 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.177660942 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.177835941 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.177841902 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.177854061 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.192488909 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.197712898 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:45.197782993 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:45.197835922 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:45.198939085 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.199239969 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.199255943 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.199559927 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.200186014 CEST	49925	443	192.168.2.4	104.18.244.108
Jul 2, 2024 16:43:45.200201035 CEST	443	49925	104.18.244.108	192.168.2.4
Jul 2, 2024 16:43:45.200611115 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.200612068 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.200668097 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.217443943 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.217526913 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.217540979 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.323170900 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:45.323206902 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:45.323256016 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:45.323744059 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:45.323760033 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:45.345463991 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.376152992 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.376182079 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.376241922 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.376260042 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.376303911 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.376869917 CEST	49926	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.376890898 CEST	443	49926	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.409452915 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422518015 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422564983 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422585011 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422616005 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422656059 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422683954 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422683954 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422704935 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422740936 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422760010 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422785997 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422795057 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.422815084 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.422827959 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.436178923 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.436204910 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.436255932 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.436269999 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.436280966 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.436323881 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.436837912 CEST	49927	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.436851025 CEST	443	49927	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446213961 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446245909 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446274996 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.446276903 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446299076 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.446320057 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.446336031 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446357965 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446376085 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.446377993 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.446398973 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.446434021 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.546911001 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.547200918 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.547231913 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.551819086 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.551881075 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.552186966 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.552253008 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.552319050 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.559967995 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.559978008 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.560019016 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.560033083 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.560038090 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.560070038 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.560090065 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.560090065 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.560106993 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.561678886 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.561702013 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.561737061 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.561748028 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.561773062 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.561789989 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.563855886 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.563878059 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.563920975 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.563930035 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.563961029 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.563968897 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.596508980 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.600167036 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.600193977 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.648422956 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.648448944 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.648505926 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.648519993 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.648540974 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.648658037 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649168015 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649189949 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649225950 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649235010 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649262905 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649276018 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649764061 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649785042 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649831057 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649837971 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.649868011 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.649878025 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.693413019 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.693434954 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.693470001 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.693480968 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.693505049 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.693525076 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.695251942 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.695274115 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.695303917 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.695313931 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.695347071 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.695360899 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.714896917 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.719675064 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.719793081 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.719845057 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.724020958 CEST	49929	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:45.724040985 CEST	443	49929	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:45.761198997 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.761226892 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.761265039 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.761282921 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.761307955 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.761317968 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.763067007 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.763087988 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.763122082 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.763130903 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.763156891 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.763165951 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.764081001 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.764101028 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.764147997 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.764156103 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.764185905 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.764213085 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.786521912 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.786562920 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:45.786699057 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.787359953 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.787369013 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:45.830672026 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.830703020 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.830763102 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.830782890 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.830796957 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.830918074 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.831293106 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.831316948 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.831343889 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.831351995 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.831382036 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.831394911 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.836538076 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:45.836581945 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:45.836689949 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:45.837047100 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:45.837064981 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:45.839108944 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:45.839148045 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:45.839195013 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:45.839627981 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:45.839643002 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:45.896528006 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.896595955 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:45.897495985 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.897721052 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:45.897737980 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:45.898495913 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.898535013 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.898585081 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.898607016 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.898629904 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.898649931 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.899199963 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.899234056 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.899272919 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.899286985 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.899311066 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.899327993 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.964606047 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.964643955 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.964705944 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.964735985 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.964764118 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.965070963 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.966341972 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.966377974 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.966417074 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.966432095 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.966480017 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.967150927 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.967174053 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.967214108 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.967227936 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:45.967253923 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.967269897 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:45.970581055 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:45.970823050 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:45.970840931 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:45.971196890 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:45.971880913 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:45.971956968 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:46.016458988 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:46.034205914 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.034235001 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.034297943 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.034317017 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.034342051 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.034360886 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.035082102 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.035103083 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.035140991 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.035156012 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.035181999 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.035486937 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.100579023 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.100610971 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.100661993 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.100683928 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.100701094 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.100722075 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102032900 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102065086 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102092981 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102102995 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102132082 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102150917 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102744102 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102771044 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102807999 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102818012 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.102848053 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.102868080 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.169677973 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.169711113 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.169742107 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.169760942 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.169789076 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.169805050 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.170397043 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.170419931 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.170455933 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.170464993 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.170495987 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.170511007 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.238234043 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.238262892 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.238295078 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.238316059 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.238338947 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.238369942 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.241575956 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.241596937 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.241638899 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.241653919 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.241677999 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.241691113 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.242503881 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.242527962 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.242571115 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.242579937 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.242611885 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.242664099 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.308274984 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308299065 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308346033 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.308370113 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308383942 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.308557034 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.308873892 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308908939 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308938026 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.308947086 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.308976889 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.309006929 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.309104919 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.309269905 CEST	49928	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:46.309286118 CEST	443	49928	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:46.441649914 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.441900969 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.441927910 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.442214966 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.442497015 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.442553997 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.442614079 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.483046055 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.485057116 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.485359907 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:46.485373020 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.485546112 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.485579967 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.485708952 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.486320019 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:46.486392021 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.486566067 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:46.486862898 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.486929893 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.488197088 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.488260031 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.488374949 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.488384962 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.488497972 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.528544903 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.542459011 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.565594912 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.566915989 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.566955090 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.567399979 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.569710016 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.569808960 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.569830894 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.612528086 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.727390051 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.727543116 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.727588892 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.750468016 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.782136917 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.782238960 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:46.782279968 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:46.795465946 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.795516968 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.795746088 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:46.795753002 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.795783043 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:46.842278004 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842330933 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842355013 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842381001 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842403889 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.842407942 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842437029 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.842463017 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.842573881 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.848117113 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.848155975 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.848310947 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.848323107 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.854175091 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.854233980 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.854240894 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.860300064 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.860816956 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.860822916 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.935849905 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.935930014 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:46.935961962 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.936079979 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:46.937488079 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:47.133325100 CEST	49932	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:47.133363962 CEST	443	49932	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:47.163572073 CEST	49934	443	192.168.2.4	216.58.206.66
Jul 2, 2024 16:43:47.163605928 CEST	443	49934	216.58.206.66	192.168.2.4
Jul 2, 2024 16:43:47.184880018 CEST	49935	443	192.168.2.4	142.250.185.66
Jul 2, 2024 16:43:47.184921980 CEST	443	49935	142.250.185.66	192.168.2.4
Jul 2, 2024 16:43:47.238300085 CEST	49936	443	192.168.2.4	142.250.185.68
Jul 2, 2024 16:43:47.238343954 CEST	443	49936	142.250.185.68	192.168.2.4
Jul 2, 2024 16:43:48.180638075 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.180701971 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.180769920 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.181559086 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.181576967 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.844733000 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.866813898 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.866858006 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.867422104 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.915184975 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.990387917 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.990571976 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:48.990582943 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:48.990634918 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:49.048491001 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:49.275934935 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:49.276024103 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:49.276125908 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:49.276894093 CEST	49941	443	192.168.2.4	142.250.186.100
Jul 2, 2024 16:43:49.276927948 CEST	443	49941	142.250.186.100	192.168.2.4
Jul 2, 2024 16:43:49.579081059 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:49.579144955 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:49.579242945 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:49.580322027 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:49.580344915 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:49.587810040 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:49.587845087 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:49.588032007 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:49.588337898 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:49.588347912 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:49.726754904 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:49.726800919 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:49.726866007 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:49.727461100 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:49.727477074 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.071597099 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.078902006 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.078922033 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.080007076 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.080066919 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.086138010 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.086215019 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.086731911 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.086744070 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.131891966 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.198254108 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.198596001 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:50.198621988 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.198924065 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.201962948 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:50.202070951 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.206918001 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:50.248507977 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.270679951 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.270762920 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.270843029 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.382575989 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.412054062 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.412087917 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.412570000 CEST	49943	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:50.412590981 CEST	443	49943	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:50.412938118 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.414194107 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.414544106 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.414558887 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.416552067 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.470145941 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.470170021 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.470185995 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.470325947 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:50.470352888 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:50.470403910 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:50.473319054 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.665883064 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.666326046 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:50.669127941 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.937263012 CEST	49945	443	192.168.2.4	172.217.16.196
Jul 2, 2024 16:43:50.937314987 CEST	443	49945	172.217.16.196	192.168.2.4
Jul 2, 2024 16:43:51.125272036 CEST	49942	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:51.125302076 CEST	443	49942	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:51.829371929 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:51.829421043 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:51.829473972 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:51.829915047 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:51.829927921 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:51.848237991 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:51.848278999 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:51.848340034 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:51.874545097 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:51.874592066 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.343578100 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.343950987 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.343980074 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.344984055 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.345062971 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.346554995 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.346621990 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.347094059 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.347105026 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.431915998 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.432571888 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.432604074 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.432950974 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.433445930 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.433501005 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.433911085 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.460136890 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.476500034 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.523590088 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.523668051 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.523725033 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.525326014 CEST	49947	443	192.168.2.4	104.16.117.116
Jul 2, 2024 16:43:52.525347948 CEST	443	49947	104.16.117.116	192.168.2.4
Jul 2, 2024 16:43:52.662688971 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.662714958 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.662769079 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.662800074 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.704097986 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.704153061 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.704186916 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.704205990 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.704231977 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.704247952 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:52.704266071 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.704296112 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.704634905 CEST	49946	443	192.168.2.4	103.224.182.24
Jul 2, 2024 16:43:52.704653978 CEST	443	49946	103.224.182.24	192.168.2.4
Jul 2, 2024 16:43:55.705728054 CEST	49788	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:55.710743904 CEST	80	49788	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:55.737725973 CEST	49793	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:55.742676020 CEST	80	49793	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:55.893198013 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:55.893299103 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:55.893440962 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:56.136729956 CEST	49796	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:56.147372007 CEST	80	49796	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:56.287051916 CEST	49931	443	192.168.2.4	142.250.74.196
Jul 2, 2024 16:43:56.287106037 CEST	443	49931	142.250.74.196	192.168.2.4
Jul 2, 2024 16:43:56.296710968 CEST	49798	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:56.296760082 CEST	49797	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:56.301729918 CEST	80	49798	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:56.301760912 CEST	80	49797	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:56.389911890 CEST	49799	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:56.390012026 CEST	49795	80	192.168.2.4	18.66.121.135
Jul 2, 2024 16:43:56.394773006 CEST	80	49799	208.91.196.253	192.168.2.4
Jul 2, 2024 16:43:56.394845009 CEST	80	49795	18.66.121.135	192.168.2.4
Jul 2, 2024 16:43:56.504745960 CEST	49782	80	192.168.2.4	103.224.182.252
Jul 2, 2024 16:43:56.504806995 CEST	49800	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:43:56.509808064 CEST	80	49782	103.224.182.252	192.168.2.4
Jul 2, 2024 16:43:56.509828091 CEST	80	49800	208.91.196.253	192.168.2.4
Jul 2, 2024 16:44:00.018554926 CEST	49785	80	192.168.2.4	13.248.148.254
Jul 2, 2024 16:44:00.031836033 CEST	80	49785	13.248.148.254	192.168.2.4
Jul 2, 2024 16:44:00.418520927 CEST	49810	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:44:00.423425913 CEST	80	49810	208.91.196.253	192.168.2.4
Jul 2, 2024 16:44:00.690541029 CEST	49794	80	192.168.2.4	76.223.26.96
Jul 2, 2024 16:44:00.696346045 CEST	80	49794	76.223.26.96	192.168.2.4
Jul 2, 2024 16:44:00.776865959 CEST	49813	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:44:00.787470102 CEST	80	49813	208.91.196.253	192.168.2.4
Jul 2, 2024 16:44:00.872869015 CEST	49814	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:44:00.877793074 CEST	80	49814	208.91.196.253	192.168.2.4
Jul 2, 2024 16:44:00.920942068 CEST	49815	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:44:00.925760984 CEST	80	49815	208.91.196.253	192.168.2.4
Jul 2, 2024 16:44:00.936866999 CEST	49816	80	192.168.2.4	208.91.196.253
Jul 2, 2024 16:44:00.941660881 CEST	80	49816	208.91.196.253	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 16:42:40.974807024 CEST	53	60367	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:40.987984896 CEST	53	49420	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:41.984234095 CEST	53	55364	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:42.529301882 CEST	57021	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:42.529473066 CEST	52857	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:42.990873098 CEST	53	57021	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:42.992549896 CEST	53	52857	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:43.607634068 CEST	59775	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:43.607791901 CEST	51353	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:44.067038059 CEST	53	51353	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:44.075577021 CEST	53	59775	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:45.276961088 CEST	63075	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:45.277118921 CEST	62642	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:45.284751892 CEST	53	63075	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:45.284768105 CEST	53	62642	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:48.343339920 CEST	138	138	192.168.2.4	192.168.2.255
Jul 2, 2024 16:42:49.557802916 CEST	59226	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:49.558052063 CEST	55395	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:49.972598076 CEST	53	55395	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:50.101706982 CEST	53	59226	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.113265038 CEST	57776	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.113434076 CEST	56779	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.113995075 CEST	49829	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.114192963 CEST	58835	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.121630907 CEST	53	56779	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.122376919 CEST	53	57776	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.122410059 CEST	53	58835	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.124167919 CEST	53	49829	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.508093119 CEST	62702	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.508379936 CEST	62674	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.524708986 CEST	53	62702	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.540137053 CEST	53	62674	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.609152079 CEST	58841	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.609297991 CEST	53915	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:51.615976095 CEST	53	58841	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:51.617712021 CEST	53	53915	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:52.226634026 CEST	61081	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:52.226798058 CEST	59034	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:52.243899107 CEST	53	59034	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:52.247184038 CEST	53	61081	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:57.329847097 CEST	61091	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:57.330271959 CEST	63619	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:57.336534023 CEST	57523	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:57.336850882 CEST	59171	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:57.337430000 CEST	53	61091	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:57.337749958 CEST	53	63619	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:57.344866037 CEST	53	57523	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:57.345678091 CEST	53	59171	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:58.216602087 CEST	63901	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:58.216989040 CEST	61329	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:58.224297047 CEST	53	61329	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:58.229676962 CEST	53	63901	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:58.890470982 CEST	56204	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:58.890645027 CEST	56295	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:42:58.897406101 CEST	53	56295	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:58.897779942 CEST	53	56204	1.1.1.1	192.168.2.4
Jul 2, 2024 16:42:59.721714973 CEST	53	50465	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:07.719352007 CEST	30571	16755	192.168.2.4	192.168.2.1
Jul 2, 2024 16:43:07.725920916 CEST	49356	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:07.726619959 CEST	54014	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:07.884448051 CEST	53	49356	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:08.034493923 CEST	53	54014	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:08.711083889 CEST	64959	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:08.711373091 CEST	62681	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:08.719070911 CEST	53	62681	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:08.722465992 CEST	53	64959	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.238646030 CEST	49602	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.238898993 CEST	57487	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.563844919 CEST	53	57487	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.702179909 CEST	53	49602	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.821243048 CEST	53239	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.821422100 CEST	57737	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.824045897 CEST	64869	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.824335098 CEST	59775	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.825094938 CEST	51156	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.825301886 CEST	49708	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:09.832753897 CEST	53	59775	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.832791090 CEST	53	64869	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.833139896 CEST	53	51156	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:09.833873987 CEST	53	49708	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.112772942 CEST	55887	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.113004923 CEST	56641	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.120806932 CEST	53	55887	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.136830091 CEST	53	57737	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.149400949 CEST	53	56641	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.275115013 CEST	53	53239	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.563807964 CEST	59234	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.564232111 CEST	50739	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.571283102 CEST	53	59234	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.572190046 CEST	53	50739	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.741441011 CEST	55081	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.741765976 CEST	64269	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.749263048 CEST	53	55081	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.772891998 CEST	53	64269	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.784090996 CEST	50615	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.784248114 CEST	49664	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:10.791724920 CEST	53	50615	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:10.792171955 CEST	53	49664	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:11.415608883 CEST	54813	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:11.415775061 CEST	50705	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:11.422846079 CEST	53	54813	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:11.425152063 CEST	53	50705	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:12.380889893 CEST	60456	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:12.381093025 CEST	57320	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:12.387665033 CEST	53	60456	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:12.390839100 CEST	53	57320	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:13.031692982 CEST	21361	29805	192.168.2.4	192.168.2.1
Jul 2, 2024 16:43:14.480762005 CEST	58127	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:14.481550932 CEST	63191	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:14.502295017 CEST	53	58127	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:14.555305958 CEST	58981	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:14.555510044 CEST	63200	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:14.561847925 CEST	53	63191	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:14.565083981 CEST	53	58981	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:14.573978901 CEST	53	63200	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:15.485903025 CEST	50133	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:15.486357927 CEST	59780	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:15.494349003 CEST	53	50133	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:15.502286911 CEST	53	59780	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:18.806896925 CEST	53	61096	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:19.198613882 CEST	23094	20051	192.168.2.4	192.168.2.1
Jul 2, 2024 16:43:33.222877026 CEST	56167	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:33.223083019 CEST	65507	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:33.538829088 CEST	53	65507	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:33.544996977 CEST	53	56167	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.625988007 CEST	53	59463	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.658379078 CEST	51209	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.658688068 CEST	53470	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.666821957 CEST	53	53470	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.669926882 CEST	49631	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.670084000 CEST	49332	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.673706055 CEST	53	58445	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.674685001 CEST	55842	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.674823999 CEST	51512	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.676806927 CEST	53	49332	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.677814960 CEST	53	49631	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.679526091 CEST	53	49732	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.681706905 CEST	53	55842	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.681838989 CEST	53	51512	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.749270916 CEST	50680	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.749416113 CEST	53879	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:34.756222010 CEST	53	53879	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:34.757220984 CEST	53	50680	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:35.339818001 CEST	61347	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:35.340030909 CEST	55307	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:35.347323895 CEST	53	55307	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:35.613711119 CEST	53	57202	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:39.212898016 CEST	56711	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:39.213356018 CEST	53083	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:39.220180988 CEST	53	56711	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:39.221015930 CEST	53	53083	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:39.475960970 CEST	54549	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:39.476250887 CEST	51830	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:39.484661102 CEST	53	54549	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:39.485977888 CEST	53	51830	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:40.232465029 CEST	57254	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:40.233062029 CEST	63477	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:40.241811991 CEST	53	57254	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:40.242810965 CEST	53	63477	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:40.574831963 CEST	53	60297	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:40.615571976 CEST	53	58822	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:41.481045008 CEST	49579	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.481372118 CEST	54597	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.483947039 CEST	64841	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.484085083 CEST	49528	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.491535902 CEST	53	49528	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:41.492666960 CEST	53	64841	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:41.492679119 CEST	53	58295	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:41.967381001 CEST	55861	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.969240904 CEST	56345	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.997257948 CEST	61178	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:41.997627974 CEST	57728	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.001666069 CEST	53	64030	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.004650116 CEST	53	61178	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.004676104 CEST	53	57728	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.204951048 CEST	53	54281	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.221529007 CEST	60284	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.221849918 CEST	53983	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.222405910 CEST	64303	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.222593069 CEST	64656	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.223033905 CEST	50971	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.223375082 CEST	52501	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.229990005 CEST	53	64303	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.230057955 CEST	53	60284	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.230432034 CEST	53	64656	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.230565071 CEST	53	50971	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.231375933 CEST	53	52501	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.231652975 CEST	53	53983	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.271720886 CEST	53	55861	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.274338007 CEST	53	56345	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.392591000 CEST	55600	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.393001080 CEST	60768	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.399537086 CEST	53	55600	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.403038025 CEST	53	60768	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:42.503748894 CEST	54929	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.504074097 CEST	53375	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:42.511574984 CEST	53	53375	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.184470892 CEST	58127	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.184887886 CEST	51625	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.194453955 CEST	53	51625	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.194473028 CEST	53	58127	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.698389053 CEST	57332	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.698535919 CEST	54265	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.706229925 CEST	53	57332	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.707246065 CEST	53	54265	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.709194899 CEST	52389	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.709481001 CEST	57361	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:43.721872091 CEST	53	52389	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:43.721889973 CEST	53	57361	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.080732107 CEST	65131	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.080888033 CEST	63548	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.083213091 CEST	54875	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.083364964 CEST	61933	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.088269949 CEST	53	65131	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.089160919 CEST	53	63548	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.090895891 CEST	53	61933	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.200511932 CEST	53	56720	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.501259089 CEST	64022	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.501461029 CEST	62190	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.508598089 CEST	53	62190	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.512655973 CEST	56439	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.512787104 CEST	54501	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:44.519923925 CEST	53	56439	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:44.525619030 CEST	53	54501	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:45.056771040 CEST	65143	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:45.056920052 CEST	56615	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:45.065256119 CEST	53	56615	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:45.068084002 CEST	53	65143	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:45.829363108 CEST	61207	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:45.829771042 CEST	60559	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:45.836855888 CEST	53	61207	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:45.838622093 CEST	53	60559	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:45.935153008 CEST	53	56005	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:49.577989101 CEST	58426	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:49.578339100 CEST	56910	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:49.585840940 CEST	53	56910	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:49.586173058 CEST	53	58426	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:49.690766096 CEST	53	57561	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:51.824948072 CEST	60160	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:51.825449944 CEST	57290	53	192.168.2.4	1.1.1.1
Jul 2, 2024 16:43:51.837682009 CEST	53	57290	1.1.1.1	192.168.2.4
Jul 2, 2024 16:43:51.837698936 CEST	53	60160	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 2, 2024 16:43:08.034785032 CEST	192.168.2.4	1.1.1.1	c25e	(Port unreachable)	Destination Unreachable
Jul 2, 2024 16:43:10.149477959 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Jul 2, 2024 16:43:14.561979055 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Jul 2, 2024 16:43:15.502350092 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 2, 2024 16:42:42.529301882 CEST	192.168.2.4	1.1.1.1	0x956e	Standard query (0)	pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:42.529473066 CEST	192.168.2.4	1.1.1.1	0xeff9	Standard query (0)	pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:42:43.607634068 CEST	192.168.2.4	1.1.1.1	0x750b	Standard query (0)	pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:43.607791901 CEST	192.168.2.4	1.1.1.1	0xda22	Standard query (0)	pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:42:45.276961088 CEST	192.168.2.4	1.1.1.1	0x56af	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:45.277118921 CEST	192.168.2.4	1.1.1.1	0xd502	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:42:49.557802916 CEST	192.168.2.4	1.1.1.1	0xc022	Standard query (0)	ww17.pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:49.558052063 CEST	192.168.2.4	1.1.1.1	0x936a	Standard query (0)	ww17.pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:42:51.113265038 CEST	192.168.2.4	1.1.1.1	0x3c98	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.113434076 CEST	192.168.2.4	1.1.1.1	0xb414	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Jul 2, 2024 16:42:51.113995075 CEST	192.168.2.4	1.1.1.1	0xd5c1	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.114192963 CEST	192.168.2.4	1.1.1.1	0x2fc6	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Jul 2, 2024 16:42:51.508093119 CEST	192.168.2.4	1.1.1.1	0x4b1d	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.508379936 CEST	192.168.2.4	1.1.1.1	0xb2c9	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:42:51.609152079 CEST	192.168.2.4	1.1.1.1	0xc5e3	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.609297991 CEST	192.168.2.4	1.1.1.1	0x4e4d	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Jul 2, 2024 16:42:52.226634026 CEST	192.168.2.4	1.1.1.1	0xcddb	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:52.226798058 CEST	192.168.2.4	1.1.1.1	0xb6bf	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:42:57.329847097 CEST	192.168.2.4	1.1.1.1	0x8029	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:57.330271959 CEST	192.168.2.4	1.1.1.1	0xf25b	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jul 2, 2024 16:42:57.336534023 CEST	192.168.2.4	1.1.1.1	0x1d2a	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:57.336850882 CEST	192.168.2.4	1.1.1.1	0xf342	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Jul 2, 2024 16:42:58.216602087 CEST	192.168.2.4	1.1.1.1	0xa263	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:58.216989040 CEST	192.168.2.4	1.1.1.1	0x2c44	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jul 2, 2024 16:42:58.890470982 CEST	192.168.2.4	1.1.1.1	0x4630	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:58.890645027 CEST	192.168.2.4	1.1.1.1	0x9275	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:07.725920916 CEST	192.168.2.4	1.1.1.1	0x4d1b	Standard query (0)	ww38.pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:07.726619959 CEST	192.168.2.4	1.1.1.1	0x2c43	Standard query (0)	ww38.pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:43:08.711083889 CEST	192.168.2.4	1.1.1.1	0x56ca	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:08.711373091 CEST	192.168.2.4	1.1.1.1	0x3a94	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:09.238646030 CEST	192.168.2.4	1.1.1.1	0xddb2	Standard query (0)	pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.238898993 CEST	192.168.2.4	1.1.1.1	0xc4fe	Standard query (0)	pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:43:09.821243048 CEST	192.168.2.4	1.1.1.1	0x48a8	Standard query (0)	ww38.pollyfill.io	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.821422100 CEST	192.168.2.4	1.1.1.1	0xf9c3	Standard query (0)	ww38.pollyfill.io	65	IN (0x0001)	false
Jul 2, 2024 16:43:09.824045897 CEST	192.168.2.4	1.1.1.1	0x9aae	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.824335098 CEST	192.168.2.4	1.1.1.1	0x6262	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:09.825094938 CEST	192.168.2.4	1.1.1.1	0x8ab6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.825301886 CEST	192.168.2.4	1.1.1.1	0xc0f6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:10.112772942 CEST	192.168.2.4	1.1.1.1	0x64b9	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.113004923 CEST	192.168.2.4	1.1.1.1	0xb006	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:10.563807964 CEST	192.168.2.4	1.1.1.1	0xdb8e	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.564232111 CEST	192.168.2.4	1.1.1.1	0x18de	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:10.741441011 CEST	192.168.2.4	1.1.1.1	0xd3da	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.741765976 CEST	192.168.2.4	1.1.1.1	0x5ae2	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:10.784090996 CEST	192.168.2.4	1.1.1.1	0x3341	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.784248114 CEST	192.168.2.4	1.1.1.1	0xa446	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:11.415608883 CEST	192.168.2.4	1.1.1.1	0x634b	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:11.415775061 CEST	192.168.2.4	1.1.1.1	0xb493	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:12.380889893 CEST	192.168.2.4	1.1.1.1	0xbf3b	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:12.381093025 CEST	192.168.2.4	1.1.1.1	0x27da	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:14.480762005 CEST	192.168.2.4	1.1.1.1	0xf8d0	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:14.481550932 CEST	192.168.2.4	1.1.1.1	0x8e07	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:14.555305958 CEST	192.168.2.4	1.1.1.1	0xd397	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:14.555510044 CEST	192.168.2.4	1.1.1.1	0xb2a2	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:15.485903025 CEST	192.168.2.4	1.1.1.1	0x57e4	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:15.486357927 CEST	192.168.2.4	1.1.1.1	0x2344	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:33.222877026 CEST	192.168.2.4	1.1.1.1	0xfd0c	Standard query (0)	www.above.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:33.223083019 CEST	192.168.2.4	1.1.1.1	0x2dc7	Standard query (0)	www.above.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:34.658379078 CEST	192.168.2.4	1.1.1.1	0x6f97	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.658688068 CEST	192.168.2.4	1.1.1.1	0x989d	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:34.669926882 CEST	192.168.2.4	1.1.1.1	0x9b36	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.670084000 CEST	192.168.2.4	1.1.1.1	0x7a12	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:34.674685001 CEST	192.168.2.4	1.1.1.1	0x2bde	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.674823999 CEST	192.168.2.4	1.1.1.1	0x52e4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:34.749270916 CEST	192.168.2.4	1.1.1.1	0x522e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.749416113 CEST	192.168.2.4	1.1.1.1	0xdfcc	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:35.339818001 CEST	192.168.2.4	1.1.1.1	0x3ddf	Standard query (0)	ka-p.fontawesome.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:35.340030909 CEST	192.168.2.4	1.1.1.1	0xfff6	Standard query (0)	ka-p.fontawesome.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:39.212898016 CEST	192.168.2.4	1.1.1.1	0xcc6e	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.213356018 CEST	192.168.2.4	1.1.1.1	0xcac7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:39.475960970 CEST	192.168.2.4	1.1.1.1	0xe41d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.476250887 CEST	192.168.2.4	1.1.1.1	0x2277	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:40.232465029 CEST	192.168.2.4	1.1.1.1	0x1ad7	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:40.233062029 CEST	192.168.2.4	1.1.1.1	0x6d61	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:41.481045008 CEST	192.168.2.4	1.1.1.1	0xdf7b	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.481372118 CEST	192.168.2.4	1.1.1.1	0x8d5c	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:41.483947039 CEST	192.168.2.4	1.1.1.1	0x6385	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.484085083 CEST	192.168.2.4	1.1.1.1	0x1499	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:41.967381001 CEST	192.168.2.4	1.1.1.1	0x245a	Standard query (0)	www.above.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.969240904 CEST	192.168.2.4	1.1.1.1	0x8359	Standard query (0)	www.above.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:41.997257948 CEST	192.168.2.4	1.1.1.1	0xba3a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.997627974 CEST	192.168.2.4	1.1.1.1	0x525b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:42.221529007 CEST	192.168.2.4	1.1.1.1	0xf1c5	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.221849918 CEST	192.168.2.4	1.1.1.1	0x68d2	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:42.222405910 CEST	192.168.2.4	1.1.1.1	0x8cff	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.222593069 CEST	192.168.2.4	1.1.1.1	0xf76a	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:42.223033905 CEST	192.168.2.4	1.1.1.1	0x5877	Standard query (0)	js.usemessages.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.223375082 CEST	192.168.2.4	1.1.1.1	0xc70c	Standard query (0)	js.usemessages.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:42.392591000 CEST	192.168.2.4	1.1.1.1	0x5ade	Standard query (0)	js.hsadspixel.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.393001080 CEST	192.168.2.4	1.1.1.1	0x443d	Standard query (0)	js.hsadspixel.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:42.503748894 CEST	192.168.2.4	1.1.1.1	0x73dd	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.504074097 CEST	192.168.2.4	1.1.1.1	0x2a31	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:43.184470892 CEST	192.168.2.4	1.1.1.1	0x12b2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.184887886 CEST	192.168.2.4	1.1.1.1	0x9ce7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:43.698389053 CEST	192.168.2.4	1.1.1.1	0x4c1c	Standard query (0)	api.hubapi.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.698535919 CEST	192.168.2.4	1.1.1.1	0x20ea	Standard query (0)	api.hubapi.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:43.709194899 CEST	192.168.2.4	1.1.1.1	0x1aa1	Standard query (0)	api.hubspot.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.709481001 CEST	192.168.2.4	1.1.1.1	0x8444	Standard query (0)	api.hubspot.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:44.080732107 CEST	192.168.2.4	1.1.1.1	0xd1c5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.080888033 CEST	192.168.2.4	1.1.1.1	0x22b2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:44.083213091 CEST	192.168.2.4	1.1.1.1	0x1146	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.083364964 CEST	192.168.2.4	1.1.1.1	0x3d60	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:44.501259089 CEST	192.168.2.4	1.1.1.1	0xf14a	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.501461029 CEST	192.168.2.4	1.1.1.1	0x4050	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:44.512655973 CEST	192.168.2.4	1.1.1.1	0x85b2	Standard query (0)	api.hubapi.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.512787104 CEST	192.168.2.4	1.1.1.1	0x7a01	Standard query (0)	api.hubapi.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:45.056771040 CEST	192.168.2.4	1.1.1.1	0xc8e3	Standard query (0)	api.hubspot.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:45.056920052 CEST	192.168.2.4	1.1.1.1	0x1aec	Standard query (0)	api.hubspot.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:45.829363108 CEST	192.168.2.4	1.1.1.1	0xaddc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:45.829771042 CEST	192.168.2.4	1.1.1.1	0x3957	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 16:43:49.577989101 CEST	192.168.2.4	1.1.1.1	0xa038	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:49.578339100 CEST	192.168.2.4	1.1.1.1	0xf632	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jul 2, 2024 16:43:51.824948072 CEST	192.168.2.4	1.1.1.1	0x991f	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:51.825449944 CEST	192.168.2.4	1.1.1.1	0x7ad2	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 2, 2024 16:42:42.990873098 CEST	1.1.1.1	192.168.2.4	0x956e	No error (0)	pollyfill.io		103.224.182.252	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:44.075577021 CEST	1.1.1.1	192.168.2.4	0x750b	No error (0)	pollyfill.io		103.224.182.252	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:45.284751892 CEST	1.1.1.1	192.168.2.4	0x56af	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:45.284768105 CEST	1.1.1.1	192.168.2.4	0xd502	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 16:42:49.338480949 CEST	1.1.1.1	192.168.2.4	0x46a8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:49.338480949 CEST	1.1.1.1	192.168.2.4	0x46a8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:49.972598076 CEST	1.1.1.1	192.168.2.4	0x936a	No error (0)	ww17.pollyfill.io	11489.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:50.101706982 CEST	1.1.1.1	192.168.2.4	0xc022	No error (0)	ww17.pollyfill.io	11489.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:50.101706982 CEST	1.1.1.1	192.168.2.4	0xc022	No error (0)	11489.searchmagnified.com		199.191.50.189	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.122376919 CEST	1.1.1.1	192.168.2.4	0x3c98	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.122410059 CEST	1.1.1.1	192.168.2.4	0x2fc6	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		212.102.56.181	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		156.146.33.140	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.124167919 CEST	1.1.1.1	192.168.2.4	0xd5c1	No error (0)	1376624012.rsc.cdn77.org		156.146.33.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.524708986 CEST	1.1.1.1	192.168.2.4	0x4b1d	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:51.615976095 CEST	1.1.1.1	192.168.2.4	0xc5e3	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:52.247184038 CEST	1.1.1.1	192.168.2.4	0xcddb	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:57.337430000 CEST	1.1.1.1	192.168.2.4	0x8029	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:57.344866037 CEST	1.1.1.1	192.168.2.4	0x1d2a	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:58.224297047 CEST	1.1.1.1	192.168.2.4	0x2c44	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.224297047 CEST	1.1.1.1	192.168.2.4	0x2c44	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.229676962 CEST	1.1.1.1	192.168.2.4	0xa263	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.229676962 CEST	1.1.1.1	192.168.2.4	0xa263	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.229676962 CEST	1.1.1.1	192.168.2.4	0xa263	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:42:58.897406101 CEST	1.1.1.1	192.168.2.4	0x9275	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.897406101 CEST	1.1.1.1	192.168.2.4	0x9275	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.897779942 CEST	1.1.1.1	192.168.2.4	0x4630	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.897779942 CEST	1.1.1.1	192.168.2.4	0x4630	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:42:58.897779942 CEST	1.1.1.1	192.168.2.4	0x4630	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:01.628256083 CEST	1.1.1.1	192.168.2.4	0xfdd3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:01.628256083 CEST	1.1.1.1	192.168.2.4	0xfdd3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:07.884448051 CEST	1.1.1.1	192.168.2.4	0x4d1b	No error (0)	ww38.pollyfill.io	457694.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:07.884448051 CEST	1.1.1.1	192.168.2.4	0x4d1b	No error (0)	457694.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:07.884448051 CEST	1.1.1.1	192.168.2.4	0x4d1b	No error (0)	457694.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:08.034493923 CEST	1.1.1.1	192.168.2.4	0x2c43	No error (0)	ww38.pollyfill.io	457694.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:08.722465992 CEST	1.1.1.1	192.168.2.4	0x56ca	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.702179909 CEST	1.1.1.1	192.168.2.4	0xddb2	No error (0)	pollyfill.io		103.224.182.252	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.832791090 CEST	1.1.1.1	192.168.2.4	0x9aae	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.832791090 CEST	1.1.1.1	192.168.2.4	0x9aae	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.832791090 CEST	1.1.1.1	192.168.2.4	0x9aae	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.832791090 CEST	1.1.1.1	192.168.2.4	0x9aae	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.833139896 CEST	1.1.1.1	192.168.2.4	0x8ab6	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:09.833873987 CEST	1.1.1.1	192.168.2.4	0xc0f6	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:10.120806932 CEST	1.1.1.1	192.168.2.4	0x64b9	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.136830091 CEST	1.1.1.1	192.168.2.4	0xf9c3	No error (0)	ww38.pollyfill.io	457694.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:10.275115013 CEST	1.1.1.1	192.168.2.4	0x48a8	No error (0)	ww38.pollyfill.io	457694.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:10.275115013 CEST	1.1.1.1	192.168.2.4	0x48a8	No error (0)	457694.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.275115013 CEST	1.1.1.1	192.168.2.4	0x48a8	No error (0)	457694.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.571283102 CEST	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.571283102 CEST	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.571283102 CEST	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.571283102 CEST	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.749263048 CEST	1.1.1.1	192.168.2.4	0xd3da	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.791724920 CEST	1.1.1.1	192.168.2.4	0x3341	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:10.791724920 CEST	1.1.1.1	192.168.2.4	0x3341	No error (0)	www3.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:10.792171955 CEST	1.1.1.1	192.168.2.4	0xa446	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:11.422846079 CEST	1.1.1.1	192.168.2.4	0x634b	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:11.422846079 CEST	1.1.1.1	192.168.2.4	0x634b	No error (0)	www3.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:11.425152063 CEST	1.1.1.1	192.168.2.4	0xb493	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:12.387665033 CEST	1.1.1.1	192.168.2.4	0xbf3b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:12.387665033 CEST	1.1.1.1	192.168.2.4	0xbf3b	No error (0)	googlehosted.l.googleusercontent.com		172.217.18.97	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:12.390839100 CEST	1.1.1.1	192.168.2.4	0x27da	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:14.502295017 CEST	1.1.1.1	192.168.2.4	0xf8d0	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:14.565083981 CEST	1.1.1.1	192.168.2.4	0xd397	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:14.565083981 CEST	1.1.1.1	192.168.2.4	0xd397	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:14.573978901 CEST	1.1.1.1	192.168.2.4	0xb2a2	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:14.789417028 CEST	1.1.1.1	192.168.2.4	0x93bb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:14.789417028 CEST	1.1.1.1	192.168.2.4	0x93bb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:15.494349003 CEST	1.1.1.1	192.168.2.4	0x57e4	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:33.538829088 CEST	1.1.1.1	192.168.2.4	0x2dc7	No error (0)	www.above.com	above.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:33.544996977 CEST	1.1.1.1	192.168.2.4	0xfd0c	No error (0)	www.above.com	above.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:33.544996977 CEST	1.1.1.1	192.168.2.4	0xfd0c	No error (0)	above.com		103.224.182.24	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.430136919 CEST	1.1.1.1	192.168.2.4	0xb2e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:34.430136919 CEST	1.1.1.1	192.168.2.4	0xb2e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.666107893 CEST	1.1.1.1	192.168.2.4	0x6f97	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:34.666821957 CEST	1.1.1.1	192.168.2.4	0x989d	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:34.676806927 CEST	1.1.1.1	192.168.2.4	0x7a12	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:34.677814960 CEST	1.1.1.1	192.168.2.4	0x9b36	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.677814960 CEST	1.1.1.1	192.168.2.4	0x9b36	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.681706905 CEST	1.1.1.1	192.168.2.4	0x2bde	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.681838989 CEST	1.1.1.1	192.168.2.4	0x52e4	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:34.757220984 CEST	1.1.1.1	192.168.2.4	0x522e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.757220984 CEST	1.1.1.1	192.168.2.4	0x522e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.757220984 CEST	1.1.1.1	192.168.2.4	0x522e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:34.757220984 CEST	1.1.1.1	192.168.2.4	0x522e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:35.347323895 CEST	1.1.1.1	192.168.2.4	0xfff6	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:35.350869894 CEST	1.1.1.1	192.168.2.4	0x3ddf	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:39.220180988 CEST	1.1.1.1	192.168.2.4	0xcc6e	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:39.220180988 CEST	1.1.1.1	192.168.2.4	0xcc6e	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.220180988 CEST	1.1.1.1	192.168.2.4	0xcc6e	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.220180988 CEST	1.1.1.1	192.168.2.4	0xcc6e	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.220180988 CEST	1.1.1.1	192.168.2.4	0xcc6e	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:39.484661102 CEST	1.1.1.1	192.168.2.4	0xe41d	No error (0)	td.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:40.241811991 CEST	1.1.1.1	192.168.2.4	0x1ad7	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:40.241811991 CEST	1.1.1.1	192.168.2.4	0x1ad7	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:40.241811991 CEST	1.1.1.1	192.168.2.4	0x1ad7	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:40.241811991 CEST	1.1.1.1	192.168.2.4	0x1ad7	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.488325119 CEST	1.1.1.1	192.168.2.4	0xdf7b	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:41.489459991 CEST	1.1.1.1	192.168.2.4	0x8d5c	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:41.491535902 CEST	1.1.1.1	192.168.2.4	0x1499	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:41.492666960 CEST	1.1.1.1	192.168.2.4	0x6385	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.492666960 CEST	1.1.1.1	192.168.2.4	0x6385	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.492666960 CEST	1.1.1.1	192.168.2.4	0x6385	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.492666960 CEST	1.1.1.1	192.168.2.4	0x6385	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:41.492666960 CEST	1.1.1.1	192.168.2.4	0x6385	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.004650116 CEST	1.1.1.1	192.168.2.4	0xba3a	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.004650116 CEST	1.1.1.1	192.168.2.4	0xba3a	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.004650116 CEST	1.1.1.1	192.168.2.4	0xba3a	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.004650116 CEST	1.1.1.1	192.168.2.4	0xba3a	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.229990005 CEST	1.1.1.1	192.168.2.4	0x8cff	No error (0)	js.hs-banner.com		172.64.153.27	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.229990005 CEST	1.1.1.1	192.168.2.4	0x8cff	No error (0)	js.hs-banner.com		104.18.34.229	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230057955 CEST	1.1.1.1	192.168.2.4	0xf1c5	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230057955 CEST	1.1.1.1	192.168.2.4	0xf1c5	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230432034 CEST	1.1.1.1	192.168.2.4	0xf76a	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:42.230565071 CEST	1.1.1.1	192.168.2.4	0x5877	No error (0)	js.usemessages.com		104.16.75.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230565071 CEST	1.1.1.1	192.168.2.4	0x5877	No error (0)	js.usemessages.com		104.16.79.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230565071 CEST	1.1.1.1	192.168.2.4	0x5877	No error (0)	js.usemessages.com		104.16.78.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230565071 CEST	1.1.1.1	192.168.2.4	0x5877	No error (0)	js.usemessages.com		104.16.77.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.230565071 CEST	1.1.1.1	192.168.2.4	0x5877	No error (0)	js.usemessages.com		104.16.76.142	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.231375933 CEST	1.1.1.1	192.168.2.4	0xc70c	No error (0)	js.usemessages.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:42.231652975 CEST	1.1.1.1	192.168.2.4	0x68d2	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Jul 2, 2024 16:43:42.271720886 CEST	1.1.1.1	192.168.2.4	0x245a	No error (0)	www.above.com	above.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:42.271720886 CEST	1.1.1.1	192.168.2.4	0x245a	No error (0)	above.com		103.224.182.24	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.274338007 CEST	1.1.1.1	192.168.2.4	0x8359	No error (0)	www.above.com	above.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:42.399537086 CEST	1.1.1.1	192.168.2.4	0x5ade	No error (0)	js.hsadspixel.net		104.17.128.172	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.399537086 CEST	1.1.1.1	192.168.2.4	0x5ade	No error (0)	js.hsadspixel.net		104.17.223.152	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:42.403038025 CEST	1.1.1.1	192.168.2.4	0x443d	No error (0)	js.hsadspixel.net			65	IN (0x0001)	false
Jul 2, 2024 16:43:42.510741949 CEST	1.1.1.1	192.168.2.4	0x73dd	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:42.510741949 CEST	1.1.1.1	192.168.2.4	0x73dd	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:42.511574984 CEST	1.1.1.1	192.168.2.4	0x2a31	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:42.511574984 CEST	1.1.1.1	192.168.2.4	0x2a31	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:43.194453955 CEST	1.1.1.1	192.168.2.4	0x9ce7	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:43.194473028 CEST	1.1.1.1	192.168.2.4	0x12b2	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.706229925 CEST	1.1.1.1	192.168.2.4	0x4c1c	No error (0)	api.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.706229925 CEST	1.1.1.1	192.168.2.4	0x4c1c	No error (0)	api.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.706229925 CEST	1.1.1.1	192.168.2.4	0x4c1c	No error (0)	api.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.706229925 CEST	1.1.1.1	192.168.2.4	0x4c1c	No error (0)	api.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.706229925 CEST	1.1.1.1	192.168.2.4	0x4c1c	No error (0)	api.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.707246065 CEST	1.1.1.1	192.168.2.4	0x20ea	No error (0)	api.hubapi.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:43.721872091 CEST	1.1.1.1	192.168.2.4	0x1aa1	No error (0)	api.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.721872091 CEST	1.1.1.1	192.168.2.4	0x1aa1	No error (0)	api.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:43.721889973 CEST	1.1.1.1	192.168.2.4	0x8444	No error (0)	api.hubspot.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:44.088269949 CEST	1.1.1.1	192.168.2.4	0xd1c5	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.089160919 CEST	1.1.1.1	192.168.2.4	0x22b2	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:44.090481997 CEST	1.1.1.1	192.168.2.4	0x1146	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.090481997 CEST	1.1.1.1	192.168.2.4	0x1146	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.090895891 CEST	1.1.1.1	192.168.2.4	0x3d60	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.090895891 CEST	1.1.1.1	192.168.2.4	0x3d60	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.508598089 CEST	1.1.1.1	192.168.2.4	0x4050	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.508598089 CEST	1.1.1.1	192.168.2.4	0x4050	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.508944035 CEST	1.1.1.1	192.168.2.4	0xf14a	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.508944035 CEST	1.1.1.1	192.168.2.4	0xf14a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:44.519923925 CEST	1.1.1.1	192.168.2.4	0x85b2	No error (0)	api.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.519923925 CEST	1.1.1.1	192.168.2.4	0x85b2	No error (0)	api.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.519923925 CEST	1.1.1.1	192.168.2.4	0x85b2	No error (0)	api.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.519923925 CEST	1.1.1.1	192.168.2.4	0x85b2	No error (0)	api.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.519923925 CEST	1.1.1.1	192.168.2.4	0x85b2	No error (0)	api.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:44.525619030 CEST	1.1.1.1	192.168.2.4	0x7a01	No error (0)	api.hubapi.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:45.065256119 CEST	1.1.1.1	192.168.2.4	0x1aec	No error (0)	api.hubspot.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:45.068084002 CEST	1.1.1.1	192.168.2.4	0xc8e3	No error (0)	api.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:45.068084002 CEST	1.1.1.1	192.168.2.4	0xc8e3	No error (0)	api.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:45.836855888 CEST	1.1.1.1	192.168.2.4	0xaddc	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:45.838622093 CEST	1.1.1.1	192.168.2.4	0x3957	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 2, 2024 16:43:49.585840940 CEST	1.1.1.1	192.168.2.4	0xf632	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:49.586173058 CEST	1.1.1.1	192.168.2.4	0xa038	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:49.586173058 CEST	1.1.1.1	192.168.2.4	0xa038	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:51.837682009 CEST	1.1.1.1	192.168.2.4	0x7ad2	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jul 2, 2024 16:43:51.837698936 CEST	1.1.1.1	192.168.2.4	0x991f	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:51.837698936 CEST	1.1.1.1	192.168.2.4	0x991f	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:43:54.923631907 CEST	1.1.1.1	192.168.2.4	0x77e0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 16:43:54.923631907 CEST	1.1.1.1	192.168.2.4	0x77e0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pollyfill.io

https:

afs.googleusercontent.com

www.above.com

stackpath.bootstrapcdn.com

code.jquery.com

www.google.com

analytics.google.com

td.doubleclick.net

stats.g.doubleclick.net

js.hs-scripts.com

js.hsadspixel.net

js.hs-banner.com

js.usemessages.com

js.hs-analytics.net

api.hubapi.com

api.hubspot.com

googleads.g.doubleclick.net

track.hubspot.com

fs.microsoft.com

slscr.update.microsoft.com

ww17.pollyfill.io

cdn.consentmanager.net

a.delivery.consentmanager.net

js-agent.newrelic.com

bam.nr-data.net

i1.cdn-image.com

i3.cdn-image.com

i2.cdn-image.com

ww38.pollyfill.io

www.adsensecustomsearchads.com

c.parkingcrew.net

d38psrni17bvxu.cloudfront.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:42.998153925 CEST	427	OUT	GET / HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:43.604511976 CEST	282	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:42:43 GMT server: Apache set-cookie: __tad=1719931363.3116495; expires=Fri, 30-Jun-2034 14:42:43 GMT; Max-Age=315360000 location: https://pollyfill.io/ content-length: 0 content-type: text/html; charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:47.412019014 CEST	497	OUT	GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495
Jul 2, 2024 16:42:47.621053934 CEST	222	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:42:47 GMT server: Apache location: https://pollyfill.io/?fp=5705e961739f25e027541c9b53d6b936 content-length: 0 content-type: text/html; charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49752	199.191.50.189	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:50.108453035 CEST	432	OUT	GET / HTTP/1.1 Host: ww17.pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:51.091824055 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:42:41 GMT Server: Apache Set-Cookie: vsid=918vr46747696140717371; expires=Sun, 01-Jul-2029 14:42:41 GMT; Max-Age=157680000; path=/; domain=ww17.pollyfill.io; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Td41r8+nANwNbmRQqJM018D4OiN5BHskWhiew591ZBJsxL9ZYexnOabdrITow5r3mpjvXOdyPp2X/DSL5UEkyw== Keep-Alive: timeout=5, max=116 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 38 32 62 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 [TRUNCATED] Data Ascii: 182bb<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cd
Jul 2, 2024 16:42:51.091837883 CEST	1236	IN	Data Raw: 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 Data Ascii: n" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","F
Jul 2, 2024 16:42:51.091972113 CEST	1236	IN	Data Raw: 6e 64 65 78 4f 66 28 22 63 6d 70 6c 61 6e 67 3d 22 29 2b 38 2c 32 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 Data Ascii: ndexOf("cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(naviga
Jul 2, 2024 16:42:51.091991901 CEST	1236	IN	Data Raw: 74 75 72 6e 20 77 7d 76 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b Data Ascii: turn w}var k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?
Jul 2, 2024 16:42:51.092005014 CEST	1236	IN	Data Raw: 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 75 67 75 6e 6d Data Ascii: ){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a=="1"){
Jul 2, 2024 16:42:51.092019081 CEST	1120	IN	Data Raw: 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 76 61 72 20 66 3d 22 22 3b 76 61 72 20 64 3d 30 3b 77 68 69 6c Data Ascii: ame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.substring(b.indexOf("=")+
Jul 2, 2024 16:42:51.092030048 CEST	1236	IN	Data Raw: 73 3a 5b 22 74 63 66 63 61 22 2c 22 75 73 6e 61 74 22 2c 22 75 73 63 61 22 2c 22 75 73 76 61 22 2c 22 75 73 63 6f 22 2c 22 75 73 75 74 22 2c 22 75 73 63 74 22 5d 2c 63 6d 70 49 64 3a 33 31 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 70 70 73 74 Data Ascii: s:["tcfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){re
Jul 2, 2024 16:42:51.092040062 CEST	1236	IN	Data Raw: 61 6e 64 2c 62 2e 70 61 72 61 6d 65 74 65 72 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 61 72 20 65 3d 7b 5f 5f 63 6d 70 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 Data Ascii: and,b.parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.comman
Jul 2, 2024 16:42:51.092648983 CEST	448	IN	Data Raw: 47 70 70 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e Data Ascii: GppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEvent
Jul 2, 2024 16:42:51.092660904 CEST	1236	IN	Data Raw: 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 21 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 69 73 61 62 6c 65 74 63 66 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 28 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 29 7d 69 66 28 21 28 22 63 Data Ascii: in window)\|\|!window.cmp_disabletcf){window.cmp_addFrame("__tcfapiLocator")}if(!("cmp_disablegpp" in window)\|\|!window.cmp_disablegpp){window.cmp_addFrame("__gppLocator")}window.cmp_setStub("__cmp");if(!("cmp_disabletcf" in window)\|\|!window.cmp_
Jul 2, 2024 16:42:51.098640919 CEST	1236	IN	Data Raw: 6d 65 74 61 20 6e 61 6d 65 3d 22 74 69 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 61 3d 27 32 39 35 39 30 27 20 62 3d 27 33 33 35 34 38 27 20 63 3d 27 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 27 20 64 3d 27 65 6e 74 69 74 79 5f 6d 61 70 70 65 64 27 22 20 Data Ascii: meta name="tids" content="a='29590' b='33548' c='pollyfill.io' d='entity_mapped'" /><title>Pollyfill.io</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	199.191.50.189	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:51.123502016 CEST	353	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww17.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371
Jul 2, 2024 16:42:51.591773987 CEST	628	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:42:42 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Jul 2, 2024 16:43:36.600337029 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	199.191.50.189	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:51.124207020 CEST	353	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww17.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371
Jul 2, 2024 16:42:51.602214098 CEST	628	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:42:42 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=120 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Jul 2, 2024 16:42:57.331501961 CEST	598	OUT	GET /favicon.ico HTTP/1.1 Host: ww17.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:42:57.432562113 CEST	210	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:42:48 GMT Server: Apache Content-Length: 10 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Jul 2, 2024 16:43:09.253012896 CEST	2876	OUT	GET /Polly.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIVXdq8gc7IhzlG7 [TRUNCATED] Host: ww17.pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:10.012379885 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:00 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_jsLhfCX40ZF8Y0p+DH/KPtnnqvQVy9ocb4YHUfZtjcEwBWrVi97+9uRfo1oayUmlxWWUrnfWREt8whLftCFZyQ== Keep-Alive: timeout=5, max=118 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 38 33 63 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 83c5<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Jul 2, 2024 16:43:10.012398958 CEST	1236	IN	Data Raw: 64 6f 77 2e 63 6d 70 5f 63 6f 64 65 73 72 63 3d 22 31 22 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 22 44 45 22 2c 22 45 4e 22 2c 22 46 52 22 2c Data Ascii: dow.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","BS"];if("cmp_customl
Jul 2, 2024 16:43:10.012417078 CEST	448	IN	Data Raw: 28 61 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 2e 70 75 73 68 28 61 5b 64 5d 29 7d 7d 7d 7d 7d 69 66 28 22 6c 61 6e 67 75 61 67 65 22 20 69 6e 20 6e 61 76 69 67 61 74 Data Ascii: (a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLanguage" in navigator){c.push(navigator.userLanguage)}var h="";for(var d=0;d<c.length;d++){var b=c[d].toUpperCase();if(g.
Jul 2, 2024 16:43:10.012428045 CEST	1236	IN	Data Raw: 74 6c 61 6e 67 7d 65 6c 73 65 7b 69 66 28 68 3d 3d 22 22 29 7b 68 3d 22 45 4e 22 7d 7d 68 3d 68 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 68 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e Data Ascii: tlang}else{if(h==""){h="EN"}}h=h.toUpperCase();return h};(function(){var u=document;var v=u.getElementsByTagName;var h=window;var o="";var b="_en";if("cmp_getlang" in h){o=h.cmp_getlang().toLowerCase();if("cmp_customlanguages" in h){for(var q=
Jul 2, 2024 16:43:10.012429953 CEST	1236	IN	Data Raw: 74 28 67 29 2b 28 63 21 3d 22 22 3f 22 26 63 6d 70 64 65 73 69 67 6e 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 3a 22 22 29 2b 28 66 21 3d 22 22 3f 22 26 63 6d 70 72 65 67 75 6c 61 74 69 6f 6e 6b 65 79 3d 22 2b 65 6e Data Ascii: t(g)+(c!=""?"&cmpdesign="+encodeURIComponent(c):"")+(f!=""?"&cmpregulationkey="+encodeURIComponent(f):"")+(r!=""?"&cmpgppkey="+encodeURIComponent(r):"")+(n!=""?"&cmpatt="+encodeURIComponent(n):"")+("cmp_params" in h?"&"+h.cmp_params:"")+(u.coo
Jul 2, 2024 16:43:10.012437105 CEST	1236	IN	Data Raw: 30 29 7b 74 3d 76 28 22 64 69 76 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 73 70 61 6e 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 69 6e 73 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d Data Ascii: 0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.length==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}})();window.cmp_addFrame=function(b){if(!window.frames[b]){if(document.body){va
Jul 2, 2024 16:43:10.012537956 CEST	1236	IN	Data Raw: 3a 22 73 74 75 62 22 2c 64 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 61 70 69 56 65 72 73 69 6f 6e 3a 22 32 2e 32 22 2c 63 6d 70 49 64 3a 33 31 7d 2c 74 72 75 65 29 7d 65 6c 73 65 7b 61 5b 32 5d 28 66 61 6c 73 65 2c 74 72 Data Ascii: :"stub",displayStatus:"hidden",apiVersion:"2.2",cmpId:31},true)}else{a[2](false,true)}}else{if(a[0]==="getUSPData"){a[2]({version:1,uspString:window.cmp_rc("")},true)}else{if(a[0]==="getTCData"){__cmp.a.push([].slice.apply(a))}else{if(a[0]==="
Jul 2, 2024 16:43:10.012546062 CEST	896	IN	Data Raw: 6d 6f 76 65 64 22 2c 6c 69 73 74 65 6e 65 72 49 64 3a 65 2c 64 61 74 61 3a 68 2c 70 69 6e 67 44 61 74 61 3a 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 70 70 5f 70 69 6e 67 28 29 7d 7d 65 6c 73 65 7b 69 66 28 67 3d 3d 3d 22 67 65 74 47 50 50 44 61 74 61 Data Ascii: moved",listenerId:e,data:h,pingData:window.cmp_gpp_ping()}}else{if(g==="getGPPData"){return{sectionId:3,gppVersion:1,sectionList:[],applicableSections:[0],gppString:"",pingData:window.cmp_gpp_ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|
Jul 2, 2024 16:43:10.012840986 CEST	1236	IN	Data Raw: 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 74 79 70 65 6f 66 28 63 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 63 21 3d 3d 6e 75 6c 6c 26 26 22 5f 5f 74 63 66 61 70 69 43 61 6c 6c 22 20 69 6e 20 63 29 7b 76 61 72 20 62 3d 63 2e 5f 5f Data Ascii: ify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__tcfapiCall" in c){var b=c.__tcfapiCall;window.__tcfapi(b.command,b.version,function(h,g){var e={__tcfapiReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringi
Jul 2, 2024 16:43:10.012912989 CEST	224	IN	Data Raw: 6f 77 2e 63 6d 70 5f 64 69 73 61 62 6c 65 75 73 70 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 28 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 29 7d 69 66 28 21 28 22 63 6d 70 5f 64 69 73 61 62 6c 65 74 63 66 22 20 69 6e Data Ascii: ow.cmp_disableusp){window.cmp_addFrame("__uspapiLocator")}if(!("cmp_disabletcf" in window)\|\|!window.cmp_disabletcf){window.cmp_addFrame("__tcfapiLocator")}if(!("cmp_disablegpp" in window)\|\|!window.cmp_disablegpp){window.cmp_
Jul 2, 2024 16:43:10.012991905 CEST	1236	IN	Data Raw: 61 64 64 46 72 61 6d 65 28 22 5f 5f 67 70 70 4c 6f 63 61 74 6f 72 22 29 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 28 22 5f 5f 63 6d 70 22 29 3b 69 66 28 21 28 22 63 6d 70 5f 64 69 73 61 62 6c 65 74 63 66 22 20 69 6e 20 77 69 6e 64 Data Ascii: addFrame("__gppLocator")}window.cmp_setStub("__cmp");if(!("cmp_disabletcf" in window)\|\|!window.cmp_disabletcf){window.cmp_setStub("__tcfapi")}if(!("cmp_disableusp" in window)\|\|!window.cmp_disableusp){window.cmp_setStub("__uspapi")}if(!("cmp_di
Jul 2, 2024 16:43:13.438859940 CEST	2981	OUT	GET /Polly_Pocket_Games.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jjEIV [TRUNCATED] Host: ww17.pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371; __cmpcc=1; __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Jul 2, 2024 16:43:14.434232950 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:04 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_HM2iYisvLtD7q22GkJ/iVcC1/BTIUR1M0olnCec8fwv8ld2TbQOJR/CQPuZQImp38jjkaa4FbF/oUkhFAmJG0A== Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 35 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 95b2<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Jul 2, 2024 16:43:21.329201937 CEST	2984	OUT	GET /Polly_Pocket_Dress_Up.cfm?fp=%2BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%2B%2FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%2Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%2ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%2FftyPhagtdpWWZh0T3%2BAzYoE7NzKxLk%3D&yep=dZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%2FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%2BBTsLSzPV5bS%2Fm5WrjAVAjICrxzz4dzaW1oiw%2BMnveysMiLmFWDPgK0BiAC%2FW%2Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%2Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%2BUl%2FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%2BLQ%2FI%2FhRebt5jnM0SrWYrVnQdpQuL%2BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%2FAQZ%2B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%2Fi82c1SgM4f88bKKaub%2BTLQeXn1x%2BUddDquCE6FtsD8kwc5p1%2F8f9l8x0TE%2BxP757fuuhg3lZLzUL0E6OR8lEEpjYJ%2BmJFh4OCle7d%2Fi4o0swOWxgMRJgwxuebxXaTii3jj [TRUNCATED] Host: ww17.pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=918vr46747696140717371; __cmpcc=1; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ; __cmpcccx68884=aBQBKLQdAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:22.427197933 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:12 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_VP5LazWcBjsUAfh57QITgaJFxtoccXlEVoSL8E5cezwzdxaZdEEJhuajSVYLYY39rd8TgZyOSqr7NPDsjfHMMw== Keep-Alive: timeout=5, max=120 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 35 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 95f9<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49758	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:51.548655987 CEST	329	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.017859936 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:42 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:40:11 GMT Connection: keep-alive ETag: "63ee94ab-20f3" Expires: Tue, 16 Jul 2024 14:42:42 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Jul 2, 2024 16:42:52.017885923 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Jul 2, 2024 16:42:52.017899036 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Jul 2, 2024 16:42:52.017977953 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Jul 2, 2024 16:42:52.017990112 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Jul 2, 2024 16:42:52.017999887 CEST	1	IN	Data Raw: 75 Data Ascii: u
Jul 2, 2024 16:42:52.018125057 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Jul 2, 2024 16:42:52.018141031 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Jul 2, 2024 16:42:52.018151999 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 2, 2024 16:42:52.029872894 CEST	394	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.128957987 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:42 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:42:42 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Jul 2, 2024 16:42:52.128972054 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Jul 2, 2024 16:42:52.128983974 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49760	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.036856890 CEST	397	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.492559910 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:43 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Tue, 16 Jul 2024 14:42:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:42:52.623797894 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Jul 2, 2024 16:43:22.545748949 CEST	398	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:22.644599915 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:13 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:13 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49761	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.101913929 CEST	391	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.579452038 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:43 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:42:52.579531908 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Jul 2, 2024 16:42:52.579588890 CEST	1236	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V~t`%V>
Jul 2, 2024 16:42:52.579600096 CEST	1236	IN	Data Raw: f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 2c 96 8c 95 22 56 f2 da dd 8d a1 b9 89 61 d3 5b 45 60 67 ce 18 59 46 e7 35 1f f7 6a 6d fe a7 8e Data Ascii: (<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMcru:~'>V7dRfkuks!
Jul 2, 2024 16:42:52.579668999 CEST	1236	IN	Data Raw: 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 8d 80 a2 0c ac 40 39 20 c5 d2 c0 c0 a0 ef c0 a0 e0 c5 00 05 05 95 45 c5 40 8a f7 37 13 f3 89 ff 40 35 cc Data Ascii: latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47
Jul 2, 2024 16:42:52.579680920 CEST	896	IN	Data Raw: 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e 71 7a c9 ae a4 40 bf 31 1d 4a 55 53 93 b0 66 dc 54 63 81 b1 78 a9 26 a2 28 2c 75 7c 6b e3 82 c9 11 69 91 93 a7 54 95 34 5a f2 42 f4 06 4b 86 a9 71 fa f3 fa 98 e2 8c 38 33 ec 0a 31 26 44 68 82 Data Ascii: :dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj2YgV2E.\|\Xkjb-Z'45FA
Jul 2, 2024 16:42:52.579777956 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Jul 2, 2024 16:42:52.579788923 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Jul 2, 2024 16:42:52.579875946 CEST	1236	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Jul 2, 2024 16:42:52.579895973 CEST	672	IN	Data Raw: 3d df 0c e4 51 10 ad e7 d8 79 e4 2d 95 50 12 cc e2 59 d0 c0 8a 1c 5a e9 38 d8 c7 a6 e4 32 ca a7 ef 2d ed 55 31 0b 8e d7 4f 2a 4f 0a 0c 0a 33 1b fb b8 64 7d b3 e2 0b ca a6 aa 55 ab a0 2b bb a0 46 33 c1 cf 2c 9f 21 d6 12 48 0a 6c 24 67 59 7c 8f 1a Data Ascii: =Qy-PYZ82-U1OO3d}U+F3,!Hl$gY\|l{;[g,lUUiNkgkc(j3bzG5DN#YMRTn}=\|;mhe@,^xTWV^_NFF$'fF8*T
Jul 2, 2024 16:42:52.584467888 CEST	1236	IN	Data Raw: 3d b3 c1 0d 68 b1 24 9d 98 d3 89 d1 e4 23 6e e1 8b bf 92 5a 87 1f 06 e7 d6 87 f9 0d c8 ad f3 62 0e 9b bf c0 72 d8 6e 03 b2 d8 3c 1a 49 e7 4c f6 e8 5d db 0e f5 65 b3 e1 13 9a 5a e8 83 71 71 48 18 66 a5 33 0c 39 aa 64 3f 8c 7f 30 dd b4 c3 38 ca 60 Data Ascii: =h$#nZbrn<IL]eZqqHf39d?08`x:ig0V^n]aqr5`R+5tV1Y=dz\|"O,4'&8px;\g6K8atI<R@P!Xry\HwwS@5
Jul 2, 2024 16:43:22.723946095 CEST	395	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:22.829519987 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:13 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49762	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.105216980 CEST	397	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.571872950 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:43 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:42:52.572158098 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Jul 2, 2024 16:42:52.572201014 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Jul 2, 2024 16:42:52.572211981 CEST	1236	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Jul 2, 2024 16:42:52.572352886 CEST	672	IN	Data Raw: 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca 14 b6 e7 2b ef 6c 2c 9d b3 f3 db 9d 73 4a 4f 74 35 d5 59 ea 9a 3b 4b 4b 3b 4b c9 db 3d 0f 66 64 2d 69 58 b1 a2 61 49 56 c6 83 43 c3 a9 7d 69 69 Data Ascii: _ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%a-%.BAhi?^tEl4Gb /Di
Jul 2, 2024 16:42:52.572371960 CEST	1236	IN	Data Raw: 69 2b cf 42 d2 fb cb ab e2 75 5b 3e ea a7 7b 40 f1 be c4 68 45 59 e7 d0 88 53 fc c0 a0 d6 52 2c c9 c4 77 de 7c e7 eb eb 30 59 f8 87 75 fd 9a 4d e4 d4 09 e1 c5 d3 e4 94 f0 f0 75 41 7d 97 28 ab 74 7e 1d ce 77 17 ed 9b f4 ed 49 ca 84 6d 30 5d 78 1a Data Ascii: i+Bu[>{@hEYSR,w\|0YuMuA}(t~wIm0]xh}jq(lS-&+\|gTH!%G$:Ha$5h\|)"zO:gVwH7A6KR,CV"S.z:r^&7
Jul 2, 2024 16:42:52.572384119 CEST	224	IN	Data Raw: 71 60 46 65 5a f3 9e ce bc a2 0e c4 21 0e e7 4e 47 1c 98 7e fa b0 c9 d4 8c 23 9d 3a 09 89 33 7b 0f 7e 94 6d b1 64 2c db d6 b1 a1 a9 69 63 9b db fe 9b 03 0d 10 32 e4 57 51 f7 46 5b fb fe ce 4e 46 0b 85 93 c5 70 f0 41 e9 55 07 01 8d 28 44 66 21 8b Data Ascii: q`FeZ!NG~#:3{~md,ic2WQF[NFpAU(Df!BZ]:2gjZ~3xe+;fsJE}7=0}mevKnXuQ8nYOp$rhS<$AmUFN"nvyJsJs*\I
Jul 2, 2024 16:42:52.572392941 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Jul 2, 2024 16:42:52.572400093 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Jul 2, 2024 16:42:52.572402000 CEST	448	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Jul 2, 2024 16:42:52.576977015 CEST	1236	IN	Data Raw: 1e 4b 1b c5 46 e7 a0 0f 4f 23 56 a3 69 91 f0 43 0d 23 9f b2 fc ae 4a cc b6 a2 06 b3 e2 55 a8 41 ad 65 26 1a cd b1 df f4 eb 2f d1 0a 16 0c 0b ff b0 fe f2 cb fa 35 9b 40 d7 0d d1 b4 8a 05 ba a4 eb af 74 9f b8 cb b6 67 5f a0 7d 18 47 a1 8e 54 44 78 Data Ascii: KFO#ViC#JUAe&/5@tg_}GTDxg0R"0.&$n(v2+T"(pqtwBOs5<N!eNe#ZJ6t m3g6W1uZWtZLs&7Za: bn9?Jv9mM\I';My2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49763	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.252937078 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:52.709609985 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:43 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:42:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:42:52.709820986 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 2, 2024 16:42:52.709862947 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m
Jul 2, 2024 16:42:52.709873915 CEST	1236	IN	Data Raw: d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef 43 5f 5e c4 bc 86 25 36 16 0d 5f cf 3b 88 39 86 e5 5f de c7 93 65 f8 4d 1a 85 d8 4a ff Data Ascii: LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]
Jul 2, 2024 16:42:52.709922075 CEST	672	IN	Data Raw: d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 6f 08 4a 31 68 c4 db 1e d9 44 2e 89 21 a9 23 a0 11 af fc 38 7d a7 30 9f c4 e0 27 22 90 c2 2e fc 34 11 d5 88 c1 4f 44 5c 16 d0 88 0f be 18 3a 11 Data Ascii: + `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\2{b(6A'B&B$^&<d"Du~
Jul 2, 2024 16:42:52.710481882 CEST	1236	IN	Data Raw: 22 53 36 ef 5e 2f 8b 98 b2 4b 8f a1 0e 8c 74 bc ae 11 d5 e3 e0 32 c7 b1 fc 10 16 75 2b 8e 19 a5 0a 33 ea 44 10 06 c2 5e d4 88 51 fd 78 d1 4d 6e e1 41 98 56 62 3a 0c 2c 3c a5 4e 04 61 20 ec 55 8d 28 c6 90 4f 29 4c 78 49 84 f1 36 e7 61 d8 6b cd 8e Data Ascii: "S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Yn,h`Jap$@+)950v(-E<h>3:/\|NlN{Q'"!s7
Jul 2, 2024 16:42:52.710525990 CEST	1236	IN	Data Raw: 75 25 73 6b ed a7 2c 0b a3 3d ab c0 02 92 d8 09 8d 48 cd 6d 46 79 8d db 8e cf 11 9a 1b 20 f2 22 37 3d 7d 69 57 11 b4 66 47 1c 4c 0a 20 30 d8 d1 d7 88 25 77 b1 2e 15 35 bb 48 1b 14 83 87 ac 4a 71 42 66 21 37 db b4 36 96 d9 81 71 0e 0c 76 1c 4d 61 Data Ascii: u%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]LnhD-hvu?@:6(4k%5$FDwR<`{qh>e\|VbM
Jul 2, 2024 16:42:52.710537910 CEST	1236	IN	Data Raw: 83 4b 96 f1 5a 2f 74 f8 21 05 29 ec 8f ff 9a fd a6 d6 48 f4 d2 11 49 0c 31 90 cd 21 a6 c3 5c 24 a3 59 49 2a bb d7 41 44 af 01 bb 59 2e b4 5e 07 b5 73 f6 da 78 fe fe 3d 46 12 43 8c 55 85 91 9b fb d5 eb 87 44 d5 dc ae cf d1 23 2c ee 09 c9 c5 ae 48 Data Ascii: KZ/t!)HI1!\$YIADY.^sx=FCUD#,HnAS1Tc2>wm0LX(Md<#w\|k4AA.nHOy3tjkwv+sD{ck2t%nn.S1b`O$0ML-gu=J2
Jul 2, 2024 16:42:52.710635900 CEST	1236	IN	Data Raw: a1 2c 9c 55 73 0b 63 3b 50 4b b1 26 84 ed 87 49 62 8b b0 5d cd b7 73 10 93 2a 26 1b d9 a3 c9 04 66 26 62 dd 76 64 e9 3a 5e 81 b0 66 f7 b7 6e 78 2c 73 36 4d dd af 90 25 2b 95 f8 90 e7 d8 9e 40 d8 49 e9 16 a2 a9 9a 5d 59 57 ce 70 35 a9 b2 43 a6 03 Data Ascii: ,Usc;PK&Ib]s&f&bvd:^fnx,s6M%+@I]YWp5C:FE\mm\|;p_!/%Z/Vv6\$"uh;)'TaVbz3% IDAT5,a)myVemzEy.XeK(\_e*M6:"]{O ;A{
Jul 2, 2024 16:42:52.710649014 CEST	1236	IN	Data Raw: 42 49 db c8 15 e8 89 57 64 5f 06 c3 b7 a9 14 68 ff 32 c5 7f c6 76 75 85 fc 76 3b 61 db f7 bf 44 58 9d 60 d9 a4 12 53 00 52 37 54 c0 80 14 df fa 3d a5 9e 42 d9 c1 12 9e c4 ce 7d c6 e5 b5 c8 c4 81 ed 30 e4 7e 18 23 3f a7 05 10 8b 24 ac 1f be 5c 4b Data Ascii: BIWd_h2vuv;aDX`SR7T=B}0~#?$\K!LUUWvSFr~Pvm1a5"V]J)DU+R{SzSEU6Jr;Kf(FqefQaeDd]*yP'1Ahnj['m?F%FMuX^u
Jul 2, 2024 16:42:52.715482950 CEST	1236	IN	Data Raw: df 4c a9 d2 95 68 b9 bc e4 db 33 c5 48 bc db 4c f5 ab 22 33 dd c1 8a 61 83 10 26 a5 94 da 6b d7 ab d8 c4 3f ea 33 e1 47 9d 3e 66 f2 4b 2d 3d 7c a0 1d 9d 19 78 6a 75 23 79 e5 a3 bc 6e fb 25 c2 4e 5a 62 f4 6f df bd 43 60 1e 19 57 d8 4e a9 a3 81 c8 Data Ascii: Lh3HL"3a&k?3G>fK-=\|xju#yn%NZboC`WNHq1L^V&Ly*VKo}gM^O\(GT?G\L-]E0<CL,\|10FC)[w=pN@uGi2]Z_a{$a{LN+QlW0^8H0[-geHn-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49764	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.698301077 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:42:53.173109055 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:42:43 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Tue, 16 Jul 2024 14:42:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:42:53.308643103 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Jul 2, 2024 16:43:22.785721064 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:22.886167049 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:13 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:13 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:42:52.700789928 CEST	233	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Jul 2, 2024 16:43:03.245348930 CEST	633	OUT	GET / HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49776	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:03.280317068 CEST	633	OUT	GET / HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:03.876944065 CEST	186	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:43:03 GMT server: Apache location: https://pollyfill.io/ content-length: 0 content-type: text/html; charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49783	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:06.036041021 CEST	669	OUT	GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:06.447376013 CEST	222	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:43:06 GMT server: Apache location: https://pollyfill.io/?fp=5705e961739f25e027541c9b53d6b936 content-length: 0 content-type: text/html; charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49785	13.248.148.254	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:07.980566025 CEST	656	OUT	GET /?subid1=20240703-0043-072d-8977-8cc5be56f2f7 HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:08.668994904 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_He7XwQuIHcQQisI476TJzxQBz7ntxpbxSTXpZD64mZj5lHaEmv94HpEY2+PiClcuHmUT+Q5zTH+yzYg7ICarqA== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: pollyfill.io X-Subdomain: ww38 Content-Encoding: gzip Data Raw: 31 39 33 35 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b e9 77 da c8 96 ff dc fe 2b 14 fa bc 80 27 2c 12 8b f1 12 92 01 83 6d dc 41 de e4 05 72 32 39 42 2a 40 a0 85 96 84 59 fa f9 7f 9f df 2d 2d 08 8c fb 75 de e9 bc f9 32 4e 6c a4 da ee ad ba fb bd c5 c7 77 cd ab 53 a5 7b dd 12 46 be 65 7e da fb 48 1f 82 ae fa 6a 4e d5 fb a6 a3 4d 26 6c 59 4b 75 ce e6 f3 e6 4d f7 f2 37 a7 d7 1e 3d 6b 72 fd a6 d5 68 dc d4 9b 77 f3 fa fc ae 7e d9 a8 7f f9 7d d6 3c 6b 29 4f b7 b6 78 e1 8a 95 c1 fd 75 b5 75 a9 54 ab 8b ae 7d 6d dd f6 a7 9d 65 f9 79 72 f8 5b d7 b8 b0 27 f2 94 e9 f6 f8 aa 2e 5f 6a ea 53 f3 49 fb ed e6 52 16 ed a7 df 7a 97 5f aa 8a 66 5c 36 0f eb ce c5 d3 6f 52 e5 f0 b4 3e 6f d5 eb 37 b5 da f7 0b 56 7d 9a df cc da 17 da cd 8d e1 b5 cb d5 03 e5 72 b5 b8 69 ac aa b6 bf 98 f6 17 77 ca d3 b4 d7 3c 28 5b bd 71 c5 bc 50 5b d6 f3 51 f9 62 da ea 16 3f 5c 1b a7 a6 36 bb b0 ee 95 0f 37 95 95 72 f1 61 b9 ea 0e ab ed 53 d5 fd bd 5e ab a5 84 85 65 da 5e 2d 35 f2 fd e9 71 a1 30 9f cf f3 f3 52 de 71 87 05 e9 e8 e8 a8 b0 a0 [TRUNCATED] Data Ascii: 1935[w+',mAr29B*@Y--u2NlwS{Fe~HjNM&lYKuM7=krhw~}<k)OxuuT}meyr['._jSIRz_f\6oR>o7V}riw<([qP[Qb?\67raS^e^-5q0RqHjk)fb9xNgSS/J'6R]?lbSj:{64/YP
Jul 2, 2024 16:43:08.669025898 CEST	1236	IN	Data Raw: a7 a9 26 ab 49 59 c1 1b b9 86 3d c9 f9 4e 6e 60 f8 35 db 89 d7 f6 0d df 64 9f a6 8e 69 2e 07 86 69 e6 0d e7 63 21 68 0b 36 e1 f9 4b 93 09 16 d3 0d b5 96 f2 34 97 f1 6d e6 55 0f 68 7e f7 7c d5 15 85 3f f6 7e e9 ab da 64 e8 3a 33 5b 3f 16 66 ae 99 Data Ascii: &IY=Nn`5di.ic!h6K4mUh~\|?~d:3[?fIzp!UY^3>p?b\|Az_Lg_4]mk751l6q<{K )MHJ?INwBNU]7ap@di2V1Mn~6h5}Gyf
Jul 2, 2024 16:43:08.669038057 CEST	1236	IN	Data Raw: 9a a9 72 86 a5 0e 81 3a 97 21 0a b6 8f 79 43 c1 7b 1e 7e 40 3c 7a d2 57 3d 76 50 ce 5e 5f c8 c5 de b2 61 a9 8f 0b ef fa 4e 1b df 36 f5 96 2c de 94 2e 97 8d 95 7e 61 7a 3d 45 34 7a d6 e2 b9 fb 74 73 d0 be b8 9c f6 8a 23 b1 6d 34 ca fd c7 c5 4c 5b Data Ascii: r:!yC{~@<zW=vP^_aN6,.~az=E4zts#m4L[zq+jMKI/J<kniF\|d7E31iI?Gq}9/eEsS{[l6&w2f[wlYX1=RUs8Od@$E\:ec:
Jul 2, 2024 16:43:08.669131041 CEST	1236	IN	Data Raw: 63 89 ee 06 77 fb 77 6c 77 3d ae 31 43 0e c8 8e 07 fa ee 2c 79 2c 9b 20 83 b1 04 33 c1 8a 01 15 ff 0a 4b 07 23 03 f4 e2 a5 40 f2 7e a9 58 3d 4a 6e 94 f3 45 72 9c 82 34 32 c0 a6 29 36 49 27 8f 7b 6d ee fe 5c 0d 7c 22 ba 18 5e 5d 9f 99 7e 8d d3 fe Data Ascii: cwwlw=1C,y, 3K#@~X=JnEr42)6I'{m\\|"^]~PW,2:^m>cZh+e(8e3nIW.+Ez]<tV=k%yu_Z]vC\|WrJIk9l-zV/PbKo"qyU"Zz
Jul 2, 2024 16:43:08.669143915 CEST	1236	IN	Data Raw: 1c e2 ca 88 aa 23 87 09 ed 45 6d ef 67 14 8f 62 2c b3 35 47 67 f7 b7 ed 53 94 2f 51 78 b7 fd cc b6 a7 b2 4f e3 43 03 f2 c6 94 a0 37 18 48 ae c2 1b c3 38 03 06 5c 63 0c 96 19 3a dc 7d 4e d5 6c fa b5 72 4d 88 9a 90 71 11 4c c1 04 d5 35 8d 4d e9 a2 Data Ascii: #Emgb,5GgS/QxOC7H8\c:}NlrMqL5M*AXH(i<UiK.gL6<c rzS7{<$=sM'Q;ExWl__"{M!KpTLs1 $JI9d#6IKF13'
Jul 2, 2024 16:43:08.669154882 CEST	1081	IN	Data Raw: 45 dd d7 cf 1f 46 bc 5c 41 65 0b eb 01 a9 72 73 d0 29 35 9c 60 7f f3 d2 55 f3 66 de 59 4d 8a 48 a1 97 b0 c7 7f 94 9a e9 ec c8 04 45 99 9d ce 4e e6 78 48 47 79 18 3c cd 0c 4a e2 51 ae 34 cc 92 d2 97 7c 6c 9b d1 04 91 7e 8a d9 fe 4c c3 85 07 b1 82 Data Ascii: EF\Aers)5`UfYMHENxHGy<JQ4\|l~L}/MQT)E8Bb,q]ex)+QC[N+laU(4GZK D+bnWmWqZr;A(V05@lKEP*;
Jul 2, 2024 16:43:09.605207920 CEST	713	OUT	GET /track.php?domain=pollyfill.io&toggle=browserjs&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:09.815845966 CEST	608	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jul 2, 2024 16:43:09.821243048 CEST	594	OUT	GET /ls.php?t=668411fc&token=f5ed7cd03f8f7432e47ec3c8ee7f751fb67ed50e HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:10.020689011 CEST	865	IN	HTTP/1.1 201 Created Date: Tue, 02 Jul 2024 14:43:09 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_GSaIJ6gb2UiN6UkluEXie2+hXP0IkItvmwFXuACxpidcPZh1IW0p5ro6+W2v2Q2CtsgtG/NVJi/QTnTMHHzFTw== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Jul 2, 2024 16:43:14.576920986 CEST	824	OUT	GET /track.php?domain=pollyfill.io&caf=1&toggle=answercheck&answer=yes&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Jul 2, 2024 16:43:14.793607950 CEST	610	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jul 2, 2024 16:43:14.812392950 CEST	694	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Jul 2, 2024 16:43:15.008104086 CEST	230	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:14 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Thu, 30 Nov 2023 13:41:22 GMT ETag: "65689102-0" Accept-Ranges: bytes
Jul 2, 2024 16:44:00.018554926 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49786	185.53.178.30	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:08.934910059 CEST	326	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:09.597007990 CEST	1005	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:09 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 [TRUNCATED] Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49788	18.66.121.135	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:09.838553905 CEST	430	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:10.468704939 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 01 Jul 2024 17:27:22 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 90bb130ecccb71953b38a1c0e3b5721a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: SA1hliFOIJM3Aq_avmO5aEVhDW0U3cMV0S2PXIEBaDFfVra3Gi6eIQ== Age: 76548
Jul 2, 2024 16:43:10.468786955 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Jul 2, 2024 16:43:10.468839884 CEST	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Jul 2, 2024 16:43:10.468852997 CEST	1236	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Jul 2, 2024 16:43:10.468959093 CEST	1236	IN	Data Raw: 7b 5e dc 77 ec b8 e5 05 b5 b4 07 c0 3d db 5b da fd b4 1b c3 7d f2 f7 80 83 a4 f7 9d 49 d3 b8 e7 e2 3d 00 ed 61 70 cf c1 7b 15 ed d6 70 9f bc 80 1d 24 bb cf 4f 5a c7 3d 07 ef 41 68 0f 85 7b 6a de ab 69 37 87 3b d7 99 48 76 b7 4f 16 80 fb 8e 1d a7 Data Ascii: {^w=[}I=ap{p$OZ=Ah{ji7;HvO+=)yD=9I{gS}@pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO
Jul 2, 2024 16:43:10.469130993 CEST	896	IN	Data Raw: cc 5b 42 69 af c7 fb 04 b6 13 a1 7b 34 dc 23 d1 1e 86 f7 f5 b4 6f c4 bd c3 7b cb a3 33 f1 68 af c3 bb 45 dc 19 39 40 e8 2e 03 f7 be f7 f3 24 f1 be 91 f6 7e dc db 9d 8c 8c 4b fb 68 de 27 b0 9d 28 51 af 16 86 fb 2d b3 d1 79 f3 e7 fd be ef 2d f5 49 Data Ascii: [Bi{4#o{3hE9@.$~Kh'(Q-y-I^7<a}6MIx;h/^\| ^~^M@\|OG0Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K
Jul 2, 2024 16:43:10.469141006 CEST	1236	IN	Data Raw: c2 3d 01 ef de b4 77 fb e0 cc 48 dc 5b d1 1e 9d f7 e1 b4 6b c2 1d dd a9 98 b6 db c0 3d 32 ef ad 68 af e4 7d 3d ee 67 da d2 de e3 fd ed 4c b4 ab c2 9d 7d 77 c2 76 65 b8 77 78 3f 2e 95 f6 0a de d7 e2 7e e6 83 73 61 5a 78 3b 0b ed aa 70 e7 db 9d d8 Data Ascii: =wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`w]N}.=vq{{KiW;d->;qbfv=*=
Jul 2, 2024 16:43:10.469151974 CEST	1236	IN	Data Raw: bf e7 31 94 f6 11 b8 77 79 3f 2b 8f f6 c1 bc cf 61 3b 11 ba 07 c5 3d 31 ed b5 79 1f 41 fb 48 dc 6b f1 9e 9e f6 41 bc 2b c0 9d 91 03 c4 be bb 22 dc 33 d0 5e 8b f7 91 b4 d7 c0 7d 24 ef e3 fb 73 d5 cf bb 7c dc b7 b1 c6 a9 d4 6e d4 87 7b 26 da 47 f2 Data Ascii: 1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6W~v>DwW~v6q>Dw)f]ky;H8_]?$wFzQ6h:S
Jul 2, 2024 16:43:10.469168901 CEST	1236	IN	Data Raw: 30 ee e8 4e 24 de f6 70 b8 f7 78 cf 4b 7b 76 dc 97 96 9e 3a 77 be 04 dc 3f 61 45 13 2d f7 49 09 b8 9f 3f f7 74 6e 5b f3 e2 fe f1 93 47 8f 1e 0d c8 3b db 32 44 7c ba 0b c0 fd dc d3 df 3d 7a f4 c9 8f 8b c5 bd 47 fb d1 90 bc f3 0f aa 44 e8 9e 1d f7 Data Ascii: 0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w?.>"t{ywRh;=g=%BL=Ny_v"5PdwiK4}$xwho)76pE{r<[.
Jul 2, 2024 16:43:10.469178915 CEST	532	IN	Data Raw: b4 d8 b8 b3 ef 4e 94 af cb d3 c2 70 97 cd bb 33 44 7b 0a dc d1 9d c8 aa ed 1e b8 4b e6 5d 28 ee 33 3e b4 27 c1 1d dd 89 b2 94 60 71 1f f1 62 47 2a ef 22 71 9f f1 fb 8d d3 e0 8e ee 44 36 6d 9f f6 85 47 26 ef ce 10 ed 89 70 47 77 22 93 b6 4f fb d3 Data Ascii: Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|wfm])q:wt'ftwt'2ft.;Q.O]q/qGw]GQ$7(wt'2d{@%
Jul 2, 2024 16:43:10.558401108 CEST	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49793	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.142350912 CEST	329	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:10.618381977 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 16:29:54 GMT Connection: keep-alive ETag: "63ee5a02-20f3" Expires: Tue, 16 Jul 2024 14:43:01 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:43:10.618422031 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Jul 2, 2024 16:43:10.618443966 CEST	224	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="
Jul 2, 2024 16:43:10.618457079 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Jul 2, 2024 16:43:10.618468046 CEST	224	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){ret
Jul 2, 2024 16:43:10.618534088 CEST	1236	IN	Data Raw: 75 72 6e 20 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 2c 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 63 72 65 65 6e 2e 77 69 64 74 68 7d 2c 74 68 69 73 2e 63 61 6c 6c 65 64 Data Ascii: urn screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExternalFrame=function(){return"n"},this.isCookieSupported=function(){var t;return-1==this.cookieSupport&&(t=navigator.cookieEnabled\|\|!1,void 0!==navigator.coo
Jul 2, 2024 16:43:10.618640900 CEST	1236	IN	Data Raw: 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 7d 63 61 74 63 68 28 74 29 7b 7d Data Ascii: t.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._Top.window.innerHeight:t
Jul 2, 2024 16:43:10.618653059 CEST	448	IN	Data Raw: 68 28 65 29 7b 7d 76 61 72 20 5f 6e 70 53 55 3d 64 72 3f 75 72 6c 3a 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 5f 6e 70 49 44 3d 22 70 75 5f 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 Data Ascii: h(e){}var _npSU=dr?url:"about:blank",_npID="pu_"+Math.floor(89999999*Math.random()+1e7),pxLeft=0,pxTop=0;-1==pw&&(pw=this._ww()),-1==ph&&(ph=this._wh()),pxLeft=this._wl()+this._ww()/2-pw/2,pxTop=this._wt()+this._wh()/2-ph/2,npf=npf\|\|"toolbar=0
Jul 2, 2024 16:43:10.618761063 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Jul 2, 2024 16:43:10.618812084 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Jul 2, 2024 16:43:10.623228073 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 2, 2024 16:43:10.630505085 CEST	394	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:10.731420994 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:43:01 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49794	76.223.26.96	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.281698942 CEST	633	OUT	GET /track.php?domain=pollyfill.io&toggle=browserjs&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 2, 2024 16:43:10.852091074 CEST	608	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jul 2, 2024 16:43:14.815329075 CEST	744	OUT	GET /track.php?domain=pollyfill.io&caf=1&toggle=answercheck&answer=yes&uid=MTcxOTkzMTM4OC41MjE1OmQzZDNiYjAwOTNmZGY0MDFkMzZlYmI1NzU5YmJiMTMwOWUxOWUyMjgxOWIzN2UyMGUxMzcwNDk3YmE2YWRjNzQ6NjY4NDExZmM3ZjUyOQ%3D%3D HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Jul 2, 2024 16:43:15.026247978 CEST	610	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jul 2, 2024 16:43:15.482455969 CEST	553	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.pollyfill.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cmpcccx68884=aBQBKLPtAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg; __gsas=ID=e46e622ee8314daa:T=1719931392:RT=1719931392:S=ALNI_Mat-JHl3QKkfMMTzPBQ-h7H9N-coQ
Jul 2, 2024 16:43:15.680350065 CEST	230	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:15 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Thu, 30 Nov 2023 13:41:22 GMT ETag: "65689102-0" Accept-Ranges: bytes
Jul 2, 2024 16:44:00.690541029 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49795	18.66.121.135	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.578361988 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.208455086 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 01 Jul 2024 17:27:22 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 2a6277094357eb47f8dbeacb06ed96c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: tjxq8OvylJAd3Zr6-ZdNNrCM9ugIZAK2yvMkzU93nBAfqUxknNUwEg== Age: 76549
Jul 2, 2024 16:43:11.213641882 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Jul 2, 2024 16:43:11.213696957 CEST	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Jul 2, 2024 16:43:11.213706970 CEST	1236	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Jul 2, 2024 16:43:11.213783026 CEST	1236	IN	Data Raw: 7b 5e dc 77 ec b8 e5 05 b5 b4 07 c0 3d db 5b da fd b4 1b c3 7d f2 f7 80 83 a4 f7 9d 49 d3 b8 e7 e2 3d 00 ed 61 70 cf c1 7b 15 ed d6 70 9f bc 80 1d 24 bb cf 4f 5a c7 3d 07 ef 41 68 0f 85 7b 6a de ab 69 37 87 3b d7 99 48 76 b7 4f 16 80 fb 8e 1d a7 Data Ascii: {^w=[}I=ap{p$OZ=Ah{ji7;HvO+=)yD=9I{gS}@pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO
Jul 2, 2024 16:43:11.213866949 CEST	1236	IN	Data Raw: cc 5b 42 69 af c7 fb 04 b6 13 a1 7b 34 dc 23 d1 1e 86 f7 f5 b4 6f c4 bd c3 7b cb a3 33 f1 68 af c3 bb 45 dc 19 39 40 e8 2e 03 f7 be f7 f3 24 f1 be 91 f6 7e dc db 9d 8c 8c 4b fb 68 de 27 b0 9d 28 51 af 16 86 fb 2d b3 d1 79 f3 e7 fd be ef 2d f5 49 Data Ascii: [Bi{4#o{3hE9@.$~Kh'(Q-y-I^7<a}6MIx;h/^\| ^~^M@\|OG0Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K
Jul 2, 2024 16:43:11.213876963 CEST	1236	IN	Data Raw: 5f da f5 e2 8e ee 84 ed 7a 71 6f c0 7b 3a da 93 e2 5e 93 77 7f da 15 e3 8e ee 64 a7 87 4f 16 87 7b 4d de 53 d2 9e 18 f7 1a bc b7 a1 5d 33 ee f0 4e 7c b6 6b c6 bd 06 ef 69 69 4f 8e fb 70 de b7 3e d7 8a 76 dd b8 73 68 86 f8 6e d7 8c fb 70 de 9f 7d Data Ascii: _zqo{:^wdO{MS]3N\|kiiOp>vshnp}\|jk>ow]7y@{y@v]7g=]=N~3]?Fo<vN\|[i2i;}g75}m
Jul 2, 2024 16:43:11.213887930 CEST	1236	IN	Data Raw: 4f 8f 3b ba 13 59 b1 7d 71 e1 fc f9 71 a9 b4 37 e7 bd 11 ee 4b 6b 13 c6 7b 87 f6 2c b8 a3 3b 51 94 32 2c e6 85 ae 22 e3 52 69 6f ca bb f3 a4 5d 18 ef 3d da f3 e0 8e ee 44 36 6c 5f c6 5d 12 ef 1b 68 6f c6 bb f3 a6 5d 10 ef 2b b4 67 c2 1d dd 89 4c Data Ascii: O;Y}qq7Kk{,;Q2,"Rio]=D6l_]ho]+gL~w)}/JWi;Y}w>x_C{6kqZu}^#Q]{Nng}V$QnX{.k^wLIX{k/5ig
Jul 2, 2024 16:43:11.214003086 CEST	1236	IN	Data Raw: 4e 84 ee 29 70 6f 45 7b 12 de 9d 6c da 1b f2 be 80 ed 44 0a 7b 53 1b ee ad 69 4f c0 bb 93 4e 7b 23 de 17 b0 9d 08 dd 63 e3 1e 84 f6 e8 bc 3b f9 b4 37 e0 7d 01 db 89 d0 3d 2e ee c1 68 8f cc 7b 2c dc 2f 86 a4 bd 36 ef 12 70 67 9c 0c 91 47 07 94 e0 Data Ascii: N)poE{lD{SiON{#c;7}=.h{,/6pgG;]*%IiB{-8"~+(Gq+OdH;M=7 RB.t>l'BG=Ns"qgiM$IhSG0;}=$Ii
Jul 2, 2024 16:43:11.214018106 CEST	192	IN	Data Raw: 3b b6 13 99 d3 3d 1a ee 59 78 77 c9 69 9f 8a d8 11 6c 27 42 77 81 b8 67 e0 3d 2d ee 33 51 69 4f 88 3b eb 8d 28 5d 26 70 4f ce 7b 4a dc 67 22 ff 74 bc c4 44 84 ee 72 71 4f cc bb 33 44 7b 2a dc af 65 ad 11 a5 ed 5a 1b b8 27 e5 dd 19 a2 3d 11 ee d8 Data Ascii: ;=Yxwil'Bwg=-3QiO;(]&pO{Jg"tDrqO3D{*eZ'=Nd=R3pOC{"YgD6uOSwVQI5ct%FdV%w]jwg3N(k<>5ewe1KG=
Jul 2, 2024 16:43:11.297374010 CEST	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49796	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.640341043 CEST	398	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.117530107 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:01 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Jul 2, 2024 16:43:56.136729956 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49799	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.684727907 CEST	391	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.157152891 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:43:11.157448053 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Jul 2, 2024 16:43:11.157489061 CEST	224	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V
Jul 2, 2024 16:43:11.157500029 CEST	1236	IN	Data Raw: 0f f0 eb 7e ae 03 8a cd b0 74 c0 e6 60 25 af 56 8c 3e de ba a6 99 bd 89 f9 01 54 6a 61 44 2b b3 fb 19 31 c0 35 c8 e8 2f 2a 6c 2c 65 b1 94 b5 6b 9c b7 2c 0b 36 a3 33 d6 62 15 9a f9 c9 f9 36 72 6e 2f 7a f5 6b bc 4d 69 64 7b 91 72 0e 2b d3 16 4f 42 Data Ascii: ~t`%V>TjaD+15/l,ek,63b6rn/zkMid{r+OBQpS@V/=6zvR(YJOgerl+h6@w rDMy0Q<y5F^WQ_MkkVje]"F_#FM5+U-{x;U,G\ri6
Jul 2, 2024 16:43:11.157567024 CEST	1236	IN	Data Raw: 37 64 cf 52 66 ce 9b ba 6b 75 6b 9f 98 d4 73 d5 21 b8 1c 86 cb 90 f6 36 9f e0 77 f9 86 9e 3c f5 9f 75 ff be b6 02 5f 15 bd 67 be 22 7a d3 a8 7f d9 2a 9f 5b eb c2 4d 8f f7 b9 d2 9c 6e 6c e4 e6 6e 10 b9 69 ac 4f ac 8b dc 59 ac cf 61 fd f4 75 91 9b Data Ascii: 7dRfkuks!6w<u_g"z*[MnlniOYaukNi[L8^uz<SsekJt]$wqg%TJl@Q-RPt-jgVe,_m{yQ)d&tnk00V1dUYf/{mzv<
Jul 2, 2024 16:43:11.157578945 CEST	1236	IN	Data Raw: 3a 8a 70 11 25 46 89 38 91 28 92 2d b7 2d 05 0e d7 34 37 cd 53 f3 d2 74 cd 57 0b d0 42 b5 70 2d dd 5b f7 f6 d5 2d ba 4d 77 d6 5d 75 4f dd 4b 6f a1 f7 d5 63 f5 c9 3e 39 e5 16 29 7f d5 53 54 8d 34 32 84 9f a2 06 8a 60 11 26 22 45 b4 88 15 09 8a 7a Data Ascii: :p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu:IQ:/H.SdL2AQ^a\|`3w32OyFQjS4L#jf8UnOX~{09bU43q:jvuqj&4
Jul 2, 2024 16:43:11.157723904 CEST	672	IN	Data Raw: 11 c7 cd 27 be a4 8c e2 34 1b 35 46 03 ca 8c 41 ae 91 7f 74 f6 ec d6 b3 67 e7 5f 5c 71 11 1f 14 97 d1 76 98 fb 8e 3b cd b9 e2 38 b6 8b 3e ee a0 a9 d5 98 26 9a 83 52 9b 46 fb 95 19 12 72 62 67 e1 b8 1c ee 0b 38 05 0b 29 3f cc 46 95 3c 07 9a bf e8 Data Ascii: '45FAtg_\qv;8>&RFrbg8)?F<PQkL%1pd"N\|'O~8wQ0"ZSv5>_}{Z^zIx%;_1}UOMtu2A3:j5j.$J2!NY-#
Jul 2, 2024 16:43:11.157735109 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Jul 2, 2024 16:43:11.157746077 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Jul 2, 2024 16:43:11.157834053 CEST	1236	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Jul 2, 2024 16:43:11.162316084 CEST	1236	IN	Data Raw: 3d df 0c e4 51 10 ad e7 d8 79 e4 2d 95 50 12 cc e2 59 d0 c0 8a 1c 5a e9 38 d8 c7 a6 e4 32 ca a7 ef 2d ed 55 31 0b 8e d7 4f 2a 4f 0a 0c 0a 33 1b fb b8 64 7d b3 e2 0b ca a6 aa 55 ab a0 2b bb a0 46 33 c1 cf 2c 9f 21 d6 12 48 0a 6c 24 67 59 7c 8f 1a Data Ascii: =Qy-PYZ82-U1OO3d}U+F3,!Hl$gY\|l{;[g,lUUiNkgkc(j3bzG5DN#YMRTn}=\|;mhe@,^xTWV^_NFF$'fF8*T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49798	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.684890032 CEST	397	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.143699884 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:43:11.143923044 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Jul 2, 2024 16:43:11.143973112 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Jul 2, 2024 16:43:11.143984079 CEST	1236	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Jul 2, 2024 16:43:11.144134998 CEST	1236	IN	Data Raw: 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca 14 b6 e7 2b ef 6c 2c 9d b3 f3 db 9d 73 4a 4f 74 35 d5 59 ea 9a 3b 4b 4b 3b 4b c9 db 3d 0f 66 64 2d 69 58 b1 a2 61 49 56 c6 83 43 c3 a9 7d 69 69 Data Ascii: _ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%a-%.BAhi?^tEl4Gb /Di
Jul 2, 2024 16:43:11.144146919 CEST	896	IN	Data Raw: 2e 83 5b 5f 2b 2a 69 dd bb 07 2e 3f 19 23 5c bb 46 4e f5 fe 9c b1 45 ff 0b db 8f 70 94 d9 7c c4 35 08 5f c9 14 41 64 44 40 0c b1 24 4c b2 69 28 c2 00 39 39 97 e6 6f b5 3c b2 a6 a4 67 51 72 6e e6 c1 8a a9 19 f7 75 e5 6e 88 cf 9c da 43 5a 23 67 c6 Data Ascii: .[_+*i.?#\FNEp\|5_AdD@$Li(99o<gQrnunCZ#gZN,ZXP:uJ!"Lg9wZH>4cf2;B(YX,m^Xf62O^y2SCyW.]@1(k.pB7C=t7?'
Jul 2, 2024 16:43:11.144157887 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Jul 2, 2024 16:43:11.144167900 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Jul 2, 2024 16:43:11.144179106 CEST	1236	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Jul 2, 2024 16:43:11.144270897 CEST	672	IN	Data Raw: 26 c3 a6 92 85 b8 8e 68 c0 ba ea 8c 8c ea cc a1 a7 44 74 be 94 02 5d db be f0 3b 48 00 da 8c 48 b4 eb 23 d5 c0 e0 30 27 8c 12 55 b4 38 e8 8a b8 c8 65 0c 9b 10 da 14 e5 ca ef 10 16 43 63 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf Data Ascii: &hDt];HH#0'U8eCcf!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG
Jul 2, 2024 16:43:11.148845911 CEST	1236	IN	Data Raw: 4f 44 1d e3 78 28 08 08 8d 9f 9d 95 5e 30 b8 3c 3a 2c 7a 76 86 29 7d f0 b5 d6 cc 5d 9e aa e2 d6 84 ed 72 37 79 d7 96 90 55 25 8b 0f 4f 68 d9 a0 5b 9a bf f8 30 bc da 7e 34 11 4c 2e c2 23 ed 87 e2 84 8f 40 94 6b b1 ee 4c e5 cd 47 94 36 ef db 54 9f Data Ascii: ODx(^0<:,zv)}]r7yU%Oh[0~4L.#@kLG6Tqg*o25VfEshq<OyGp'DsH0E]z;2a\"yW%TQuo@fER/c\Ehb?vC&=A'?Na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49797	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.684938908 CEST	395	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.155205965 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:01 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:43:11.155282974 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 Data Ascii: wOFF$&FFTM9GDEFMh!GPOS*6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TF
Jul 2, 2024 16:43:11.155318022 CEST	224	IN	Data Raw: 65 ea 0f 01 f9 ea db 80 22 75 14 b0 5c bd 0e 58 a2 c6 01 85 b8 d2 a0 96 02 c2 84 72 3e 53 82 f3 85 e0 72 45 80 72 b5 02 b0 05 e7 4a d4 06 d4 43 60 25 60 03 f8 5f 29 8e 57 01 aa 88 dd cd 6a 35 a0 18 7c b7 4c ad c1 73 e5 c0 47 05 60 39 fa ba 52 dd Data Ascii: e"u\Xr>SrErJC`%`_)Wj5\|LsG`9RpO5@mk&R=WO/?,Q/65K7#UCOjPU#725lPQ5@PB`8_qB*
Jul 2, 2024 16:43:11.155329943 CEST	1236	IN	Data Raw: c1 6b 36 83 46 36 03 77 8d a0 47 99 15 36 a3 57 aa d1 73 d2 1f 87 d0 13 37 f4 49 8c c7 66 55 89 71 19 e3 7e 12 dc 7e 1c b4 f2 2e 78 54 25 30 d7 8a 52 1c 55 97 b7 d6 1f dd 59 b7 00 d5 b9 d4 08 3a f0 47 c1 46 9c 8d 7a 5c 26 75 8b 5a be 25 d4 be 8f Data Ascii: k6F6wG6Ws7IfUq~~.xT%0RUY:GFz\&uZ%}"%e;[K+)R-}Drvyap>&a"7eGSG`7.NpF;-v2vNp^M{h\C>;[d8y\|2MK~fygb)AW
Jul 2, 2024 16:43:11.155390978 CEST	1236	IN	Data Raw: 0d de f2 2f 28 7d 0c a5 e6 47 0e 52 1b 7e ad f8 27 28 e1 20 39 fd 34 a0 1b 73 da 14 66 bc 21 c0 34 e8 af 17 74 3c 0e 2a 74 28 e3 4d 89 34 40 c9 a0 00 47 b7 69 f9 fc 02 37 bc ff 92 1d 9b 71 3d e9 ca ae ac 6f fa 9d 93 76 9f d6 33 b8 77 0a 2d 1b 47 Data Ascii: /(}GR~'( 94sf!4t<t(M4@Gi7q=ov3w-G;a{+w"(AKF"gs}8E=N.#afq<(>Y#!V`cD*wYTY__4{u=NiQ2WA)5z,}J
Jul 2, 2024 16:43:11.155402899 CEST	448	IN	Data Raw: 9e 45 cd f7 01 b3 47 70 f7 5b d0 be 2f a0 b4 eb d0 c0 47 54 7e 2d fd cf 55 bf ae fe 14 14 f1 03 8c d3 f3 fa 75 48 a1 c2 49 ae 80 bb 8c 41 f7 ee d1 1d e0 36 2d fa a4 1e 62 14 82 a3 5b c0 c9 a7 a8 53 54 43 96 1b 87 54 d2 05 29 b2 1b ef 7a 06 7c 63 Data Ascii: EGp[/GT~-UuHIA6-b[STCT)z\|cZ{T>.f3(c(^w(C_a+D=?6NC\}A7U*ZNttYm./]kcEIJLZ>
Jul 2, 2024 16:43:11.155504942 CEST	1236	IN	Data Raw: 6d a3 27 45 0d 2c c4 77 0a 5c 0e a2 0e bd a8 43 a1 d5 1e a8 03 8b be 8b 3e 08 d3 8a df 2c f4 45 f9 ee 7b a4 ee 71 89 4c 03 8f 1d c2 77 04 7d 39 8a a7 d7 8a e6 42 fa ba 00 fe df 24 d6 36 b4 c9 d1 33 f4 63 47 89 9d 61 94 34 cc b2 62 78 9b f8 f1 26 Data Ascii: m'E,w\C>,E{qLw}9B$63cGa4bx&T1?EgaaA?8<$m@Kjo\:o\|~@CzRIz0~S-M?~8:pg7E{;1\6QWoSoNi\|q)j#hi
Jul 2, 2024 16:43:11.155515909 CEST	224	IN	Data Raw: 51 d5 04 49 55 7c f1 47 f5 0e ce 6a e3 bc eb 12 46 4f 27 30 d2 87 f1 d8 45 1b 42 03 75 da 57 f0 e6 16 5a bb ae 88 07 96 39 9e 93 8c ee 1d 03 f7 02 1f c7 6e 46 72 8f d5 94 fb b0 77 61 7c 0f e2 53 2c 60 b7 51 a3 33 fa cf f0 ab 1f 6f 3e 87 a7 47 d0 Data Ascii: QIU\|GjFO'0EBuWZ9nFrwa\|S,`Q3o>Gw+bh`v{2y/m,xK/N %>,kA`nw7\|rbhYozTi;~}')q{ol_8)2"6rz"cq`
Jul 2, 2024 16:43:11.155961037 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Jul 2, 2024 16:43:11.156034946 CEST	1236	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>
Jul 2, 2024 16:43:11.160443068 CEST	1236	IN	Data Raw: 61 48 a5 c1 85 6c d9 f2 de d6 7b b0 c6 82 a9 bf 0b 35 ac ab 3f 26 f6 f0 99 dc 32 e8 b6 a9 07 d0 1f e6 b3 86 1c a1 86 ed 88 72 1c 8b c7 2b 0f 78 8f 30 7b 2c 7f e5 63 42 7d 91 ff 53 72 11 ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a Data Ascii: aHl{5?&2r+x0{,cB}Srclx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49800	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:10.774908066 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.230982065 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:02 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:43:02 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:43:11.231201887 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 2, 2024 16:43:11.231241941 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m
Jul 2, 2024 16:43:11.231254101 CEST	1236	IN	Data Raw: d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef 43 5f 5e c4 bc 86 25 36 16 0d 5f cf 3b 88 39 86 e5 5f de c7 93 65 f8 4d 1a 85 d8 4a ff Data Ascii: LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]
Jul 2, 2024 16:43:11.231379032 CEST	1236	IN	Data Raw: d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 6f 08 4a 31 68 c4 db 1e d9 44 2e 89 21 a9 23 a0 11 af fc 38 7d a7 30 9f c4 e0 27 22 90 c2 2e fc 34 11 d5 88 c1 4f 44 5c 16 d0 88 0f be 18 3a 11 Data Ascii: + `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\2{b(6A'B&B$^&<d"Du~
Jul 2, 2024 16:43:11.231389999 CEST	896	IN	Data Raw: 3d e8 32 fe 3b 08 34 40 d8 19 8d 28 f5 90 61 eb 0e 46 5f 93 99 a1 0e 77 79 c4 24 3a 11 56 22 cc c4 33 45 84 bd 01 82 cd a1 14 f6 22 b1 4a 62 6e be be dc 29 d6 24 b1 21 df 42 18 1d b0 3a ce 68 44 b2 17 f0 71 b2 de 1f a8 fd f1 3d b0 50 fd 15 77 4e Data Ascii: =2;4@(aF_wy$:V"3E"Jbn)$!B:hDq=PwN3_2CSF5fXmKCBF$r@aEuKLtipk@'vB#[(.9*Mb(P9RVkyR(y12Q IabrS):-Ypx\#ylM
Jul 2, 2024 16:43:11.231401920 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Jul 2, 2024 16:43:11.231520891 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Jul 2, 2024 16:43:11.231535912 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Jul 2, 2024 16:43:11.231631041 CEST	672	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[
Jul 2, 2024 16:43:11.236099958 CEST	1236	IN	Data Raw: 45 d8 c1 94 98 ab 10 93 bd 48 92 c7 f0 a2 2c 91 c1 b2 f8 84 33 4d be cc b5 2e 7d bc a6 a3 ce e6 5a a6 c3 e2 35 03 dd ec c9 77 94 0e d7 d2 27 d4 33 fd ab 70 57 ac da 89 3a 08 3c db b9 ae fe 01 c2 f6 ed 9b 87 3c 1e 75 96 79 61 e4 38 a6 57 c6 75 ea Data Ascii: EH,3M.}Z5w'3pW:<<uya8Wu_+7<.tPG5f2eH/fA3l)1#!Tssy$%i_uvRPU3ZC(iMkmHm\|L<#%zhC6C4A1C
Jul 2, 2024 16:43:11.376768112 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:11.475625992 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:02 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:02 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49782	103.224.182.252	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:11.347843885 CEST	233	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Jul 2, 2024 16:43:56.504745960 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49810	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:14.515768051 CEST	329	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:14.975768089 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:05 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 16:29:54 GMT Connection: keep-alive ETag: "63ee5a02-20f3" Expires: Tue, 16 Jul 2024 14:43:05 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Jul 2, 2024 16:43:14.975788116 CEST	565	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Jul 2, 2024 16:43:14.975800037 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Jul 2, 2024 16:43:14.975820065 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Jul 2, 2024 16:43:14.975831032 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Jul 2, 2024 16:43:14.975842953 CEST	672	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Jul 2, 2024 16:43:14.975853920 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Jul 2, 2024 16:43:14.976006031 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Jul 2, 2024 16:43:14.976016998 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 2, 2024 16:43:15.305618048 CEST	394	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.402069092 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:43:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:43:15.402133942 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 2, 2024 16:43:15.402144909 CEST	224	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49813	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:15.312922955 CEST	398	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.762420893 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Jul 2, 2024 16:44:00.776865959 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49814	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:15.314081907 CEST	391	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.775600910 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Jul 2, 2024 16:43:15.775655985 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Jul 2, 2024 16:43:15.775666952 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Jul 2, 2024 16:43:15.775768995 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Jul 2, 2024 16:43:15.775779009 CEST	1236	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Jul 2, 2024 16:43:15.775794029 CEST	1236	IN	Data Raw: a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 e8 d7 5a 2f 69 f6 ac 30 53 b1 39 28 bd 91 67 f3 47 fa a3 0e 67 25 cc 82 6e 09 02 a0 5d 6d 20 ee e4 22 e7 42 f7 20 5c 3e 06 e4 91 70 53 b8 02 59 90 b7 e5 d3 7d fb 0f ec 47 1c 09 dc c3 c4 Data Ascii: A=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv;fQd&+Y;6S"tQ8(/"'h=DjYEYw
Jul 2, 2024 16:43:15.775804996 CEST	1236	IN	Data Raw: 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 76 e0 e4 83 dd b0 59 58 6d e1 c0 66 45 d8 17 70 1e fa 8b 70 6f 1a 0c 1a a0 fa fc 19 e1 b3 8d c2 67 67 04 78 96 9e 0f 28 0d 74 1c 2f 48 b2 e7 4d c5 8e d7 8c 02 0d 6f 80 b8 95 27 57 6c 3b Data Ascii: 6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%'0tw\|p5=\"\#,yBtlm9[T(.AujjWH1.
Jul 2, 2024 16:43:15.775973082 CEST	386	IN	Data Raw: c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e 80 e9 a7 0f 3b 57 20 73 d3 c0 9e 6a f9 39 54 11 15 94 94 d7 d3 92 91 d1 bd 1e 1e ff 2e 44 a3 9d 93 39 b3 fa ce bc e3 c7 e7 51 fa b2 70 7f 92 f1 7c 85 7b 1b 2e 1a 1a b5 e8 3d 91 4a 38 d1 Data Ascii: [87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o{:K_3g/s)""]n`ixm<c6Y1
Jul 2, 2024 16:43:15.776230097 CEST	1236	IN	Data Raw: 44 dc dd 04 44 97 82 ae 9c e2 8e 86 f8 01 68 bc 06 63 a1 b0 fc c0 0f 7e 81 8f a8 36 41 82 31 51 27 9e 40 d5 2e 4a 1d b3 11 30 43 c5 2f 75 99 98 ac 5e a3 f5 87 25 b2 b2 8c b0 95 70 24 7a e4 e8 d0 8a a2 2c ad 26 ac ac 3c 93 ea 24 42 ba 83 31 1f cb Data Ascii: DDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30tM75,*;jdME8]G{>qf1nUp<7#m9&hCYtFg#"&uBT=z{g
Jul 2, 2024 16:43:15.776261091 CEST	1236	IN	Data Raw: d8 99 09 7c b8 4f a4 9a 09 cd 5b 69 22 2e b5 94 e0 81 b8 06 c4 b3 50 3c 9c 87 ea be 9a 8c 14 aa d9 ab 7c 7b 82 c6 06 e1 e3 65 a9 a2 a7 51 ab cd 1a 4d 95 58 be 63 31 7d 2a 89 b1 eb 4e b8 ce a0 94 69 62 81 be c2 1e aa 33 dd 2d ec f5 d6 53 a2 ea 70 Data Ascii: \|O[i".P<\|{eQMXc1}*Nib3-SpR+mArEK$MvbY^`x^E)KYcc0s$!0U]2X)){]D1WOk2:5xf[[G]bg=h$#n
Jul 2, 2024 16:43:15.780654907 CEST	1236	IN	Data Raw: 8c 6a 59 fa 39 d1 9c 0e 52 eb 0e 3d 4b b2 20 94 25 c6 e8 d9 58 66 84 29 59 da c8 71 71 bd 3e 23 b4 fe a9 4d c9 35 89 9e 81 c5 29 29 9b 57 a7 c7 ac 68 93 ab e1 42 5a 91 71 52 a9 10 0f bf 6f 4c f2 4b f7 8e 0d 8a 0e 32 8c 9b 96 e1 dd 94 d6 d0 b6 ba Data Ascii: jY9R=K %Xf)Yqq>#M5))WhBZqRoLK2_eu!^BZtEk\Axp{aO{:&$_.w\|=PvCC&-jTh(E\|{=8nF+ks2)iu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49815	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:15.374222994 CEST	397	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.830562115 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 2, 2024 16:43:15.830682039 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Jul 2, 2024 16:43:15.830739021 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Jul 2, 2024 16:43:15.830744028 CEST	448	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Jul 2, 2024 16:43:15.830841064 CEST	1236	IN	Data Raw: 92 87 c9 42 7c 12 cd ba 30 99 d2 8b 32 c0 64 34 e8 20 b0 63 eb 23 11 6a eb a0 65 b0 22 71 aa 67 95 9f 3a 3c a3 b4 a9 4e 18 2e 5b 5d 38 27 75 61 bf d1 5f bd d0 e8 36 bf 75 61 5d 5c 5a 6c 45 4d 55 c9 ac ba 0e 43 6c 7a 4a be 21 22 a5 a0 b1 f2 60 72 Data Ascii: B\|02d4 c#je"qg:<N.[]8'ua_6ua]\ZlEMUClzJ!"`rJOQz1<L{r&~J}r8/\^6H/{"eYBeexy~WIq8&}8>Vb\_fy9**[Z5yE3w.<hqV>15sD=7G4
Jul 2, 2024 16:43:15.830912113 CEST	1236	IN	Data Raw: 9e e5 a3 5d 52 52 b6 a2 a4 78 75 f1 ea cf a0 e2 fb ef 9f e8 bd 37 37 63 ed d6 0b 3b e3 d5 b9 c2 c3 05 8d 25 83 9f 5c 14 2e fe 29 2d 34 28 14 ce 56 d7 dc dd dc 88 78 51 e6 5e 45 d9 97 33 4b 2b d7 52 23 18 07 ee f0 66 c1 6a 30 d0 9f 82 f8 35 6b 0e Data Ascii: ]RRxu77c;%\.)-4(VxQ^E3K+R#fj05kV\|>h98GFOFN=(;%=+<1Ux~=^1rJh$wTSjtONzSQ2L/[ G?4>ggi+Bu[>{@
Jul 2, 2024 16:43:15.830921888 CEST	1236	IN	Data Raw: 7a 15 78 96 97 b7 af e8 bc 8b 5c 9d 31 e3 d0 21 16 bb 0f 5b c9 d6 e1 63 74 0d 15 8d dd 49 ce d6 e4 64 0e 20 0d 2d 6d 00 f9 86 c5 e5 da 30 33 09 e8 5c 61 25 75 6d 09 54 7e 23 50 ee 38 12 80 3a 12 44 b9 63 14 1d 68 2a 1e c8 68 08 4d a5 4e 29 37 6a Data Ascii: zx\1![ctId -m03\a%umT~#P8:Dch*hMN)7j5J%Y0cY%+[YV6pzo)zLb"DDUvd41Xr6tml"? W3pG4V90/<z}FNq`FeZ!NG
Jul 2, 2024 16:43:15.831059933 CEST	1236	IN	Data Raw: a9 e1 33 a4 82 52 07 8a 8c 9c 9c c0 08 cd 66 5f 3f 5f fc d9 ac e1 c9 81 e4 2b 05 13 dc 0b ae f9 29 9a 37 5c 56 fb 37 07 68 de df d0 0c 14 6e ed f0 5c ee 31 7e 12 f3 97 b8 19 b5 33 0e f0 47 6f d5 73 d2 19 a2 0f c2 71 cd 60 fc 9f d6 c8 e0 9b 75 e2 Data Ascii: 3Rf_?_+)7\V7hn\1~3Gosq`urr\"ij499jfWk7.1Yb9O4s2\^++J)K%)~Xr7Ob{Ub9p-R%o$d'ysdyW19
Jul 2, 2024 16:43:15.831069946 CEST	896	IN	Data Raw: b3 a5 c1 d7 c7 5c a5 08 23 d1 33 97 dc 7a 80 97 dd fa 05 3e e5 75 41 29 6c 7e 21 77 83 fb 2b 6c a1 16 c5 4b 8a 84 0b 59 1a 18 82 a5 ec 2f 70 91 18 3b 5f a3 12 85 38 da c2 66 ca 00 8c 7d 7d ae 65 b4 86 f8 79 87 f9 a8 b4 13 42 0a 15 05 4b 75 c9 3e Data Ascii: \#3z>uA)l~!w+lKY/p;_8f}}eyBKu>US\t4l0D] ^lg,)lQ--n)+-(MB*6#;=^)!\|^P{DkDXJKZvbb^x0?UZ9wn!\`
Jul 2, 2024 16:43:15.831079006 CEST	1236	IN	Data Raw: 1e 4b 1b c5 46 e7 a0 0f 4f 23 56 a3 69 91 f0 43 0d 23 9f b2 fc ae 4a cc b6 a2 06 b3 e2 55 a8 41 ad 65 26 1a cd b1 df f4 eb 2f d1 0a 16 0c 0b ff b0 fe f2 cb fa 35 9b 40 d7 0d d1 b4 8a 05 ba a4 eb af 74 9f b8 cb b6 67 5f a0 7d 18 47 a1 8e 54 44 78 Data Ascii: KFO#ViC#JUAe&/5@tg_}GTDxg0R"0.&$n(v2+T"(pqtwBOs5<N!eNe#ZJ6t m3g6W1uZWtZLs&7Za: bn9?Jv9mM\I';My2
Jul 2, 2024 16:43:15.835802078 CEST	1236	IN	Data Raw: 4a e3 53 cd 01 5a 93 29 f9 95 67 57 ee df 78 7e 53 a8 f0 cb 8c 19 4b ab ab 39 1b 3f 48 2a da 59 2f 96 33 19 5b 89 35 3b 5b 56 c7 d2 ec 85 d1 d6 74 4c a5 f6 9a cd 96 f2 52 bd f6 1b c7 98 9e 38 55 6d 61 1b 6e 57 88 63 e9 96 69 ca 62 a7 fa ed 08 2c Data Ascii: JSZ)gWx~SK9?HY/3[5;[VtLR8UmanWcib,_FUDpkNp>p8~(yqB&6x1x9rFrG\|YQ2c^9?t}[{SrW>]^:6G&2ZODx(^0<:,z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49816	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:15.374707937 CEST	395	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww17.pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.835369110 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 07 01 47 50 4f 53 00 00 02 14 00 00 2a cb 00 00 82 36 c5 fa 25 64 47 53 55 42 00 00 2c e0 00 00 01 9a 00 00 03 24 57 60 3a 43 4f 53 2f 32 00 00 2e 7c 00 00 00 53 00 00 00 60 61 e5 ae a1 63 6d 61 70 00 00 2e d0 00 00 01 89 00 00 01 e2 17 09 75 62 63 76 74 20 00 00 30 5c 00 00 00 3c 00 00 00 3c 0e 59 11 ef 66 70 67 6d 00 00 30 98 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 4c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 54 00 00 46 90 00 00 8b a8 1f 92 91 ac 68 65 61 64 00 00 78 e4 00 00 00 36 00 00 00 36 15 9e 06 99 68 68 65 61 00 00 79 1c 00 00 00 20 00 00 00 24 0f ac 07 51 68 6d 74 78 00 00 79 3c 00 00 02 4a 00 00 03 a4 2e 37 56 bc 6c 6f 63 61 00 00 7b 88 00 00 01 c8 00 00 01 d4 ce bd f0 aa 6d 61 78 70 00 00 7d 50 00 00 00 20 00 00 [TRUNCATED] Data Ascii: wOFF$&FFTM9GDEFMh!GPOS6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TFheadx66hheay $Qhmtxy<J.7Vloca{maxp}P name}pgqpostJprepxQ>webf\-hRFSx%=@Py>]aJ5$`&MNuI@Z2(]eAM{F=Y0]OK>m#x}l\m/bq!ImjHeXM[&0]i3(MQ6baetPx"7x^uYg9?Bss<TzW-i}mr?Z?WnU/Se{Z~l=u{k6<Xs{o>^U8_R\|%uxZ_%50tAF/I\|:UWuoN=sWq<~=>5?n[o}7QYfIqUOI8sJJ;uPg~o:
Jul 2, 2024 16:43:15.835419893 CEST	1236	IN	Data Raw: 4f ab 3a d5 8a 5f cd 5e 2b 0a 71 cf 49 fc 0a eb d1 2c b5 2c e7 77 34 50 cf 23 00 b3 35 79 f7 45 51 c7 6f f2 b7 a9 eb e3 a8 75 70 ab e4 67 18 10 dc da 55 ad 7d 1a e7 d1 6f 49 bc a1 d9 96 50 ef 63 05 d7 eb 55 54 df c1 35 de 49 1c 1d 77 eb 83 f3 a6 Data Ascii: O:_^+qI,,w4P#5yEQoupgU}oIPcUT5IwZ5P~Ww&f#G_~gWRZ e>~wlT>mpgevGO?Y{3{]O-t}mw&YwRzClO^u`o7jN~6sd4{gU^,'n1
Jul 2, 2024 16:43:15.835431099 CEST	1236	IN	Data Raw: 6b 67 f3 ac ed ec cf b9 9d 43 d0 48 65 e6 15 ad ce 48 78 11 52 dc a8 7d a6 01 75 fd a6 a9 1b 24 8a 16 75 00 34 fa a1 f7 f8 0b b6 46 2f a9 36 d0 58 1d b5 f3 06 68 eb c2 5f e5 e9 f3 42 59 a4 f0 24 7f 1f c8 90 6f 73 6d e7 d5 6c d2 71 16 0a 9d ad 9d Data Ascii: kgCHeHxR}u$u4F/6Xh_BY$osmlq(Y8qtW_3\`tvET}@aa AZ\|Lv-0&jTI=XZ]N^cf%:^[AZ14;8P+^Wb:P7B
Jul 2, 2024 16:43:15.835526943 CEST	1236	IN	Data Raw: 18 a6 27 78 92 dc 25 4e 3d c7 ed d3 7c 6a 7a 32 32 85 13 84 6d ed 21 ad a5 da d3 52 7d 91 a9 54 61 6b 49 ba b9 e7 52 5e 7d 9a bd 3f 17 fc c4 16 50 7e 73 96 e7 a7 c8 75 2f 82 2f 5f 01 bf ef 83 64 29 7c ed 02 f0 3b 48 eb 66 27 b9 5c d2 f5 f0 f2 57 Data Ascii: 'x%N=\|jz22m!R}TakIR^}?P~su//_d)\|;Hf'\Wxn=ZHq#z6X.ly"W)>+<hS]1}zs\4 >1nm%f<z\lK5o[Ibz^v(Aqoj<$m/'SU^KkF?
Jul 2, 2024 16:43:15.835536957 CEST	1236	IN	Data Raw: 90 a3 ee 98 13 1d dd fd de 5c ac 1f 63 71 fd 7a 2f da 14 78 ef 75 89 7f 80 fc 34 00 09 33 c6 b1 de 05 19 b6 df ca 71 51 7d 88 1c 60 80 7c ff 02 b9 42 3f b8 de 8f c1 83 fa 25 1a 40 b8 27 78 df 90 44 76 50 8a e8 74 a3 04 c1 0b 7f 26 cf 80 ef f4 eb Data Ascii: \cqz/xu43qQ}`\|B?%@'xDvPt&(=?!~oxC718%8-4ucn<s((>#f8o}Ml&ohe$VF\`T;X<Q7iq/ibo?E[N,'w
Jul 2, 2024 16:43:15.835640907 CEST	1236	IN	Data Raw: 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 d9 87 32 be 0d 7d c8 64 43 88 04 56 8c 7e dc e5 cd 1d db dd 28 12 8f a7 c6 19 b3 94 c1 2d 7c c9 d3 c6 41 78 36 09 da 54 c3 a8 c3 2d 4f 6e c4 9c 2e 11 4e 56 12 9d b0 39 aa f5 e9 3a 01 7a Data Ascii: ZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{#"RRuDmD(R[aPVM5@8[*VV`x
Jul 2, 2024 16:43:15.835650921 CEST	1236	IN	Data Raw: aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 b9 e6 2b 13 b1 dc 88 12 76 81 ae af 30 36 2b 62 72 63 58 7e 34 ad bd a7 03 f8 9d b4 9e 83 4e db a6 4f 68 c5 1c 93 75 50 7c 1b 20 63 7a 62 b4 a1 25 7c 1b 21 fb f7 23 ce 81 09 9b 3b 94 49 Data Ascii: @hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>nQlc#R%kHfZPs:1j"r6j24r/uZ_
Jul 2, 2024 16:43:15.835660934 CEST	1236	IN	Data Raw: ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a 02 8d 1c a7 e6 36 25 2b 70 70 8d 8d cf 63 a3 ad 9b 54 d4 08 7a 37 6b 80 76 53 6f 2d f7 fa af 9c eb 1e 4d e8 ab 12 83 a5 6f 49 4e 84 e4 cb 40 c7 ba 25 d9 3e d0 5e 9e 59 c4 9b 45 3a da c8 Data Ascii: clx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz6cAuM%.`mbL.*{c[<o9H
Jul 2, 2024 16:43:15.835669041 CEST	1236	IN	Data Raw: d9 24 b2 7f 0c 09 f6 93 cf c4 61 76 19 8e 90 22 0b 8d 71 06 88 a7 ca 46 a8 99 89 a0 b9 c0 88 d0 3b d4 3e b8 b2 0e ea 10 63 d6 05 35 2c 7b d7 90 1b e5 20 2b 5e a2 2d dd f4 9e 27 99 2f b1 f0 98 32 27 85 a3 d4 07 64 c8 44 ba 37 ca ac ea a2 82 ff 0d Data Ascii: $av"qF;>c5,{ +^-'/2'dD7MzQ_}_H88$:MxEgrf63,~Ot++rTGo>;_Yc"BO'e4aKSo&^Q$q_ .N
Jul 2, 2024 16:43:15.835679054 CEST	834	IN	Data Raw: 6c ec 7f a3 dd 20 0f 3d 6f 56 a0 a0 1e 1d 33 ff 47 6a d7 35 0f 1b 6b 35 ed 42 f3 d8 2b f9 bf 1e ef db d5 35 87 03 ff 86 7c 8b 25 98 ff fa 30 73 e6 35 8f bf f7 cc f5 0f dc a8 c9 66 1d f8 3f ed 99 f6 99 6b 33 01 be 34 23 b9 0d 7b f4 76 dd 20 ff f5 Data Ascii: l =oV3Gj5k5B+5\|%0s5f?k34#{v 6sx&>)CBjCMg>@<h\g~1wm@6[d?>Dt\|ywQ:d0IO7JksJl'Qxvee24n3[yB_Hd39R0i.Am
Jul 2, 2024 16:43:15.840262890 CEST	1236	IN	Data Raw: 47 fb 07 58 60 86 a6 b2 a4 44 14 36 aa 48 0c 3a e8 48 a0 0b 26 86 31 89 19 e6 94 b1 a2 58 11 ee be 85 2b dc 29 4b c3 33 5e 43 ed 4d 24 82 9a 62 20 f0 88 71 61 87 da 9a b8 08 3a 89 9b 90 f3 c0 0e b2 4f 92 62 84 dd 1d d6 96 d1 20 d2 49 4f 2f fa 7e Data Ascii: GX`D6H:H&1X+)K3^CM$b qa:Ob IO/~l2{K.q4nq1<Lgi+5KS*,(iJbxk4DdYzcxK#r?94qFg]zs9$&TFxc`aY,,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49817	208.91.196.253	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 16:43:15.509391069 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:15.970798016 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:06 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Tue, 16 Jul 2024 14:43:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 2, 2024 16:43:15.970854044 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 2, 2024 16:43:15.970900059 CEST	224	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur
Jul 2, 2024 16:43:15.970913887 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S
Jul 2, 2024 16:43:15.970968008 CEST	1236	IN	Data Raw: 76 8a 3a 8a b0 91 14 a6 30 85 29 4c 61 0a 53 58 5d fc bd c4 32 36 b6 92 c2 3e e4 6f fe 96 b1 b4 95 14 f6 21 3f 9a f2 b3 29 85 29 4c 61 0a 9b 2b 0f ce 9e 9c cb 17 b6 f2 af 71 76 95 e8 32 31 cb 97 45 7c f2 af 4a 57 98 c2 92 fa 7a 5d 8b f8 b9 22 1a Data Ascii: v:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 Vk10}}\m-ony(N7!Xs5!,}(.
Jul 2, 2024 16:43:15.970978975 CEST	1236	IN	Data Raw: 93 3c 64 22 44 e2 75 9f 9f d4 09 cb 7e fd d6 19 0b 93 eb 44 60 01 27 f1 aa 8f 4f 4c 80 e5 91 0e d9 52 d9 e4 3a 11 32 11 22 f1 32 8d 28 39 7f f1 66 75 a4 8a 6c ee 3c 0f c2 40 d8 65 1a 31 37 9b d9 38 1d d3 eb 44 14 62 28 c3 ae d2 88 0f b4 0a 5e db Data Ascii: <d"Du~D`'OLR:2"2(9ful<@e178Db(^knX]B{ST1Sb<NDG+OKbyJ(P]%4wzl7dhawh@#^D }c3Ny=u"fPLmyG
Jul 2, 2024 16:43:15.970983982 CEST	672	IN	Data Raw: 59 70 01 99 78 5c 23 ea b6 00 c9 f3 f2 79 6c be 15 89 4d 4b 8c ca 56 9c b2 a2 ea e7 7b 8d ad 13 d1 0d 43 47 ec a4 46 14 53 44 99 4b d2 7b 45 97 a7 4e fc fc 6f f1 23 c3 d0 52 00 22 11 32 f1 b8 46 b4 36 7d 69 69 91 3b dc ec d7 4b 99 ec 57 78 64 bb Data Ascii: Ypx\#ylMKV{CGFSDK{ENo#R"2F6}ii;KWxd9ta7z9JQ;YoOtT;m6f\`m~qg(S/iD.5HOI"t"D"daXp6RkH$M<mb{:),nb9{#oT1
Jul 2, 2024 16:43:15.971199036 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Jul 2, 2024 16:43:15.971239090 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Jul 2, 2024 16:43:15.971249104 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Jul 2, 2024 16:43:15.975723982 CEST	1236	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[
Jul 2, 2024 16:43:17.661541939 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 16:43:17.760114908 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 14:43:08 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Tue, 16 Jul 2024 14:43:08 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:44 UTC	689	OUT	GET / HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495
2024-07-02 14:42:45 UTC	176	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:44 GMT server: Apache vary: Accept-Encoding content-length: 1033 content-type: text/html; charset=UTF-8 connection: close
2024-07-02 14:42:45 UTC	1033	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 66 69 6e 67 65 72 70 72 69 6e 74 2f 69 69 66 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 76 61 72 20 72 65 64 69 72 65 63 74 5f 6c 69 6e 6b 20 3d 20 27 68 74 74 70 3a 2f 2f 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 2f 3f 27 3b 0a 0a 2f 2f 20 53 65 74 20 61 20 74 69 6d 65 6f 75 74 20 6f 66 20 33 30 30 20 6d 69 63 72 6f 73 65 63 6f 6e 64 73 20 74 6f 20 65 78 65 63 75 74 65 20 61 20 72 65 64 69 72 65 63 74 20 69 Data Ascii: <html><head><title>pollyfill.io</title><script type="text/javascript" src="/js/fingerprint/iife.min.js"></script><script type="text/javascript">var redirect_link = 'http://pollyfill.io/?';// Set a timeout of 300 microseconds to execute a redirect i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:46 UTC	569	OUT	GET /js/fingerprint/iife.min.js HTTP/1.1 Host: pollyfill.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495
2024-07-02 14:42:46 UTC	271	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:46 GMT server: Apache last-modified: Thu, 16 Nov 2023 05:06:15 GMT etag: "85c0-60a3dfaaa1fc0" accept-ranges: bytes content-length: 34240 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:42:46 UTC	14209	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 20 76 33 2e 34 2e 30 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 33 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 63 6f 6e 74 61 69 6e 73 20 63 6f 64 65 20 66 72 6f 6d 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 70 72 6f 6a 65 63 74 73 3a 0d 0a 20 2a 20 4d 75 72 Data Ascii: /** * FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. * * This software contains code from open-source projects: * Mur
2024-07-02 14:42:46 UTC	16320	IN	Data Raw: 74 46 61 6d 69 6c 79 3d 65 2c 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 6d 6d 4d 77 57 4c 6c 69 49 30 4f 26 31 22 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 6e 7d 2c 75 3d 41 2e 6d 61 70 28 63 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 3d 41 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 63 28 22 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 22 29 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 28 6e 2c 65 29 7d 29 29 7d 2c 74 3d 30 2c 72 3d 4a 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 6e 28 72 5b 74 5d 29 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 72 2e 61 70 70 65 Data Ascii: tFamily=e,n.textContent="mmMwWLliI0O&1",o.appendChild(n),n},u=A.map(c),l=function(){for(var e={},n=function(n){e[n]=A.map((function(e){return function(e,n){return c("'".concat(e,"',").concat(n))}(n,e)}))},t=0,r=J;t<r.length;t++){n(r[t])}return e}();r.appe
2024-07-02 14:42:46 UTC	3711	IN	Data Raw: 2e 6c 6f 67 31 70 7c 7c 24 3b 72 65 74 75 72 6e 7b 61 63 6f 73 3a 6e 28 2e 31 32 33 31 32 34 32 33 34 32 33 34 32 33 34 32 34 29 2c 61 63 6f 73 68 3a 74 28 31 65 33 30 38 29 2c 61 63 6f 73 68 50 66 3a 28 65 3d 31 65 31 35 34 2c 71 2e 6c 6f 67 28 65 2b 71 2e 73 71 72 74 28 65 2a 65 2d 31 29 29 29 2c 61 73 69 6e 3a 72 28 2e 31 32 33 31 32 34 32 33 34 32 33 34 32 33 34 32 34 29 2c 61 73 69 6e 68 3a 6f 28 31 29 2c 61 73 69 6e 68 50 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 6c 6f 67 28 65 2b 71 2e 73 71 72 74 28 65 2a 65 2b 31 29 29 7d 28 31 29 2c 61 74 61 6e 68 3a 61 28 2e 35 29 2c 61 74 61 6e 68 50 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 6c 6f 67 28 28 31 2b 65 29 2f 28 31 2d 65 29 29 2f 32 7d 28 2e 35 Data Ascii: .log1p\|\|$;return{acos:n(.12312423423423424),acosh:t(1e308),acoshPf:(e=1e154,q.log(e+q.sqrt(ee-1))),asin:r(.12312423423423424),asinh:o(1),asinhPf:function(e){return q.log(e+q.sqrt(ee+1))}(1),atanh:a(.5),atanhPf:function(e){return q.log((1+e)/(1-e))/2}(.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 14:42:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=177978 Date: Tue, 02 Jul 2024 14:42:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:47 UTC	614	OUT	GET /favicon.ico HTTP/1.1 Host: pollyfill.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495
2024-07-02 14:42:47 UTC	76	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 403 Forbiddencache-control: no-cachecontent-type: text/html
2024-07-02 14:42:47 UTC	94	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 52 65 71 75 65 73 74 20 66 6f 72 62 69 64 64 65 6e 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 72 75 6c 65 73 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><body><h1>403 Forbidden</h1>Request forbidden by administrative rules.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 14:42:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=177987 Date: Tue, 02 Jul 2024 14:42:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 14:42:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=REEgwFUAfs15BZO&MD=Phs46Fbe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-02 14:42:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: efe267c6-b0b6-480f-8caa-b9df07f6c4b1 MS-RequestId: 00f440a1-aa07-4578-abf3-2a9077ebf584 MS-CV: fq5f4lJUxUKNSl6+.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 14:42:47 GMT Connection: close Content-Length: 24490
2024-07-02 14:42:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-02 14:42:48 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:49 UTC	711	OUT	GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495
2024-07-02 14:42:49 UTC	190	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:42:49 GMT server: Apache location: http://ww17.pollyfill.io/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close
2024-07-02 14:42:49 UTC	2	IN	Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	195.181.170.18	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:52 UTC	547	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:52 UTC	672	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:42:52 GMT Content-Type: application/javascript Content-Length: 431863 Connection: close Last-Modified: Fri, 28 Jun 2024 16:44:40 GMT ETag: "696f7-61bf5f6b10e00" Cache-Control: max-age=86400 Expires: Tue, 02 Jul 2024 09:22:06 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBw7WqEQH3kD8AAAwBJRPCNAH3qC0AAA X-77-NZT-Ray: 4c156224f4cc5d3cec11846615073107 X-Accel-Expires: @1719998527 X-Accel-Date: 1719915100 X-77-Cache: HIT X-77-Age: 16272 Vary: Accept-Encoding Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Accel-Date-Max: 1719837414 X-Cache: HIT X-Age: 16272 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-07-02 14:42:52 UTC	15712	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 36 2d 32 38 2e 31 36 2e 34 34 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: window.cmpccsversionbuild="2024-6-28.16.44";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){r
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 75 72 6e 22 22 7d 7d 3b 74 68 69 73 2e 72 65 61 64 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 33 36 29 2a 31 30 30 29 7d 3b 74 68 69 73 2e 72 65 61 64 4c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 28 32 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 3b 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 7b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 36 29 2b 36 35 29 7d 72 65 74 75 72 6e 20 65 7d 3b 74 68 69 73 2e 72 Data Ascii: urn""}};this.readDate=function(){return new Date(this.readInt(36)*100)};this.readLang=function(){return this.readString(2).toLowerCase()};this.readString=function(c){var e="";for(var d=0;d<c;d++){e+=String.fromCharCode(this.readInt(6)+65)}return e};this.r
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 49 3b 63 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 3d 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 3b 63 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3b 63 2e 56 65 6e 64 6f 72 73 4c 49 3d 74 68 69 73 2e 56 65 6e 64 6f 72 73 4c 49 3b 63 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3b 76 61 72 20 64 3d 63 2e 74 6f 53 74 72 69 6e 67 28 29 3b 76 61 72 20 68 3d 74 68 69 73 2e 6e 65 77 46 72 6f 6d 4d 61 6e 69 66 65 73 74 28 32 29 3b 68 2e 69 73 43 75 73 74 6f 6d 46 6f 72 6d 61 74 3d 74 72 75 65 3b 68 2e 72 65 61 64 28 64 29 3b 69 66 28 74 68 69 73 2e 67 70 70 53 65 63 74 69 Data Ascii: I;c.PurposeOneTreatment=this.PurposeOneTreatment;c.PublisherCC=this.PublisherCC;c.VendorsLI=this.VendorsLI;c.PublisherRestrictions=this.PublisherRestrictions;var d=c.toString();var h=this.newFromManifest(2);h.isCustomFormat=true;h.read(d);if(this.gppSecti
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 75 62 73 74 72 69 6e 67 28 30 2c 63 5b 65 5d 2e 6c 65 6e 67 74 68 2b 31 29 3b 69 66 28 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 5b 65 5d 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 63 5b 65 5d 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 65 6c 73 65 7b 69 66 28 63 5b 65 5d 2e 6c 65 6e 67 74 68 3d 3d 35 29 7b 76 61 72 20 6b 3d 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 33 2c 35 29 2b 22 2d 22 2b 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 32 29 3b 69 66 28 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6b 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 6b 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 63 5b 65 5d 2b 22 2f 22 7c 7c 6a 3d 3d 22 2f 22 2b 63 5b 65 5d 29 7b 66 2e 70 75 Data Ascii: ubstring(0,c[e].length+1);if(g.substring(0,c[e].length+1)==c[e]+"."){f.push(c[e][m]())}else{if(c[e].length==5){var k=c[e].substring(3,5)+"-"+c[e].substring(0,2);if(g.substring(0,k.length+1)==k+"."){f.push(c[e][m]())}}else{if(j==c[e]+"/"\|\|j=="/"+c[e]){f.pu
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 69 66 28 74 79 70 65 6f 66 28 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 61 29 7d 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 62 3d 22 61 74 74 72 69 62 75 74 65 73 22 20 69 6e 20 64 26 26 61 20 69 6e 20 64 2e 61 74 74 72 69 62 75 74 65 73 7d 63 61 74 63 68 28 63 29 7b 76 61 72 20 62 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 62 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6d 70 5f 73 6e 61 70 73 68 6f 74 28 29 7b 74 68 69 73 2e 68 61 73 53 65 74 74 69 6e 67 73 53 6e 61 70 73 68 6f 74 3d 66 61 6c 73 65 3b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 22 22 3b 74 68 69 73 Data Ascii: ined){return false}else{if(typeof(d.hasAttribute)==="function"){return d.hasAttribute(a)}else{try{var b="attributes" in d&&a in d.attributes}catch(c){var b=false}return b}}}}function cmp_snapshot(){this.hasSettingsSnapshot=false;this.consentstring="";this
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 76 65 72 65 64 54 72 61 6e 73 61 63 74 69 6f 6e 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 43 6f 76 65 72 65 64 54 72 61 6e 73 61 63 74 69 6f 6e 3d 3d 3d 31 29 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 29 3b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 29 7d 65 6c 73 65 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 Data Ascii: veredTransaction);if(window.cmpmngr.gppMspaCoveredTransaction===1){b.setGppField(a,"MspaOptOutOptionMode",window.cmpmngr.gppMspaOptOutOptionMode);b.setGppField(a,"MspaServiceProviderMode",window.cmpmngr.gppMspaServiceProviderMode)}else{b.setGppField(a,"Ms
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 2e 61 74 6f 62 28 62 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 61 3d 22 22 7d 7d 61 3d 61 2e 73 70 6c 69 74 28 22 23 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 3d 34 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 49 6d 70 6f 72 74 20 63 6f 6e 73 65 6e 74 3a 20 20 22 2b 61 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 61 64 43 53 28 61 5b 30 5d 2c 61 5b 33 5d 2c 61 5b 31 5d 2c 61 5b 32 5d 2c 22 22 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 54 79 70 65 3d 31 36 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 73 74 6f 72 65 43 6f 6e 73 65 6e 74 28 61 5b 30 5d 2c 33 30 2c 61 5b 32 5d Data Ascii: .atob(b)}catch(e){var a=""}}a=a.split("#");if(a.length>=4){window.cmpmngr.log("Import consent: "+a);window.cmpmngr.loadCS(a[0],a[3],a[1],a[2],"");window.cmpmngr.hasExistingChoice=true;window.cmpmngr.consentType=16;window.cmpmngr.storeConsent(a[0],30,a[2]
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 7d 74 68 69 73 2e 73 65 6e 64 53 68 6f 70 69 66 79 54 72 61 63 6b 69 6e 67 28 29 3b 69 66 28 63 6d 70 5f 68 63 28 22 70 69 77 69 6b 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 77 69 6b 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 6d 61 74 6f 6d 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 4d 61 74 6f 6d 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 70 69 61 6e 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 61 6e 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 68 75 62 73 70 6f 74 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 48 75 62 73 70 6f 74 43 6f 6e 73 65 6e 74 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 67 69 6f 73 67 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 Data Ascii: }this.sendShopifyTracking();if(cmp_hc("piwik")){this.sendPiwikTracking()}if(cmp_hc("matomo")){this.sendMatomoTracking()}if(cmp_hc("piano")){this.sendPianoTracking()}if(cmp_hc("hubspot")){this.sendHubspotConsent()}if(cmp_hc("giosg")){this.sendGiosgTracking
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 77 2e 63 6d 70 6d 6e 67 72 2e 6c 61 79 65 72 4c 6f 67 69 63 3d 3d 35 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 61 79 65 72 4c 6f 67 69 63 3d 3d 36 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 31 2d 2d 2d 22 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 43 43 50 41 4f 70 74 65 64 4f 75 74 28 29 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 7d 7d 7d 7d 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 70 75 72 70 Data Ascii: w.cmpmngr.layerLogic==5\|\|window.cmpmngr.layerLogic==6){if(window.cmpmngr.uspsString=="1---"\|\|window.cmpmngr.uspsString==""){a=true}else{if(!window.cmpmngr.hasCCPAOptedOut()){if(window.cmpmngr.consentstring==""){a=true}}}}}for(var g=0;g<window.cmpmngr.purp
2024-07-02 14:42:52 UTC	16384	IN	Data Raw: 2c 6b 2c 79 2c 75 2c 7a 29 3b 4a 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4b 29 3b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 49 66 4e 6f 74 45 78 69 73 74 73 28 4a 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 2c 4a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 68 22 2c 4a 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 6f 76 65 72 66 6c 6f 77 79 22 2c 4a 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 70 6f 73 69 74 69 6f 6e 22 2c 4a 2e 73 74 79 6c 65 Data Ascii: ,k,y,u,z);J.appendChild(K);this.setAttributeIfNotExists(J,"data-cmp-hide-display",J.style.display);J.setAttribute("data-cmp-hide-h",J.style.height);J.setAttribute("data-cmp-hide-overflowy",J.style.overflowY);J.setAttribute("data-cmp-hide-position",J.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:52 UTC	623	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&o=1719931369880 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:52 UTC	502	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:52 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Fri, 01-Aug-2025 14:42:52 GMT; Path=/; SameSite=Lax; Secure last-modified: Tue, 02 Jul 2024 14:42:52 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:42:52 UTC	1013	IN	Data Raw: 33 45 39 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 3E9(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49765	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:53 UTC	636	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1719931372&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:53 UTC	502	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:53 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Fri, 01-Aug-2025 14:42:53 GMT; Path=/; SameSite=Lax; Secure last-modified: Tue, 02 Jul 2024 14:42:53 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:42:53 UTC	1013	IN	Data Raw: 33 45 39 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 3E9(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49767	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:54 UTC	647	OUT	GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1719931373&h=http%3A%2F%2Fww17.pollyfill.io%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:54 UTC	409	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:54 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:42:54 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:42:54 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49768	195.181.170.18	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:55 UTC	616	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:55 UTC	650	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:42:55 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Tue, 02 Jul 2024 14:45:21 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Tue, 02 Jul 2024 14:15:21 GMT X-77-NZT: EggBw7WqEQFBDAGckiEnAfd2BgAA X-77-NZT-Ray: 4c156224f6bc8efcef118466550c9b1d X-Accel-Expires: @1719931521 X-Accel-Date: 1719929721 X-77-Cache: HIT X-77-Age: 1654 Vary: Accept-Encoding Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: frankfurtDE
2024-07-02 14:42:55 UTC	15734	IN	Data Raw: 33 34 35 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 Data Ascii: 345if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.c
2024-07-02 14:42:55 UTC	16384	IN	Data Raw: 39 20 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 36 39 39 20 2d 39 2e 39 65 2d 34 2c 33 37 2e 36 34 30 39 39 20 2d 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 Data Ascii: 9 68.26699,68.26699 -9.9e-4,37.64099 -30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823
2024-07-02 14:42:55 UTC	16384	IN	Data Raw: 22 3a 22 70 61 74 68 31 22 7d 29 7d 29 7d 29 3b 7d 3b 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 Data Ascii: ":"path1"})})});};window.cmp_svg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", funct
2024-07-02 14:42:55 UTC	16384	IN	Data Raw: 73 34 30 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 22 2c 22 6e 6f 6e 65 75 22 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 34 30 2e 70 6e 67 22 2c 22 70 73 22 3a 22 63 31 2c 32 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 37 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 38 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 61 70 6c 6c 65 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c Data Ascii: s40","wsid":68884,"n":"Amazon","noneu":1,"l":"\/delivery\/icons\/icons_v40.png","ps":"c1,2","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":7,"fb":0,"av":"","dv":"","sv":0,"pv":0,"legROW":0},{"id":"c49908","wsid":68884,"n":"aplle","noneu":0,
2024-07-02 14:42:55 UTC	16384	IN	Data Raw: 29 20 61 66 74 65 72 20 36 3a 33 30 20 70 2e 6d 2e 20 74 6f 20 75 73 65 72 73 20 77 68 6f 73 65 20 6e 6f 6e 2d 70 72 65 63 69 73 65 20 6c 6f 63 61 74 69 6f 6e 20 73 75 67 67 65 73 74 73 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 69 6e 20 61 6e 20 75 72 62 61 6e 20 7a 6f 6e 65 2e 22 2c 22 69 6c 32 22 3a 22 41 20 6c 61 72 67 65 20 70 72 6f 64 75 63 65 72 20 6f 66 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 70 61 69 6e 74 73 20 77 61 6e 74 73 20 74 6f 20 63 61 72 72 79 20 6f 75 74 20 61 6e 20 6f 6e 6c 69 6e 65 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 61 6d 70 61 69 67 6e 20 66 6f 72 20 69 74 73 20 6c 61 74 65 73 74 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 72 61 6e 67 65 2c 20 64 69 76 65 72 73 69 66 79 69 6e 67 20 69 74 73 20 61 75 64 69 65 6e 63 65 20 74 6f 20 Data Ascii: ) after 6:30 p.m. to users whose non-precise location suggests that they are in an urban zone.","il2":"A large producer of watercolour paints wants to carry out an online advertising campaign for its latest watercolour range, diversifying its audience to
2024-07-02 14:42:55 UTC	16384	IN	Data Raw: 22 6c 65 67 4e 44 50 52 22 3a 30 2c 22 6c 65 67 50 49 50 41 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 3a 30 2c 22 6c 65 67 50 49 50 4c 22 3a 30 2c 22 6c 65 67 50 44 50 41 22 3a 30 2c 22 6c 65 67 50 50 41 22 3a 30 2c 22 6c 65 67 50 44 50 41 54 22 3a 30 2c 22 6c 65 67 44 53 47 4c 50 44 22 3a 30 2c 22 6c 65 67 47 44 50 52 55 4b 22 3a 30 2c 22 6c 65 67 55 53 56 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 30 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f Data Ascii: "legNDPR":0,"legPIPA":0,"legROW":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP":0,"legPIPL":0,"legPDPA":0,"legPPA":0,"legPDPAT":0,"legDSGLPD":0,"legGDPRUK":0,"legUSVCDPA":0,"legUSCPA":0,"legUSUCPA":0,"legUSCAPDP":0,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSO
2024-07-02 14:42:55 UTC	10425	IN	Data Raw: 72 54 65 78 74 22 3a 22 53 75 62 73 65 72 76 69 63 65 73 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 74 78 74 73 75 62 73 65 72 76 69 63 65 73 22 2c 22 73 74 72 54 65 78 74 22 3a 22 57 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 76 65 6e 64 6f 72 2c 20 6f 74 68 65 72 20 76 65 6e 64 6f 72 73 20 77 69 6c 6c 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 20 54 68 65 73 65 20 61 72 65 3a 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 69 6e 66 6f 5f 64 61 74 61 63 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 73 74 72 54 65 78 74 22 3a 22 44 61 74 61 20 63 6f 6e 74 72 6f 6c 6c 65 72 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 Data Ascii: rText":"Subservices"},{"strLang":"EN","strType":"txtsubservices","strText":"When enabling this vendor, other vendors will also be enabled. These are:"},{"strLang":"EN","strType":"companyinfo_datacontroller","strText":"Data controller"},{"strLang":"EN","st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49769	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:56 UTC	752	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2F&o=1719931375088&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:57 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:57 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:42:57 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:42:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49770	162.247.243.39	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:57 UTC	573	OUT	GET /nr-spa-1.261.1.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://ww17.pollyfill.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:57 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 111163 x-amz-id-2: BlyPhSt5onIRBACet2CkpAn4jovb1Bq3JCBO4CNiJWMwpg6Pvm/bVtuvM02ejR4oHE6PcdzlE7E= x-amz-request-id: KVBVX4HG7ZV5R9JZ Last-Modified: Wed, 26 Jun 2024 18:29:32 GMT ETag: "0f097c9123c4a3fc6cd831fad3565c78" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: nIgOUNdOYGcFpLyVAQtnKqvl8Kx8UNYj Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 02 Jul 2024 14:42:57 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890021-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 36 31 2e 31 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 31 2e 31 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 31 2e 31 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 38 5d 2c 7b 39 35 32 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 6e 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 32 32 29 2c 72 3d 69 28 34 37 37 37 29 2c 6e 3d 69 28 34 36 31 38 29 2c 61 3d 69 Data Ascii: /! For license information please see nr-spa-1.261.1.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.261.1.PROD"]=self["webpackChunk:NRBA-1.261.1.PROD"]\|\|[]).push([[478],{9527:(t,e,i)=>{i.d(e,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 79 3a 65 2c 2e 2e 2e 74 7d 29 2c 21 72 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 72 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 61 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 6e 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 6e 2e 70 75 73 68 28 76 6f 69 64 20 Data Ascii: y:e,...t}),!r)return void(this.started&&this.scheduleHarvest());r="[object Array]"===Object.prototype.toString.call(r)?r:[r],n.push(...r)}let a=t=>this.harvest.sendX(t);n.length?a=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):n.push(void
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 77 20 75 2e 46 4c 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 65 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 74 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 29 2c 69 3d 7b 72 65 74 72 79 3a 21 74 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 26 26 65 3d 3d 3d 6e 2e 6e 46 2c 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 21 30 3d 3d 3d 74 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 2c 73 3d 74 68 69 73 2e 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 74 2e Data Ascii: w u.FL(this.sharedContext),this._events={}}sendX(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const e=n.mj({isFinalHarvest:t.opts?.unload}),i={retry:!t.opts?.unload&&e===n.nF,isFinalHarvest:!0===t.opts?.unload},s=this.createPayload(t.
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 65 79 29 3b 64 26 26 28 52 3d 64 29 2c 6c 26 26 28 52 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 49 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 29 29 3b 63 6f 6e 73 74 20 45 3d 21 6c 26 26 6d 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 62 2c 65 29 3a 22 22 3b 6c 65 74 20 41 3d 28 30 2c 73 2e 57 4c 29 28 62 2c 79 2e 6d 61 78 42 79 74 65 73 29 3b 63 7c 7c 28 63 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 61 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 45 26 26 41 2e 73 74 61 72 74 73 57 69 74 68 28 22 26 22 29 26 26 28 41 3d 41 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 63 6f 6e 73 74 20 78 3d 22 22 2e 63 6f 6e 63 61 74 28 52 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 45 29 2e Data Ascii: ey);d&&(R=d),l&&(R="".concat(w,"://").concat(I,"/").concat(e));const E=!l&&m?this.baseQueryString(b,e):"";let A=(0,s.WL)(b,y.maxBytes);c\|\|(c=n.mj({isFinalHarvest:a.unload})),""===E&&A.startsWith("&")&&(A=A.substring(1));const x="".concat(R,"?").concat(E).
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 4d 6f 64 65 26 26 22 6a 73 65 72 72 6f 72 73 22 21 3d 3d 65 2c 64 3d 5b 22 61 3d 22 2b 72 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 2c 28 30 2c 73 2e 75 52 29 28 22 73 61 22 2c 72 2e 73 61 3f 22 22 2b 72 2e 73 61 3a 22 22 29 2c 28 30 2c 73 2e 75 52 29 28 22 76 22 2c 6d 2e 78 76 29 2c 54 28 72 29 2c 28 30 2c 73 2e 75 52 29 28 22 63 74 22 2c 69 2e 63 75 73 74 6f 6d 54 72 61 6e 73 61 63 74 69 6f 6e 29 2c 22 26 72 73 74 3d 22 2b 28 30 2c 67 2e 74 29 28 29 2c 22 26 63 6b 3d 30 22 2c 22 26 73 3d 22 2b 28 69 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 76 61 6c 75 65 7c 7c 22 30 22 29 2c 28 30 2c 73 2e 75 52 29 28 22 72 65 66 22 2c 68 29 2c 28 30 2c 73 2e 75 52 29 28 22 70 74 69 64 22 2c 69 2e 70 74 69 64 3f 22 22 2b 69 Data Ascii: sessionReplayMode&&"jserrors"!==e,d=["a="+r.applicationID,(0,s.uR)("sa",r.sa?""+r.sa:""),(0,s.uR)("v",m.xv),T(r),(0,s.uR)("ct",i.customTransaction),"&rst="+(0,g.t)(),"&ck=0","&s="+(i.session?.state.value\|\|"0"),(0,s.uR)("ref",h),(0,s.uR)("ptid",i.ptid?""+i
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 3a 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 30 3d 3d 3d 74 3f 22 22 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 69 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 22 22 3d 3d 3d 73 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 72 3d 6e 65 77 20 6e 2e 46 4c 28 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 74 7d 29 3b 73 3d 53 74 72 69 6e 67 28 73 29 2c 72 2e 73 68 6f 75 6c 64 4f 62 66 75 Data Ascii: r(t).toString(36):void 0===t\|\|0===t?"":Math.floor(t).toString(36)}function u(t){var e=Object.hasOwnProperty("create")?Object.create(null):{},i=0;return function(s){if(void 0===s\|\|""===s)return"";var r=new n.FL({agentIdentifier:t});s=String(s),r.shouldObfu
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 74 69 76 65 2c 69 2c 22 64 69 22 2c 6d 29 2c 67 28 65 5b 6c 2b 73 5d 2c 69 2c 22 64 73 22 2c 6d 29 2c 67 28 65 5b 6c 2b 72 5d 2c 69 2c 22 64 65 22 2c 6d 29 2c 67 28 65 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 69 2c 22 64 63 22 2c 6d 29 2c 67 28 65 5b 64 2b 73 5d 2c 69 2c 22 6c 22 2c 6d 29 2c 67 28 65 5b 64 2b 72 5d 2c 69 2c 22 6c 65 22 2c 6d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 67 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 74 2e 74 79 70 65 29 3f 69 3a 7b 6e 61 76 69 67 61 74 65 3a 76 6f 69 64 20 30 2c 72 65 6c 6f 61 64 3a 31 2c 62 61 63 6b 5f 66 6f 72 77 61 72 64 3a 32 2c 70 72 65 72 65 6e 64 65 72 3a 33 7d 5b 69 5d 2c 65 2c 22 74 79 22 29 2c 67 28 74 2e 72 65 64 69 72 65 63 74 Data Ascii: tive,i,"di",m),g(e[l+s],i,"ds",m),g(e[l+r],i,"de",m),g(e.domComplete,i,"dc",m),g(e[d+s],i,"l",m),g(e[d+r],i,"le",m),i}function p(t,e){var i;return g("number"==typeof(i=t.type)?i:{navigate:void 0,reload:1,back_forward:2,prerender:3}[i],e,"ty"),g(t.redirect
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 74 68 2c 21 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 69 3e 3d 65 29 29 3b 6f 2b 2b 29 63 2e 70 75 73 68 28 61 29 3b 6e 2b 3d 22 26 22 2b 74 2b 22 3d 25 35 42 22 2b 63 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 29 7b 6c 65 74 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 69 6e 63 6c 75 64 65 73 28 74 29 3f 22 22 3a 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 26 22 2b 74 2b 22 3d 22 2b 68 28 65 29 3a 22 22 7d 7d 2c 34 32 38 34 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 Data Ascii: th,!(void 0!==e&&i>=e));o++)c.push(a);n+="&"+t+"=%5B"+c.join(",")+"%5D"}})),n}function d(t,e){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};return Object.keys(i).includes(t)?"":e&&"string"==typeof e?"&"+t+"="+h(e):""}},4284:(t,e,i)=>{i.d
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 29 27 29 2c 65 3d 21 30 29 7d 72 65 74 75 72 6e 21 65 26 26 21 69 7d 7d 2c 39 34 32 32 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 6d 6a 3a 28 29 3d 3e 72 2c 6e 46 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 73 3d 69 28 36 31 35 34 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6c 65 74 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 74 3d 21 31 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 74 26 26 73 2e 52 49 26 26 73 2e 56 72 3f 61 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 6c 65 74 7b 75 72 6c 3a 65 2c 62 6f 64 79 3a 69 3d 6e 75 6c 6c 2c 73 Data Ascii: must be a string)'),e=!0)}return!e&&!i}},9422:(t,e,i)=>{i.d(e,{mj:()=>r,nF:()=>n});var s=i(6154);function r(){let{isFinalHarvest:t=!1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return t&&s.RI&&s.Vr?a:n}function n(t){let{url:e,body:i=null,s
2024-07-02 14:42:57 UTC	1378	IN	Data Raw: 3e 7b 69 2e 64 28 65 2c 7b 4a 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 73 3d 69 28 36 31 35 34 29 2c 72 3d 69 28 31 30 38 33 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 28 69 28 36 37 37 33 29 2e 78 29 28 72 2e 77 2e 46 49 52 53 54 5f 50 41 49 4e 54 29 3b 69 66 28 73 2e 52 49 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 7b 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 22 66 69 72 73 74 2d 70 61 69 6e 74 22 21 3d 3d 74 2e 6e 61 6d 65 7c 7c 6e 2e 69 73 56 61 6c 69 64 7c 7c 28 65 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 6e 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2e 73 74 61 72 74 54 69 6d 65 7d 29 29 7d 29 29 7d 3b 6c 65 74 20 65 3b 74 72 79 7b 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e Data Ascii: >{i.d(e,{J:()=>n});var s=i(6154),r=i(1083);const n=new(i(6773).x)(r.w.FIRST_PAINT);if(s.RI){const t=t=>{t.forEach((t=>{"first-paint"!==t.name\|\|n.isValid\|\|(e.disconnect(),n.update({value:t.startTime}))}))};let e;try{PerformanceObserver.supportedEntryTypes.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49771	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:57 UTC	516	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2F&o=1719931375088&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:58 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:42:58 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:42:58 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:42:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49772	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:58 UTC	1136	OUT	POST /1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=10835&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918&af=err,spa,xhr,stn,ins&ap=515&be=3715&fe=6229&dc=965&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1719931366137,%22n%22:0,%22f%22:2177,%22dn%22:2180,%22dne%22:2725,%22c%22:2725,%22ce%22:2731,%22rq%22:2731,%22rp%22:3716,%22rpe%22:4132,%22di%22:4680,%22ds%22:4680,%22de%22:4680,%22dc%22:9938,%22l%22:9938,%22le%22:9944%7D,%22navigation%22:%7B%7D%7D&fp=4697&fcp=4697 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://ww17.pollyfill.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:58 UTC	444	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Tue, 02 Jul 2024 14:42:58 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ww17.pollyfill.io access-control-expose-headers: Date timing-allow-origin: http://ww17.pollyfill.io x-served-by: cache-nyc-kteb1890078-NYC
2024-07-02 14:42:58 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 7a 55 34 4d 6a 67 32 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4d 54 55 34 4f 44 63 35 4d 44 49 77 4e 41 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"MzU4Mjg2fEJST1dTRVJ8QVBQTElDQVRJT058MTU4ODc5MDIwNA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49773	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:59 UTC	769	OUT	POST /events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=11502&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 181 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://ww17.pollyfill.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:59 UTC	181	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 31 2c 2c 38 76 66 2c 38 64 31 2c 31 69 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 3a 2f 2f 77 77 31 37 2e 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 2f 2c 31 2c 31 2c 2c 2c 2c 65 62 2c 21 21 27 38 38 32 38 37 62 35 33 2d 32 32 61 63 2d 34 38 33 31 2d 39 65 62 34 2d 37 37 65 62 39 66 35 32 37 61 35 39 2c 27 31 2c 33 6d 68 2c 33 6d 68 3b 61 2c 27 51 68 74 5a 52 31 6c 50 53 30 38 3d 3b 62 2c 21 21 21 21 31 6f 68 2c 33 2c 66 35 2c 2c 21 36 2c 2c 72 64 2c 62 6b 2c 21 66 38 2c 2c 2c 34 32 32 2c 2c 36 Data Ascii: bel.7;1,1,,8vf,8d1,1i,'initialPageLoad,'http://ww17.pollyfill.io/,1,1,,,,eb,!!'88287b53-22ac-4831-9eb4-77eb9f527a59,'1,3mh,3mh;a,'QhtZR1lPS08=;b,!!!!1oh,3,f5,,!6,,rd,bk,!f8,,,422,,6
2024-07-02 14:42:59 UTC	307	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 02 Jul 2024 14:42:59 GMT content-type: image/gif access-control-allow-origin: http://ww17.pollyfill.io access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr18156-EWR
2024-07-02 14:42:59 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49774	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:42:59 UTC	884	OUT	GET /1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=10835&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918&af=err,spa,xhr,stn,ins&ap=515&be=3715&fe=6229&dc=965&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1719931366137,%22n%22:0,%22f%22:2177,%22dn%22:2180,%22dne%22:2725,%22c%22:2725,%22ce%22:2731,%22rq%22:2731,%22rp%22:3716,%22rpe%22:4132,%22di%22:4680,%22ds%22:4680,%22de%22:4680,%22dc%22:9938,%22l%22:9938,%22le%22:9944%7D,%22navigation%22:%7B%7D%7D&fp=4697&fcp=4697 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:42:59 UTC	389	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Tue, 02 Jul 2024 14:42:59 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-ewr18176-EWR
2024-07-02 14:42:59 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49775	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:00 UTC	515	OUT	GET /events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=11502&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:00 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 02 Jul 2024 14:43:00 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-nyc-kteb1890095-NYC
2024-07-02 14:43:00 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49778	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:03 UTC	786	OUT	POST /events/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15876&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 825 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ww17.pollyfill.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:03 UTC	825	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 33 6d 68 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 33 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 33 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 31 34 30 34 31 31 39 36 31 35 36 34 39 34 34 31 3b 65 2c 27 66 63 70 2c 33 6d 68 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 33 37 31 35 2e 35 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 39 38 31 2e 35 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 3b 35 2c 31 2c 32 3b 36 2c 33 2c 33 30 30 2e 3b 36 2c 34 2c 31 2e 33 3b 36 2c 35 2c 30 2e 30 30 31 34 30 34 31 31 39 36 31 35 36 34 39 34 34 31 3b 65 2c 27 6c 6f 61 64 2c 37 6f 38 2c 34 3b 35 Data Ascii: bel.6;e,'fp,3mh,4;5,'net-etype,'3g;6,'net-rtt,300.;6,'net-dlink,1.3;6,'cls,0.001404119615649441;e,'fcp,3mh,7;6,'timeToFirstByte,3715.5;6,'firstByteToFCP,981.5;5,'loadState,'dom-content-loaded;5,1,2;6,3,300.;6,4,1.3;6,5,0.001404119615649441;e,'load,7o8,4;5
2024-07-02 14:43:03 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 02 Jul 2024 14:43:03 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ww17.pollyfill.io x-served-by: cache-nyc-kteb1890056-NYC
2024-07-02 14:43:03 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49779	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:03 UTC	788	OUT	POST /jserrors/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15881&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 728 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ww17.pollyfill.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:03 UTC	728	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 73 70 61 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 Data Ascii: {"sm":[{"params":{"name":"Generic/LoaderType/spa/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Ajax/Events/Exclud
2024-07-02 14:43:03 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 02 Jul 2024 14:43:03 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ww17.pollyfill.io x-served-by: cache-nyc-kteb1890034-NYC
2024-07-02 14:43:03 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49777	162.247.243.29	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:03 UTC	788	OUT	POST /jserrors/1/6bc175e1c8?a=1588455398&v=1.261.1&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=15885&ck=0&s=a972f1b9f67f539a&ref=http://ww17.pollyfill.io/&ptid=a6ae7d4444ae2918 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 548 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ww17.pollyfill.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:03 UTC	548	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 31 2f 36 62 63 31 37 35 65 31 63 38 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 35 30 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 36 32 39 7d 2c 22 63 62 54 69 6d 65 22 3a 7b 22 74 22 3a 31 7d 2c 22 74 69 6d 65 22 3a 7b 22 74 22 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/1/6bc175e1c8","status":200},"metrics":{"count":1,"rxSize":{"t":150},"duration":{"t":629},"cbTime":{"t":1},"time":{"t"
2024-07-02 14:43:03 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 02 Jul 2024 14:43:03 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ww17.pollyfill.io x-served-by: cache-nyc-kteb1890044-NYC
2024-07-02 14:43:03 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:04 UTC	841	OUT	GET / HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
2024-07-02 14:43:04 UTC	176	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:04 GMT server: Apache vary: Accept-Encoding content-length: 1033 content-type: text/html; charset=UTF-8 connection: close
2024-07-02 14:43:04 UTC	1033	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 66 69 6e 67 65 72 70 72 69 6e 74 2f 69 69 66 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 76 61 72 20 72 65 64 69 72 65 63 74 5f 6c 69 6e 6b 20 3d 20 27 68 74 74 70 3a 2f 2f 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 2f 3f 27 3b 0a 0a 2f 2f 20 53 65 74 20 61 20 74 69 6d 65 6f 75 74 20 6f 66 20 33 30 30 20 6d 69 63 72 6f 73 65 63 6f 6e 64 73 20 74 6f 20 65 78 65 63 75 74 65 20 61 20 72 65 64 69 72 65 63 74 20 69 Data Ascii: <html><head><title>pollyfill.io</title><script type="text/javascript" src="/js/fingerprint/iife.min.js"></script><script type="text/javascript">var redirect_link = 'http://pollyfill.io/?';// Set a timeout of 300 microseconds to execute a redirect i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49781	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:05 UTC	786	OUT	GET /favicon.ico HTTP/1.1 Host: pollyfill.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
2024-07-02 14:43:06 UTC	76	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 403 Forbiddencache-control: no-cachecontent-type: text/html
2024-07-02 14:43:06 UTC	94	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 52 65 71 75 65 73 74 20 66 6f 72 62 69 64 64 65 6e 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 72 75 6c 65 73 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><body><h1>403 Forbidden</h1>Request forbidden by administrative rules.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49756	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:07 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-02 14:43:07 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49784	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:07 UTC	883	OUT	GET /?fp=5705e961739f25e027541c9b53d6b936 HTTP/1.1 Host: pollyfill.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1719931363.3116495; __cmpcccx68884=aBQBKLNWAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
2024-07-02 14:43:07 UTC	234	IN	HTTP/1.1 302 Found date: Tue, 02 Jul 2024 14:43:07 GMT server: Apache location: http://ww38.pollyfill.io/?subid1=20240703-0043-072d-8977-8cc5be56f2f7 content-length: 2 content-type: text/html; charset=UTF-8 connection: close
2024-07-02 14:43:07 UTC	2	IN	Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49789	142.250.185.132	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:10 UTC	425	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww38.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:10 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 190312 Date: Tue, 02 Jul 2024 14:43:10 GMT Expires: Tue, 02 Jul 2024 14:43:10 GMT Cache-Control: private, max-age=3600 ETag: "15668330583415273072" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:10 UTC	536	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 31 37 35 34 32 37 30 37 30 30 39 36 33 31 32 35 34 32 32 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"11754270700963125422",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 Data Ascii: omain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsY
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 6e 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c Data Ascii: dom()*1E9>>>0)+"_",e=0;return b});n("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 74 68 69 73 2e 4e 61 3d 21 31 3b 74 68 69 73 2e 66 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 68 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6b 61 3d 31 3b 74 68 69 73 2e 77 64 3d 74 68 69 73 2e 6c 62 3d 30 3b 74 68 69 73 2e 6c 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 29 7b 69 66 28 61 2e 4e 61 29 74 68 72 6f 77 20 Data Ascii: Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.hg=b.prototype}function sa(){this.Na=!1;this.fa=null;this.hd=void 0;this.ka=1;this.wd=this.lb=0;this.la=null}function ua(a){if(a.Na)throw
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 20 62 2e 57 65 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 53 61 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 58 61 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 79 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 Data Ascii: b.We;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function za(a){this.next=function(b){return a.Sa(b)};this.throw=function(b){return a.Xa(b)};this.return=function(b){return ya(a,b)};this[Symbol.iterator]=function(){return this}}function A
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 58 66 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 66 28 67 29 3a 74 68 69 73 2e 7a 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b Data Ascii: ew TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Xf(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Nf(g):this.zd(g)}};b.prototype.Nf=function(g){var h=void 0;
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 70 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 70 2c 71 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 70 3d 74 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 70 29 29 3b 72 65 74 75 72 6e 20 71 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 Data Ascii: eject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){p(v)}}:t}var l,p,q=new b(function(r,t){l=r;p=t});this.kb(k(g,l),k(h,p));return q};b.prototype.catch=function(g){retur
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 6e 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 44 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 Data Ascii: gular expression");return a+""}n("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=Da(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;retur
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 62 21 3d 3d 30 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 6e 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 Data Ascii: ues",function(a){return a?a:function(b){var c=[],d;for(d in b)Object.prototype.hasOwnProperty.call(b,d)&&c.push(b[d]);return c}});n("Object.is",function(a){return a?a:function(b,c){return b===c?b!==0\|\|1/b===1/c:b!==b&&c!==c}});n("Array.prototype.includes"
2024-07-02 14:43:10 UTC	1390	IN	Data Raw: 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 62 3d 3d 22 61 72 72 61 79 22 7c 7c 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 21 3d 6e 75 6c 6c 7c 7c 62 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 Data Ascii: rray(a)?"array":b:"null";return b=="array"\|\|b=="object"&&typeof a.length=="number"}function Ga(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="function"}function Ia(a,b){function c(){}c.prototype=b.prototype;a.hg=b.prototype;a.prototype=new c;a.prototy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49792	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:10 UTC	3072	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bKKaub%252BTLQeXn1 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:10 UTC	409	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:10 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:10 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:43:10 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-07-02 14:43:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49802	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:11 UTC	761	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm&o=1719931390113&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:12 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:12 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:12 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49805	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:12 UTC	525	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly.cfm&o=1719931390113&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:13 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:13 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:13 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49806	172.217.18.97	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:13 UTC	757	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:13 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 03:05:16 GMT Expires: Wed, 03 Jul 2024 02:05:16 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 41877 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:13 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49807	172.217.18.97	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:13 UTC	758	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:13 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 03:05:16 GMT Expires: Wed, 03 Jul 2024 02:05:16 GMT Cache-Control: public, max-age=82800 Age: 41877 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:13 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49809	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:15 UTC	3085	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bKKau [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:15 UTC	409	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:15 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:15 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:43:15 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49811	142.250.185.161	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:15 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:15 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 03:05:16 GMT Expires: Wed, 03 Jul 2024 02:05:16 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 41879 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:15 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49812	142.250.185.161	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:15 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:15 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 03:05:16 GMT Expires: Wed, 03 Jul 2024 02:05:16 GMT Cache-Control: public, max-age=82800 Age: 41879 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:15 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49787	103.224.182.252	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:15 UTC	123	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close
2024-07-02 14:43:15 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49801	172.217.16.206	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:17 UTC	890	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=naqthqouk82f&aqid=ABKEZoG0DffamLAP_a2owAk&psid=7840396037&pbt=bs&adbx=375&adby=132&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=641883529&csala=20%7C0%7C989%7C2069%7C339&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:17 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SfgaxJdyMqwoFMEZJLIj3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 02 Jul 2024 14:43:17 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49820	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:17 UTC	774	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm&o=1719931394977&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:18 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:17 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:17 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49821	172.217.16.206	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:18 UTC	890	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=e2d506k48c7t&aqid=ABKEZoG0DffamLAP_a2owAk&psid=7840396037&pbt=bv&adbx=375&adby=132&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=641883529&csala=20%7C0%7C989%7C2069%7C339&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:18 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-so0JJ5EtcMki_aTM9GFFIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 02 Jul 2024 14:43:18 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49822	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:19 UTC	538	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Games.cfm&o=1719931394977&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:19 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:19 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:19 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49823	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:23 UTC	3088	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm%3Ffp%3D%252BB1ri3aIf0HuOS6bkXrD7ayMm4mTy5xfmhFrTAZx4neIxl6ydAV%252B%252FhJhqbD4DhnWyMrYwaq2egE2iDHtcbQve0kXq8qi9UIiYovAPGbjNWUJt%252Fx1k42vWk7yVokWygQV0t3gkcMh39lzjgEQYuKfGyFTHA6SPxIuEgeSdzPgkBLgltEKW0iCPsB9D%252ByCbkw7qMPqWGvAqVI9ikFD7vPvmhiO3an06MAe8A34w7RyLuIDAa40GWbcsdHhQygzjRxhODnaAhmK9rHW%252FftyPhagtdpWWZh0T3%252BAzYoE7NzKxLk%253D%26yep%3DdZu7ANrVHh3mNmNNOZbf3FWPvg3k0IRSu7x3zPpW3OfZEMhBHayoEfYv8SACiMkTuKOhq3Rt7afs3BQp86%252FiE516U5vVY5NgTbnaJ8lAMJfGyXCO%252BBTsLSzPV5bS%252Fm5WrjAVAjICrxzz4dzaW1oiw%252BMnveysMiLmFWDPgK0BiAC%252FW%252Fe0FmKT4xoSP9anUwVsYdC2u7OcmqVfAhzjGzXMKWfmRfVws6oH%252Bq9wCILiOjCXlMbQfgd3X6xrKPDQYyxQQSMR%252BUl%252FWZx2QODycelCR1dII7OVk2nq2Boa11b7zwHrSnOrSppbq3F0EyzyOP2obqiwgZ7uoAhd9VFrlnBA%252BLQ%252FI%252FhRebt5jnM0SrWYrVnQdpQuL%252BzFc7pJ89ArJQxhpQABLBgapv5qYKe5hSLJNQDP3ZDEJ5T%252FAQZ%252B7WJGKZoOIkcANTZc27OoWKbHwbyXMY4bM24t7ciKRX5yGWdzUP8dhzuYeGPzanIqCFPyx5mlvc%252Fi82c1SgM4f88bK [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:23 UTC	409	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-02 14:43:23 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-07-02 14:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49824	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:24 UTC	777	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww17.pollyfill.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:24 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:24 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49825	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:25 UTC	541	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww17.pollyfill.io%2FPolly_Pocket_Dress_Up.cfm&o=1719931402474&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:25 UTC	380	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:25 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Tue, 02 Jul 2024 14:43:25 GMT content-length: 43 content-type: image/gif connection: close
2024-07-02 14:43:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	87.230.98.78	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:25 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-02 14:43:25 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49826	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:27 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=REEgwFUAfs15BZO&MD=Phs46Fbe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-02 14:43:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 15f0aac9-d29d-4499-a51c-d5fd2436cc7d MS-RequestId: 8a4a36c9-f779-46a5-8838-2bd0dbc2c12e MS-CV: Jfoh44CveECGQ9mh.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 14:43:27 GMT Connection: close Content-Length: 30005
2024-07-02 14:43:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-02 14:43:27 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49827	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:34 UTC	660	OUT	GET /marketplace/pollyfill.io HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:34 UTC	350	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:34 GMT server: Apache set-cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding transfer-encoding: chunked content-type: text/html; charset=UTF-8 connection: close
2024-07-02 14:43:34 UTC	1098	IN	Data Raw: 34 34 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 Data Ascii: 443<!DOCTYPE html><html lang="en-US"><head>... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6b 65 74 70 6c 61 63 65 31 2e 6a 70 67 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 54 72 69 6c 6c 69 6f 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f Data Ascii: 3FC0ketplace1.jpg"><link rel="icon" href="/img/favicon.ico" type="image/x-icon" /><link rel="shortcut icon" href="/img/favicon.ico" type="image/x-icon" /><meta name="robots" content="all" /><meta name="copyright" content="Trillion" /><meta name="o
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 20 67 6c 6f 62 61 6c 20 6c 69 6e 6b 20 70 6f 70 75 6c 61 72 69 74 79 20 6f 6e 20 61 20 30 20 74 6f 20 31 30 20 73 63 61 6c 65 2e 20 54 68 65 20 68 69 67 68 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 74 68 65 20 62 65 74 74 65 72 2e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 64 6f 6d 61 69 6e 5f 73 74 61 74 69 73 74 69 63 73 22 20 63 6c 61 73 73 3d 22 74 65 78 74 73 74 79 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 20 20 20 20 3c 62 3e 55 6e 69 71 75 65 73 3c 2f 62 3e 0a 20 20 20 20 3c 70 3e 55 6e 69 71 75 65 20 68 69 74 73 20 72 65 63 6f 72 64 65 64 20 66 6f 72 20 64 6f 6d 61 69 6e 73 20 74 68 61 74 20 75 73 65 20 41 62 6f 76 65 2e 63 6f 6d 20 44 4e 53 2e 3c 2f 70 3e 0a 20 20 20 20 Data Ascii: 3FC0 global link popularity on a 0 to 10 scale. The higher the number the better.</p></div><div id="domain_statistics" class="textstyle" style="display:none"> <b>Uniques</b> <p>Unique hits recorded for domains that use Above.com DNS.</p>
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 2e 72 65 70 6c 61 63 65 28 70 2c 22 22 29 3b 0a 0a 09 70 20 3d 20 2f 5c 2e 5b 30 5d 2b 24 2f 67 3b 0a 09 66 72 6d 4f 66 66 65 72 41 6d 6f 75 6e 74 3d 66 72 6d 4f 66 66 65 72 41 6d 6f 75 6e 74 2e 72 65 70 6c 61 63 65 28 70 2c 22 22 29 3b 0a 0a 09 09 70 20 3d 20 2f 5c 2c 2f 67 3b 0a 09 76 61 72 20 70 61 74 74 65 72 6e 20 3d 20 2f 5c 2e 5b 41 2d 7a 30 2d 39 5d 2a 24 2f 3b 0a 09 0a 09 69 66 28 66 72 6d 4f 66 66 65 72 41 6d 6f 75 6e 74 20 3d 3d 20 27 27 29 20 7b 0a 09 09 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 20 2b 3d 20 64 6d 6e 5f 6f 66 66 65 72 5f 6f 66 66 65 72 5f 61 6d 6f 75 6e 74 2b 22 5c 6e 22 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 70 61 74 74 65 72 6e 2e 65 78 65 63 28 66 72 6d 4f 66 66 65 72 41 6d 6f 75 6e 74 29 20 7c 7c 20 Data Ascii: 3FC0t.replace(p,"");p = /\.[0]+$/g;frmOfferAmount=frmOfferAmount.replace(p,"");p = /\,/g;var pattern = /\.[A-z0-9]*$/;if(frmOfferAmount == '') {error_message += dmn_offer_offer_amount+"\n";}else if (pattern.exec(frmOfferAmount) \|\|
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 61 64 64 43 6c 61 73 73 28 27 62 75 79 6e 6f 77 5f 63 6f 6e 74 69 6e 75 65 5f 64 69 73 61 62 6c 65 64 5f 62 74 6e 27 29 3b 0a 09 09 24 28 27 23 62 75 79 6e 6f 77 5f 63 72 65 61 74 65 5f 6e 65 77 5f 61 63 63 6f 75 6e 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 62 75 79 6e 6f 77 5f 63 6f 6e 74 69 6e 75 65 5f 62 74 6e 27 29 3b 0a 09 09 24 28 27 23 62 75 79 6e 6f 77 5f 63 72 65 61 74 65 5f 6e 65 77 5f 61 63 63 6f 75 6e 74 27 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 20 74 72 75 65 29 3b 0a 09 09 69 66 20 28 21 61 72 65 41 6c 6c 49 6e 70 75 74 73 46 69 65 6c 64 73 45 6d 70 74 79 28 27 62 75 79 6e 6f 77 5f 63 72 65 61 74 65 5f 61 63 63 6f 75 6e 74 5f 6e 5f 62 75 79 64 6d 6e 27 29 29 7b 0a 09 09 09 24 28 27 23 62 75 79 6e 6f Data Ascii: 3FC0addClass('buynow_continue_disabled_btn');$('#buynow_create_new_account').removeClass('buynow_continue_btn');$('#buynow_create_new_account').prop("disabled", true);if (!areAllInputsFieldsEmpty('buynow_create_account_n_buydmn')){$('#buyno
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 37 32 22 20 69 64 3d 22 45 45 22 20 3e 2b 33 37 32 20 28 45 73 74 6f 6e 69 61 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 35 31 22 20 69 64 3d 22 45 54 22 20 3e 2b 32 35 31 20 28 45 74 68 69 6f 70 69 61 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 35 30 30 22 20 69 64 3d 22 46 4b 22 20 3e 2b 35 30 30 20 28 46 61 6c 6b 6c 61 6e 64 20 49 73 6c 61 6e 64 73 20 28 6d 61 6c 76 69 6e 61 73 29 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 Data Ascii: 3FC0<option value="372" id="EE" >+372 (Estonia)</option><option value="251" id="ET" >+251 (Ethiopia)</option><option value="500" id="FK" >+500 (Falkland Islands (malvinas))</option>
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 27 3e 0a 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 0a 09 09 09 09 09 09 09 09 09 6e 61 6d 65 3d 22 6d 61 6b 65 5f 6f 66 66 65 72 5f 76 65 72 69 66 69 63 61 74 69 6f 6e 5f 63 6f 64 65 22 0a 09 09 09 09 09 09 09 09 09 69 64 3d 27 6d 61 6b 65 5f 6f 66 66 65 72 5f 76 65 72 69 66 69 63 61 74 69 6f 6e 5f 63 6f 64 65 27 0a 09 09 09 09 09 09 09 09 09 74 79 70 65 3d 22 74 65 6c 22 0a 09 09 09 09 09 09 09 09 09 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 0a 09 09 09 09 09 09 09 09 09 6d 61 78 6c 65 6e 67 74 68 3d 22 36 22 0a 09 09 09 09 09 09 09 09 09 73 74 79 6c 65 3d 22 6d 61 78 2d 77 69 64 74 68 3a 31 32 35 70 78 3b 22 0a 09 09 09 09 09 09 09 09 09 70 61 74 74 65 72 6e 3d 22 5b 30 2d 39 5d 7b 36 7d 22 0a 09 09 09 09 09 09 09 09 Data Ascii: 3FC0'><inputname="make_offer_verification_code"id='make_offer_verification_code'type="tel"class="form-control"maxlength="6"style="max-width:125px;"pattern="[0-9]{6}"
2024-07-02 14:43:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 52 22 20 3e 2b 32 33 31 20 28 4c 69 62 65 72 69 61 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 31 38 22 20 69 64 3d 22 4c 59 22 20 3e 2b 32 31 38 20 28 4c 69 62 79 61 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 34 32 33 22 20 69 64 3d 22 4c 49 22 20 3e 2b 34 32 33 20 28 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 37 30 22 20 69 64 3d 22 4c 54 22 20 3e 2b Data Ascii: 3FC0R" >+231 (Liberia)</option><option value="218" id="LY" >+218 (Libya)</option><option value="423" id="LI" >+423 (Liechtenstein)</option><option value="370" id="LT" >+
2024-07-02 14:43:34 UTC	142	IN	Data Raw: 38 38 0d 0a 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 24 28 27 2e 77 65 73 74 27 29 2e 74 69 70 73 79 28 7b 67 72 61 76 69 74 79 3a 20 27 77 27 7d 29 3b 0a 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 88script><script type="text/javascript">$(document).ready(function(){$('.west').tipsy({gravity: 'w'});});</script></body></html>
2024-07-02 14:43:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49828	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:34 UTC	625	OUT	GET /css/aboveGlobal.css?1716443652 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:34 UTC	257	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:34 GMT server: Apache last-modified: Thu, 23 May 2024 05:54:12 GMT etag: "bed2-61918ae278900" accept-ranges: bytes content-length: 48850 vary: Accept-Encoding content-type: text/css connection: close
2024-07-02 14:43:34 UTC	14223	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 0d 0a 09 61 62 6f 76 65 47 6c 6f 62 61 6c 2e 63 73 73 0d 0a 09 74 68 69 73 20 63 73 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 61 6c 6c 20 74 68 65 20 63 6f 6d 6d 6f 6e 20 63 6c 61 73 73 65 73 20 6f 66 0d 0a 09 61 62 6f 76 65 2e 63 6f 6d 20 72 65 67 69 73 74 72 61 72 20 6d 61 72 6b 65 74 70 6c 61 63 65 20 70 61 67 65 73 0d 0a 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 0d 0a 68 74 6d 6c 2c 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 Data Ascii: /***********************************************aboveGlobal.cssthis css file includes all the common classes ofabove.com registrar marketplace pages************************************************/html,body {margin:0;padding:0
2024-07-02 14:43:34 UTC	16320	IN	Data Raw: 72 3a 23 64 39 32 31 32 38 7d 0d 0a 2e 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 66 30 30 30 30 7d 0d 0a 2e 62 6c 61 63 6b 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 7d 0d 0a 2e 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 0d 0a 2e 72 65 64 31 7b 63 6f 6c 6f 72 3a 23 66 66 30 30 30 30 3b 7d 0d 0a 2e 6f 72 61 6e 67 65 7b 63 6f 6c 6f 72 3a 23 46 46 39 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 2e 67 72 65 65 6e 7b 63 6f 6c 6f 72 3a 23 30 30 39 39 30 30 7d 0d 0a 2e 67 72 65 65 6e 6c 7b 63 6f 6c 6f 72 3a 23 30 30 39 39 33 33 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 2e 62 6c 75 65 7b 63 6f 6c 6f 72 3a 23 30 30 38 30 65 32 7d 0d 0a 2e 67 72 65 79 7b 63 6f 6c 6f 72 3a 23 62 62 62 62 62 62 7d 0d 0a 2e 62 6c 61 63 6b 7b 63 6f 6c 6f 72 3a 23 30 30 Data Ascii: r:#d92128}.red{color:#ff0000}.black{color:#000000}.white{color:#ffffff}.red1{color:#ff0000;}.orange{color:#FF9900 !important}.green{color:#009900}.greenl{color:#009933 !important}.blue{color:#0080e2}.grey{color:#bbbbbb}.black{color:#00
2024-07-02 14:43:34 UTC	16320	IN	Data Raw: 72 72 6f 77 20 7b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 6c 65 66 74 3a 20 31 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 6c 65 66 74 3b 20 7d 0d 0a 2e 74 69 70 73 79 2d 73 65 20 2e 74 69 70 73 79 2d 61 72 72 6f 77 20 7b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 72 69 67 68 74 3a 20 31 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 6c 65 66 74 3b 20 7d 0d 0a 2e 74 69 70 73 79 2d 65 20 2e 74 69 70 73 79 2d 61 72 72 6f 77 20 7b 20 74 6f 70 3a 20 35 30 25 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 34 70 78 3b 20 72 69 67 68 74 3a 20 30 3b 20 77 69 64 74 68 3a 20 35 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: rrow { bottom: 0; left: 10px; background-position: bottom left; }.tipsy-se .tipsy-arrow { bottom: 0; right: 10px; background-position: bottom left; }.tipsy-e .tipsy-arrow { top: 50%; margin-top: -4px; right: 0; width: 5px; height: 9px; background-posi
2024-07-02 14:43:34 UTC	1987	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 09 2e 65 78 64 5f 68 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 09 2e 6d 61 6e 75 61 6c 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0d 0a 20 20 20 20 2e 6d 61 6e 75 61 6c 6d 6f 62 69 6c 65 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 0d 0a 20 20 20 20 2e 69 6d 67 61 75 74 6f 39 30 7b 77 69 64 74 68 3a 39 30 25 3b 7d 0d 0a 20 20 20 20 2e 74 6f 70 73 6f 63 69 61 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 7d 0d 0a 20 20 20 20 2e 66 6c 65 78 73 6c 69 64 65 72 7b 77 69 64 74 68 3a 39 32 25 3b 7d 0d 0a 20 20 20 20 2e 77 69 6d 5f 74 78 74 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 20 20 20 Data Ascii: !important}.exd_head{font-size:16px !important}.manualmenu{display:none} .manualmobilemenu{display:block} .imgauto90{width:90%;} .topsocial{margin-left:0px;} .flexslider{width:92%;} .wim_txt1{font-size:36px !important;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49840	104.18.10.207	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	602	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.above.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:35 UTC	932	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:35 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:59 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 0acc8d6afae84a1db7ef161350d778b6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 9573597 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89cf68b11ce10cc0-EWR alt-svc: h3=":443"; ma=86400
2024-07-02 14:43:35 UTC	437	IN	Data Raw: 37 63 30 65 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c0e/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e Data Ascii: ary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-san
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c Data Ascii: dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c Data Ascii: color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f Data Ascii: bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;fo
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 Data Ascii: }a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 Data Ascii: ol-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.c
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 Data Ascii: ;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.3
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 Data Ascii: tive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 Data Ascii: order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-fle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49841	104.18.10.207	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	586	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.above.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:35 UTC	946	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/05/2024 05:41:23 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d312f36447391e5816c5d33a72b72cb7 CDN-Cache: HIT CF-Cache-Status: HIT Age: 9583231 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89cf68b138628cc8-EWR alt-svc: h3=":443"; ma=86400
2024-07-02 14:43:35 UTC	423	IN	Data Raw: 37 63 30 31 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c01/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e Data Ascii: y","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a Data Ascii: =n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d Data Ascii: _END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: nt).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._eleme
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 Data Ascii: ;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("dis
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 Data Ascii: eyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 Data Ascii: (this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("s
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 Data Ascii: e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEve
2024-07-02 14:43:35 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 Data Ascii: return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49843	151.101.130.137	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	567	OUT	GET /ui/1.12.0/themes/smoothness/jquery-ui.css HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:35 UTC	537	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36564 Server: nginx Content-Type: text/css Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-8ed4" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2555659 Date: Tue, 02 Jul 2024 14:43:35 GMT X-Served-By: cache-lga21965-LGA, cache-nyc-kteb1890063-NYC X-Cache: HIT, HIT X-Cache-Hits: 16, 0 X-Timer: S1719931415.296785,VS0,VE1 Vary: Accept-Encoding
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 30 20 2d 20 32 30 31 36 2d 30 37 2d 30 38 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.12.0 - 2016-07-08 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 39 35 26 62 6f 72 64 65 72 43 6f 6c 6f 72 45 72 72 6f 72 3d 63 64 30 61 30 61 26 66 63 45 72 72 6f 72 3d 63 64 30 61 30 61 26 69 63 6f 6e 43 6f 6c 6f 72 45 72 72 6f 72 3d 63 64 30 61 30 61 26 62 67 43 6f 6c 6f 72 4f 76 65 72 6c 61 79 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 4f 76 65 72 6c 61 79 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 30 26 6f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 33 30 26 62 67 43 6f 6c 6f 72 53 68 61 64 6f 77 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 53 68 61 64 6f 77 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 30 26 6f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 33 30 26 74 68 69 63 6b 6e 65 73 73 53 68 61 64 6f 77 3d 38 70 78 26 6f 66 66 73 65 74 54 Data Ascii: 95&borderColorError=cd0a0a&fcError=cd0a0a&iconColorError=cd0a0a&bgColorOverlay=aaaaaa&bgTextureOverlay=flat&bgImgOpacityOverlay=0&opacityOverlay=30&bgColorShadow=aaaaaa&bgTextureShadow=flat&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=8px&offsetT
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 2d 74 6f 70 3a 20 2d 2e 32 35 65 6d 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 2d 39 39 39 39 39 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2e 75 69 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6c 6f 63 6b 20 7b 0a 09 6c 65 66 74 3a 20 35 30 25 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 38 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 20 4d 69 73 63 20 76 69 73 75 61 6c 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 20 4f 76 65 72 6c 61 79 73 20 2a Data Ascii: -top: -.25em;position: relative;text-indent: -99999px;overflow: hidden;background-repeat: no-repeat;}.ui-widget-icon-block {left: 50%;margin-left: -8px;display: block;}/* Misc visuals----------------------------------// Overlays *
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 0a 2f 2a 20 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 69 63 6f 6e 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 2e 32 65 6d 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 20 30 3b 0a 7d 0a 0a 2f 2a 20 72 69 67 68 74 2d 61 6c 69 67 6e 65 64 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 20 7b 0a 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 34 65 6d 20 31 65 6d 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 Data Ascii: padding-left: 2em;}/* left-aligned /.ui-menu .ui-icon {position: absolute;top: 0;bottom: 0;left: .2em;margin: auto 0;}/ right-aligned */.ui-menu .ui-menu-icon {left: auto;right: 0;}.ui-button {padding: .4em 1em;display: inli
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 2a 2f 0a 69 6e 70 75 74 2e 75 69 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 0a 62 75 74 74 6f 6e 2e 75 69 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 7b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 3e 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 2d 72 Data Ascii: */input.ui-button::-moz-focus-inner,button.ui-button::-moz-focus-inner {border: 0;padding: 0;}.ui-controlgroup {vertical-align: middle;display: inline-block;}.ui-controlgroup > .ui-controlgroup-item {float: left;margin-left: 0;margin-r
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 3a 20 73 6f 6c 69 64 3b 0a 7d 0a 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 6c 61 62 65 6c 20 2e 75 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 31 70 78 20 31 70 78 20 31 70 78 20 23 63 63 63 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 31 32 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 20 2e 75 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 65 6d 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 Data Ascii: : solid;}.ui-checkboxradio-label .ui-icon-background {box-shadow: inset 1px 1px 1px #ccc;border-radius: .12em;border: none;}.ui-checkboxradio-radio-label .ui-icon-background {width: 16px;height: 16px;border-radius: 1em;overflow: visible
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 6b 65 72 2d 74 69 74 6c 65 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 32 2e 33 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 65 6d 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 20 73 65 6c 65 63 74 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 6d 61 72 67 69 6e 3a 20 31 70 78 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 79 65 61 72 20 7b 0a 09 77 69 64 74 68 3a 20 34 35 25 3b 0a 7d 0a Data Ascii: ker-title {margin: 0 2.3em;line-height: 1.8em;text-align: center;}.ui-datepicker .ui-datepicker-title select {font-size: 1em;margin: 1px 0;}.ui-datepicker select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year {width: 45%;}
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 0a 09 77 69 64 74 68 3a 20 33 33 2e 33 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 2d 34 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 0a 09 77 69 64 74 68 3a 20 32 35 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6c 61 73 74 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6d 69 64 64 6c 65 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a Data Ascii: picker-group {width: 33.3%;}.ui-datepicker-multi-4 .ui-datepicker-group {width: 25%;}.ui-datepicker-multi .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header {border-left-width:
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 34 65 6d 20 31 65 6d 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 2e 31 65 6d 20 30 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 77 69 64 74 68 3a 20 39 30 25 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e Data Ascii: tion: absolute;top: 0;left: 0;padding: .2em;outline: 0;}.ui-dialog .ui-dialog-titlebar {padding: .4em 1em;position: relative;}.ui-dialog .ui-dialog-title {float: left;margin: .1em 0;white-space: nowrap;width: 90%;overflow: hidden
2024-07-02 14:43:35 UTC	1378	IN	Data Raw: 2d 6e 65 20 7b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 09 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 77 20 7b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 20 7b 0a 09 63 75 72 73 6f 72 3a 20 6d 6f 76 65 3b 0a 7d 0a 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 68 61 6e 64 6c 65 20 7b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 Data Ascii: -ne {right: 0;top: 0;}.ui-dialog .ui-resizable-nw {left: 0;top: 0;}.ui-draggable .ui-dialog-titlebar {cursor: move;}.ui-draggable-handle {-ms-touch-action: none;touch-action: none;}.ui-resizable {position: relative;}.ui-resizable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49834	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	625	OUT	GET /css/marketplace.css?1718186410 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	258	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Wed, 12 Jun 2024 10:00:10 GMT etag: "13232-61aae72a03e80" accept-ranges: bytes content-length: 78386 vary: Accept-Encoding content-type: text/css connection: close
2024-07-02 14:43:35 UTC	14222	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 0a 09 6d 61 72 6b 65 74 70 6c 61 63 65 2e 63 73 73 0a 09 74 68 69 73 20 63 73 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 61 6c 6c 20 74 68 65 20 63 6c 61 73 73 65 73 20 6f 66 0a 09 61 62 6f 76 65 2e 63 6f 6d 2f 6d 61 72 6b 65 70 6c 61 63 65 20 68 6f 6d 65 20 26 20 69 6e 74 65 72 6e 61 6c 20 70 61 67 65 73 2e 0a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 7d 0a 0a 2e 6d 70 63 6f 6e 74 65 6e 74 62 67 7b 70 61 64 Data Ascii: /***********************************************marketplace.cssthis css file includes all the classes ofabove.com/markeplace home & internal pages.************************************************/html {overflow-y: scroll;}.mpcontentbg{pad
2024-07-02 14:43:35 UTC	16320	IN	Data Raw: 20 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 30 25 7d 0a 2e 64 42 6c 6f 63 6b 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 0a 2e 61 72 42 6c 75 65 20 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 77 69 64 74 68 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 0a 0a 2e 70 72 65 56 4c 69 73 74 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 6d 61 72 6b 65 74 70 6c 61 63 65 2f 69 6d 67 2f 70 72 65 76 2d 64 65 6c 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a Data Ascii: {line-height:200%}.dBlock { display:block}.arBlue {float:right;width:15px;padding-top:2px}.preVList {background: url(/marketplace/img/prev-del.png) no-repeat !important; background-position:0 0 !important; cursor: pointer;display:inline-block;height:
2024-07-02 14:43:35 UTC	16320	IN	Data Raw: 76 7b 20 63 6f 6c 6f 72 3a 20 23 66 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 7d 0a 2e 6d 73 67 44 69 76 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 70 78 20 32 70 78 20 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 62 63 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 35 30 70 78 7d 0a 0a 61 2e 6d 69 64 6e 61 76 7a 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 37 37 64 38 37 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 7d 0a 61 Data Ascii: v{ color: #f00;font-size:12px;padding:0px 0px 0px 0px}.msgDiv{padding:2px 0px 2px 4px;background:#fffbc9;border:1px solid #eeeeee;min-width:250px}a.midnavz{font-weight:bold;color:#ffffff;background-color:#777d87;display:block;border:1px solid white;}a
2024-07-02 14:43:35 UTC	16320	IN	Data Raw: 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 30 20 23 63 63 63 2c 20 30 20 2d 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 3b 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 30 20 23 63 63 63 2c 20 30 20 2d 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 30 20 23 64 31 65 38 66 63 2c 20 30 20 2d 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 63 6f 6c 6f 72 3a 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 62 75 74 2d 62 6c Data Ascii: px;-webkit-box-shadow: 0 3px 0 #ccc, 0 -1px #fff inset;-moz-box-shadow: 0 3px 0 #ccc, 0 -1px #fff inset;box-shadow: 0 3px 0 #d1e8fc, 0 -1px #fff inset;background: #fff;color:#333;outline:none;display: inline-block;cursor:pointer;}.but-bl
2024-07-02 14:43:35 UTC	15204	IN	Data Raw: 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 6d 73 2d 64 72 6f 70 20 75 6c 20 3e 20 6c 69 20 2e 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 33 35 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 33 35 29 3b 0a 7d 0a 0a 2e 6d 73 2d 64 72 6f 70 20 75 6c 20 3e 20 6c 69 2e 6d 75 6c 74 69 70 6c 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 6d 73 2d 64 72 6f 70 20 75 6c 20 3e 20 6c 69 2e 67 72 6f 75 70 20 7b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 6d 73 2d 64 72 6f 70 20 75 6c 20 3e 20 6c 69 2e 6d 75 6c 74 69 70 6c 65 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 Data Ascii: static;}.ms-drop ul > li .disabled { opacity: .35; filter: Alpha(Opacity=35);}.ms-drop ul > li.multiple { display: block; float: left;}.ms-drop ul > li.group { clear: both;}.ms-drop ul > li.multiple label { width: 100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49833	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	611	OUT	GET /css/lity.min.css HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	255	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "ca3-60f321044f500" accept-ranges: bytes content-length: 3235 vary: Accept-Encoding content-type: text/css connection: close
2024-07-02 14:43:35 UTC	1193	IN	Data Raw: 2f 2a 21 20 4c 69 74 79 20 2d 20 76 31 2e 36 2e 36 20 2d 20 32 30 31 36 2d 30 34 2d 32 32 0d 0a 2a 20 68 74 74 70 3a 2f 2f 73 6f 72 67 61 6c 6c 61 2e 63 6f 6d 2f 6c 69 74 79 2f 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4a 61 6e 20 53 6f 72 67 61 6c 6c 61 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0d 0a 0d 0a 2e 6c 69 74 79 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 75 72 6c 28 22 2f 69 6d 67 Data Ascii: /! Lity - v1.6.6 - 2016-04-22 http://sorgalla.com/lity/* Copyright (c) 2016 Jan Sorgalla; Licensed MIT */.lity{z-index:9990;position:fixed;top:0;right:0;bottom:0;left:0;white-space:nowrap;background:#0b0b0b;background: rgba(0, 0, 0, 0) url("/img
2024-07-02 14:43:35 UTC	2042	IN	Data Raw: 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 6c 69 74 79 2d 63 6f 6e 74 65 6e 74 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 33 3b 77 69 64 74 68 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 Data Ascii: nline-block;white-space:normal;max-width:100%;max-height:100%;outline:none !important;}.lity-content{z-index:9993;width:100%;-webkit-transform:scale(1);-ms-transform:scale(1);-o-transform:scale(1);transform:scale(1);-webkit-transition:-webkit-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49831	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	612	OUT	GET /css/jquery-ui.css HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	257	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "8554-60f321044f500" accept-ranges: bytes content-length: 34132 vary: Accept-Encoding content-type: text/css connection: close
2024-07-02 14:43:35 UTC	1191	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 30 2e 33 20 2d 20 32 30 31 33 2d 30 35 2d 30 33 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 6a 71 75 65 72 79 2e 75 69 2e 63 6f 72 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 62 75 74 74 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 69 61 6c 6f 67 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 6d 65 6e 75 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 70 72 6f 67 72 65 73 73 62 Data Ascii: /! jQuery UI - v1.10.3 - 2013-05-03 http://jqueryui.com* Includes: jquery.ui.core.css, jquery.ui.accordion.css, jquery.ui.autocomplete.css, jquery.ui.button.css, jquery.ui.datepicker.css, jquery.ui.dialog.css, jquery.ui.menu.css, jquery.ui.progressb
2024-07-02 14:43:35 UTC	13032	IN	Data Raw: 3d 32 31 32 31 32 31 26 69 63 6f 6e 43 6f 6c 6f 72 41 63 74 69 76 65 3d 34 35 34 35 34 35 26 62 67 43 6f 6c 6f 72 48 69 67 68 6c 69 67 68 74 3d 66 62 66 39 65 65 26 62 67 54 65 78 74 75 72 65 48 69 67 68 6c 69 67 68 74 3d 67 6c 61 73 73 26 62 67 49 6d 67 4f 70 61 63 69 74 79 48 69 67 68 6c 69 67 68 74 3d 35 35 26 62 6f 72 64 65 72 43 6f 6c 6f 72 48 69 67 68 6c 69 67 68 74 3d 66 63 65 66 61 31 26 66 63 48 69 67 68 6c 69 67 68 74 3d 33 36 33 36 33 36 26 69 63 6f 6e 43 6f 6c 6f 72 48 69 67 68 6c 69 67 68 74 3d 32 65 38 33 66 66 26 62 67 43 6f 6c 6f 72 45 72 72 6f 72 3d 66 65 66 31 65 63 26 62 67 54 65 78 74 75 72 65 45 72 72 6f 72 3d 67 6c 61 73 73 26 62 67 49 6d 67 4f 70 61 63 69 74 79 45 72 72 6f 72 3d 39 35 26 62 6f 72 64 65 72 43 6f 6c 6f 72 45 72 72 6f Data Ascii: =212121&iconColorActive=454545&bgColorHighlight=fbf9ee&bgTextureHighlight=glass&bgImgOpacityHighlight=55&borderColorHighlight=fcefa1&fcHighlight=363636&iconColorHighlight=2e83ff&bgColorError=fef1ec&bgTextureError=glass&bgImgOpacityError=95&borderColorErro
2024-07-02 14:43:35 UTC	16320	IN	Data Raw: 31 2e 32 65 6d 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 7d 0d 0a 2e 75 69 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 65 6d 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 46 6f 72 20 49 45 38 20 2d 20 53 65 65 20 23 36 37 32 37 20 2a 2f 0d 0a 2e 75 69 2d 73 6c 69 64 65 72 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 2e 75 Data Ascii: 1.2em;height: 1.2em;cursor: default;}.ui-slider .ui-slider-range {position: absolute;z-index: 1;font-size: .7em;display: block;border: 0;background-position: 0 0;}/* For IE8 - See #6727 */.ui-slider.ui-state-disabled .u
2024-07-02 14:43:35 UTC	3589	IN	Data Raw: 70 78 20 2d 31 36 30 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 6f 66 66 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 31 36 30 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 6f 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 31 36 30 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 70 6f 77 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 37 36 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 73 69 67 6e 61 6c 2d 64 69 61 67 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 31 37 36 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e Data Ascii: px -160px; }.ui-icon-volume-off { background-position: -128px -160px; }.ui-icon-volume-on { background-position: -144px -160px; }.ui-icon-power { background-position: 0 -176px; }.ui-icon-signal-diag { background-position: -16px -176px; }.ui-icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49842	142.250.186.100	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	672	OUT	GET /recaptcha/api.js?render=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:35 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 02 Jul 2024 14:43:35 GMT Date: Tue, 02 Jul 2024 14:43:35 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:35 UTC	862	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-07-02 14:43:35 UTC	613	IN	Data Raw: 36 64 48 4a 31 5a 58 30 3d 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 Data Ascii: 6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releas
2024-07-02 14:43:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49832	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	635	OUT	GET /marketplace/css/offer_new.css?1718621077 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	257	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Mon, 17 Jun 2024 10:44:37 GMT etag: "2974-61b13a6cc4f40" accept-ranges: bytes content-length: 10612 vary: Accept-Encoding content-type: text/css connection: close
2024-07-02 14:43:35 UTC	10612	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 2e 67 72 61 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 0a 7d 0a 2e 72 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 44 44 30 30 30 33 0a 7d 0a 23 65 72 72 6d 73 67 20 7b 20 63 6f 6c 6f 72 3a 23 46 46 30 30 30 30 3b 20 7d 0a 0a 2e 64 69 76 69 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 20 23 43 43 43 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 75 6c 2e 70 61 79 6f 70 74 20 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 20 68 65 69 67 68 74 3a 37 30 70 78 3b 7d 0a 0a 75 6c 2e 70 61 79 6f 70 74 20 6c 69 20 7b 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 6d 61 72 67 Data Ascii: @charset "utf-8";/* CSS Document */.gray { color:#4D4D4D}.red { color:#DD0003}#errmsg { color:#FF0000; }.divider { border-bottom:1px dotted #CCC; height: 20px;}ul.payopt {list-style: none; height:70px;}ul.payopt li { float:left; marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49844	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	642	OUT	GET /marketplace/javascript/jquery-migrate-1.2.1.min.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	270	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "1c20-60f3210543740" accept-ranges: bytes content-length: 7200 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:35 UTC	7200	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49845	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:35 UTC	606	OUT	GET /js/lity.min.js?1705557556 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:35 UTC	270	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:35 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "132e-60f321044f500" accept-ranges: bytes content-length: 4910 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:35 UTC	1178	IN	Data Raw: 2f 2a 21 20 4c 69 74 79 20 2d 20 76 31 2e 36 2e 36 20 2d 20 32 30 31 36 2d 30 34 2d 32 32 0a 2a 20 68 74 74 70 3a 2f 2f 73 6f 72 67 61 6c 6c 61 2e 63 6f 6d 2f 6c 69 74 79 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4a 61 6e 20 53 6f 72 67 61 6c 6c 61 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 62 28 61 2c 63 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 Data Ascii: /! Lity - v1.6.6 - 2016-04-22 http://sorgalla.com/lity/* Copyright (c) 2016 Jan Sorgalla; Licensed MIT */!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(c){return b(a,c)}):"object"==typeof module&&"object"==typeof modu
2024-07-02 14:43:35 UTC	3732	IN	Data Raw: 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6e 61 74 75 72 61 6c 57 69 64 74 68 3f 65 28 29 3a 76 6f 69 64 20 64 2e 72 65 73 6f 6c 76 65 28 63 29 7d 29 2e 6f 6e 28 22 65 72 72 6f 72 22 2c 65 29 2c 64 2e 70 72 6f 6d 69 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 76 61 72 20 63 3b 74 72 79 7b 63 3d 62 28 61 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 69 66 28 21 63 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 62 28 27 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 22 20 63 6c 61 73 73 3d 22 6c 69 74 79 2d 69 6e 6c 69 6e 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2f 3e 27 29 3b 72 65 74 75 72 6e 20 63 2e 61 66 74 65 72 28 65 29 2e 6f 6e 28 Data Ascii: {return 0===this.naturalWidth?e():void d.resolve(c)}).on("error",e),d.promise()}function j(a){var c;try{c=b(a)}catch(d){return!1}if(!c.length)return!1;var e=b('<span style="display:none !important" class="lity-inline-placeholder"/>');return c.after(e).on(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49850	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	625	OUT	GET /marketplace/javascript/auction.js?1709635027 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	271	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Tue, 05 Mar 2024 10:37:07 GMT etag: "f8c3-612e76c7adac0" accept-ranges: bytes content-length: 63683 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	14209	IN	Data Raw: 2f 2f 66 75 6e 63 74 69 6f 6e 20 61 64 64 65 64 20 66 6f 72 20 67 65 74 20 73 74 61 74 73 20 64 61 74 61 0d 0a 76 61 72 20 74 61 62 5f 74 6f 5f 73 68 6f 77 3d 22 22 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 73 75 6d 6d 61 72 79 5f 64 61 74 61 28 67 72 61 70 68 5f 6d 6f 64 65 2c 64 6f 6d 61 69 6e 5f 69 64 2c 64 6f 6d 61 69 6e 5f 6e 61 6d 65 2c 75 73 65 72 5f 69 64 2c 74 79 70 65 2c 6a 6f 62 5f 69 64 2c 66 72 6f 6d 5f 64 61 74 65 2c 74 6f 5f 64 61 74 65 2c 70 6f 72 74 66 6f 6c 69 6f 5f 69 64 29 7b 0d 0a 09 76 61 72 20 72 65 70 6f 72 74 65 64 5f 66 6c 61 67 09 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 70 6f 72 74 65 64 5f 66 6c 61 67 27 29 2e 76 61 6c 75 65 3b 0d 0a 09 76 61 72 20 72 65 76 65 6e 75 65 5f 66 6c Data Ascii: //function added for get stats datavar tab_to_show="";function get_summary_data(graph_mode,domain_id,domain_name,user_id,type,job_id,from_date,to_date,portfolio_id){var reported_flag=document.getElementById('reported_flag').value;var revenue_fl
2024-07-02 14:43:36 UTC	16320	IN	Data Raw: 63 65 28 2f 5c 7b 54 41 47 5c 7d 2f 2c 22 73 74 61 72 74 20 70 72 69 63 65 22 29 3b 0d 0a 09 09 09 09 64 6f 6d 61 69 6e 5f 65 72 72 6f 72 09 2b 3d 6d 73 67 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 0d 0a 09 09 09 69 66 28 21 76 61 6c 69 64 61 74 65 5f 63 75 72 72 65 6e 63 79 5f 69 6e 70 75 74 73 28 72 65 73 65 72 76 65 5f 70 72 69 63 65 2c 27 64 6f 6c 6c 61 72 27 29 29 7b 0d 0a 09 09 09 09 76 61 72 20 6d 73 67 3d 20 65 72 72 6f 72 5f 61 72 72 61 79 5b 22 6e 6f 5f 63 65 6e 74 73 5f 61 6c 6c 6f 77 65 64 5f 65 72 72 22 5d 3b 0d 0a 09 09 09 09 6d 73 67 3d 6d 73 67 2e 72 65 70 6c 61 63 65 28 2f 5c 7b 54 41 47 5c 7d 2f 2c 22 72 65 73 65 72 76 65 20 70 72 69 63 65 22 29 3b 0d 0a 09 09 09 09 64 6f 6d 61 69 6e 5f 65 72 72 6f 72 09 2b 3d 6d 73 67 3b 0d 0a 09 09 09 09 2f Data Ascii: ce(/\{TAG\}/,"start price");domain_error+=msg;}if(!validate_currency_inputs(reserve_price,'dollar')){var msg= error_array["no_cents_allowed_err"];msg=msg.replace(/\{TAG\}/,"reserve price");domain_error+=msg;/
2024-07-02 14:43:36 UTC	16320	IN	Data Raw: 73 68 6f 77 5f 64 61 79 73 28 63 68 61 72 74 29 3b 0d 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 75 6d 6d 61 72 79 49 6e 66 6f 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 6f 62 6a 5f 62 61 72 5f 63 68 61 72 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 09 6f 62 6a 5f 74 72 61 66 66 69 63 5f 63 68 61 72 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 09 6f 62 6a 5f 70 69 5f 63 68 61 72 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 09 0d 0a 09 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 75 6d 6d 61 72 79 5f 74 61 62 6c 65 27 29 29 Data Ascii: show_days(chart);document.getElementById('summaryInfo').style.display='none';}obj_bar_chart.style.display='none';obj_traffic_chart.style.display='none';obj_pi_chart.style.display='none';if(document.getElementById('summary_table'))
2024-07-02 14:43:36 UTC	16320	IN	Data Raw: 63 6b 3d 22 6d 61 6e 61 67 65 5f 61 75 63 74 69 6f 6e 73 5f 70 72 69 76 61 63 79 28 5c 27 27 2b 61 75 63 74 69 6f 6e 5f 69 64 2b 27 5c 27 2c 20 27 2b 75 73 65 72 5f 69 64 2b 27 2c 20 5c 27 52 65 6d 6f 76 65 5c 27 2c 20 5c 27 27 2b 70 61 67 65 2b 27 5c 27 2c 20 5c 27 70 6f 72 74 66 6f 6c 69 6f 5c 27 29 3b 22 20 64 61 74 61 2d 74 69 74 6c 65 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 66 6f 6e 74 31 31 26 71 75 6f 74 3b 3e 52 65 6d 6f 76 65 20 50 72 69 76 61 63 79 3c 2f 64 69 76 3e 22 3e 50 72 69 76 61 74 65 3c 2f 61 3e 27 3b 0d 0a 09 09 09 09 09 09 09 09 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 72 69 76 61 63 79 27 2b 61 75 63 74 69 6f 6e 5f 69 64 5f 61 72 72 5b 69 5d 29 29 20 7b 0d 0a 09 09 09 Data Ascii: ck="manage_auctions_privacy(\''+auction_id+'\', '+user_id+', \'Remove\', \''+page+'\', \'portfolio\');" data-title="<div class="font11">Remove Privacy</div>">Private</a>';if (document.getElementById('privacy'+auction_id_arr[i])) {
2024-07-02 14:43:36 UTC	514	IN	Data Raw: 6c 69 74 79 5f 6e 61 6d 65 27 29 2e 76 61 6c 28 29 29 2e 6c 65 6e 67 74 68 20 20 20 3d 3d 20 30 0d 0a 09 09 26 26 09 24 2e 74 72 69 6d 28 24 28 27 23 61 75 5f 65 6c 69 67 69 62 69 6c 69 74 79 5f 69 64 27 29 2e 76 61 6c 28 29 29 2e 6c 65 6e 67 74 68 20 20 20 20 20 3d 3d 20 30 0d 0a 09 09 26 26 09 24 2e 74 72 69 6d 28 24 28 27 23 61 75 5f 72 65 67 69 73 74 72 61 6e 74 5f 69 64 27 29 2e 76 61 6c 28 29 29 2e 6c 65 6e 67 74 68 20 09 20 3d 3d 20 30 0d 0a 09 29 7b 0d 0a 09 09 61 6c 65 72 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 76 61 6c 69 64 20 62 75 73 69 6e 65 73 73 20 64 65 74 61 69 6c 73 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 6f 6d 61 69 6e 20 70 75 72 63 68 61 73 65 2e 22 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d Data Ascii: lity_name').val()).length == 0&&$.trim($('#au_eligibility_id').val()).length == 0&&$.trim($('#au_registrant_id').val()).length == 0){alert("Please enter your valid business details to complete domain purchase.");return false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49853	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	629	OUT	GET /marketplace/javascript/validations.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	271	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "2def-60f3210543740" accept-ranges: bytes content-length: 11759 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	11759	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 46 69 6c 65 20 3a 2d 20 76 61 6c 69 64 61 74 69 6f 6e 73 2e 6a 73 0d 0a 20 2a 20 50 75 72 70 6f 73 65 20 3a 2d 20 46 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 61 6c 6c 20 76 61 6c 69 64 61 74 69 6f 6e 20 75 73 65 64 20 66 6f 72 20 76 61 6c 69 64 61 74 69 6e 67 20 62 69 64 73 20 69 6e 70 75 74 20 66 72 6f 6d 20 76 61 72 69 6f 75 73 20 69 6e 74 65 72 66 61 63 65 73 0d 0a 20 2a 20 43 72 65 61 74 6f 72 20 3a 2d 20 56 69 73 68 61 6c 20 52 61 6e 65 0d 0a 20 2a 20 43 72 65 61 74 65 64 20 44 61 74 65 20 3a 2d 20 30 31 2f 30 36 2f 32 30 31 32 0d 0a 20 2a 20 40 70 61 72 61 6d 20 20 20 0d 0a 20 2a 20 40 70 61 72 61 6d 20 20 20 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 5f 6d 61 78 5f 62 69 64 28 29 0d Data Ascii: /* * File :- validations.js * Purpose :- File contains all validation used for validating bids input from various interfaces * Creator :- Vishal Rane * Created Date :- 01/06/2012 * @param * @param //function validate_max_bid()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49852	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	603	OUT	GET /js/login.js?1705557556 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	269	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "844-60f321044f500" accept-ranges: bytes content-length: 2116 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	2116	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 24 28 27 23 6c 6f 67 69 6e 2d 74 72 69 67 67 65 72 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 24 28 74 68 69 73 29 2e 6e 65 78 74 28 27 23 6c 6f 67 69 6e 2d 63 6f 6e 74 65 6e 74 27 29 2e 73 6c 69 64 65 54 6f 67 67 6c 65 28 29 3b 0d 0a 09 09 24 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6c 6f 67 69 6e 2d 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 0d 0a 09 09 69 66 20 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6c 6f 67 69 6e 2d 61 63 74 69 76 65 27 29 29 7b 0d 0a 09 09 09 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 73 70 61 6e 27 29 2e 68 Data Ascii: // JavaScript Document$(document).ready(function(){$('#login-trigger').click(function(){$(this).next('#login-content').slideToggle();$(this).toggleClass('login-active');if ($(this).hasClass('login-active')){$(this).find('span').h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49854	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	626	OUT	GET /marketplace/javascript/capswarn.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	269	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "74c-60f3210543740" accept-ranges: bytes content-length: 1868 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	1868	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0d 0a 0d 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 2f 2f 49 6e 69 74 69 61 6c 69 7a 65 20 74 6f 20 68 69 64 65 20 63 61 70 73 2d 6c 6f 63 6b 2d 77 61 72 6e 69 6e 67 0d 0a 24 28 27 2e 63 61 70 73 2d 6c 6f 63 6b 2d 77 61 72 6e 69 6e 67 27 29 2e 68 69 64 65 28 29 3b 0d 0a 0d 0a 2f 2f 53 6e 69 66 66 20 66 6f 72 20 43 61 70 73 2d 4c 6f 63 6b 20 73 74 61 74 65 0d 0a 24 28 22 23 70 61 73 73 77 6f 72 64 22 29 2e 6b 65 79 70 72 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 76 61 72 20 73 20 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 20 65 2e 77 68 69 63 68 20 29 3b 0d 0a 69 66 28 28 73 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 73 20 26 26 20 73 Data Ascii: // JavaScript Document$(function(){//Initialize to hide caps-lock-warning$('.caps-lock-warning').hide();//Sniff for Caps-Lock state$("#password").keypress(function(e) {var s = String.fromCharCode( e.which );if((s.toUpperCase() === s && s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49855	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	623	OUT	GET /marketplace/javascript/timer.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	269	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "5a0-60f3210543740" accept-ranges: bytes content-length: 1440 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	1440	IN	Data Raw: 76 61 72 20 6d 69 6e 73 0a 76 61 72 20 73 65 63 73 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 64 28 6d 69 6e 2c 73 65 63 29 20 7b 0a 20 09 6d 69 6e 73 20 3d 20 31 20 2a 20 6d 28 53 74 72 69 6e 67 28 6d 69 6e 29 29 3b 20 2f 2f 20 63 68 61 6e 67 65 20 6d 69 6e 75 74 65 73 20 68 65 72 65 0a 20 09 73 65 63 73 20 3d 20 30 20 2b 20 73 28 22 3a 22 2b 53 74 72 69 6e 67 28 73 65 63 29 29 3b 20 2f 2f 20 63 68 61 6e 67 65 20 73 65 63 6f 6e 64 73 20 68 65 72 65 20 28 61 6c 77 61 79 73 20 61 64 64 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 65 63 6f 6e 64 20 74 6f 20 79 6f 75 72 20 74 6f 74 61 6c 29 0a 20 09 72 65 64 6f 28 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6d 28 6f 62 6a 29 20 7b 0a 20 09 66 6f 72 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6f 62 6a 2e Data Ascii: var minsvar secs;function cd(min,sec) { mins = 1 * m(String(min)); // change minutes here secs = 0 + s(":"+String(sec)); // change seconds here (always add an additional second to your total) redo();}function m(obj) { for(var i = 0; i < obj.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49856	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:36 UTC	609	OUT	GET /js/email_check.js?1705557556 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:36 UTC	268	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:36 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "25b-60f321044f500" accept-ranges: bytes content-length: 603 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:36 UTC	603	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 65 6d 61 69 6c 5f 63 68 65 63 6b 28 73 74 72 29 20 7b 0a 0a 09 09 76 61 72 20 61 74 3d 22 40 22 0a 09 09 76 61 72 20 64 6f 74 3d 22 2e 22 0a 09 09 76 61 72 20 6c 61 74 3d 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 0a 09 09 76 61 72 20 6c 73 74 72 3d 73 74 72 2e 6c 65 6e 67 74 68 0a 09 09 76 61 72 20 6c 64 6f 74 3d 73 74 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 64 6f 74 29 0a 0a 09 09 69 66 20 28 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 3d 3d 2d 31 20 7c 7c 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 3d 3d 30 20 7c 7c 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 2b 31 3d 3d 6c 73 74 72 20 7c 7c 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 2c 28 6c 61 74 2b 31 29 29 21 3d 2d 31 29 7b 0a 09 09 20 20 20 72 65 74 75 72 Data Ascii: function email_check(str) {var at="@"var dot="."var lat=str.indexOf(at)var lstr=str.lengthvar ldot=str.lastIndexOf(dot)if (str.indexOf(at)==-1 \|\| str.indexOf(at)==0 \|\| str.indexOf(at)+1==lstr \|\| str.indexOf(at,(lat+1))!=-1){ retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49857	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	624	OUT	GET /marketplace/javascript/jquery.cycle.lite.js HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:37 UTC	270	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:37 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "1ef7-60f3210543740" accept-ranges: bytes content-length: 7927 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:37 UTC	7927	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 43 79 63 6c 65 20 4c 69 74 65 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 63 79 63 6c 65 2f 6c 69 74 65 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 31 32 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 37 20 28 32 30 2d 46 45 42 2d 32 30 31 33 29 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: /! jQuery Cycle Lite Plugin * http://malsup.com/jquery/cycle/lite/ * Copyright (c) 2008-2012 M. Alsup * Version: 1.7 (20-FEB-2013) * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org/licenses/mit-license.php * http://www.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49858	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	599	OUT	GET /js/pswmeter.min.js HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:37 UTC	269	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:37 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "b9f-60f321044f500" accept-ranges: bytes content-length: 2975 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:37 UTC	2975	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 28 61 29 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 3d 63 28 29 3b 0a 20 20 20 20 20 20 20 20 64 28 61 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 3d 30 2c 62 3d 2f 28 3f 3d 2e 2a 5b 61 2d 7a 5d 29 2f 2c 63 3d 2f 28 3f 3d 2e 2a 5b 41 2d 5a 5d 29 2f 2c 64 3d 2f 28 3f 3d 2e 2a 5b 30 2d 39 5d 29 2f 2c 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3d 2e 7b 22 2b 6a 2b 22 2c 7d 29 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 2e 6d 61 74 63 68 28 62 29 26 26 2b 2b 61 2c 69 2e 6d 61 74 63 68 28 63 29 26 26 2b 2b 61 2c 69 2e 6d Data Ascii: function passwordStrengthMeter(a){ function b(){ let a=c(); d(a); } function c(){ let a=0,b=/(?=.[a-z])/,c=/(?=.[A-Z])/,d=/(?=.*[0-9])/,e=new RegExp("(?=.{"+j+",})"); return i.match(b)&&++a,i.match(c)&&++a,i.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49860	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg5.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:37 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:37 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "52148-60f3210543740" accept-ranges: bytes content-length: 336200 content-type: image/jpeg connection: close
2024-07-02 14:43:37 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e4 ce 0a 00 06 00 39 Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE9
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 2f 66 67 4c c7 46 27 66 27 46 1d 3c db e5 a6 56 56 66 5a 9c 9d 5e 4f ab a7 36 f6 9a 8b a5 34 2d 2a 33 b7 3b 52 e7 6b 5a cb 4a d0 49 36 cc 24 13 9e b9 6e a1 29 94 a9 06 51 a2 77 f3 e5 ec 70 f3 d4 cf 1f 5d f9 fb bd 39 e7 dd ce 76 f3 76 73 74 73 9a 65 ae 6e b9 9a 4b 59 46 ef 3f 4d 70 77 df 9d df be 7b d7 a5 e7 e5 d1 cf 21 be 27 57 1c 6f 89 a4 9a e2 6d 89 70 18 ee 72 75 d6 5a d6 7a 46 ae 98 94 61 bb 8e eb 4f 9b fa 1d be 63 d3 df db f2 72 f4 b9 f0 8b 73 b6 2a 72 70 f3 1e 46 33 69 72 69 8b ae 0e 66 b3 1e 4b 08 c0 e6 7e 7d 47 0b 3c ab 80 28 00 44 b7 66 de 8c de e5 6b 2f a4 5d 2d 6e 55 8e c5 9b 1c 99 f0 65 e5 eb 9f 3d 5d 9a 6f 3a 74 56 a2 da 6b 39 ac b9 cc b0 35 5f 52 e9 17 44 6a e7 bd 2b 4d 1e ab b0 a3 69 d0 da 87 16 95 25 94 54 ae c5 69 aa 51 42 95 36 cd 4a 20 Data Ascii: /fgLF'f'F<VVfZ^O64-3;RkZJI6$n)Qwp]9vvstsenKYF?Mpw{!'WompruZzFaOcrsrpF3irifK~}G<(Dfk/]-nUe=]o:tVk95_RDj+Mi%TiQB6J
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: a4 6d 89 ae 32 d3 0d 4e 0e d7 cb f4 5f 1f b7 5f 13 af 5e 57 44 8c 4a 09 68 68 81 12 63 9d c4 d6 ba 9d 57 9e f7 95 1c f7 79 35 32 dd 3b 49 10 35 dd 9c fb bc 7c be b7 0e 5d 18 8e df 37 be fc bf 46 f8 b5 d7 a7 3a f4 71 35 97 97 77 8f 57 3d 24 4b 12 c4 d6 2d c4 b0 98 cb 8c ce 51 32 22 ac bd 4a b4 5b 73 ef cf 1d 2d c6 39 33 73 3a ab bd 3a e4 d0 c6 de 7d 6b 0b d2 5d 13 a0 d3 96 ec d0 d4 d1 2a 2a c7 0d 29 5b 2e aa 1a 23 3a c8 9a 8b 26 e4 49 b3 3b 30 cd e6 97 28 b8 f4 f3 c7 66 36 a9 bb c3 6d ac c6 77 6d ef 96 d2 89 98 59 b4 93 5e 6f 4e 7c 39 eb 29 e8 6b 97 5c e2 e6 77 c4 d2 5e 8c de 9e 78 f5 3c d8 ec e0 e8 e7 9d f9 f4 fc b7 f4 1e ea aa 99 a0 00 b5 2c 08 14 a8 59 9a c9 a9 4d 6e 76 66 99 48 93 35 92 21 08 92 65 4d 03 aa 2a 4a 66 86 9b dc 67 9e 9e 66 3d 38 b4 ab de Data Ascii: m2N__^WDJhhcWy52;I5\|]7F:q5wW=$K-Q2"J[s-93s::}k]*)[.#:&I;0(f6mwmY^oN\|9)k\w^x<,YMnvfH5!eMJfgf=8
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 2e e4 91 b3 a2 2b 13 2a e7 3c df 37 9f 7e 1e 08 cc bd ae cd fa 67 a6 f2 b3 bb 5e 6e 56 bd 9c f3 f0 de e1 68 a5 a4 d3 4d 19 d0 da 4d 26 77 98 ec c6 3a f9 cf 1f a7 4f 33 ae f6 46 45 d4 ae 76 a8 6b 79 75 f2 d9 57 9b af 3b a6 6c f4 cf 37 7e 65 a9 29 26 dc d6 2c 9a 84 40 4a e2 de 0b 19 b5 a9 aa 5d cd a3 40 44 d8 d9 ee 9c d4 df 1b b9 6d 4d 68 6f 1d 13 3d 59 ce 92 28 9d 67 3b 79 db cb 55 ad c6 d3 8a 65 2c 8a a6 d8 58 32 ba cd ac c0 a9 5d 9a 49 a3 3a a6 89 a6 66 89 48 e0 b2 08 4c b4 c6 de 7a e7 5e 69 ac 33 72 ce a3 3b 8c d2 04 14 52 c4 8d 58 58 e9 85 20 14 21 48 e5 48 80 74 c2 9d 97 65 d9 a5 68 ce 96 5d 96 96 3a 44 2e 4d 63 35 9e 6c 4d 13 4a 56 b6 b7 6d da e5 74 d6 d6 d2 9a b1 95 0e 84 14 01 dc ba b4 a4 a9 2e 41 18 a9 4b 48 c9 50 16 96 d2 e3 59 97 19 d7 3e 98 19 Data Ascii: .+*<7~g^nVhMM&w:O3FEvkyuW;l7~e)&,@J]@DmMho=Y(g;yUe,X2]I:fHLz^i3r;RXX !HHteh]:D.Mc5lMJVmt.AKHPY>
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 8e cb 3a 5a ce 69 0a 55 56 55 8a 5c a5 54 a3 18 17 29 43 93 c5 c8 0a 20 b4 b1 da d5 b2 d1 80 48 66 3a d6 e7 a1 cb 5c e3 2c b9 b3 ae 79 d7 0c ef 39 d3 49 95 26 32 e5 09 1d 6d ab d3 23 32 31 9a cb 30 a2 c1 58 91 a8 a5 80 ee aa d7 5a 9b 9d bc e7 a7 ce 7a bc a7 a7 cd d5 96 a6 29 85 61 2e 06 06 51 99 35 d0 6d 16 89 8a 98 d6 e5 6b 33 a8 b6 74 ac c8 ca 67 9b 94 f3 b3 be 6d ed d6 bd 1d 1d ef 57 6b d3 da f5 6b 5d 16 ef ad 6b 65 56 5a bc 36 f9 d1 e5 e1 e6 f0 70 f9 d8 72 dc 82 0a 26 92 74 62 74 cd 76 cb d1 9b 66 71 95 ce 52 61 b9 8d 67 73 36 cd d5 48 66 02 8c b5 10 90 d5 d7 1a 72 b1 b5 5d 2a ef a7 d6 3d 42 c6 28 15 6b 2a 55 2a cc e9 db a7 ae a0 c7 00 d7 79 d2 c6 ad 2b 4b b2 e9 80 47 36 6f 06 36 ea 43 24 3b 1c a8 05 00 87 21 0a d7 09 14 b2 8a 14 97 cf 3b 79 73 7c 6b Data Ascii: :ZiUVU\T)C Hf:\,y9I&2m#210XZz)a.Q5mk3tgmWkk]keVZ6pr&tbtvfqRags6Hfr]=B(kU*y+KG6o6C$;!;ys\|k
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 9a 42 6a 6a 65 54 b5 a9 59 ba 14 6a 95 a8 a8 84 9b 98 b1 eb 2e b3 b8 76 12 de 29 11 31 32 0b 29 76 d6 8f 6a d6 9a 56 55 2d ca f1 b4 48 69 49 a5 c5 0d 94 cd 32 25 c5 9b c5 c6 b9 9a c9 72 da b9 2a 5a 89 44 29 5a eb 1d 57 5a 55 e7 5b 94 72 dd 79 1d af 93 a9 c9 ab c3 9c f1 6e 96 ce ac ef 4e d5 40 80 06 29 1c cd e7 35 22 b2 a4 76 52 aa 21 13 0a 68 49 0b a2 41 44 51 70 d6 96 e2 95 ad 53 05 49 24 2e 6a a4 74 6a 21 48 e5 a8 54 a4 48 f1 9e 99 cf a7 5a 56 65 19 c4 6f a2 d5 8b 24 04 8a d5 56 14 c4 4c 38 4a a2 95 c3 a4 08 b3 25 92 18 9a 2c 4a 23 b2 ae 6c d6 c7 34 e8 89 40 1a 6b 2a 9b c7 79 ca e9 dd 14 cd 31 9d 78 f2 e8 e7 cf ab a4 93 95 bc fa 5d 77 9e 94 49 8e 77 cd cf a6 53 50 bb e7 9f af e6 e7 a7 4e fe 2f 6d 96 4a 13 2d 1c cc ea c5 d4 b5 25 cb 52 35 66 9d ab f5 47 Data Ascii: BjjeTYj.v)12)vjVU-HiI2%rZD)ZWZU[rynN@)5"vR!hIADQpSI$.jtj!HTHZVeo$VL8J%,J#l4@ky1x]wIwSPN/mJ-%R5fG
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 6f 04 21 08 42 10 84 3e 1b 1c 30 8c 7a 32 d2 93 7b c9 09 68 60 9c 71 49 42 f7 e0 c5 06 33 66 36 5b 9a 9f c8 78 2c b7 4e 29 e3 ca c7 e2 cb 93 c7 7c 2e 7f 3a 09 29 36 64 c1 1e 95 8b ed ed bf 6d ee 18 3a 9d 36 74 21 08 f4 dc 7a 56 de db f6 b5 b7 c8 ef 64 b4 25 e7 2c bc 20 5d e8 ac 21 0c 90 95 94 29 39 a7 3f 5a 1c 75 e2 af 1c f7 f6 de f7 8d ef ae f6 aa bb da db 04 21 86 59 61 3c 49 c4 22 32 f2 f2 d8 a9 52 95 a1 50 0f 8b 87 a1 08 7c d8 c6 3d 17 6a ab fb 48 42 1d 58 f4 21 f3 32 42 18 30 74 7a 38 d9 d1 8c 70 c6 32 9d ab 09 78 2c ac e3 96 b5 27 b1 38 30 62 cc 23 2b 8a 3e 4f 8f fc 87 86 f4 e2 9e 3c 23 d1 ec 96 29 6e 5b 7f 1b e0 79 df c4 12 90 c3 d3 8e 3d 57 6b bd cd c2 38 3a 6c c3 83 a1 0e cf 5d 06 cb 8a cd ae ec 72 4d de 72 b6 cb d5 c0 18 21 08 4a 94 95 9c f3 9b Data Ascii: o!B>0z2{h`qIB3f6[x,N)\|.:)6dm:6t!zVd%, ]!)9?Zu!Ya<I"2RP\|=jHBX!2B0tz8p2x,'80b#+>O<#)n[y=Wk8:l]rMr!J
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 3a 2a 16 83 84 85 fc a7 8b b5 b0 78 06 3c 8e d7 c6 da fb 1f 0e 1c f5 3d 95 9f f0 ef 0e 28 a3 7f cf 57 73 73 10 b8 94 10 9e ba 7b 0e b7 01 49 1d 77 95 ee b1 e8 b6 14 88 ea b8 e9 f9 85 f8 b6 bf 35 1f 45 c4 d9 e5 74 53 cb ba 37 37 95 f5 f8 55 ca d9 37 36 f7 c7 95 ec a1 46 bc a7 2b 64 e5 94 64 84 7a 2c 34 ac 76 ad d1 f7 58 aa 18 36 54 9c 02 a1 b6 e9 c4 77 dd 12 45 34 95 c1 47 89 1b d0 5a af 92 c4 3c 86 bf e2 1e 2b d8 d1 ee 8f 7e a5 63 e1 06 1b 1a 00 bb 75 8c 16 51 4b 2c 16 c3 d5 07 15 6c 02 c7 62 5f a1 41 c7 fa 93 53 5c cb ae 2d fe 88 1a 65 3d a5 40 f6 85 1f 45 c6 33 b5 2a 54 eb b7 97 4f c3 93 a4 fc b4 5c de 57 1c 8f 12 94 e6 ee 1b a5 3c a7 74 5f fb 04 05 91 7a b7 90 aa 34 53 2e 6a 2b de 6f 92 c5 45 23 a7 a2 6a 09 3f b2 a2 d6 ca ba 6d 44 57 0c aa b0 b6 b4 b0 Data Ascii: :x<=(Wss{Iw5EtS77U76F+ddz,4vX6TwE4GZ<+~cuQK,lb_AS\-e=@E3TO\W<t_z4S.j+oE#j?mDW
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 57 48 df e2 d9 c0 a6 2d 9b bf 05 38 f6 27 53 31 18 29 5a 76 27 5f de 95 1e 4f e4 18 6f 7c 74 ff 00 1d 3c e5 22 a1 0c 9b 17 eb c9 56 2c be 39 35 59 c1 49 55 af c3 76 f9 28 55 85 0b 92 e6 aa 76 79 b5 91 b4 d1 e2 90 8a 9a a9 e8 e2 21 23 49 35 b8 3d c6 c6 65 5d 21 2a 32 cb 84 d5 c3 2e dd 74 b7 e6 04 25 cf 39 ed d2 19 6b c4 43 15 44 5b 21 bf ec 09 43 12 a7 5d 88 88 21 f8 28 52 28 51 c3 c8 93 95 0a bf 83 56 ea d9 a7 50 29 4e 94 b7 f4 25 7d 51 62 e5 3a 25 3f 19 2d ad 08 b9 74 6b c1 37 7b 2d df 18 14 9b f3 66 15 f1 06 73 cd 22 77 6a 09 64 bf c0 b3 c2 1e 6b 7a 38 b8 e8 c9 bf d1 e7 36 38 9b aa 1b ae 52 d1 2a 9e 1f 4a 87 d1 c2 c6 5d 8d f8 f3 d3 0b c3 1f cc 31 5b 4b 94 52 a2 75 a1 56 30 ec 53 ce 6c 53 77 86 7a 5d 2a d6 f9 e8 e9 f3 45 a7 2d 5e 88 35 91 62 ac 9f 92 e7 Data Ascii: WH-8'S1)Zv'_Oo\|t<"V,95YIUv(Uvy!#I5=e]!2.t%9kCD[!C]!(R(QVP)N%}Qb:%?-tk7{-fs"wjdkz868RJ]1[KRuV0SlSwz]*E-^5b
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 3f 36 2a 5f 30 52 7c f4 7d b2 9e 0a 78 43 cc 2f 06 5c 71 f4 2c c3 ce bb 92 e3 c8 e1 66 05 1c da c2 63 84 ed 7c 09 3b ec 85 04 e4 f3 aa 5d 2d 57 3f 42 4c 49 19 4d a9 94 47 c2 d2 e9 15 4e b7 62 17 26 bb c8 ed 8a 95 e1 45 96 9a 69 c5 44 f2 62 9f b6 71 34 8a 6b 71 84 85 54 d6 32 2e 1d 39 a1 47 7c d9 57 55 22 4b 69 c7 04 3e 19 9e 11 0d 2f 34 cd 72 8a a1 74 49 6f 0f 65 37 d9 1e 58 fa 54 ca ff 00 65 a7 d9 e8 e3 cf b3 cf 24 2a 1c 79 51 28 71 36 b2 e8 c3 e4 dd f3 50 6e df 62 92 a9 4d 31 3e 54 b4 2a 5d b2 25 72 9b ff 00 27 35 5c f4 a6 fd e9 bb b6 54 7f 3b 97 38 85 a2 bb fc 8b 30 f0 98 b1 82 a7 73 a1 55 cc be 97 1c 5d 8a d7 1d 8e 36 52 5d f4 41 18 e5 21 09 4d 3b 45 56 d9 4e d2 c5 22 96 65 89 4d 11 e9 60 ac 2a 6c 48 8d 27 2a 46 b0 20 d7 91 a8 78 ce c8 e5 11 85 64 24 Data Ascii: ?6_0R\|}xC/\q,fc\|;]-W?BLIMGNb&EiDbq4kqT2.9G\|WU"Ki>/4rtIoe7XTe$yQ(q6PnbM1>T]%r'5\T;80sU]6R]A!M;EVN"eM`lH'*F xd$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49861	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg6.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:37 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:37 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "404c5-60f3210543740" accept-ranges: bytes content-length: 263365 content-type: image/jpeg connection: close
2024-07-02 14:43:37 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 08 09 08 06 0a 09 08 09 0c 0b 0a 0c 0f 1a 11 0f 0e 0e 0f 1f 16 18 13 1a 25 21 27 26 24 21 24 23 29 2e 3b 32 29 2c 38 2c 23 24 33 46 34 38 3d 3f 42 43 42 28 31 48 4d 48 40 4d 3b 41 42 3f ff db 00 43 01 0b 0c 0c 0f 0d 0f 1e 11 11 1e 3f 2a 24 2a 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 4d bd 85 59 14 Data Ascii: JFIFC%!'&$!$#).;2),8,#$3F48=?BCB(1HMH@M;AB?C?$??????????????????????????????????????????????????MY
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 12 59 00 b1 60 58 ac eb 9a e1 a4 b9 ab 12 db 51 61 50 20 2d 5b 35 a9 d2 e3 49 ad c9 a6 56 14 00 09 09 66 51 64 33 64 a9 29 05 04 67 3a 80 d2 5d 4b 65 ab 60 a2 2d 5b 9d 6a 5b 2e 9a e9 9b 48 d5 81 a5 4b a9 69 42 a5 8d 20 09 33 9d 73 e7 aa 9a d4 d6 a6 f5 95 20 4c db 64 8e 18 eb 99 7a 6b 36 ca 9a b2 2e 73 62 f5 d7 3a 61 79 e7 72 5e 78 dc 8d eb 22 c5 41 53 d1 db 96 b7 9a 69 00 14 00 02 21 6a 40 15 62 02 80 85 00 00 2a 40 0a 42 90 00 a0 00 00 21 44 00 0a 42 8b 23 9e 77 e0 f3 7a 7c bc 7b f9 79 76 e3 cf a7 2e 7d 31 28 01 0a 4a 09 4d 5c eb 73 b7 4e 7f 43 d9 e5 eb d3 9c 97 19 df 6d f2 eb bc 6e e6 a7 4d 66 a7 39 bf c6 fe 43 f4 f4 0a b0 a1 40 05 aa 28 12 d8 02 cb 50 a2 c9 a8 45 2c 59 2c 58 a5 8b 54 00 8a 92 82 c9 4a 2c a8 d2 97 45 2a a2 82 9a 04 33 6e 57 1a d6 75 ac Data Ascii: Y`XQaP -[5IVfQd3d)g:]Ke`-[j[.HKiB 3s Ldzk6.sb:ayr^x"ASi!j@b@B!DB#wz\|{yv.}1(JM\sNCmnMf9C@(PE,Y,XTJ,E3nWu
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: db cc cf ec 39 7a 38 f0 ef f3 fa 63 c7 d7 97 1d 67 95 c3 53 e9 63 ab 9e fe 77 4e 58 de 7d 3c fa fb 78 f7 e3 d7 1c d8 f2 75 e3 9b 32 40 10 2d a7 da e1 d7 e3 f4 e7 8d 67 ac b8 d4 d1 cd 3d 9c fa 6b 53 b7 6e 5f 3b 9e b9 94 d2 eb 2e a9 ae dc 7f 6f 1c 3c da fc 3f 7d ea de c7 d8 e7 bf 95 ac f9 2e 49 48 7d 23 f5 be 5f 99 e1 eb e8 f2 fa 7a fc fe f9 f2 ed e9 f4 71 f4 7a b8 ea cd eb 3f 13 e3 7d 2c 67 5f 63 ea 78 7b 74 e7 d7 59 de a6 ed d4 ba 37 2f 45 b3 5b 8e 93 5a 5d e7 5b 3a 65 d2 6b 71 d2 6b ac bd 31 7a 66 f4 5d c6 e3 71 b9 aa 6a 4d 2e 93 50 aa 24 b6 43 52 de 7d 8b 9e de 6a c9 2a 4a cd cc ac a6 d6 e4 2a f9 35 5a 9b 93 b4 9b 8e d1 d6 29 52 a0 a5 35 14 a7 3b 3a e6 ea 2d 42 cb f9 2f a3 f3 fe f7 93 d5 c7 4f c0 fd 5f 9f fb ef 95 f4 21 fc f3 eb 7c ff 00 a7 c7 b7 d9 f3 Data Ascii: 9z8cgScwNX}<xu2@-g=kSn_;.o<?}.IH}#_zqz?},g_cx{tY7/E[Z][:ekqk1zf]qjM.P$CR}jJ5Z)R5;:-B/O_!\|
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 94 01 52 a8 29 09 72 25 68 15 6c b4 85 00 a0 00 2c 58 49 44 89 6d a2 25 20 00 80 05 00 b2 d2 a8 14 80 a4 48 54 80 88 20 21 6c 58 4b 56 97 39 28 2d 5b 28 ab a8 4b 5a b9 ba 96 ad 2a a0 50 ba 94 d2 2c 50 55 48 55 59 68 00 35 a9 ab 35 ac d2 1d 19 d3 3b 4e fc f5 da 6b d5 cf 5b 9a ef 8d f6 e7 d0 77 e7 be f9 d5 5e 75 c6 bc 7b cf 1d 66 6b 38 06 ec eb 2e e3 24 6b 52 ef 3a ed 8d 0c 9b 8e d2 d4 96 e2 c9 73 9d 22 72 e9 9e 7a ce 6e 78 ea 73 d4 cd 62 58 65 73 2c 33 64 41 05 99 b1 72 d6 46 ac b2 75 ce af 0e f7 87 a7 5c ba de 1d ef 93 b5 98 df 6e 3a e9 8e bb e5 e8 eb c7 d5 d3 8f d3 ef e3 f5 6b 3c b5 8f 91 de 78 77 7c bc bd bc 7c 7e fc fc ff 00 6d f2 f6 d7 9f a6 f9 6f 78 d7 4c 5d e6 e8 de 6e a5 d1 a8 dc b7 0d d6 a3 79 6a 2a ea 2c bb 35 1a 35 16 28 2a ee 2c 68 ab 62 94 a5 Data Ascii: R)r%hl,XIDm% HT !lXKV9(-[(KZP,PUHUYh55;Nk[w^u{fk8.$kR:s"rznxsbXes,3dArFu\n:k<xw\|\|~moxL]nyj,55(*,hb
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 9a 4d d7 43 55 a3 a5 69 2a d4 28 a6 8d a6 ec 28 91 57 31 8c dc 67 58 97 9e 2e 73 ad 46 ab 39 a3 24 c5 b2 e3 37 39 b1 66 49 6a ea 05 4d 59 6a c6 b5 9d 50 b5 32 ba 96 a6 6f 1e 7a e3 9d e6 00 b5 93 19 23 5a 28 64 16 c8 49 72 62 35 58 39 c6 65 ca aa 22 cc ae 48 43 04 33 0b 31 6c 45 b1 30 42 92 a5 4a c4 4a c9 28 72 8c 4a a8 99 b6 04 56 00 ac 90 55 48 67 40 41 ad 4c 16 a0 07 1c b3 2c 4c 92 94 ac 95 25 41 64 20 2a 4a d5 58 2a 34 85 08 b0 8a 51 02 d2 0a 21 b9 29 09 6c 4a 01 41 92 80 51 0a 56 49 40 51 16 91 28 0a 64 1b c8 42 88 01 40 51 10 a4 04 a0 21 4a 22 81 69 0a 09 48 b5 20 28 29 0a 00 00 85 10 ab 5c ca 91 6c 50 6e 25 00 10 ac 9a 10 a1 08 6c b0 a4 28 00 00 84 15 08 94 29 00 56 48 08 92 80 e3 ed f0 f4 3a 4b e8 2a ee 19 b9 5d cd 58 e9 2d 8e d2 f7 8e 95 d4 ea 9a Data Ascii: MCUi((W1gX.sF9$79fIjMYjP2oz#Z(dIrb5X9e"HC31lE0BJJ(rJVUHg@AL,L%Ad JX4Q!)lJAQVI@Q(dB@Q!J"iH ()\lPn%l()VH:K]X-
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 6a e4 70 44 4e d0 ca 53 dc 47 7a 0c 7a fd 9f 39 2f 71 7b e9 53 a8 3e 85 66 de 3d 1e 39 d3 e5 71 21 cc 38 c6 39 f9 a2 53 75 b0 4b a3 d9 99 a0 55 8d b3 c1 0d 83 0b 79 13 48 22 5d 81 d9 8c 4c c8 62 21 6c 06 5b eb d0 4b 10 6d 04 18 31 0f 90 be c2 6f 59 e0 13 f6 43 7d 63 37 93 63 0d e5 1e 01 05 5a ae 15 75 84 96 15 29 ba 46 fb f4 18 cd c7 ea b7 fa 22 5a bb d5 97 f6 6a ed b9 07 3a 68 d4 ea 28 46 5c c3 df 38 ef 1e c3 e2 36 09 59 85 b5 a5 41 ce 9a 2c d7 22 8a 75 26 e0 f9 32 9b 5b 29 be 94 50 39 f3 a5 9e 7e 41 a9 46 9e db 8a fe c1 56 d0 53 df 63 92 76 7c 37 93 4b ea 2f 2a f1 de 0a 5f 53 08 42 69 95 d0 8d ee 87 81 19 94 46 c8 1e e1 a2 13 44 47 b9 1b 8f 04 90 4f 62 45 04 d5 ae 42 46 e1 79 3a 60 2b e0 48 65 29 91 26 dc 2f 3b ae 8c c6 fe 1d 87 dd c4 74 7a 62 96 58 eb Data Ascii: jpDNSGzz9/q{S>f=9q!89SuKUyH"]Lb!l[Km1oYC}c7cZu)F"Zj:h(F\86YA,"u&2[)P9~AFVScv\|7K/*_SBiFDGObEBFy:`+He)&/;tzbX
2024-07-02 14:43:37 UTC	16320	IN	Data Raw: 70 12 ac 24 b0 c4 1e bb 06 7a 59 77 42 49 ef 07 74 44 22 13 ec 2b 61 64 db 8f ba c1 6f 44 62 38 70 13 4f 76 be 53 f8 24 98 b6 33 53 f0 21 6b 67 72 57 b0 5e fe 4c 6b 74 ad 50 dc 13 d2 a2 44 a5 4b 9e 9c 7b 04 51 0a 52 94 a5 29 44 c4 e5 13 28 99 44 f5 22 e8 b7 81 6b 74 45 62 5a 63 4a a4 21 3a 6f 44 e8 51 81 ac 7c 98 b9 3d 02 fc 2e b3 0d 95 31 5b 61 30 dc 68 96 63 63 1b 05 f7 1b 36 76 99 91 13 6e 43 0d 86 fe c2 8f 63 33 ec 62 92 53 c2 37 31 ba 9a e4 21 93 d0 ee 80 bd 82 20 9f 0c b6 8f 31 44 f4 75 1e 38 8a 13 08 2b 22 cb d8 52 52 68 c5 ca 79 05 3a fc 6f 61 32 48 6f 91 60 a2 b8 b0 93 fe 4c af f3 ee 84 9a ae 8b 63 6f e0 48 48 c4 b8 07 03 ee a6 f0 5c 9c af 76 e1 35 78 56 6d ee 2f 1e b7 30 b7 6f be 03 01 5a f1 82 96 ca 9b 3a a4 97 bb 12 b2 ce ee 8d e8 84 35 e2 1c Data Ascii: p$zYwBItD"+adoDb8pOvS$3S!kgrW^LktPDK{QR)D(D"ktEbZcJ!:oDQ\|=.1[a0hcc6vnCc3bS71! 1Du8+"RRhy:oa2Ho`LcoHH\v5xVm/0oZ:5
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: d8 cc 15 14 ac ba 25 a1 58 8a 92 0c cd 30 1d 29 81 7f 1a 52 94 5f 4f 6e bf b3 27 de 94 a2 7a 53 06 34 a6 0f a3 f6 60 c6 97 4f a3 e8 87 ef 48 42 10 82 42 44 77 78 bb 7b 3b d4 f2 b7 6b e3 4a 25 6d aa a3 74 52 f5 2d 2e b7 ae 97 d0 7b c4 36 6a f7 30 84 21 08 42 10 84 21 09 f8 05 d4 e5 31 f9 69 d5 09 d6 84 21 09 d1 34 84 21 05 42 e9 b6 d0 9a 88 a9 10 dc 2a 64 5e 0f 89 c1 c9 04 ec 29 a0 7a 4f b4 f3 68 df 5a f4 2f 49 14 60 84 7c 14 6c a3 61 29 7a 97 a1 17 d9 4d 7e 5a 7d eb 08 b9 21 9f 4a 10 9a cd 21 35 84 21 09 ee d4 37 50 fb c3 fb 7a 74 be 95 e9 a7 00 bc 84 92 d9 2f 7b 09 a4 21 08 42 10 9f 81 c7 e6 e3 d2 74 4d 21 08 25 a4 d2 52 10 9d 01 69 f8 09 89 37 e9 59 89 09 8d 0b c3 47 64 27 26 5b 68 4f b8 48 42 09 a4 21 26 28 7d 08 b4 48 44 62 10 9a 90 c0 f4 e4 63 24 17 Data Ascii: %X0)R_On'zS4`OHBBDwx{;kJ%mtR-.{6j0!B!1i!4!B*d^)zOhZ/I`\|la)zM~Z}!J!5!7Pzt/{!BtM!%Ri7YGd'&[hOHB!&(}HDbc$
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: ab 76 db b5 ad 6e 7f c8 fc 8e 6e 6e 5e 5e 4b 3c d4 ca f4 6d b7 dd 24 92 f1 81 4a 52 95 ad 6a 92 59 19 7c 70 d8 f8 1b dd f8 ff 00 d0 61 09 e6 86 4a 4e 52 9e 47 0e 01 83 35 0f 78 e4 fa 8c 72 3d 62 7a 83 d0 61 96 4e 30 8c 65 b9 dc 9f 54 6c 7a 8c 3f 16 f1 f9 de 36 db 6d b6 db f1 2f 41 bc 7d 92 58 96 ea b5 55 ad 6b 5a d6 94 a5 38 f8 f8 f8 b8 b8 b8 f4 e0 fc 6b b8 dd 25 54 bc 89 55 6c 97 8c 6e 97 ad ab b1 c8 6f 21 2c 8f 53 dc 64 70 f9 47 9a 58 30 7b a3 b8 04 24 92 49 62 5e 63 f2 cb 17 85 b6 f7 ad 6b 5a d6 ab 76 dd ad 6b 5e fc 9c 9c 97 bd ad 6b 5e f6 b5 af 7b df 93 93 93 93 92 f7 b3 76 bf 27 2f 2f 37 3f e4 7e 44 75 e1 d9 24 bd 91 e5 1d d2 49 6e aa 97 82 67 68 ec 30 ca 58 3c a3 0f cc 3c 1d d9 3b 3f 9b 78 db 6d f5 6d e3 b5 ad 6b 5b c4 ab b1 d9 f7 49 2c 49 2f 1a 49 Data Ascii: vnnn^^K<m$JRjY\|paJNRG5xr=bzaN0eTlz?6m/A}XUkZ8k%TUlno!,SdpGX0{$Ib^ckZvk^k^{v'//7?~Du$Ingh0X<<;?xmmk[I,I/I
2024-07-02 14:43:38 UTC	16320	IN	Data Raw: 4c d9 31 0e aa 9e dc 2f 10 c2 ea 0e 06 71 17 c1 16 a3 8b 11 99 20 43 70 58 66 18 16 56 f0 4b d4 74 da 35 36 8b 0b 8f ba 5f a9 78 2e a5 e0 fa 83 e4 84 80 e2 52 64 95 36 20 52 aa 03 94 8b 5b 31 4e 2e 3e e3 f1 02 b0 45 30 dd e6 5a 6b cf 57 50 f9 2a 78 85 0a 34 39 1b c3 39 06 e9 b9 2e 85 e9 0d e5 32 d5 8b b0 f0 cd ca 56 4c 12 c4 78 d6 59 3b 8c 80 a5 cc 52 ec 06 56 13 99 b7 1d 41 08 ba e2 0f 56 17 65 35 98 54 36 04 b3 29 98 22 5c 37 f7 0c a0 10 24 ac 8e 21 81 00 84 92 41 04 90 3a 74 49 24 05 11 7d 43 a1 3c 26 f1 24 a4 ca a6 e6 2c 98 ba 88 2c 0d a1 04 12 41 03 31 9a de b8 80 47 14 fa 84 5c 15 fb e9 52 82 16 a1 7d 1d e5 ad 71 8f 0c 11 46 80 d1 52 b5 a8 68 86 d3 66 71 6a 88 2c 50 50 29 55 b0 fa 49 9d 3b cc 60 75 cb 70 6f 02 dd 90 d1 2e f4 05 86 b1 d8 39 a9 9b 09 Data Ascii: L1/q CpXfVKt56_x.Rd6 R[1N.>E0ZkWP*x499.2VLxY;RVAVe5T6)"\7$!A:tI$}C<&$,,A1G\R}qFRhfqj,PP)UI;`upo.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49862	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	686	OUT	GET /marketplace/img/saletrans.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/css/offer_new.css?1718621077 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:37 UTC	232	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:37 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "399-60f3210543740" accept-ranges: bytes content-length: 921 content-type: image/png connection: close
2024-07-02 14:43:37 UTC	921	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49859	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:37 UTC	687	OUT	GET /marketplace/img/saletrans1.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/css/offer_new.css?1718621077 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:38 UTC	232	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "39a-60f3210543740" accept-ranges: bytes content-length: 922 content-type: image/png connection: close
2024-07-02 14:43:38 UTC	922	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49863	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	669	OUT	GET /marketplace/img/above-mp.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:38 UTC	234	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "114b-60f3210543740" accept-ranges: bytes content-length: 4427 content-type: image/png connection: close
2024-07-02 14:43:38 UTC	4427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 17 00 00 00 1a 08 06 00 00 00 9d 3a 18 be 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR:tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49866	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	630	OUT	GET /marketplace/javascript/tipsy.jquery.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:38 UTC	270	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "1cee-60f3210543740" accept-ranges: bytes content-length: 7406 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:38 UTC	7406	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0a 2f 2f 20 74 69 70 73 79 2c 20 66 61 63 65 62 6f 6f 6b 20 73 74 79 6c 65 20 74 6f 6f 6c 74 69 70 73 20 66 6f 72 20 6a 71 75 65 72 79 0a 2f 2f 20 76 65 72 73 69 6f 6e 20 31 2e 30 2e 30 61 0a 2f 2f 20 28 63 29 20 32 30 30 38 2d 32 30 31 30 20 6a 61 73 6f 6e 20 66 72 61 6d 65 20 5b 6a 61 73 6f 6e 40 6f 6e 65 68 61 63 6b 6f 72 61 6e 6f 74 68 65 72 2e 63 6f 6d 5d 0a 2f 2f 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 69 78 54 69 74 6c 65 28 24 65 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 65 6c 65 2e 61 74 74 72 28 27 74 69 74 Data Ascii: // JavaScript Document// tipsy, facebook style tooltips for jquery// version 1.0.0a// (c) 2008-2010 jason frame [jason@onehackoranother.com]// released under the MIT license(function($) { function fixTitle($ele) { if ($ele.attr('tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49867	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	669	OUT	GET /marketplace/img/saletick.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:38 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "c99-60f3210543740" accept-ranges: bytes content-length: 3225 content-type: image/png connection: close
2024-07-02 14:43:38 UTC	3225	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 24 08 06 00 00 00 cb b0 69 37 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR2$i7pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49869	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg1.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:39 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "36b35-60f3210543740" accept-ranges: bytes content-length: 224053 content-type: image/jpeg connection: close
2024-07-02 14:43:39 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 07 08 0a 08 07 0b 0a 09 0a 0c 0c 0b 0d 10 1b 12 10 0f 0f 10 21 18 19 14 1b 27 23 29 29 27 23 26 25 2c 31 3f 35 2c 2e 3b 2f 25 26 36 4a 37 3b 41 43 46 47 46 2a 34 4d 52 4c 44 52 3f 45 46 43 ff db 00 43 01 0c 0c 0c 10 0e 10 20 12 12 20 43 2d 26 2d 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 ff c2 00 11 08 06 a2 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 b0 3f 67 f9 a6 d3 Data Ascii: JFIFC!'#))'#&%,1?5,.;/%&6J7;ACFGF*4MRLDR?EFCC C-&-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"?g
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: c6 22 6c 62 8d 4c 83 7b e7 da 6b 67 5d 1c bb e3 b6 b5 8e ab 79 ae 7d 18 2c e9 cc 67 bc e8 b3 57 35 13 3a c9 52 5c f4 56 3a e3 a5 0d 4a 43 55 73 50 a4 a6 ca 55 16 51 2c 53 51 65 34 ca 44 cb 38 e9 96 f9 c6 5a 65 d3 94 e5 59 74 e3 19 de 7b e2 4b 9d e4 04 3b 8a 97 4a cd e7 7a 29 72 92 d5 92 13 72 e4 9b 04 d5 80 00 aa 97 aa 6a 78 fa 6f 5c 26 5e cc 31 11 b8 35 8a 99 8b 9e a8 cb a2 6b 23 57 2e 27 4b 5c b6 2f 1b 9d d5 e3 a2 bc 72 ae c9 e7 49 d5 b7 2f 56 3a 2b 55 9d ce 7b 72 eb 1a 57 2d dc ee f7 58 eb 94 3c f5 89 88 8e 9c ac 89 b3 af 5f 3f 69 be b8 8b ce b9 3a 78 72 eb c3 d3 5c 7a 67 57 d3 cb dd 8e 9b 6a df 1f 45 3c f9 e3 a8 e1 ea b2 a6 9a c1 78 a6 8f 36 58 25 d6 0b 8e 5c bd 07 ac f9 27 77 3f 5e 19 12 b5 8b ac 85 da b0 72 f4 3e 72 5e 8b e5 72 f7 57 03 ce bb 6b 86 Data Ascii: "lbL{kg]y},gW5:R\V:JCUsPUQ,SQe4D8ZeYt{K;Jz)rrjxo\&^15k#W.'K\/rI/V:+U{rW-X<_?i:xr\zgWjE<x6X%\'w?^r>r^rWk
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: d4 64 ba 2d 79 17 56 46 73 aa 8c ec a9 64 b0 89 de ce 77 a4 89 8d 18 32 0b 54 98 29 25 49 33 a2 a4 e9 92 e8 52 c0 6e 19 28 82 e5 54 02 82 89 06 a8 06 82 9c 33 42 19 52 02 8a 9b 26 6c 88 1a 1b 4c 6d 31 c3 42 a4 ca 4a a1 2b aa 83 6b 5e 6b e8 85 90 e7 4a 94 24 81 90 31 10 de 90 b5 ab 79 eb 78 48 1d c4 d3 6a 5a b5 ca e8 33 b6 5b 7c fa 29 15 4e 86 53 ab ac 8d 72 1c 0e 48 7a 86 46 f2 65 45 d8 97 46 ad 73 3d 75 ac 34 91 74 61 35 39 e7 9b 17 9a 96 7a 0c b4 59 9b 66 5b 69 4b 95 0a 6b 5b e6 bc dd a2 f5 b7 9d e9 9c 23 56 bc eb ae 53 91 f4 f3 ea 17 80 cd 4d 04 b7 75 06 c2 c5 90 11 a6 a6 19 fa 39 cb e6 ef b6 37 31 a6 74 84 74 f5 5b e5 9e cf 3c 70 be 9c ac 82 f6 5c 6b 7a 6b 9c eb 51 c9 d7 a6 ed 72 67 da 9a e6 bd a1 39 34 e8 c4 d7 38 b5 c6 7a 6e 30 34 25 ad 31 d5 74 cb Data Ascii: d-yVFsdw2T)%I3Rn(T3BR&lLm1BJ+k^kJ$1yxHjZ3[\|)NSrHzFeEFs=u4ta59zYf[iKk[#VSMu971tt[<p\kzkQrg948zn04%1t
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 37 6b da e2 42 08 99 52 53 86 32 9e 8f b8 d8 50 58 47 d6 34 3d a6 7d 66 42 aa 90 eb 4d a5 4f d1 88 5e 64 3b d0 b4 e2 2c e6 71 52 b5 d4 cc ce e6 c9 a5 ae 55 01 4d af 60 6d 64 51 44 7b 47 a8 fa eb 5a 44 7a ce a6 66 66 66 66 66 66 65 4e a6 7e b9 f4 06 6d 60 e0 e0 fb 5e 7d a2 20 03 a8 50 a6 d6 25 4c fd 44 fa 01 5a d4 0d 4c ce a6 67 de 03 43 ba da d3 33 33 33 32 0d a6 41 bb 9e d7 59 5d c4 26 34 32 36 1d 7b 87 14 e7 bd ca 66 65 04 0c cd ac 1e 1f 60 e0 fb 82 d7 39 e1 d6 92 4b 83 c6 47 bb de 77 36 9f 70 0b 7d 06 a7 ed 0f b7 e8 48 36 b0 20 83 25 e3 20 76 a2 b5 82 0b 63 e9 08 26 3e c4 97 5e f6 b5 a6 14 fa 47 ad 69 4a fa 8f 40 03 6a 19 42 ca 16 96 fd d3 33 fb 53 33 21 c1 c1 c1 46 8f a0 11 e9 0a 54 45 76 1a a6 66 64 11 b8 a9 68 6d 62 3d 0e e2 a4 1f 46 fb cd ad 33 33 Data Ascii: 7kBRS2PXG4=}fBMO^d;,qRUM`mdQD{GZDzffffffeN~m`^} P%LDZLgC3332AY]&426{fe`9KGw6p}H6 % vc&>^GiJ@jB3S3!FTEvfdhmb=F33
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 7d 46 e0 22 03 79 86 15 d9 ce fd 28 d4 7d 91 f5 c4 6a 23 f4 eb 40 02 b5 ba 87 86 86 cd a2 b6 86 a7 3e ca 81 16 d0 35 45 83 a8 31 92 86 31 8c 22 f3 94 20 da 0d 3d cd 1c b1 a8 2e 0a 65 40 7d 83 95 9e 58 a6 d2 01 d4 6a 50 4e 7d c2 aa 8a 87 f6 ea c2 5f 03 44 b4 d9 af 06 1e 41 91 a9 51 11 50 e4 50 32 83 6c 5e 1c 50 53 7e 81 c5 54 35 49 69 60 65 29 52 9a da a0 51 40 ca 28 09 89 69 04 8a 6a 5c 82 0e 08 6a 49 b0 45 48 21 56 20 a8 44 16 3d 35 c0 2e 9d 5b 96 e9 ca ed 79 70 7a 0a d1 50 82 b4 aa d4 a8 a8 25 04 14 2b 58 7a 07 20 3d 42 2a 02 ac 29 06 d3 21 16 c0 03 1b 42 76 53 98 bb f6 63 ed 85 1f 7c 28 fb 5a 0b ac b9 a0 fe a0 86 e9 f9 03 a8 5a 18 5a a7 4c 45 e8 b9 16 b4 f4 1a 3a a9 6d 03 13 90 69 7a 2e 0a cf 70 0a f5 2a d1 ab 06 68 a8 f4 29 c8 10 ea dd 85 54 32 c1 e1 Data Ascii: }F"y(}j#@>5E11" =.e@}XjPN}_DAQPP2l^PS~T5Ii`e)RQ@(ij\jIEH!V D=5.[ypzP%+Xz =B)!BvSc\|(ZZZLE:miz.ph)T2
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: a6 7f 62 3a 32 3a 17 7f b0 dd ee be 84 73 62 f9 5f e0 5d c8 f8 4c 74 b2 3a 32 34 32 b2 3e 52 b9 78 4c 76 b4 4b 42 8a f1 6d ea 45 e8 be e2 87 bb 24 27 8b 3e a4 3f b0 b9 6f fe 82 21 e7 fc 11 d4 58 54 71 39 be 64 49 4a fb c9 4b 1e 6a 10 8a be b5 d8 f2 c7 f2 4f 38 a2 fc 3d 50 bc 91 38 6b 14 8e 0c be 4f 44 70 fe 58 49 0b ca 8a ff 00 96 88 ff 00 04 e1 2f 96 49 9c 3d ce 1b d4 54 f6 46 de 67 13 e5 6e 5b 12 4b da 44 5f ca 46 a4 69 98 9b f6 65 f9 26 be 67 ea 4e 97 51 fd c9 e7 13 58 9f 4d 0a eb ea 7f dd ea 2f 2b f5 14 57 b8 57 dd 44 f2 48 e2 e8 8e 37 f0 ff 00 27 15 e3 16 49 7c c8 ab f7 87 15 8b 1e 88 d2 ef b1 3e e3 ce e2 3e 64 47 3e 57 f6 23 94 7f 02 c3 94 84 55 c9 d9 3a fb 34 38 99 c9 1c b7 67 b3 3b d9 5b ea 85 85 c4 29 7d 08 6d f6 16 4c 63 44 ab 81 2a dd 29 2e e8 Data Ascii: b:2:sb_]Lt:242>RxLvKBmE$'>?o!XTq9dIJKjO8=P8kODpXI/I=TFgn[KD_Fie&gNQXM/+WWDH7'I\|>>dG>W#U:48g;[)}mLcD*).
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: e9 b1 57 0b 34 7f 82 ab 14 21 66 68 3a 8f 34 85 91 22 88 ae 04 a2 27 91 b2 23 9a 22 ca e0 87 a0 d5 88 52 3b 8f 52 4b 31 ea ce e5 70 1f 73 54 ec 96 62 ce a2 16 b6 21 66 44 8a 23 b1 f4 9f 45 ae c6 3a e3 64 5e 28 89 1d 45 a9 17 88 b5 3e a3 ea 38 8b e6 38 87 13 62 7b 7a 8f 34 3f 30 f5 44 b5 26 8f 33 55 16 a8 ff 00 b4 ec 2d 8d 79 48 ec 2f 32 37 42 d8 8e a4 75 22 b7 20 c8 3f 9a e2 1e 74 43 52 08 89 b1 b1 99 12 22 19 2a 12 25 a8 fc 16 32 44 86 48 95 8c af e9 d0 dd 91 8e 48 8e c3 7a 8c 7a b3 b8 cd 58 96 85 73 29 65 32 b2 4f 54 36 4f 44 3a 5d 43 cc 5c 53 4f 43 51 b7 75 c3 6f 12 fb d9 08 9c f8 54 d5 33 47 43 ff 00 50 bb 1a d8 97 94 54 ff 00 e8 93 c0 95 47 91 2c d2 22 b2 22 84 ee 48 97 63 ea 64 7b 89 65 ea 7f 74 15 31 25 aa 2e be 42 ca ac ad ca 36 32 b6 53 52 a6 a8 Data Ascii: W4!fh:4"'#"R;RK1psTb!fD#E:d^(E>88b{z4?0D&3U-yH/27Bu" ?tCR"*%2DHHzzXs)e2OT6OD:]C\SOCQuoT3GCPTG,""Hcd{et1%.B62SR
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 9c f0 ce 7b b3 bb 24 93 c0 7c 22 4b 24 92 4b 3c 32 58 11 a4 c1 65 ec 18 93 50 7d 09 fc 06 0b 99 81 c2 dc 87 95 60 eb 2a 41 84 3b 83 d1 f1 1e 41 2c 9c e2 4f 0d 64 77 b2 0d bd 32 57 18 9e 1c dc 0b 6b c9 28 c9 a4 04 a2 c8 20 4f 53 44 86 c0 e9 0b 1d b1 4b 58 43 06 7d 9b 2c f0 41 12 63 11 d8 5c 62 d6 c0 1c bb 36 f6 8e cb 23 19 e9 02 14 24 35 9d 91 9b 9e 13 29 c3 36 26 dc 8b 8c 90 b2 cb 2c f1 9c 75 e1 f0 79 23 c1 e4 2c cb 2c b2 08 32 cd 82 0f c8 48 80 f0 43 0f 8c b2 cb 3c 3e 0b 7c 33 11 03 a5 c1 42 fd ba e6 6c b8 01 0a 33 2c 78 dc 65 a7 2e a4 86 4a 2d bd 2c 74 13 0d 68 ad 57 63 12 3d d8 30 e4 8b 98 12 6e 69 9f 2c 30 b9 fa 9c 3d 59 65 96 59 65 90 59 32 c1 5f a2 4f 6e ee bd c7 a9 c6 f3 a4 6c f2 0b 2f 11 fd c9 1c 35 f3 61 c5 13 e9 67 9c 81 7e d9 67 76 58 b0 97 02 Data Ascii: {$\|"K$K<2XeP}`*A;A,Odw2Wk( OSDKXC},Ac\b6#$5)6&,uy#,,2HC<>\|3Bl3,xe.J-,thWc=0ni,0=YeYeY2_Onl/5ag~gvX
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: e4 b2 7c 19 9f 60 b3 c2 59 65 92 78 cf 39 e4 24 93 f2 cb 2c b3 c1 f0 65 90 59 65 96 41 e4 cb 1b 2c b2 c6 cb 1b 1b 3c 32 cf 39 61 e1 96 41 64 16 59 66 cb 2c b2 cf 19 67 86 41 67 86 59 fb f0 0f 00 78 61 66 7c 18 58 78 65 85 84 03 61 61 61 61 21 e4 cb 3c 85 92 59 65 96 59 64 07 8c b1 10 20 b2 cb 2e 2c b0 db 2c 3c 67 ef c6 6f e1 8c 19 25 9e 72 4b 3c 98 78 d2 31 b3 ce 19 61 04 96 79 c2 c2 23 ce 78 e2 cb 2c 82 cb 32 cb 20 f3 96 16 10 10 78 cf 39 66 78 02 78 75 6d 3a bf 49 67 c1 11 88 09 2e d5 a2 fd 64 8d b6 71 63 e2 dd 92 d8 c4 ed ec b2 f4 59 f6 4e 0b 26 30 1c 30 92 1e 98 5f 97 0f 76 1e 89 0f a8 01 c0 5f b1 65 86 04 c8 f4 b0 1e 06 a6 06 48 f9 75 ea 47 a9 83 cd a7 db 0e 86 05 ea c0 e8 81 7a ba 7a 6d 7c 87 f5 04 c6 de e7 97 4d c7 d4 ea cd 1f 29 f8 49 9e a4 17 2f Data Ascii: \|`Yex9$,eYeA,<29aAdYf,gAgYxaf\|Xxeaaaa!<YeYd .,,<go%rK<x1ay#x,2 x9fxxum:Ig.dqcYN&00_v_eHuGzzm\|M)I/
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 63 ed b2 1c ff 00 8a 0b 34 5b 9c 88 3e e0 a3 37 7f d9 d8 b4 d0 ff 00 b6 3e 9d 4f 51 13 81 07 d3 6a 4a 87 e9 22 19 c5 fb 1f 2a 7b 7b fd 0b 3f 6a 16 ee 84 f9 70 e2 80 fa 48 ef b7 dd 90 3d ba b4 85 6f bb 80 e7 57 a0 d9 45 ea 07 da 90 cf b0 63 c8 ff 00 19 40 e7 50 87 46 ca b2 7e ec fb 9b 05 ab d0 70 5b 77 c7 32 01 75 1a 5d 21 0e b7 62 38 20 f1 10 9e 27 50 44 d5 95 e8 b8 07 02 ed d1 68 42 7e 48 87 77 5e d6 c9 81 d1 b6 58 a7 24 07 9e 3c 48 4e 16 f4 9b 2f c5 72 13 4d b3 b7 5e c9 5c e5 c5 3e dc 7f 6e df b0 39 f5 88 63 eb 0d 5e 36 47 73 27 30 46 59 85 0e 30 fa 2c 9c 79 2d 57 70 97 e8 04 a9 ee d6 4b 9f 6d f8 30 8e d8 75 ee 3f b2 5d f6 42 7c b6 53 de c6 7c ec f1 0d 25 93 c6 27 1b 76 f6 48 48 1c 6c 61 5d f4 32 25 a6 71 05 ed c9 c1 89 72 bd e1 66 20 3b 62 89 c8 96 3f Data Ascii: c4[>7>OQjJ"*{{?jpH=oWEc@PF~p[w2u]!b8 'PDhB~Hw^X$<HN/rM^\>n9c^6Gs'0FY0,y-WpKm0u?]B\|S\|%'vHHla]2%qrf ;b?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49868	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg2.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:39 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:38 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "7c7fc-60f3210543740" accept-ranges: bytes content-length: 509948 content-type: image/jpeg connection: close
2024-07-02 14:43:39 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e1 c3 9f 4f e4 28 1e Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"O(
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: d7 45 26 3e a1 e1 e6 f6 32 74 61 ce 0e 8e 4d f3 4d d4 b5 09 76 0d 6e 7b 97 aa 66 b4 69 66 6d 39 e9 ac 89 dc fa 73 b3 76 55 73 c6 66 dc 5b 46 ad 7c d7 65 7d 57 65 d5 cd b6 64 3d 5a 42 54 f3 b8 c1 a1 fa 87 8b 0f 43 9d a6 4a 35 68 d1 74 36 e6 ec f0 76 5e c5 1f 27 4b aa 86 2a 24 c2 a5 5c fe 8f 13 a7 9f 68 e1 d9 a6 78 79 7d ee 57 46 00 d3 1b 15 5a f4 4d 73 f6 e9 3c ad 21 ab 1c 86 74 40 0f 6b 33 b5 f3 3a 1c fd 73 c1 d3 e5 fa 2d 17 45 eb d5 e6 7a 19 6b 65 4b 48 e8 00 e4 79 8f 63 e5 fd 1e 0e 7c d1 d0 eb c3 91 7e 99 18 e9 c3 0d 19 77 ca 49 2e 25 5c 45 5d 41 d5 5c 6a f7 62 38 ad ab 54 8a 6b f0 b4 ae 9e 9c 1b b9 75 6c b9 8d 82 35 8b 32 e4 e8 e6 db 2e 72 76 66 e9 c9 4c 0d 54 b7 eb cc 7c 9b ef 67 3e b1 d3 a6 18 50 1d 0c d8 b4 69 0a 0d 19 35 ce cb 39 5a d0 44 cc a9 ba Data Ascii: E&>2taMMvn{fifm9svUsf[F\|e}Wed=ZBTCJ5ht6v^'K*$\hxy}WFZMs<!t@k3:s-EzkeKHyc\|~wI.%\E]A\jb8Tkul52.rvfLT\|g>Pi59ZD
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: e6 e3 f9 fa 00 ca 0d 94 d1 6b 59 75 64 dd 46 7c a6 9d 86 a0 07 b6 58 96 4d 80 d5 9b 46 67 0e 67 ae 5e 86 34 fa 38 c2 7a 0a e2 72 e3 73 9b af a1 bd 71 05 69 60 e6 66 b5 2f 30 6c cc 92 d6 9a a2 5b 67 1e c4 65 e9 f3 f5 ca c6 ec ba 5b b1 ea d6 19 70 f6 e4 76 f5 af 03 9d 9c ce af 29 99 af 51 c6 e7 0a d3 39 c7 f6 6c a5 1a 40 9f 8d cc 69 26 c6 4b 52 9a a0 95 48 d7 01 8f 34 b5 37 9a 2e 43 38 a0 a2 51 31 99 88 81 45 74 d4 90 01 cb 0a 0a b0 36 69 9b 31 48 dc e2 f0 c7 7a f3 b0 64 26 47 ae 22 2d b1 2a 5e 94 8f 56 72 5a 25 c0 a1 ea b0 0b 7a 89 06 68 88 7c 52 c4 97 e8 63 01 72 a5 ec 3c 44 94 2d 39 41 d9 5f 9d bd 45 84 49 e8 1f 39 83 d4 fc f8 25 f4 d7 cd 6d 9a c5 0d 41 60 39 62 9e 00 c6 37 26 b4 6e 63 f4 f1 e7 86 ed 55 3a 45 16 91 e2 d8 75 59 ef 41 a1 19 c5 94 2c 97 9e Data Ascii: kYudF\|XMFgg^48zrsqi`f/0l[ge[pv)Q9l@i&KRH47.C8Q1Et6i1Hzd&G"-*^VrZ%zh\|Rcr<D-9A_EI9%mA`9b7&ncU:EuYA,
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: d7 9c f0 76 fa 3e 99 5c 3e f7 0f 57 36 7d ea e3 3b 36 7c df 43 c1 02 4a 9d a6 79 3d 37 0d 92 95 e8 b0 29 6b e3 ab d1 77 bb 2f e7 fa f5 f2 74 7a e6 7d a9 25 ef c8 93 79 3a 47 47 9f 52 8e e7 73 1d ce c0 ac cf 55 d2 b3 b5 97 58 e9 ed 6b 31 5c 0b 1d bd dc c7 f2 7b 7e 67 0c bb 1b 7c ce 7a 5e 8a f1 e8 77 e7 95 d3 cf ad 2c 47 51 38 af 4a db 7e 1d 28 69 6d 0e a2 30 98 02 02 e2 2e f5 64 ab 63 26 b9 33 6d cf de cd 79 ee 83 ba 12 72 31 f5 72 d3 6e 8c 1d ac e7 93 bb 9d ae 9b 72 b5 69 66 35 d6 8c bb 3e 7d 69 75 0b 9c c1 74 b0 b7 db e1 5e 0f 3f b9 f3 55 a1 e6 e8 73 8c f1 2f 77 3b 65 b7 3c 06 43 08 db 05 cf 99 c4 a6 36 ab 1d b9 a0 6f 87 0b 08 e8 5d d6 5d 19 63 7d 0c 5d 1c f1 38 21 56 94 43 46 80 6a e9 92 8d a0 dd 16 8c f2 97 98 1d 76 07 9c 73 2f aa 4b 19 93 68 ba cf 6f Data Ascii: v>\>W6};6\|CJy=7)kw/tz}%y:GGRsUXk1\{~g\|z^w,GQ8J~(im0.dc&3myr1rnrif5>}iut^?Us/w;e<C6o]]c}]8!VCFjvs/Kho
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 47 e4 20 fa 0f f6 8f b9 fc 37 e7 40 09 b3 e0 98 7c 0f b6 bf c0 20 f0 7c 8f ba c0 41 82 01 ae 8b d6 e8 eb 04 07 ea c2 d4 0a 26 c7 85 f0 63 cb 19 67 2e 36 ad d2 15 f0 55 fc 70 2b 14 fa ad 43 e4 78 d0 5f 0a 35 04 d7 8d 6a 0f b8 fb 08 20 f2 20 fd 07 d8 7e 7b d9 8c 77 d7 92 7e 86 34 10 0d 4d 99 d7 5d fb 3a de fc 08 07 3c 9f 0a a1 35 a2 40 e4 42 db f1 a9 b2 77 fe e1 e3 5a d6 b5 e0 cd 7d 84 d7 3e 47 91 07 fb 47 f8 c4 d8 3e 0f 8d 11 af f2 8f 1a fd 01 d8 65 70 7a e9 a0 9d 52 f5 30 22 0f ab 1b 63 38 61 04 00 43 0b da ec c1 d5 9d 5a 24 0a b1 58 16 72 55 02 72 06 ae 06 09 ad 05 d6 88 e4 03 00 55 d6 b4 3f c0 07 d4 41 07 ea 3f 43 e4 92 4f 8d 79 30 fd 0f 8e 40 86 18 4e fc 01 0f 85 50 9c f8 26 08 be 0c 63 04 de c4 d7 23 c1 84 98 3f d0 3f c2 7f 2d 6b 43 c0 fc 0f d3 7f f1 Data Ascii: G 7@\| \|A&cg.6Up+Cx_5j ~{w~4M]:<5@BwZ}>GG>epzR0"c8aCZ$XrUrU?A?COy0@NP&c#??-kC
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: a4 2a ad 3c f4 10 a9 a4 b2 c3 f4 2d a1 09 81 4b a8 32 a5 c4 77 a2 a7 b4 3e 32 50 d7 4e ab 96 ce 52 08 81 80 64 78 f6 7b 52 58 be a0 d0 44 c8 cc 9d a5 de d5 ab d6 e9 62 c1 3d d1 d8 43 15 8c 07 a0 55 0b 08 ae 5b 65 fb 11 5d ac 66 66 13 a0 7d 4e 25 53 7a 28 b2 cf 22 00 13 7d b4 30 4e 8a fb 3b 73 b5 64 6b 58 b0 21 fc 0a a5 6d 75 22 02 ad d2 22 cb 5c 98 a1 db c2 0f eb fe 86 66 20 24 74 ea 56 a5 e3 5b c8 3e d2 dd f8 de c3 bd a1 a6 cb d8 a2 69 42 c4 1d 84 e8 5a b7 d9 4e 35 f9 36 e2 58 b5 7b ae 64 bf d6 1f da d0 22 13 8f ed 51 70 17 c6 34 8b 6b 6a 3d 02 cf 7a 81 75 57 16 31 d7 9a aa 89 4f 24 98 48 b3 af 02 a5 ad 63 23 c1 76 5a 3c 66 6a c8 aa bb ad 36 8b 8c 2d 1a c6 06 00 15 aa ae d8 2d a9 53 1a fc 51 43 2b 18 a4 bb 3b cb 5d 1b b8 ee 65 4f 70 8d 6e 2c be d6 44 b1 Data Ascii: *<-K2w>2PNRdx{RXDb=CU[e]ff}N%Sz("}0N;sdkX!mu""\f $tV[>iBZN56X{d"Qp4kj=zuW1O$Hc#vZ<fj6--SQC+;]eOpn,D
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 69 6d b1 0c 1b ad c1 37 34 ad be 36 60 9a 13 a2 a2 35 85 76 5e 62 de bf 29 7e 75 ff 00 27 75 df 1f f2 54 7c 9d a2 93 7e 72 2d 8c 06 4e 3d 75 66 56 b6 ee 9a ba a5 d4 80 2a fe 9c 91 55 4b 55 52 f4 f6 44 6e bb 28 61 66 88 f2 a8 d9 22 fe de 3c 13 03 2e d6 bf e4 d9 8d bb 60 48 f1 a3 35 e0 78 df 3e 02 b0 0d d2 cc 2c 13 f1 cd 4d 78 86 ea 29 b0 7f 4e 44 e2 a9 60 48 96 33 53 92 ff 00 17 8b 81 93 56 56 1f f1 e5 67 ad 96 39 8c 02 88 ee 0f b0 14 77 9c c2 eb 11 55 ed 1c 95 5c ac 98 8d 8e 11 f0 f2 27 c8 a4 c4 ce a3 28 d5 9b 4e 35 f9 36 e2 e1 5b 55 8c ca 63 be c3 ef 73 98 8e 5f b8 ad df 67 c0 84 18 20 75 33 97 af c0 82 57 88 55 13 d5 4c 67 c8 75 9d 32 ad 21 58 ca a6 39 f5 5c 4d 37 1f 63 d2 b3 19 29 8f 89 6c c6 ae b7 ca b0 35 a7 05 fd 97 ab da 8f 63 54 2f 7c 7c 8c 87 c6 Data Ascii: im746`5v^b)~u'uT\|~r-N=ufV*UKURDn(af"<.`H5x>,Mx)ND`H3SVVg9wU\'(N56[Ucs_g u3WULgu2!X9\M7c)l5cT/\|\|
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: f8 6f 0b e2 e8 b1 23 79 31 bc 34 1e 16 59 e1 a0 95 f8 1e 0f 87 86 18 de 2a 8d 16 2c a2 2c 6f 1f ff c4 00 4a 10 00 01 03 03 02 04 04 03 05 06 04 05 03 03 02 07 01 00 02 11 03 12 21 31 41 04 13 22 51 10 32 61 71 23 42 81 14 20 52 91 a1 30 33 40 62 b1 c1 05 50 60 d1 24 43 70 72 e1 82 f0 f1 15 53 92 25 34 63 73 a2 06 54 b2 c2 ff da 00 08 01 01 00 03 3f 01 ff 00 a2 52 50 7b 50 69 41 47 f0 b3 e3 1f ea bc ac 7d cc fe c3 1e 18 59 44 fd f2 8a c7 f9 6e 7f 89 8f f4 ce 51 8f e0 a3 c2 7c 21 4f 8c 7d ec fd fc 7f a7 a4 7d ec fd cc 78 80 87 dc 8f bc 10 fd 8c ff 00 d1 89 39 51 fc 16 16 7e ee 16 14 9f f5 56 7e f8 1e 31 fc 29 ff 00 3b c7 fa 7a 7c 2e 56 e9 fc 1c 85 07 c3 3f 76 7f 89 c7 fa 4a 3c 71 f7 63 f8 61 ff 00 46 33 e1 85 63 94 8f e1 24 2b 4f 86 3c 49 fb 85 47 f1 19 ff Data Ascii: o#y14Y*,,oJ!1A"Q2aq#B R03@bP`$CprS%4csT?RP{PiAG}YDnQ\|!O}}x9Q~V~1);z\|.V?vJ<qcaF3c$+O<IG
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 13 66 d6 ea a0 c1 50 cc 14 d7 0c ea 8b 74 ca 73 5d 9c 4a b8 67 28 02 9c d6 11 32 d2 8b cd a0 e1 72 5c e6 40 c9 4f 7b 31 01 dd 96 4e 74 0a fe 1a 05 38 70 ec a5 e2 7c aa 9b 6e 6d 39 ce c8 72 b2 50 60 f6 42 e0 7e 64 6d 20 1c 94 fb 5d 2b 22 f9 84 49 1d 38 59 97 68 be 7c 4e 8a ec 6e 35 4f 06 dd c4 6a 85 47 74 9c 69 1d 93 c3 f5 64 76 9d 51 6e 58 6d 83 a4 2b c5 d2 43 bf 0a 63 80 ba 71 b2 1c b9 1b 99 54 ed a8 5b 83 bb 15 20 c1 74 87 7a 05 f0 8c 5b 0e fc d3 5d e6 ee ae bd b4 ec 0d 18 c8 d5 34 58 de 9e 6e 97 2a 0f 6d 41 c4 b8 8b 7c ae 67 74 df 88 da 8f 25 ac 30 d8 4d e5 bc df 91 a4 a2 4b 48 39 d1 72 78 92 5b 6f 58 82 7f ba be a1 7d 47 5c 01 d3 d1 33 95 66 1c 49 98 8d 13 da 49 73 61 8e 18 3e 8a 9c 0e a9 84 26 15 a4 a8 c8 d5 32 d3 02 a4 e3 3e a8 bd d2 f7 38 9d e7 54 Data Ascii: fPts]Jg(2r\@O{1Nt8p\|nm9rP`B~dm ]+"I8Yh\|Nn5OjGtidvQnXm+CcqT[ tz[]4Xn*mA\|gt%0MKH9rx[oX}G\3fIIsa>&2>8T
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 6e c0 2b 9f 85 2d b6 8b fd c0 09 e6 93 83 8f 9b ba 70 3a 4d da 28 6d d8 ff 00 b5 1a 27 05 ce f4 05 41 0e 04 f7 84 6a 60 f4 9e e8 37 1b f7 ee a1 cb 12 13 8b 4b 73 90 8b 6c 1d 44 b8 f4 80 9c ea 96 b8 c6 60 fa 21 77 4d 32 41 ca f5 d7 f4 4e 73 e2 9b 4e 06 7a 93 9e 43 26 1c 0f b2 ab 44 39 90 f0 fe ce 1a 2a 9c ac c9 0d ec 50 22 5d a6 f8 ca 25 ff 00 bc 0f 0e de 21 07 b3 24 02 71 09 ac 74 4c 80 6d b9 35 c6 0b 4d 9d d0 77 46 6d 1b 12 84 6c 07 84 29 2a 3c 0f 69 5e 8b f0 8c ae 23 95 77 2f a4 ae 1e 8b 03 eb c9 ab a8 00 e8 9b 56 a4 b1 8d a2 7e 62 8e b9 2d db b2 3e a9 d5 08 d5 00 c2 21 69 27 01 34 06 ba 9b ee 77 a8 51 86 79 b5 29 f5 03 4b 98 44 62 54 7a a3 a4 ab 4c 8d 46 42 c7 a2 39 f4 40 f5 55 32 48 d0 2b 68 32 63 3e 8a 5c 48 fa a1 f6 50 2d 12 dc 2b 5a 3f 11 45 8c 70 Data Ascii: n+-p:M(m'Aj`7KslD`!wM2ANsNzC&D9P"]%!$qtLm5MwFml)<i^#w/V~b->!i'4wQy)KDbTzLFB9@U2H+h2c>\HP-+Z?Ep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49870	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:38 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg3.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:39 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:39 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "8d75f-60f3210543740" accept-ranges: bytes content-length: 579423 content-type: image/jpeg connection: close
2024-07-02 14:43:39 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f4 5f 5b e6 4e 6a Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE_[Nj
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 50 10 58 a9 22 0a 40 21 80 a1 8a 80 00 18 08 04 08 0a d6 45 23 52 96 42 20 80 b5 5e 64 74 72 c6 c0 90 0c 43 85 55 ea 44 28 c9 da 13 94 89 2c b3 6c 95 2c 2c af 52 71 6e 35 29 5c b2 8a f5 9a f7 05 8c 57 bc d3 bc 46 c4 47 51 0e 56 80 a8 40 85 91 a0 48 52 10 12 96 44 a5 41 20 25 74 e5 94 a9 22 a5 8e 59 44 94 80 71 64 d1 62 52 1a e4 df 3f 31 e8 f1 f0 3a f9 e2 cb 55 12 b9 4a 85 68 b0 34 67 9a d2 a7 4b 19 96 72 4d 97 35 ad 8a d2 99 65 6d 64 5a be 27 8c 4b 1d fb fe 4f 6f 13 d3 e2 cf 71 a7 9f 5b f9 75 8d 51 d3 8d 77 16 63 ae ae 5d 65 2c f3 bb 66 ea 5b 2e 72 eb 8d fc 7a f2 39 7a b4 59 6f 4e 1c fe 1e ae be b8 d3 cb d5 e6 a5 d6 c7 37 3a c1 d2 5b ce ad 2d 5e 96 33 93 4e 8f 9e e3 de e1 ac e1 e9 2f c5 d1 8d d9 1e ab bf 8b 8f e8 c7 a3 d7 3a 7a f2 c0 d7 9d f1 fb f9 59 d5 Data Ascii: PX"@!E#RB ^dtrCUD(,l,,Rqn5)\WFGQV@HRDA %t"YDqdbR?1:UJh4gKrM5emdZ'KOoq[uQwc]e,f[.rz9zYoN7:[-^3N/:zY
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 85 67 33 af 3e 77 5e 51 40 a3 78 78 b6 4b 83 a7 38 5c db 9d 6a e5 d2 51 8b a7 28 ee 22 ab 8d 5c f7 d6 f1 fa 6e e7 a7 96 6e b3 35 58 b4 6f 9f 3f b7 1b a6 e7 9b 46 b0 ec 89 0d 45 29 64 8c 7b c4 ab ce fa fc 5a a6 fd 2f cf f7 e3 b8 e9 70 f4 64 b2 dc ef 9d db 8c 98 d3 8e 91 87 96 fe 1b dd c7 75 a5 1b 99 37 98 47 57 87 7e 4f 7e 3a 23 4f 3e d8 fa 60 ba cb be 47 4c 4f 9e ba dc 3a 70 3d 9c b0 ef 1d 0e 5b 92 e4 de 66 98 f5 35 f3 b9 35 8f 41 e0 f6 d3 73 9b 4d 98 b5 99 f7 2a de 5a d8 64 b9 9e 95 5c 5e 72 bd 3c 79 1e 9e 7a 73 67 8b eb 7e 67 af 93 d6 f6 bc fd ae c6 f8 bd fc dd 2e 3d a9 4c bd f9 e1 de 37 f0 dd be 6e f3 bb c7 d3 9d 7d 32 e2 9e bc e3 71 ce f5 73 e2 fa b3 ee 3e 4f 6a b2 e5 7a b9 0b d0 f3 f4 b7 17 87 ee e3 56 db 7c 3d f9 fe ae 55 70 f6 f3 f8 74 ee 79 24 f0 Data Ascii: g3>w^Q@xxK8\jQ("\nn5Xo?FE)d{Z/pdu7GW~O~:#O>`GLO:p=[f55AsM*Zd\^r<yzsg~g.=L7n}2qs>OjzV\|=Upty$
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: e9 9f 63 78 c3 c7 ed f2 5e df 3e 5d ba f8 b4 e2 d0 b0 d6 67 a9 ee ae fd 34 cd 5e 4f 3e 7e 79 d1 75 7e 77 c7 c7 5e 1f 59 cb e9 79 5b d4 6e 68 dc b7 37 27 5c c3 6f 4b e4 d7 23 aa 32 eb 49 f4 bc 5f 46 7d 17 37 d3 7e 7e fc c7 a7 3e aa 35 ba 79 1e 5a f2 fd 31 e6 fa f2 85 93 b7 07 76 ae 59 b3 15 13 cd d3 8d fa ee 5d 7d d2 7c 27 e8 f9 1f 3b d3 f3 6f 46 3a 61 f4 49 66 94 5c 5a e7 1e 98 c0 59 8b 7d cb 25 6e 2d 6b 3d ba f1 99 f2 ba b1 65 84 6b 0f a2 5d bc 1b 99 3b 2e e7 7b 3f 33 a4 6e 79 5e ac 54 d5 aa f2 d7 87 73 ae 76 dd 79 8c 6d e5 b7 8c a7 3a b3 9e a5 db 0b ae 32 c5 fd a7 3b b4 d7 99 2d e5 67 3a f1 9a ba b3 74 97 72 6d f2 47 a9 5f a2 e4 ef a8 93 c4 e8 f9 b0 b9 4b 26 b0 77 eb 47 5d 47 59 ba e6 9d 67 7f 9f 76 5d 53 64 f1 aa b5 65 d7 3c ae fc f3 6f 06 e5 6d 6e ce Data Ascii: cx^>]g4^O>~yu~w^Yy[nh7'\oK#2I_F}7~~>5yZ1vY]}\|';oF:aIf\ZY}%n-k=ek];.{?3ny^Tsvym:2;-g:trmG_K&wG]GYgv]Sde<omn
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: cf b5 16 5b 35 19 9c dd 79 ab 84 ad 06 80 92 17 4f 52 2a 0a 5b 19 85 ab 36 dc cd 1c f5 46 f3 1b 52 36 a2 cc e5 a9 59 1d 6b 6f 2b 4b 17 e3 ae 8e 7d f3 f4 e5 29 ac bd 78 c0 d1 9e d6 f9 7d b5 fc 9f a3 c1 fa bc 6d 99 e7 5d 59 2e ec dd 3a cf 36 ca b1 d3 3e a5 fa ce 89 73 e6 b9 a7 8d 74 ed b3 ad aa cd 11 b6 b2 c4 f6 e4 e3 4b 1c e8 b6 ba bf 19 e7 77 90 ab 21 46 6d ac ca e8 96 62 8a f7 af 55 35 ed 75 3c 0b 9f 27 9e 96 e5 7c ee c9 3d 16 f7 f4 cf 44 d5 d3 09 4b 49 01 00 80 56 20 95 92 56 4b 34 0b 22 42 c8 a0 02 d0 08 6a 04 14 08 07 20 30 01 88 60 44 8d 22 56 03 81 53 2a 95 26 55 21 08 06 20 18 00 4b 22 52 83 ce 98 08 00 09 ac a5 72 00 a0 08 63 18 86 44 00 8a 02 11 1a 8a 00 49 5c 48 92 b8 63 94 12 43 52 b4 49 0a 8d 91 66 bd 1a 02 21 73 cb df 96 8d f3 6c f2 fa f8 e1 Data Ascii: [5yOR[6FR6Yko+K})x}m]Y.:6>stKw!FmbU5u<'\|=DKIV VK4"Bj 0`D"VS&U! K"RrcDI\HcCRIf!sl
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 59 df 37 3a d4 ab 9f 4c 9e 5f 5e 0f 8d f5 37 f9 b9 f0 bd de 59 eb 9f 77 87 a2 76 62 b8 39 fa a9 ef 21 e8 e5 6f 1d cf cb db 95 eb f3 9e ae 4f ae 75 78 7d ce 62 5c 35 c6 f5 71 c3 df 1b 74 f5 9f 5b e2 55 31 ca f3 7b 38 de 3f 56 9f 5f 80 b9 c7 c7 e8 59 e2 f5 6f e1 c7 0f 6c 89 38 c9 db 53 cd 8e b5 a2 66 5b c6 5e 9c b4 f6 f3 7a 17 18 76 f3 78 fe 7f 53 d8 ef e6 5b f2 bf 51 e4 b7 ca 9d 71 f4 9e 47 53 ae 79 bc f7 9f af 3b ce 0e ee 9b 73 f4 d5 59 65 eb 9a f5 69 d3 57 3d f5 3c f9 cb ac 4d 25 33 5f 4d 43 2b 33 6c b5 99 37 7d a7 c7 f5 63 f4 e7 ce fb 7c d6 a6 db 37 62 e1 dd cf cd d0 c4 e7 f6 c9 9b ab 96 b3 ed 9f 7a f5 5c 35 86 e3 91 d3 0e cb b7 3a 79 eb cd cc 95 ce 98 9e 55 f6 ce 11 2f d3 fd dc ef e9 94 a9 00 01 0a c2 4c d1 7e a2 a0 04 00 20 48 d8 00 91 02 2b 10 0c 11 Data Ascii: Y7:L_^7Ywvb9!oOux}b\5qt[U1{8?V_Yol8Sf[^zvxS[QqGSy;sYeiW=<M%3_MC+3l7}c\|7bz\5:yU/L~ H+
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: de 9c e8 c6 be 77 f3 fe af a1 ef e6 e4 f3 ed d7 eb c7 d0 fb 7e 5c 52 17 11 b8 85 ca 01 00 81 50 00 00 00 00 c1 18 c0 8f 3e 8a 59 ef 9b b9 54 86 a8 60 20 01 8d 02 2a 00 f3 aa b1 d3 ca fc cf d2 4e 4e af 5f 05 33 5d 9f a1 f2 67 d3 91 95 9e 2f 57 4f e7 7d 0c 9e 0f 57 47 3d 34 74 ce 1f ab f3 b5 78 7d bc ab 9e 5f 9f d1 3e 9c 76 f1 eb 4e 7d 1d dc 4e 5f a9 bf cf cf 8d d3 b6 7d 71 d9 e4 f4 7a 4f 9d f4 49 bf 2f f5 b9 fa 3f 9d 30 77 e1 e7 3e a7 8e 8e f8 e7 5e 56 f7 f3 57 cb af a4 fb 1f 02 9f 3f 75 2c b5 9d 5d f8 43 34 f8 1f 72 9e fc a5 e2 f5 43 ed fc 8b f7 cf 6f cb fa 7c ff 00 d0 fc 59 f2 ef 5f 7f 38 14 00 00 80 00 00 00 00 00 00 00 00 00 00 00 02 0d 00 10 02 b1 00 00 d0 01 02 83 44 0a 0d 10 c4 03 12 80 00 89 a0 00 00 00 04 00 02 01 80 94 15 30 51 00 51 00 00 12 b4 Data Ascii: w~\RP>YT` *NN_3]g/WO}WG=4tx}_>vN}N_}qzOI/?0w>^VW?u,]C4rCo\|Y_8D0QQ
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: b2 a8 c0 c2 97 e6 61 e0 53 47 5c c6 7c 4b f3 52 8c 5a 3a de 0d e0 aa b0 c7 c1 a3 11 ee a1 2f 54 0c a9 fe a2 3f b6 3f bd f9 03 ed 3e 87 f6 38 ce 30 0f d8 27 43 3f a8 f3 9b d1 47 2a 36 62 ae 84 27 94 f9 9a 82 6f d3 7c 66 fb 91 80 e2 c7 ce 2a 82 54 d8 ce 80 47 e0 c6 cf 07 73 f0 9b 12 d8 ae aa c9 ee af 2b 4a 45 56 d8 d4 f4 d3 ca f5 d1 d9 72 db 88 aa d0 d7 12 9e 0d 50 fd 47 0e cf c4 00 50 2c 67 e3 1e ce 2d cb 6c 8f a0 9b 69 61 e5 0f 89 b8 36 c6 9c 1b ad 61 d2 92 55 42 52 0b 0d 65 d7 db 64 aa b6 06 f0 2a 77 1a 70 6c 82 a6 e6 b5 02 0e 26 95 a9 4e 1c 57 95 4a 09 18 5c 91 38 d5 5d f6 86 6c 5c 7e e1 67 e0 cc c1 61 3e 3b ba 5d ea 1f 11 00 4a 9d f8 39 da a3 20 2c 8b c6 ca 7f e6 6a b9 ad 61 56 be 47 8f 00 aa 5c 99 99 8d 75 65 ae 76 af 0f 3d 31 a8 fe ad 43 9a 6c 47 4e Data Ascii: aSG\\|KRZ:/T??>80'C?G6b'o\|fTGs+JEVrPGP,g-lia6aUBRed*wpl&NWJ\8]l\~ga>;]J9 ,jaVG\uev=1ClGN
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 4d b5 77 5d 70 8a c6 b7 f4 72 79 f7 6b a5 ef 95 d4 95 d7 6d 5c 92 bc 22 91 ba 55 6e 53 02 9a da da 0d b2 aa 82 2d e4 6f ba 94 a5 97 f7 5b f1 a3 ad 81 39 6f d3 a7 74 b0 25 dd 84 96 bf 13 71 e5 0f 89 bd 8e 33 9d bf 4f fc 21 33 ba 41 fe 70 31 e4 de c7 40 37 55 68 d0 ad 73 de 22 b1 9e 0c c6 f6 3b e4 bd b5 51 47 7d 96 ae 0b 96 9c ea ab a7 26 ec c1 41 3b c7 0e db 2d 6b 5b d3 0f 30 e2 be 2b e3 b9 b3 29 55 b2 9f 9d 9c 7c a7 24 6c 0a c7 7b 2f 26 5b 6c aa 96 b9 a8 c3 ae 84 be e0 65 58 1d d9 f4 58 f5 c6 fa 64 0a cf 58 0e d1 c6 ca a8 96 d7 59 5e d5 84 fd 31 13 b3 e7 7b 51 55 60 3a 83 3b 70 8e 24 79 40 4e b9 73 b1 38 2d 6d ad 8e 05 5a 90 a4 d7 13 68 49 d9 56 ad 87 69 fb 9a 26 57 b9 60 f1 4f cf 1d 46 07 d3 91 24 fa 09 fc 67 2f 35 d5 c6 5c 86 15 2f 02 84 5e 73 e4 ef cc Data Ascii: Mw]prykm\"UnS-o[9ot%q3O!3Ap1@7Uhs";QG}&A;-k[0+)U\|$l{/&[leXXdXY^1{QU`:;p$y@Ns8-mZhIVi&W`OF$g/5\/^s
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 4d 7a 09 af 45 f9 49 76 4d 55 47 cb b7 3a 2f 76 88 d6 3c c8 71 6c 16 08 f6 07 3d d9 87 93 8b 83 45 bd 5a 9e ce 5f 51 fa ba 75 b9 f1 14 f9 7c 1c 94 a7 e0 d0 bc 9e ae 9b 4a 0e 15 d1 5d f9 0f 92 f7 63 9a 16 b0 a5 cf 4c e3 32 ad 6c a3 db 71 2b ee a3 63 64 bd 56 d5 d4 6d 7b f3 ba 5d 96 0b 71 ec a8 cc 3b 93 76 d0 ce 6a c4 2b 06 80 2c 63 97 e3 6d 24 4b 54 f1 76 b2 29 65 9c 1d d5 50 08 ce bb 45 b1 d5 71 fb ac 52 29 e2 41 9c 9c ca af 69 de 02 35 c9 cd ae 85 8a 2d 17 b2 b7 33 59 df 8a a9 6b 5d 70 78 c1 db a5 5a cf 06 8a dd d5 a9 ae 62 d1 bb f3 f2 aa 55 39 99 73 4f 2a ac 18 95 d2 ec 53 07 15 6e 64 98 e4 51 45 a5 ae c8 c2 2a a3 aa 5b 5f 3e 61 0a de 21 e2 1d dd 8c 00 99 53 02 00 f1 66 f9 d1 6d 8c c0 95 9f 30 d4 5c 2a 15 3b d4 2d e7 94 dc 03 91 b6 9e 29 a9 a9 a8 b0 18 Data Ascii: MzEIvMUG:/v<ql=EZ_Qu\|J]cL2lq+cdVm{]q;vj+,cm$KTv)ePEqR)Ai5-3Yk]pxZbU9sOSndQE[_>a!Sfm0\*;-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49871	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:39 UTC	718	OUT	GET /marketplace/javascript/overlib_mini.js?1705557557 HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _ga=GA1.2.663184279.1719931418; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1
2024-07-02 14:43:39 UTC	271	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:39 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "9163-60f3210543740" accept-ranges: bytes content-length: 37219 vary: Accept-Encoding content-type: application/javascript connection: close
2024-07-02 14:43:39 UTC	14209	IN	Data Raw: 2f 2f 5c 2f 2f 2f 2f 2f 0d 0a 2f 2f 5c 20 20 6f 76 65 72 4c 49 42 20 34 2e 32 31 20 2d 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 72 65 6d 6f 76 65 20 6f 72 20 63 68 61 6e 67 65 20 74 68 69 73 20 6e 6f 74 69 63 65 2e 0d 0a 2f 2f 5c 20 20 43 6f 70 79 72 69 67 68 74 20 45 72 69 6b 20 42 6f 73 72 75 70 20 31 39 39 38 2d 32 30 30 34 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 5c 0d 0a 2f 2f 5c 20 20 43 6f 6e 74 72 69 62 75 74 6f 72 73 20 61 72 65 20 6c 69 73 74 65 64 20 6f 6e 20 74 68 65 20 68 6f 6d 65 70 61 67 65 2e 0d 0a 2f 2f 5c 20 20 54 68 69 73 20 66 69 6c 65 20 6d 69 67 68 74 20 62 65 20 6f 6c 64 2c 20 61 6c 77 61 79 73 20 63 68 65 63 6b 20 66 6f 72 20 74 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 61 74 3a 0d 0a Data Ascii: //\///////\ overLIB 4.21 - You may not remove or change this notice.//\ Copyright Erik Bosrup 1998-2004. All rights reserved.//\//\ Contributors are listed on the homepage.//\ This file might be old, always check for the latest version at:
2024-07-02 14:43:39 UTC	16320	IN	Data Raw: 6f 33 5f 70 61 64 78 72 29 2b 28 6f 33 5f 74 65 78 74 66 6f 6e 74 63 6c 61 73 73 3f 27 22 20 63 6c 61 73 73 3d 22 27 2b 6f 33 5f 74 65 78 74 66 6f 6e 74 63 6c 61 73 73 3a 27 27 29 2b 27 22 3e 27 2b 28 6f 33 5f 74 65 78 74 66 6f 6e 74 63 6c 61 73 73 3f 27 27 3a 77 72 61 70 53 74 72 28 30 2c 6f 33 5f 74 65 78 74 73 69 7a 65 2c 27 74 65 78 74 27 29 29 2b 74 65 78 74 2b 28 6f 33 5f 74 65 78 74 66 6f 6e 74 63 6c 61 73 73 3f 27 27 3a 77 72 61 70 53 74 72 28 31 2c 6f 33 5f 74 65 78 74 73 69 7a 65 29 29 2b 27 3c 2f 74 64 3e 3c 74 64 20 77 69 64 74 68 3d 22 27 2b 6f 33 5f 70 61 64 78 72 2b 27 22 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 22 33 22 20 68 65 69 67 68 74 3d 22 27 2b 6f 33 5f 70 61 64 79 62 2b 27 22 3e 3c 2f 74 64 Data Ascii: o3_padxr)+(o3_textfontclass?'" class="'+o3_textfontclass:'')+'">'+(o3_textfontclass?'':wrapStr(0,o3_textsize,'text'))+text+(o3_textfontclass?'':wrapStr(1,o3_textsize))+'</td><td width="'+o3_padxr+'"></td></tr><tr><td colspan="3" height="'+o3_padyb+'"></td
2024-07-02 14:43:39 UTC	6690	IN	Data Raw: 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 29 7b 62 6f 64 79 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 22 62 65 66 6f 72 65 45 6e 64 22 2c 27 3c 64 69 76 20 69 64 3d 22 27 2b 69 64 2b 27 22 3e 3c 2f 64 69 76 3e 27 29 3b 64 69 76 43 6f 6e 74 61 69 6e 65 72 3d 6c 61 79 65 72 52 65 66 65 72 65 6e 63 65 28 69 64 29 3b 7d 65 6c 73 65 7b 64 69 76 43 6f 6e 74 61 69 6e 65 72 3d 66 72 6d 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 44 49 56 22 29 3b 64 69 76 43 6f 6e 74 61 69 6e 65 72 2e 69 64 3d 69 64 3b 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 69 76 43 6f 6e 74 61 69 6e 65 72 29 3b 7d 0d 0a 6f 62 6a 52 65 66 3d 64 69 76 43 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 3b 7d 0d 0a 6f 62 6a Data Ascii: ument.getElementById){body.insertAdjacentHTML("beforeEnd",'<div id="'+id+'"></div>');divContainer=layerReference(id);}else{divContainer=frm.document.createElement("DIV");divContainer.id=id;body.appendChild(divContainer);}objRef=divContainer.style;}obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49873	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:39 UTC	692	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg4.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931
2024-07-02 14:43:40 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:40 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "7df79-60f3210543740" accept-ranges: bytes content-length: 515961 content-type: image/jpeg connection: close
2024-07-02 14:43:40 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f1 5e bf 9a 47 2c Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE^G,
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: 08 2d 01 e1 a0 10 84 24 4a 80 a8 00 d0 09 00 42 24 0a c2 24 14 00 21 2a 41 00 48 41 a5 61 a1 86 08 62 05 49 20 d9 16 4b 10 24 a8 45 89 02 b0 08 a4 49 41 40 50 ab 06 0d 48 6a 30 61 a6 8d 11 a1 94 a3 a9 08 cb 07 19 4c 8c a2 95 15 62 40 10 81 21 00 42 12 94 92 00 2a a4 b0 02 51 62 89 64 b2 12 00 46 6a 21 0a 98 23 43 ab 2c 01 05 02 40 a8 18 01 09 06 09 06 09 08 41 a2 11 62 2e 92 20 60 0c 3a c5 60 10 08 0a d1 49 52 08 46 a6 94 d1 08 a0 08 61 94 90 62 00 02 81 08 96 02 10 81 00 c1 50 42 00 89 08 42 04 2a 48 31 03 2b 05 58 64 0b 15 86 08 48 30 cd 31 00 22 04 00 08 56 24 52 a7 29 40 ba db 94 95 65 5d 84 75 54 04 1d 5a 9d 6c b6 cd 1d 62 40 2f 0b 9f 2f 1b c7 9f 1e e7 8e bb 79 74 ef e5 cd d6 3c a7 7c df 8e ff 00 42 e1 9e 4f 6e 3a b9 76 fa 07 5e a7 be 75 eb 57 68 48 Data Ascii: -$JB$$!AHAabI K$EIA@PHj0aLb@!BQbdFj!#C,@Ab. `:`IRFabPBB*H1+XdH01"V$R)@e]uTZlb@//yt<\|BOn:v^uWhH
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: ed d7 6f cb 9e 77 4b 76 54 75 bd 0e 53 7f 9d a0 d1 9d d1 9c 75 f1 78 7b cd 92 53 b6 a8 a4 ef f9 af 3f 9c d5 aa 33 31 fa 2f 07 bd d5 ce 59 66 2e b6 fe 73 59 d7 ef 9f 49 ee 68 de ab e2 f3 ff 00 25 cc e3 33 6e 6e 8c 44 de b5 f1 99 f6 1d 1e 6b d9 7d 0f 9a 66 dd e6 74 75 bc eb 13 a7 8d d1 33 4d 26 af 77 8e f8 5d 33 d0 e6 cf 31 b3 9d 9d 2f 89 fa 1a f4 7e 7b de f0 a5 cd 97 79 a7 3e 77 af 3e 17 ea 5d 58 d7 73 c9 9e b7 97 a7 3b b7 3a d7 d4 f8 b7 e4 bd d3 51 ca ec 7c 67 67 38 fa 9c de b6 6a f0 3d 7a a7 51 75 ad 11 6e 66 2e b2 bb 5a 56 b3 36 ae 7d ea 17 67 3b 78 cf 45 e6 c7 23 b3 91 ea e8 f9 02 cc 66 8d ea bb a8 cb d5 37 4f 23 15 56 ee 33 b7 cb 1c 3e fa 4a 12 eb e5 37 65 cb ef 57 5a 27 37 a5 d7 ce 3e 72 aa f9 60 f4 6e c9 34 c5 1a b5 56 9c 64 2e ec ce 57 5d 08 eb 63 Data Ascii: owKvTuSux{S?31/Yf.sYIh%3nnDk}ftu3M&w]31/~{y>w>]Xs;:Q\|gg8j=zQunf.ZV6}g;xE#f7O#V3>J7eWZ'7>r`n4Vd.W]c
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: b2 7a 3f 3c ca 89 ab d7 f2 e3 af c3 5e 27 ea 76 2c 08 c5 d6 d3 bd 73 ba eb 46 60 3a 38 9c 9d d3 a0 cc 94 96 ba d2 43 5c 99 ab 5c 9d 9f 3f 3d b8 cb e2 7a 4e 1a f0 1e dd f3 3b ee 8d 5d 52 54 5b 93 e5 4e 9a b3 04 69 c3 6f 27 a1 f1 67 66 33 7c be 1b e9 eb 67 3d 75 7c bc f1 f4 d6 7e 95 35 74 64 e7 b0 f9 b8 f2 fe c7 37 b6 ed b3 d0 78 f3 77 1c a5 d7 5f ce eb 72 d7 9e f5 63 4f 17 9f f7 ce 97 29 d7 e1 af 1d f4 59 eb a9 e7 9b 57 cc fa d5 74 9d 3f 26 74 65 e1 7e b6 e9 de d1 ab a3 66 33 96 bb be 6c e6 db 4e 65 36 e7 da fc a9 ae 77 5d 5b 9b e8 7c d8 ee 78 b9 9e 79 ed 79 b5 e4 be 9e a4 9e 9f c1 38 1e 97 43 33 bd e4 d7 98 f7 3c 0f d8 de 5e b5 f3 bb 64 eb 70 cf a2 f1 c1 d9 e0 bd fa 16 6d e5 17 5a cb 77 76 72 d1 9f 75 a6 6d 91 2d 3a 57 99 7c b2 4d 19 b5 e9 32 bf 19 e8 f1 Data Ascii: z?<^'v,sF`:8C\\?=zN;]RT[Nio'gf3\|g=u\|~5td7xw_rcO)YWt?&te~f3lNe6w][\|xyy8C3<^dpmZwvrum-:W\|M2
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: 70 a3 64 b4 51 91 a4 bf 25 a6 86 89 0f 25 b9 34 89 5a b9 4d 5c d5 e8 95 6e 17 42 c8 db ad 99 ce ea e6 fa 75 4f 4b 46 ad b0 64 bb 33 a3 c6 2e 0c ab 54 ed 63 58 ba 17 45 16 89 66 2d 92 02 6d ce ed ae 97 9e 59 9c d3 d1 97 55 e1 4b 20 c4 4b 12 ab 6a d5 14 29 f2 e9 79 e6 5e b3 36 f5 d1 e3 9a ea 8e 8b b3 68 a0 45 04 a5 aa 75 6d cc 71 48 56 57 b2 d1 a0 a0 16 5b 10 a8 0a 2d 28 f0 d2 34 4a 0b af 96 7a 5c b3 c6 f4 5c db da 96 55 45 80 86 14 b7 2b 32 79 05 5f 55 e6 81 34 b7 33 7e 9c a5 c1 d6 db 20 18 7c c7 c9 a2 12 88 40 00 85 25 3e 25 99 6b c2 de 4d 9c a4 b7 27 52 ee 5d ce 36 1d 1f 3e 76 f0 9d 3f 3d ab 57 17 69 9b ad af 4c 9d ad 1b bc de fa a7 a5 ae d7 cc 23 02 52 8f 2e ae 79 df cd 8f 6b f0 6c ba dc e7 2f ae b1 f5 64 e9 77 4c e5 d3 1e f4 a8 6d 11 69 9e 9f 22 99 f7 Data Ascii: pdQ%%4ZM\nBuOKFd3.TcXEf-mYUK Kj)y^6hEumqHVW[-(4Jz\\UE+2y_U43~ \|@%>%kM'R]6>v?=WiL#R.ykl/dwLmi"
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: ed dc bb 50 88 8b 42 00 e1 22 b0 50 85 60 00 40 53 c3 06 14 a4 7a 24 49 43 36 0e 59 40 52 16 45 ea 82 96 09 48 85 4c 30 29 12 b4 34 d0 54 97 8c a0 cb 95 f3 56 96 11 31 1e 53 cd 79 5e 7e 95 2b 96 e1 ae 2d ca fd 4f 3d d9 9b a5 5d 5e af 9e 67 06 95 da 73 05 57 a5 3b b4 74 26 a0 5c db 0a 6c a6 a2 84 78 aa 82 ad 1a 78 92 55 a2 e8 65 bb 20 94 6c 96 a5 85 7e 93 9e 0b a9 20 21 b5 cb 24 32 90 90 54 5b 16 ea 43 91 04 a9 95 12 e1 9a c3 35 c6 d6 90 4a 4a bf 23 94 b6 dc 4d 38 1c 86 e3 d8 2d af 6d 6c e9 e6 c1 6f 4a 73 ee f5 83 52 41 53 6c 66 0d 05 48 a9 6e 68 cd 99 34 27 1b ca f3 dc f6 df c8 35 2f 3a 38 4d 53 d5 6f 65 fa 9b 36 af 2e 67 9e e2 e5 72 68 f6 76 f3 36 f7 b6 69 67 58 4a 54 c9 5f 2d 73 38 aa c2 59 d1 ea d1 d6 68 e8 4d cc f9 d5 39 59 a5 74 99 89 2a c3 58 fb 59 Data Ascii: PB"P`@Sz$IC6Y@REHL0)4TV1Sy^~+-O=]^gsW;t&\lxxUe l~ !$2T[C5JJ#M8-mloJsRASlfHnh4'5/:8MSoe6.grhv6igXJT_-s8YhM9Yt*XY
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: c8 4d ed 48 3c 19 be db 07 ec 7f e7 12 4e c1 e3 7b de ff 00 80 fe 23 e4 f0 3e 75 fc 37 c6 e6 ff 00 a1 e4 ff 00 3d ff 00 94 41 04 1c 08 38 1f 0b 36 d3 7b de f7 b9 bd f3 be 07 d1 3b e4 41 f2 3f 86 b5 fc 47 fe a0 fe 07 fc 6b 07 f2 13 b7 6e c5 bb 6c 10 41 04 1e 75 af f2 83 fe 6d 18 61 82 6f 7c 6f fc 1b 10 41 c0 e0 cd 7f 8b 73 7f 63 e0 c3 09 27 f9 6f fc 63 81 c0 82 08 39 1c ef b7 6e db de f7 bd ef 7b f9 51 c0 e5 9b e1 54 2f f4 1f 23 ec 7f ea 0f 8d ee 1f f1 80 aa 3f 9e f7 b2 77 04 52 26 c1 1f 1b fb 1f e1 df f2 1c ef e9 a1 85 7f b8 f9 3c 88 3f d7 bf e2 4f 06 18 7f d3 a9 ad 6b 5a d6 b4 00 82 0f ad ef 7b fe a3 e1 78 79 ae 02 84 03 f8 8e 40 fe 83 ff 00 4b 7b 13 7b e3 7b 3f c8 7f 00 a0 6f b7 03 ef 7b de f9 1c ec 10 c1 b7 be 37 bd ef fc 1b de f6 0e f7 fd 04 1f 0d c9 Data Ascii: MH<N{#>u7=A86{;A?GknlAumao\|oAsc'oc9n{QT/#?wR&<?OkZ{xy@K{{{?o{7
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: d7 2b 7e 05 3e 67 1b c5 5c 4e 4d 5a 41 89 91 54 4a af 5c ca 86 35 b5 e2 4f 27 4c c3 b4 c5 89 53 51 55 49 66 4d 5b e9 4d 74 de 4f 66 6e b9 d9 de c5 bb d5 4d b6 66 ad 19 d0 2b 4a db f6 db 29 b2 a7 b0 77 cf 5a df 0a a6 4b 96 d8 31 b0 bc 6d d8 3e fb 2b a2 e7 a1 7c 76 6e 25 35 e3 91 4a d0 af dc e5 e4 c2 1d 09 44 95 39 bd ae 66 51 54 ca ca ba 63 f1 80 95 38 c8 39 0b 6f eb ae 26 3e 3c 4c 0c a7 f2 8d da a5 c3 a2 5b 63 2f ab 0f 28 bb c5 14 39 b2 fa 1a ca 9c 1c c4 a2 1c 23 3b e3 b9 c9 a2 b4 5b 45 72 d7 d5 2d ff 00 4d e5 55 b1 58 e2 aa 2e ad a6 35 7a 78 b3 f2 7e 6f 43 04 6b eb ef 0d ed 8a 8f 90 e8 a2 87 a1 a3 26 9a 06 50 d5 54 57 8a cb 9c 59 e8 b2 16 2d 8b 76 44 12 b6 b0 e3 cc 2b bc 87 97 d1 33 a3 1a c5 ee 1d 9a 55 3b e1 cb ac d9 76 1d 89 e0 42 c2 68 c1 ce b5 c6 e6 Data Ascii: +~>g\NMZATJ\5O'LSQUIfM[MtOfnMf+J)wZK1m>+\|vn%5JD9fQTc89o&><L[c/(9#;[Er-MUX.5zx~oCk&PTWY-vD+3U;vBh
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: b4 65 6a da ca ac 89 19 5d 55 75 01 31 62 47 6d 24 da c6 5b 68 6c 73 8a d4 7a 85 04 76 f7 31 ec 15 28 5a 8a fb 74 22 0e 86 a3 51 5d 7a ec ac ad 86 2c ae 6a 06 67 da ac 11 58 3a 2d 16 8b ef bb 27 24 c1 16 d0 7a 32 05 95 c3 18 00 c1 82 71 5c d0 06 1e 35 ae 90 f0 bc 2a cd a9 ec 22 af ac 42 18 24 68 15 07 23 19 70 53 09 70 45 05 1a 66 f0 f2 a2 5d a2 ce 8c 90 46 62 12 bd a1 d8 e7 42 74 00 d6 c1 ac 38 fd 3a 1a bd 51 2b 0a eb 2b 65 89 3b d8 ba 50 c0 8d 3b 6f 5c 6a 08 26 8f 16 4d 6b a0 1a eb ea 2b a9 ae 44 30 31 3b e0 15 61 35 34 63 c2 ff 00 88 60 04 68 4b 0e 89 85 f9 bf 37 e0 6c 1f ca d4 7a d7 9e c6 6b 8d 03 d4 23 a0 82 6c 19 8f 45 f1 da c6 49 b7 30 4d 92 66 94 75 85 66 e0 3b ef b8 54 00 0c 52 60 23 8d 18 14 a3 27 ac 56 13 5a 8b 07 16 20 50 15 15 53 86 56 af 4b Data Ascii: ej]Uu1bGm$[hlszv1(Zt"Q]z,jgX:-'$z2q\5*"B$h#pSpEf]FbBt8:Q++e;P;o\j&Mk+D01;a54c`hK7lzk#lEI0Mfuf;TR`#'VZ PSVK
2024-07-02 14:43:40 UTC	16320	IN	Data Raw: 26 60 cc ab c0 3e a1 80 13 ed 0a a7 a5 ae ce b2 e6 bc 27 b5 dd 72 13 55 a6 1c 9a e2 64 c2 0e 70 8c 29 a7 20 ef a2 a9 39 d4 6a 15 83 38 6f 74 1d ee d3 fc d8 6f e5 f7 5c ca a2 df a2 75 d9 29 fe d0 60 26 87 3a 75 46 aa 25 3c d4 19 c7 fc f3 00 39 9a 39 45 30 14 27 3c 00 0e 53 39 70 f4 28 7a 90 d6 b4 c1 5c ba ec 0e 07 a9 0b 27 e1 e7 03 3d f0 9f 77 e5 fc a3 2b d8 d8 56 51 69 6c 5c 4a 65 51 07 55 56 91 68 c4 6c 8d f9 d9 12 11 07 ea bb 2f cb 77 94 60 e5 43 ba bb 61 1c b5 d9 bb 02 76 45 85 cc d9 16 cb 76 d5 5b d7 ee 9e c5 3c d2 75 46 91 69 da 55 5a 74 5b 56 ec 1f ec 85 76 bb 38 68 50 f2 d9 e9 fa a7 d4 2d 17 7b 34 2a a0 e5 73 4d db ca fc 8a 35 89 1d 5d 93 dc ec 26 d6 d0 f5 6f 28 d2 32 ed 10 a8 ec e8 80 aa db 06 e8 9a e4 82 5b 3a aa 8f 64 13 d3 b7 94 43 a3 fc d3 b9 Data Ascii: &`>'rUdp) 9j8oto\u)`&:uF%<99E0'<S9p(z\'=w+VQil\JeQUVhl/w`CavEv[<uFiUZt[Vv8hP-{4*sM5]&o(2[:dC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49874	216.239.36.181	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:40 UTC	1221	OUT	POST /g/collect?v=2&tid=G-DQB7CZVNQD&gtm=45je46q0v871550789z8853238206za200zb853238206&_p=1719931413374&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=663184279.1719931418&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1719931417&sct=1&seg=0&dl=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&dt=pollyfill.io%20-%20Above.com%20Marketplace&en=page_view&_fv=1&_ss=1&tfd=6014&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.above.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:40 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.above.com Date: Tue, 02 Jul 2024 14:43:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49875	216.58.206.66	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:40 UTC	948	OUT	GET /td/ga/rul?tid=G-DQB7CZVNQD&gacid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2883688 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:40 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 02-Jul-2024 14:58:40 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-02 14:43:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49878	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	813	OUT	GET /marketplace/img/salecard3.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:41 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:41 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "983-60f3210543740" accept-ranges: bytes content-length: 2435 content-type: image/png connection: close
2024-07-02 14:43:41 UTC	2435	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 24 08 06 00 00 00 2a db 7c 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRH$*\|ftEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49877	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	813	OUT	GET /marketplace/img/salecard4.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:41 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:41 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "860-60f3210543740" accept-ranges: bytes content-length: 2144 content-type: image/png connection: close
2024-07-02 14:43:41 UTC	2144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 24 08 06 00 00 00 db d0 27 eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRG$'tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49876	74.125.71.154	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	859	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&gjid=46432527&_gid=1984477665.1719931418&_u=YEBAAEAAAAAAACAAI~&z=243793676 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.above.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:41 UTC	591	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.above.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Tue, 02 Jul 2024 14:43:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:41 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49880	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	813	OUT	GET /marketplace/img/salecard5.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:41 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:41 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "91b-60f3210543740" accept-ranges: bytes content-length: 2331 content-type: image/png connection: close
2024-07-02 14:43:41 UTC	2331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 24 08 06 00 00 00 c1 ec c7 65 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRK$etEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49881	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	813	OUT	GET /marketplace/img/salecard6.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:41 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:41 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "859-60f3210543740" accept-ranges: bytes content-length: 2137 content-type: image/png connection: close
2024-07-02 14:43:41 UTC	2137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 24 08 06 00 00 00 17 49 1d 00 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRT$ItEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49879	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	813	OUT	GET /marketplace/img/salecard7.png HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:41 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:41 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "919-60f3210543740" accept-ranges: bytes content-length: 2329 content-type: image/png connection: close
2024-07-02 14:43:41 UTC	2329	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3e 00 00 00 24 08 06 00 00 00 d1 8c 89 b9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR>$tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49886	104.16.141.209	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:41 UTC	524	OUT	GET /4372769.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:42 UTC	919	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:42 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.above.com x-envoy-upstream-service-time: 54 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 0a86fe9f-a8bd-4f8a-b937-a8d424fa5889 x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-9j9wx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 0a86fe9f-a8bd-4f8a-b937-a8d424fa5889 CF-Cache-Status: EXPIRED Last-Modified: Tue, 02 Jul 2024 14:42:07 GMT Expires: Tue, 02 Jul 2024 14:45:12 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 89cf68dbcaab4267-EWR
2024-07-02 14:43:42 UTC	450	IN	Data Raw: 37 61 33 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 31 39 39 33 31 32 30 30 30 30 30 2f 34 33 37 32 37 36 39 2e 6a Data Ascii: 7a3// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1719931200000/4372769.j
2024-07-02 14:43:42 UTC	1369	IN	Data Raw: 61 62 6c 65 64 46 65 61 74 75 72 65 47 61 74 65 73 27 2c 20 5b 5d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 75 73 65 56 32 57 69 6c 64 63 61 72 64 27 2c 20 74 72 75 65 5d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 62 61 6e 6e 65 72 2e 63 6f 6d 2f 76 32 2f 34 33 37 32 37 36 39 2f 62 61 6e 6e 65 72 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 Data Ascii: abledFeatureGates', []]);_hsp.push(['useV2Wildcard', true]);!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/4372769/banner.js",n.type="text/javascript",n.id=t,r)r.ha
2024-07-02 14:43:42 UTC	143	IN	Data Raw: 22 3a 34 33 37 32 37 36 39 2c 22 64 61 74 61 2d 61 64 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 33 37 32 37 36 39 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 0d 0a Data Ascii: ":4372769,"data-ads-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":4372769,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});
2024-07-02 14:43:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49884	74.125.71.154	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	851	OUT	POST /g/collect?v=2&tid=G-DQB7CZVNQD&cid=663184279.1719931418&gtm=45je46q0v871550789z8853238206za200zb853238206&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.above.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 14:43:42 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.above.com Date: Tue, 02 Jul 2024 14:43:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49890	74.125.133.155	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	653	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&gjid=46432527&_gid=1984477665.1719931418&_u=YEBAAEAAAAAAACAAI~&z=243793676 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 14:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Tue, 02 Jul 2024 14:43:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:42 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49888	142.250.186.100	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	813	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:42 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49896	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	555	OUT	GET /marketplace/img/saletrans.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	232	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "399-60f3210543740" accept-ranges: bytes content-length: 921 content-type: image/png connection: close
2024-07-02 14:43:43 UTC	921	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49893	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	556	OUT	GET /marketplace/img/saletrans1.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	232	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "39a-60f3210543740" accept-ranges: bytes content-length: 922 content-type: image/png connection: close
2024-07-02 14:43:43 UTC	922	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49891	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	554	OUT	GET /marketplace/img/above-mp.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	234	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "114b-60f3210543740" accept-ranges: bytes content-length: 4427 content-type: image/png connection: close
2024-07-02 14:43:43 UTC	4427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 17 00 00 00 1a 08 06 00 00 00 9d 3a 18 be 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR:tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49894	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg6.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "404c5-60f3210543740" accept-ranges: bytes content-length: 263365 content-type: image/jpeg connection: close
2024-07-02 14:43:43 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 08 09 08 06 0a 09 08 09 0c 0b 0a 0c 0f 1a 11 0f 0e 0e 0f 1f 16 18 13 1a 25 21 27 26 24 21 24 23 29 2e 3b 32 29 2c 38 2c 23 24 33 46 34 38 3d 3f 42 43 42 28 31 48 4d 48 40 4d 3b 41 42 3f ff db 00 43 01 0b 0c 0c 0f 0d 0f 1e 11 11 1e 3f 2a 24 2a 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 4d bd 85 59 14 Data Ascii: JFIFC%!'&$!$#).;2),8,#$3F48=?BCB(1HMH@M;AB?C?$??????????????????????????????????????????????????MY
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 12 59 00 b1 60 58 ac eb 9a e1 a4 b9 ab 12 db 51 61 50 20 2d 5b 35 a9 d2 e3 49 ad c9 a6 56 14 00 09 09 66 51 64 33 64 a9 29 05 04 67 3a 80 d2 5d 4b 65 ab 60 a2 2d 5b 9d 6a 5b 2e 9a e9 9b 48 d5 81 a5 4b a9 69 42 a5 8d 20 09 33 9d 73 e7 aa 9a d4 d6 a6 f5 95 20 4c db 64 8e 18 eb 99 7a 6b 36 ca 9a b2 2e 73 62 f5 d7 3a 61 79 e7 72 5e 78 dc 8d eb 22 c5 41 53 d1 db 96 b7 9a 69 00 14 00 02 21 6a 40 15 62 02 80 85 00 00 2a 40 0a 42 90 00 a0 00 00 21 44 00 0a 42 8b 23 9e 77 e0 f3 7a 7c bc 7b f9 79 76 e3 cf a7 2e 7d 31 28 01 0a 4a 09 4d 5c eb 73 b7 4e 7f 43 d9 e5 eb d3 9c 97 19 df 6d f2 eb bc 6e e6 a7 4d 66 a7 39 bf c6 fe 43 f4 f4 0a b0 a1 40 05 aa 28 12 d8 02 cb 50 a2 c9 a8 45 2c 59 2c 58 a5 8b 54 00 8a 92 82 c9 4a 2c a8 d2 97 45 2a a2 82 9a 04 33 6e 57 1a d6 75 ac Data Ascii: Y`XQaP -[5IVfQd3d)g:]Ke`-[j[.HKiB 3s Ldzk6.sb:ayr^x"ASi!j@b@B!DB#wz\|{yv.}1(JM\sNCmnMf9C@(PE,Y,XTJ,E3nWu
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: db cc cf ec 39 7a 38 f0 ef f3 fa 63 c7 d7 97 1d 67 95 c3 53 e9 63 ab 9e fe 77 4e 58 de 7d 3c fa fb 78 f7 e3 d7 1c d8 f2 75 e3 9b 32 40 10 2d a7 da e1 d7 e3 f4 e7 8d 67 ac b8 d4 d1 cd 3d 9c fa 6b 53 b7 6e 5f 3b 9e b9 94 d2 eb 2e a9 ae dc 7f 6f 1c 3c da fc 3f 7d ea de c7 d8 e7 bf 95 ac f9 2e 49 48 7d 23 f5 be 5f 99 e1 eb e8 f2 fa 7a fc fe f9 f2 ed e9 f4 71 f4 7a b8 ea cd eb 3f 13 e3 7d 2c 67 5f 63 ea 78 7b 74 e7 d7 59 de a6 ed d4 ba 37 2f 45 b3 5b 8e 93 5a 5d e7 5b 3a 65 d2 6b 71 d2 6b ac bd 31 7a 66 f4 5d c6 e3 71 b9 aa 6a 4d 2e 93 50 aa 24 b6 43 52 de 7d 8b 9e de 6a c9 2a 4a cd cc ac a6 d6 e4 2a f9 35 5a 9b 93 b4 9b 8e d1 d6 29 52 a0 a5 35 14 a7 3b 3a e6 ea 2d 42 cb f9 2f a3 f3 fe f7 93 d5 c7 4f c0 fd 5f 9f fb ef 95 f4 21 fc f3 eb 7c ff 00 a7 c7 b7 d9 f3 Data Ascii: 9z8cgScwNX}<xu2@-g=kSn_;.o<?}.IH}#_zqz?},g_cx{tY7/E[Z][:ekqk1zf]qjM.P$CR}jJ5Z)R5;:-B/O_!\|
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 94 01 52 a8 29 09 72 25 68 15 6c b4 85 00 a0 00 2c 58 49 44 89 6d a2 25 20 00 80 05 00 b2 d2 a8 14 80 a4 48 54 80 88 20 21 6c 58 4b 56 97 39 28 2d 5b 28 ab a8 4b 5a b9 ba 96 ad 2a a0 50 ba 94 d2 2c 50 55 48 55 59 68 00 35 a9 ab 35 ac d2 1d 19 d3 3b 4e fc f5 da 6b d5 cf 5b 9a ef 8d f6 e7 d0 77 e7 be f9 d5 5e 75 c6 bc 7b cf 1d 66 6b 38 06 ec eb 2e e3 24 6b 52 ef 3a ed 8d 0c 9b 8e d2 d4 96 e2 c9 73 9d 22 72 e9 9e 7a ce 6e 78 ea 73 d4 cd 62 58 65 73 2c 33 64 41 05 99 b1 72 d6 46 ac b2 75 ce af 0e f7 87 a7 5c ba de 1d ef 93 b5 98 df 6e 3a e9 8e bb e5 e8 eb c7 d5 d3 8f d3 ef e3 f5 6b 3c b5 8f 91 de 78 77 7c bc bd bc 7c 7e fc fc ff 00 6d f2 f6 d7 9f a6 f9 6f 78 d7 4c 5d e6 e8 de 6e a5 d1 a8 dc b7 0d d6 a3 79 6a 2a ea 2c bb 35 1a 35 16 28 2a ee 2c 68 ab 62 94 a5 Data Ascii: R)r%hl,XIDm% HT !lXKV9(-[(KZP,PUHUYh55;Nk[w^u{fk8.$kR:s"rznxsbXes,3dArFu\n:k<xw\|\|~moxL]nyj,55(*,hb
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 9a 4d d7 43 55 a3 a5 69 2a d4 28 a6 8d a6 ec 28 91 57 31 8c dc 67 58 97 9e 2e 73 ad 46 ab 39 a3 24 c5 b2 e3 37 39 b1 66 49 6a ea 05 4d 59 6a c6 b5 9d 50 b5 32 ba 96 a6 6f 1e 7a e3 9d e6 00 b5 93 19 23 5a 28 64 16 c8 49 72 62 35 58 39 c6 65 ca aa 22 cc ae 48 43 04 33 0b 31 6c 45 b1 30 42 92 a5 4a c4 4a c9 28 72 8c 4a a8 99 b6 04 56 00 ac 90 55 48 67 40 41 ad 4c 16 a0 07 1c b3 2c 4c 92 94 ac 95 25 41 64 20 2a 4a d5 58 2a 34 85 08 b0 8a 51 02 d2 0a 21 b9 29 09 6c 4a 01 41 92 80 51 0a 56 49 40 51 16 91 28 0a 64 1b c8 42 88 01 40 51 10 a4 04 a0 21 4a 22 81 69 0a 09 48 b5 20 28 29 0a 00 00 85 10 ab 5c ca 91 6c 50 6e 25 00 10 ac 9a 10 a1 08 6c b0 a4 28 00 00 84 15 08 94 29 00 56 48 08 92 80 e3 ed f0 f4 3a 4b e8 2a ee 19 b9 5d cd 58 e9 2d 8e d2 f7 8e 95 d4 ea 9a Data Ascii: MCUi((W1gX.sF9$79fIjMYjP2oz#Z(dIrb5X9e"HC31lE0BJJ(rJVUHg@AL,L%Ad JX4Q!)lJAQVI@Q(dB@Q!J"iH ()\lPn%l()VH:K]X-
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 6a e4 70 44 4e d0 ca 53 dc 47 7a 0c 7a fd 9f 39 2f 71 7b e9 53 a8 3e 85 66 de 3d 1e 39 d3 e5 71 21 cc 38 c6 39 f9 a2 53 75 b0 4b a3 d9 99 a0 55 8d b3 c1 0d 83 0b 79 13 48 22 5d 81 d9 8c 4c c8 62 21 6c 06 5b eb d0 4b 10 6d 04 18 31 0f 90 be c2 6f 59 e0 13 f6 43 7d 63 37 93 63 0d e5 1e 01 05 5a ae 15 75 84 96 15 29 ba 46 fb f4 18 cd c7 ea b7 fa 22 5a bb d5 97 f6 6a ed b9 07 3a 68 d4 ea 28 46 5c c3 df 38 ef 1e c3 e2 36 09 59 85 b5 a5 41 ce 9a 2c d7 22 8a 75 26 e0 f9 32 9b 5b 29 be 94 50 39 f3 a5 9e 7e 41 a9 46 9e db 8a fe c1 56 d0 53 df 63 92 76 7c 37 93 4b ea 2f 2a f1 de 0a 5f 53 08 42 69 95 d0 8d ee 87 81 19 94 46 c8 1e e1 a2 13 44 47 b9 1b 8f 04 90 4f 62 45 04 d5 ae 42 46 e1 79 3a 60 2b e0 48 65 29 91 26 dc 2f 3b ae 8c c6 fe 1d 87 dd c4 74 7a 62 96 58 eb Data Ascii: jpDNSGzz9/q{S>f=9q!89SuKUyH"]Lb!l[Km1oYC}c7cZu)F"Zj:h(F\86YA,"u&2[)P9~AFVScv\|7K/*_SBiFDGObEBFy:`+He)&/;tzbX
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 70 12 ac 24 b0 c4 1e bb 06 7a 59 77 42 49 ef 07 74 44 22 13 ec 2b 61 64 db 8f ba c1 6f 44 62 38 70 13 4f 76 be 53 f8 24 98 b6 33 53 f0 21 6b 67 72 57 b0 5e fe 4c 6b 74 ad 50 dc 13 d2 a2 44 a5 4b 9e 9c 7b 04 51 0a 52 94 a5 29 44 c4 e5 13 28 99 44 f5 22 e8 b7 81 6b 74 45 62 5a 63 4a a4 21 3a 6f 44 e8 51 81 ac 7c 98 b9 3d 02 fc 2e b3 0d 95 31 5b 61 30 dc 68 96 63 63 1b 05 f7 1b 36 76 99 91 13 6e 43 0d 86 fe c2 8f 63 33 ec 62 92 53 c2 37 31 ba 9a e4 21 93 d0 ee 80 bd 82 20 9f 0c b6 8f 31 44 f4 75 1e 38 8a 13 08 2b 22 cb d8 52 52 68 c5 ca 79 05 3a fc 6f 61 32 48 6f 91 60 a2 b8 b0 93 fe 4c af f3 ee 84 9a ae 8b 63 6f e0 48 48 c4 b8 07 03 ee a6 f0 5c 9c af 76 e1 35 78 56 6d ee 2f 1e b7 30 b7 6f be 03 01 5a f1 82 96 ca 9b 3a a4 97 bb 12 b2 ce ee 8d e8 84 35 e2 1c Data Ascii: p$zYwBItD"+adoDb8pOvS$3S!kgrW^LktPDK{QR)D(D"ktEbZcJ!:oDQ\|=.1[a0hcc6vnCc3bS71! 1Du8+"RRhy:oa2Ho`LcoHH\v5xVm/0oZ:5
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: d8 cc 15 14 ac ba 25 a1 58 8a 92 0c cd 30 1d 29 81 7f 1a 52 94 5f 4f 6e bf b3 27 de 94 a2 7a 53 06 34 a6 0f a3 f6 60 c6 97 4f a3 e8 87 ef 48 42 10 82 42 44 77 78 bb 7b 3b d4 f2 b7 6b e3 4a 25 6d aa a3 74 52 f5 2d 2e b7 ae 97 d0 7b c4 36 6a f7 30 84 21 08 42 10 84 21 09 f8 05 d4 e5 31 f9 69 d5 09 d6 84 21 09 d1 34 84 21 05 42 e9 b6 d0 9a 88 a9 10 dc 2a 64 5e 0f 89 c1 c9 04 ec 29 a0 7a 4f b4 f3 68 df 5a f4 2f 49 14 60 84 7c 14 6c a3 61 29 7a 97 a1 17 d9 4d 7e 5a 7d eb 08 b9 21 9f 4a 10 9a cd 21 35 84 21 09 ee d4 37 50 fb c3 fb 7a 74 be 95 e9 a7 00 bc 84 92 d9 2f 7b 09 a4 21 08 42 10 9f 81 c7 e6 e3 d2 74 4d 21 08 25 a4 d2 52 10 9d 01 69 f8 09 89 37 e9 59 89 09 8d 0b c3 47 64 27 26 5b 68 4f b8 48 42 09 a4 21 26 28 7d 08 b4 48 44 62 10 9a 90 c0 f4 e4 63 24 17 Data Ascii: %X0)R_On'zS4`OHBBDwx{;kJ%mtR-.{6j0!B!1i!4!B*d^)zOhZ/I`\|la)zM~Z}!J!5!7Pzt/{!BtM!%Ri7YGd'&[hOHB!&(}HDbc$
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: ab 76 db b5 ad 6e 7f c8 fc 8e 6e 6e 5e 5e 4b 3c d4 ca f4 6d b7 dd 24 92 f1 81 4a 52 95 ad 6a 92 59 19 7c 70 d8 f8 1b dd f8 ff 00 d0 61 09 e6 86 4a 4e 52 9e 47 0e 01 83 35 0f 78 e4 fa 8c 72 3d 62 7a 83 d0 61 96 4e 30 8c 65 b9 dc 9f 54 6c 7a 8c 3f 16 f1 f9 de 36 db 6d b6 db f1 2f 41 bc 7d 92 58 96 ea b5 55 ad 6b 5a d6 94 a5 38 f8 f8 f8 b8 b8 b8 f4 e0 fc 6b b8 dd 25 54 bc 89 55 6c 97 8c 6e 97 ad ab b1 c8 6f 21 2c 8f 53 dc 64 70 f9 47 9a 58 30 7b a3 b8 04 24 92 49 62 5e 63 f2 cb 17 85 b6 f7 ad 6b 5a d6 ab 76 dd ad 6b 5e fc 9c 9c 97 bd ad 6b 5e f6 b5 af 7b df 93 93 93 93 92 f7 b3 76 bf 27 2f 2f 37 3f e4 7e 44 75 e1 d9 24 bd 91 e5 1d d2 49 6e aa 97 82 67 68 ec 30 ca 58 3c a3 0f cc 3c 1d d9 3b 3f 9b 78 db 6d f5 6d e3 b5 ad 6b 5b c4 ab b1 d9 f7 49 2c 49 2f 1a 49 Data Ascii: vnnn^^K<m$JRjY\|paJNRG5xr=bzaN0eTlz?6m/A}XUkZ8k%TUlno!,SdpGX0{$Ib^ckZvk^k^{v'//7?~Du$Ingh0X<<;?xmmk[I,I/I
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 4c d9 31 0e aa 9e dc 2f 10 c2 ea 0e 06 71 17 c1 16 a3 8b 11 99 20 43 70 58 66 18 16 56 f0 4b d4 74 da 35 36 8b 0b 8f ba 5f a9 78 2e a5 e0 fa 83 e4 84 80 e2 52 64 95 36 20 52 aa 03 94 8b 5b 31 4e 2e 3e e3 f1 02 b0 45 30 dd e6 5a 6b cf 57 50 f9 2a 78 85 0a 34 39 1b c3 39 06 e9 b9 2e 85 e9 0d e5 32 d5 8b b0 f0 cd ca 56 4c 12 c4 78 d6 59 3b 8c 80 a5 cc 52 ec 06 56 13 99 b7 1d 41 08 ba e2 0f 56 17 65 35 98 54 36 04 b3 29 98 22 5c 37 f7 0c a0 10 24 ac 8e 21 81 00 84 92 41 04 90 3a 74 49 24 05 11 7d 43 a1 3c 26 f1 24 a4 ca a6 e6 2c 98 ba 88 2c 0d a1 04 12 41 03 31 9a de b8 80 47 14 fa 84 5c 15 fb e9 52 82 16 a1 7d 1d e5 ad 71 8f 0c 11 46 80 d1 52 b5 a8 68 86 d3 66 71 6a 88 2c 50 50 29 55 b0 fa 49 9d 3b cc 60 75 cb 70 6f 02 dd 90 d1 2e f4 05 86 b1 d8 39 a9 9b 09 Data Ascii: L1/q CpXfVKt56_x.Rd6 R[1N.>E0ZkWP*x499.2VLxY;RVAVe5T6)"\7$!A:tI$}C<&$,,A1G\R}qFRhfqj,PP)UI;`upo.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49900	104.17.128.172	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	519	OUT	GET /fb.js HTTP/1.1 Host: js.hsadspixel.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:43 UTC	1324	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 18 Jun 2024 12:46:30 UTC ETag: W/"b233ea75981268a81228cd819e8fd5eb" x-amz-server-side-encryption: AES256 x-amz-version-id: 7Zz_oLsqoY3yHsxt9nM5YRwsj1MKwqFV Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dfc1931cc62ecd4133c2b9bdae1bb476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: 3ECiA3tkpEW0VFjID5qcPIPV7RJfgkRO_nm3kvGTscN2LpCH8BF7BQ== Age: 239 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=adsscriptloaderstatic/static-1.565/bundles/pixels-release.js&cfRay=89cf630c0f74c445-EWR Cache-Control: max-age=600 X-HS-Target-Asset: adsscriptloaderstatic/static-1.565/bundles/pixels-release.js X-Content-Type-Options: nosniff X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 0 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ac68800c-d1de-4238-8714-b52a1c427065 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-65f7f7c749-5s6qd x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-07-02 14:43:43 UTC	202	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 63 36 38 38 30 30 63 2d 64 31 64 65 2d 34 32 33 38 2d 38 37 31 34 2d 62 35 32 61 31 63 34 32 37 30 36 35 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 41 64 73 53 63 72 69 70 74 4c 6f 61 64 65 72 43 6c 6f 75 64 66 6c 61 72 65 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 63 66 36 38 65 31 64 62 30 65 34 32 62 64 2d 45 57 52 0d 0a 0d 0a Data Ascii: x-request-id: ac68800c-d1de-4238-8714-b52a1c427065cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflareCF-RAY: 89cf68e1db0e42bd-EWR
2024-07-02 14:43:43 UTC	1212	IN	Data Raw: 31 38 39 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 6f 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 3b 69 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6f 3d 5b 7b 6e 61 6d 65 3a 22 68 65 61 64 2d 64 6c 62 2f 62 75 6e 64 6c 65 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6a 73 22 2c 70 61 74 68 3a 22 68 65 61 64 2d 64 6c 62 2f 73 74 61 74 69 63 2d 31 2e 38 30 39 2f 62 75 6e 64 6c 65 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6a 73 Data Ascii: 1893!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.809/bundle.production.js
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 73 73 63 72 69 70 74 6c 6f 61 64 65 72 73 74 61 74 69 63 2f 73 74 61 74 69 63 2d 31 2e 35 36 35 2f 22 3b 74 28 74 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 3b 63 6f 6e 73 74 20 6f 3d 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 2c 69 3d 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 2c 61 3d 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 2c 72 3d 7b 50 52 4f 44 3a 22 70 72 6f 64 22 2c 51 41 3a 22 71 61 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 73 63 72 69 70 74 5b 24 7b 65 7d 5d 60 29 3b 72 Data Ascii: sscriptloaderstatic/static-1.565/";t(t.s=0)}([function(e,n,t){"use strict";t.r(n);const o="data-hsjs-portal",i="data-hsjs-env",a="data-hsjs-hublet",r={PROD:"prod",QA:"qa"};function d(e){if(!e)return null;const n=document.querySelectorAll(`script[${e}]`);r
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 3a 22 64 5a 54 51 31 5a 6d 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 74 28 22 6a 73 22 2c 6e 65 77 20 44 61 74 65 29 3b 74 28 22 73 65 74 22 2c 22 64 65 76 65 6c 6f 70 65 72 5f 69 64 2e 22 2b 6e 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 28 22 63 6f 6e 66 69 67 22 2c 22 41 57 2d 22 2b 65 5b 6f 5d 2e 70 69 78 65 6c 49 64 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 6e 5d 2e 70 69 78 65 6c 49 64 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e Data Ascii: :"dZTQ1Zm";function t(){dataLayer.push(arguments)}t("js",new Date);t("set","developer_id."+n,!0);for(var o=0;o<e.length;o++)t("config","AW-"+e[o].pixelId)}function b(e){for(var n=0;n<e.length;n++){const t=e[n].pixelId;window._linkedin_data_partner_ids=win
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 22 63 6f 6e 73 65 6e 74 22 2c 22 75 70 64 61 74 65 22 2c 7b 61 64 5f 73 74 6f 72 61 67 65 3a 22 64 65 6e 69 65 64 22 2c 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 3a 22 64 65 6e 69 65 64 22 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 7b 6a 73 6f 6e 55 72 6c 3a 65 2c 6a 73 6f 6e 70 55 72 6c 3a 6e 7d 2c 74 2c 6f 29 7b 69 66 28 21 65 26 26 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 6a 73 6f 6e 55 72 6c 20 61 6e 64 20 6a 73 6f 6e 70 55 72 6c 20 61 72 67 73 22 29 3b 75 28 29 3f 4f 28 65 2c 74 29 3a 50 28 6e 2c 74 2c 6f 29 7d 63 6f 6e 73 74 20 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 60 68 74 74 70 73 3a 2f 2f 24 7b 65 7d 3f 70 6f 72 74 61 6c 49 64 3d 24 7b 63 28 29 7d 60 7d 2c 4f 3d 66 75 6e Data Ascii: "consent","update",{ad_storage:"denied",analytics_storage:"denied"})}}function _({jsonUrl:e,jsonpUrl:n},t,o){if(!e&&!n)throw new Error("Missing jsonUrl and jsonpUrl args");u()?O(e,t):P(n,t,o)}const y=function(e){return`https://${e}?portalId=${c()}`},O=fun
2024-07-02 14:43:43 UTC	980	IN	Data Raw: 55 73 65 72 54 6f 6b 65 6e 4c 69 73 74 65 6e 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 65 3b 69 26 26 76 28 69 2c 61 29 7d 5d 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 65 3d 3e 7b 69 66 28 65 2e 64 61 74 61 26 26 22 68 73 46 6f 72 6d 43 61 6c 6c 62 61 63 6b 22 3d 3d 3d 65 2e 64 61 74 61 2e 74 79 70 65 26 26 22 6f 6e 46 6f 72 6d 53 75 62 6d 69 74 74 65 64 22 3d 3d 3d 65 2e 64 61 74 61 2e 65 76 65 6e 74 4e 61 6d 65 29 7b 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 46 41 43 45 42 4f 4f 4b 26 26 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 46 41 43 45 42 4f 4f 4b 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 72 Data Ascii: UserTokenListener",function(e){a=e;i&&v(i,a)}]);window.addEventListener("message",e=>{if(e.data&&"hsFormCallback"===e.data.type&&"onFormSubmitted"===e.data.eventName){window.enabledEventSettings.FACEBOOK&&window.enabledEventSettings.FACEBOOK.forEach(n=>{r
2024-07-02 14:43:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49899	172.64.153.27	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	533	OUT	GET /v2/4372769/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:43 UTC	1330	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:43 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: mcbMePPAFi0Qpb5/PFM0QCYwxBeAkDjHeBr9RlW2ANdXNQEXWSpsbJX4Cfm2mNwnrGYcQUofJAM= x-amz-request-id: CBTCFGWZZ4CFTMB5 Last-Modified: Mon, 15 Apr 2024 14:23:05 GMT ETag: W/"ab8232d64f705ce331feb27e10d076d6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: pZ1ew3n7OvzfVNcuUPEXlTC4i0M8c.Yo Access-Control-Allow-Origin: https://www.above.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-07-02 14:43:43 UTC	763	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 36 30 34 38 30 30 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 56 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 32 20 4a 75 6c 20 32 30 32 34 20 31 Data Ascii: Access-Control-Expose-Headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-TimingAccess-Control-Allow-Credentials: trueAccess-Control-Max-Age: 604800Timing-Allow-Origin: *Vary: originExpires: Tue, 02 Jul 2024 1
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 74 72 65 6c 6c 69 61 6e 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.trellian.com']);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCook
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 6e 2e 64 28 74 2c 22 61 22 2c 74 29 3b 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 3b 6e 2e 70 3d 22 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f 63 6f 6f 6b 69 65 2d 62 61 6e 6e 65 72 2d 6a 73 2f 73 74 61 74 69 63 2d 31 2e 32 31 33 31 2f 22 3b 6e 28 6e 2e 73 3d 34 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 65 2c 74 3b 74 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 3b 74 68 69 73 Data Ascii: t}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/cookie-banner-js/static-1.2131/";n(n.s=4)}([function(e,t,n){var o;function s(){var e,t;t=arguments[0]\|\|{};this
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 2c 6f 3d 7b 7d 3b 66 6f 72 28 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 29 66 6f 72 28 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 6f 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 5d 29 7b 6f 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 5d 3d 21 30 3b 6e 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 29 7d 72 65 74 75 72 6e Data Ascii: 0;n<t.length;n++)if(t[n]==e)return n;return-1}function o(){var e,t,n=[],o={};for(e=0;e<arguments.length;e++)if(arguments[e]&&arguments[e].length)for(t=0;t<arguments[e].length;t++)if(!o[arguments[e][t]]){o[arguments[e][t]]=!0;n.push(arguments[e][t])}return
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 65 6c 73 65 20 69 66 28 2d 31 21 3d 6e 28 65 2c 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 66 6f 72 28 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 29 7d 69 Data Ascii: element.setAttributeNode(u)}}else if(-1!=n(e,this.whitelist_nodes)){this.current_element=e.cloneNode(!0);for(;this.current_element.childNodes.length>0;)this.current_element.removeChild(this.current_element.firstChild);i.appendChild(this.current_element)}i
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 27 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 64 69 76 2c 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 70 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 65 6d 7d 23 68 73 2d 62 61 Data Ascii: .exports='#hs-banner-parent div,#hs-banner-parent p{color:inherit}#hs-banner-parent *{font-size:inherit;font-family:inherit;background:none;border:none;box-shadow:none;box-sizing:border-box;margin:0;padding:0;display:inline-block;line-height:1.75em}#hs-ba
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 31 35 32 39 35 61 29 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 Data Ascii: -gpc-close-button{cursor:pointer;display:block}#hs-banner-gpc #hs-banner-gpc-close-button svg{width:var(--hs-banner-font-size,14px);height:var(--hs-banner-font-size,14px);color:var(--hs-banner-text-color,#15295a)}#hs-banner-parent #hs-eu-cookie-confirmati
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 30 2c 31 32 38 2c 32 35 35 2c 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 2d 77 Data Ascii: ion #hs-eu-cookie-confirmation-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2em)}#hs-eu-cookie-confirmation #hs-eu-cookie-confirmation-inner button:focus{box-shadow:0 0 0 2px rgba(0,128,255,.5);box-shadow:0 0 0 2px -w
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 Data Ascii: var(--hs-banner-accept-text-color,#fff);background:var(--hs-banner-accept-color,var(--hs-banner-accentColor,#425b76));border:1px solid var(--hs-banner-accept-border-color,var(--hs-banner-accentColor,#425b76))}#hs-eu-cookie-confirmation #hs-eu-decline-butt
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 65 72 73 2c 31 32 70 78 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 38 70 78 20 32 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 38 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 22 4c 61 74 6f 22 29 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 31 35 32 39 35 61 29 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 Data Ascii: ers,12px);box-shadow:0 8px 28px rgba(0,0,0,.28);font-size:var(--hs-banner-modal-font-size,14px);font-family:var(--hs-banner-font-family,"Lato"),sans-serif;font-weight:400;line-height:1.75em;color:var(--hs-banner-modal-text-color,#15295a)}#hs-modal-content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49897	104.16.75.142	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	537	OUT	GET /conversations-embed.js HTTP/1.1 Host: js.usemessages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:43 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Fri, 21 Jun 2024 14:34:54 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: yFTRQFC1g6ZpuTIoktepwBCyrzt6F_8h ETag: W/"d5ed42fdc505d7812288ee600abec355" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d0d53eedec01ac540f737b5fafb16436.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: _d-M_qC-tESlWoTkHgTOgzQdSQQ4hhAP6F45ydrYIDL5ZzGUl0y8SQ== Age: 139 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=conversations-embed/static-1.16706/bundles/project.js&cfRay=89cf657d0c8718c0-EWR Cache-Control: max-age=600 X-HS-Target-Asset: conversations-embed/static-1.16706/bundles/project.js X-Content-Type-Options: nosniff X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5a966b8c-1981-4b49-88a3-b05383b33763 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-65f7f7c749-th2td x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 5a966b8c-1981-4b49-88a3-b05383b33763
2024-07-02 14:43:43 UTC	144	IN	Data Raw: 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 65 6d 62 65 64 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 63 66 36 38 65 31 64 38 33 31 63 34 36 31 2d 45 57 52 0d 0a 0d 0a Data Ascii: cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflareCF-RAY: 89cf68e1d831c461-EWR
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 69 66 28 74 5b 73 5d 29 72 65 74 75 72 6e 20 74 5b 73 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 73 5d 3d 7b 69 3a 73 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 73 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 69 29 3b 6e 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 3b 69 2e 63 3d 74 3b 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 73 7d 29 7d 3b 69 Data Ascii: 7ff9!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 69 28 39 31 29 2c 61 3d 69 28 31 31 33 29 2c 64 3d 69 28 34 30 29 2c 6c 3d 69 28 33 33 29 2c 63 3d 69 28 33 34 29 2c 75 3d 73 28 69 28 34 33 29 29 2c 68 3d 69 28 34 31 29 2c 67 3d 73 28 69 28 34 32 29 29 2c 70 3d 69 28 31 31 34 29 2c 66 3d 69 28 31 30 30 29 3b 63 6f 6e 73 74 20 6d 3d 28 29 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 60 6c 6f 61 64 49 6d 6d 65 64 69 61 74 65 6c 79 20 69 73 20 73 65 74 20 74 6f 20 66 61 6c 73 65 20 61 6e 64 20 77 69 64 67 65 74 2e 6c 6f 61 64 28 29 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 20 6f 6e 20 77 69 6e 64 6f 77 2e 24 7b 63 2e 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 7d 20 79 65 74 2e 20 50 6c 65 61 73 65 20 63 61 6c 6c 20 77 69 64 67 65 74 2e 6c 6f 61 64 28 29 20 66 69 72 73 74 20 6f 72 20 Data Ascii: i(91),a=i(113),d=i(40),l=i(33),c=i(34),u=s(i(43)),h=i(41),g=s(i(42)),p=i(114),f=i(100);const m=()=>{console.warn(`loadImmediately is set to false and widget.load() has not been called on window.${c.GLOBAL_VARIABLE} yet. Please call widget.load() first or
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 68 65 6c 6c 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 69 28 34 29 2c 6f 3d 69 28 37 29 2c 72 3d 69 28 38 29 2c 61 3d 69 28 39 29 2c 64 3d 73 28 69 28 31 33 29 29 2c 6c 3d 69 28 31 35 29 2c 63 3d 69 28 31 36 29 2c 75 3d 69 28 31 38 29 2c 68 3d 73 28 69 28 31 37 29 29 2c 67 3d 69 28 31 39 29 2c 70 3d 69 28 32 32 29 2c 66 3d 69 28 32 33 29 2c 6d 3d 69 28 32 34 29 2c 45 3d 69 28 32 35 29 2c 5f 3d 69 28 32 36 29 2c 49 3d 69 28 33 30 29 2c 76 3d 69 28 33 39 29 2c 54 3d 69 28 34 30 29 2c 62 3d 69 28 34 31 29 2c 4f 3d 73 28 69 28 34 32 29 29 2c 53 3d 73 28 69 28 34 33 29 29 2c 79 3d 69 28 34 39 29 2c 41 3d 69 28 35 30 29 2c 43 3d 69 28 35 32 29 2c 50 3d 69 28 35 33 29 2c 4d 3d 69 28 35 34 29 2c 52 3d 69 28 33 32 29 2c 4c 3d 73 28 69 28 35 37 29 29 2c 77 3d 73 28 Data Ascii: hell=void 0;var n=i(4),o=i(7),r=i(8),a=i(9),d=s(i(13)),l=i(15),c=i(16),u=i(18),h=s(i(17)),g=i(19),p=i(22),f=i(23),m=i(24),E=i(25),_=i(26),I=i(30),v=i(39),T=i(40),b=i(41),O=s(i(42)),S=s(i(43)),y=i(49),A=i(50),C=i(52),P=i(53),M=i(54),R=i(32),L=s(i(57)),w=s(
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 5f 41 4c 49 47 4e 45 44 22 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 5b 6b 2e 57 49 44 47 45 54 5f 4c 4f 43 41 54 49 4f 4e 5d 3a 22 52 49 47 48 54 5f 41 4c 49 47 4e 45 44 22 2c 74 3d 65 3f 22 72 69 67 68 74 22 3a 22 6c 65 66 74 22 2c 69 3d 60 24 7b 75 2e 63 6f 6f 6b 69 65 73 2e 57 49 44 47 45 54 5f 50 4f 53 49 54 49 4f 4e 7d 5f 24 7b 74 7d 60 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 2e 50 41 52 45 4e 54 5f 49 44 29 2c 6e 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 73 29 2c 6f 3d 70 61 72 73 65 49 6e 74 28 6e 2e 62 6f 74 74 6f 6d 2c 31 30 29 2c 61 3d 65 3f 70 61 72 73 65 49 6e 74 28 6e 2e 72 69 67 68 74 2c 31 30 29 3a 70 61 72 73 65 49 6e 74 28 6e 2e 6c 65 66 74 2c 31 30 Data Ascii: _ALIGNED"===this.widgetData[k.WIDGET_LOCATION]:"RIGHT_ALIGNED",t=e?"right":"left",i=`${u.cookies.WIDGET_POSITION}_${t}`,s=document.getElementById(v.PARENT_ID),n=window.getComputedStyle(s),o=parseInt(n.bottom,10),a=e?parseInt(n.right,10):parseInt(n.left,10
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 61 74 65 73 3a 74 7d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 3b 69 66 28 21 74 7c 7c 21 74 5b 22 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 3a 44 72 61 67 67 61 62 6c 65 43 68 61 74 22 5d 7c 7c 28 30 2c 6e 2e 69 73 41 6e 79 4d 6f 62 69 6c 65 29 28 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 22 52 49 47 48 54 5f 41 4c 49 47 4e 45 44 22 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 5b 6b 2e 57 49 44 47 45 54 5f 4c 4f 43 41 54 49 4f 4e 5d 3f 22 72 69 67 68 74 22 3a 22 6c 65 66 74 22 3b 74 68 69 73 2e 64 72 61 67 48 61 6e 64 6c 65 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 68 69 73 2e 64 72 61 67 48 61 6e 64 6c 65 45 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 73 2d 64 72 Data Ascii: ates:t}=this.widgetData;if(!t\|\|!t["Conversations:DraggableChat"]\|\|(0,n.isAnyMobile)())return;const i="RIGHT_ALIGNED"===this.widgetData[k.WIDGET_LOCATION]?"right":"left";this.dragHandleEl=document.createElement("div");this.dragHandleEl.classList.add("hs-dr
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 31 2e 31 34 31 37 20 32 30 2e 35 37 35 5a 4d 31 38 20 30 48 32 30 2e 32 39 31 37 43 32 30 2e 39 32 32 35 20 30 20 32 31 2e 34 33 33 33 20 30 2e 35 31 30 38 33 33 20 32 31 2e 34 33 33 33 20 31 2e 31 34 31 36 37 56 33 2e 34 33 33 33 33 43 32 31 2e 34 33 33 33 20 34 2e 30 36 34 31 37 20 32 30 2e 39 32 32 35 20 34 2e 35 37 35 20 32 30 2e 32 39 31 37 20 34 2e 35 37 35 48 31 38 43 31 37 2e 33 36 39 32 20 34 2e 35 37 35 20 31 36 2e 38 35 38 33 20 34 2e 30 36 34 31 37 20 31 36 2e 38 35 38 33 20 33 2e 34 33 33 33 33 56 31 2e 31 34 31 36 37 43 31 36 2e 38 35 38 33 20 30 2e 35 31 30 38 33 33 20 31 37 2e 33 36 39 32 20 30 20 31 38 20 30 5a 4d 31 38 20 36 2e 38 35 38 33 33 48 32 30 2e 32 39 31 37 43 32 30 2e 39 32 32 35 20 36 2e 38 35 38 33 33 20 32 31 2e 34 33 33 33 Data Ascii: 1.1417 20.575ZM18 0H20.2917C20.9225 0 21.4333 0.510833 21.4333 1.14167V3.43333C21.4333 4.06417 20.9225 4.575 20.2917 4.575H18C17.3692 4.575 16.8583 4.06417 16.8583 3.43333V1.14167C16.8583 0.510833 17.3692 0 18 0ZM18 6.85833H20.2917C20.9225 6.85833 21.4333
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 3d 22 33 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 3c 2f 72 65 63 74 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 2f 73 76 67 3e 5c 6e 20 20 20 20 27 3b 74 68 69 73 2e 64 72 61 67 4f 76 65 72 6c 61 79 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 68 69 73 2e 64 72 61 67 4f 76 65 72 6c 61 79 45 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 73 2d 64 72 61 67 2d 6f 76 65 72 6c 61 79 22 29 3b 63 6f 6e 73 74 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 2e 50 41 52 45 4e 54 5f 49 44 29 3b 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 64 72 61 67 4f 76 65 72 6c 61 79 45 6c 29 3b 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 Data Ascii: ="32" fill="white"></rect></clipPath></defs></svg>\n ';this.dragOverlayEl=document.createElement("div");this.dragOverlayEl.classList.add("hs-drag-overlay");const s=document.getElementById(v.PARENT_ID);s.appendChild(this.dragOverlayEl);s.appendChild(thi
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 72 61 6d 65 4c 6f 61 64 29 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 2e 72 6f 6c 65 3d 22 72 65 67 69 6f 6e 22 3b 74 2e 61 72 69 61 4c 61 62 65 6c 3d 22 43 68 61 74 20 57 69 64 67 65 74 22 3b 69 66 28 28 30 2c 52 2e 73 68 6f 75 6c 64 45 6d 62 65 64 49 6e 6c 69 6e 65 29 28 29 29 7b 63 6f 6e 73 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 28 30 2c 52 2e 67 65 74 49 6e 6c 69 6e 65 45 6d 62 65 64 53 65 6c 65 63 74 6f 72 29 28 29 29 3b 69 66 28 21 69 29 7b 74 68 69 73 2e 64 65 76 4c 6f 67 67 65 72 2e 65 72 72 6f 72 28 60 63 61 6e 6e 6f 74 20 65 6d 62 65 64 20 77 69 64 67 65 74 20 2d 20 65 6c 65 6d 65 6e 74 20 61 74 20 5c 60 24 7b 28 30 2c 52 2e 67 Data Ascii: rameLoad);const t=document.createElement("div");t.role="region";t.ariaLabel="Chat Widget";if((0,R.shouldEmbedInline)()){const i=document.querySelector((0,R.getInlineEmbedSelector)());if(!i){this.devLogger.error(`cannot embed widget - element at \`${(0,R.g
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 72 73 61 74 69 6f 6e 73 2d 76 69 73 69 74 6f 72 2d 65 78 70 65 72 69 65 6e 63 65 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2e 76 69 73 69 74 6f 72 45 78 70 65 72 69 65 6e 63 65 41 72 69 61 4c 61 62 65 6c 73 2e 64 72 61 67 22 5d 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 2e 50 41 52 45 4e 54 5f 49 44 29 3b 74 26 26 73 26 26 28 73 2e 61 72 69 61 4c 61 62 65 6c 3d 74 29 3b 69 26 26 74 68 69 73 2e 64 72 61 67 48 61 6e 64 6c 65 45 6c 26 26 74 68 69 73 2e 64 72 61 67 48 61 6e 64 6c 65 45 6c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 69 29 7d 3b 74 68 69 73 2e 63 6c 61 6d 70 50 6f 73 69 74 69 6f 6e 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 67 61 74 65 73 3a 65 7d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 7c Data Ascii: rsations-visitor-experience-components.visitorExperienceAriaLabels.drag"],s=document.getElementById(v.PARENT_ID);t&&s&&(s.ariaLabel=t);i&&this.dragHandleEl&&this.dragHandleEl.setAttribute("title",i)};this.clampPosition=()=>{const{gates:e}=this.widgetData\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49892	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg5.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "52148-60f3210543740" accept-ranges: bytes content-length: 336200 content-type: image/jpeg connection: close
2024-07-02 14:43:43 UTC	1210	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e4 ce 0a 00 06 00 39 Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE9
2024-07-02 14:43:43 UTC	13032	IN	Data Raw: 41 08 56 a5 05 08 15 13 22 12 a5 98 42 12 a4 4a 00 42 94 57 63 81 5b 20 9a 62 00 01 8c 61 60 55 8a 1d 8c 06 35 11 81 48 05 6f e2 f7 10 0c 56 90 e9 ab 12 08 29 0c 20 d1 00 95 89 00 15 8a 1c a5 0a 86 30 47 60 d3 04 6a c6 30 00 09 0a 40 a4 30 04 61 00 ec 02 98 84 8c 2c 62 18 aa 85 55 14 14 0d 1e a3 46 a3 2c 29 84 8a c5 40 c4 08 95 0a 90 a0 5c ee 5a c5 44 22 62 6a 09 88 13 50 90 49 0b 2a a2 65 92 49 b9 91 00 84 0a 20 31 50 30 00 82 81 82 0a 20 ad 1c 16 b4 68 c6 ac 65 58 c0 74 e5 72 52 d2 90 43 02 ad 24 00 70 5a c2 15 0a 87 13 00 81 10 95 51 62 8a 52 92 08 d4 46 00 2a 00 62 87 45 31 e4 f5 18 e8 b0 82 80 80 10 b0 00 1e 45 8e d4 0c a0 01 00 86 a9 12 a4 6a 2b 82 c4 b4 08 c1 10 d4 01 2b 15 cb 09 44 2c 28 1a b0 aa 44 8d 1d 35 10 4a 50 aa 43 00 05 62 90 44 26 98 91 Data Ascii: AV"BJBWc[ ba`U5HoV) 0G`j0@0a,bUF,)@\ZD"bjPIeI 1P0 heXtrRC$pZQbRFbE1Ej++D,(D5JPCbD&
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 2f 66 67 4c c7 46 27 66 27 46 1d 3c db e5 a6 56 56 66 5a 9c 9d 5e 4f ab a7 36 f6 9a 8b a5 34 2d 2a 33 b7 3b 52 e7 6b 5a cb 4a d0 49 36 cc 24 13 9e b9 6e a1 29 94 a9 06 51 a2 77 f3 e5 ec 70 f3 d4 cf 1f 5d f9 fb bd 39 e7 dd ce 76 f3 76 73 74 73 9a 65 ae 6e b9 9a 4b 59 46 ef 3f 4d 70 77 df 9d df be 7b d7 a5 e7 e5 d1 cf 21 be 27 57 1c 6f 89 a4 9a e2 6d 89 70 18 ee 72 75 d6 5a d6 7a 46 ae 98 94 61 bb 8e eb 4f 9b fa 1d be 63 d3 df db f2 72 f4 b9 f0 8b 73 b6 2a 72 70 f3 1e 46 33 69 72 69 8b ae 0e 66 b3 1e 4b 08 c0 e6 7e 7d 47 0b 3c ab 80 28 00 44 b7 66 de 8c de e5 6b 2f a4 5d 2d 6e 55 8e c5 9b 1c 99 f0 65 e5 eb 9f 3d 5d 9a 6f 3a 74 56 a2 da 6b 39 ac b9 cc b0 35 5f 52 e9 17 44 6a e7 bd 2b 4d 1e ab b0 a3 69 d0 da 87 16 95 25 94 54 ae c5 69 aa 51 42 95 36 cd 4a 20 Data Ascii: /fgLF'f'F<VVfZ^O64-3;RkZJI6$n)Qwp]9vvstsenKYF?Mpw{!'WompruZzFaOcrsrpF3irifK~}G<(Dfk/]-nUe=]o:tVk95_RDj+Mi%TiQB6J
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: a4 6d 89 ae 32 d3 0d 4e 0e d7 cb f4 5f 1f b7 5f 13 af 5e 57 44 8c 4a 09 68 68 81 12 63 9d c4 d6 ba 9d 57 9e f7 95 1c f7 79 35 32 dd 3b 49 10 35 dd 9c fb bc 7c be b7 0e 5d 18 8e df 37 be fc bf 46 f8 b5 d7 a7 3a f4 71 35 97 97 77 8f 57 3d 24 4b 12 c4 d6 2d c4 b0 98 cb 8c ce 51 32 22 ac bd 4a b4 5b 73 ef cf 1d 2d c6 39 33 73 3a ab bd 3a e4 d0 c6 de 7d 6b 0b d2 5d 13 a0 d3 96 ec d0 d4 d1 2a 2a c7 0d 29 5b 2e aa 1a 23 3a c8 9a 8b 26 e4 49 b3 3b 30 cd e6 97 28 b8 f4 f3 c7 66 36 a9 bb c3 6d ac c6 77 6d ef 96 d2 89 98 59 b4 93 5e 6f 4e 7c 39 eb 29 e8 6b 97 5c e2 e6 77 c4 d2 5e 8c de 9e 78 f5 3c d8 ec e0 e8 e7 9d f9 f4 fc b7 f4 1e ea aa 99 a0 00 b5 2c 08 14 a8 59 9a c9 a9 4d 6e 76 66 99 48 93 35 92 21 08 92 65 4d 03 aa 2a 4a 66 86 9b dc 67 9e 9e 66 3d 38 b4 ab de Data Ascii: m2N__^WDJhhcWy52;I5\|]7F:q5wW=$K-Q2"J[s-93s::}k]*)[.#:&I;0(f6mwmY^oN\|9)k\w^x<,YMnvfH5!eMJfgf=8
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 2e e4 91 b3 a2 2b 13 2a e7 3c df 37 9f 7e 1e 08 cc bd ae cd fa 67 a6 f2 b3 bb 5e 6e 56 bd 9c f3 f0 de e1 68 a5 a4 d3 4d 19 d0 da 4d 26 77 98 ec c6 3a f9 cf 1f a7 4f 33 ae f6 46 45 d4 ae 76 a8 6b 79 75 f2 d9 57 9b af 3b a6 6c f4 cf 37 7e 65 a9 29 26 dc d6 2c 9a 84 40 4a e2 de 0b 19 b5 a9 aa 5d cd a3 40 44 d8 d9 ee 9c d4 df 1b b9 6d 4d 68 6f 1d 13 3d 59 ce 92 28 9d 67 3b 79 db cb 55 ad c6 d3 8a 65 2c 8a a6 d8 58 32 ba cd ac c0 a9 5d 9a 49 a3 3a a6 89 a6 66 89 48 e0 b2 08 4c b4 c6 de 7a e7 5e 69 ac 33 72 ce a3 3b 8c d2 04 14 52 c4 8d 58 58 e9 85 20 14 21 48 e5 48 80 74 c2 9d 97 65 d9 a5 68 ce 96 5d 96 96 3a 44 2e 4d 63 35 9e 6c 4d 13 4a 56 b6 b7 6d da e5 74 d6 d6 d2 9a b1 95 0e 84 14 01 dc ba b4 a4 a9 2e 41 18 a9 4b 48 c9 50 16 96 d2 e3 59 97 19 d7 3e 98 19 Data Ascii: .+*<7~g^nVhMM&w:O3FEvkyuW;l7~e)&,@J]@DmMho=Y(g;yUe,X2]I:fHLz^i3r;RXX !HHteh]:D.Mc5lMJVmt.AKHPY>
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 8e cb 3a 5a ce 69 0a 55 56 55 8a 5c a5 54 a3 18 17 29 43 93 c5 c8 0a 20 b4 b1 da d5 b2 d1 80 48 66 3a d6 e7 a1 cb 5c e3 2c b9 b3 ae 79 d7 0c ef 39 d3 49 95 26 32 e5 09 1d 6d ab d3 23 32 31 9a cb 30 a2 c1 58 91 a8 a5 80 ee aa d7 5a 9b 9d bc e7 a7 ce 7a bc a7 a7 cd d5 96 a6 29 85 61 2e 06 06 51 99 35 d0 6d 16 89 8a 98 d6 e5 6b 33 a8 b6 74 ac c8 ca 67 9b 94 f3 b3 be 6d ed d6 bd 1d 1d ef 57 6b d3 da f5 6b 5d 16 ef ad 6b 65 56 5a bc 36 f9 d1 e5 e1 e6 f0 70 f9 d8 72 dc 82 0a 26 92 74 62 74 cd 76 cb d1 9b 66 71 95 ce 52 61 b9 8d 67 73 36 cd d5 48 66 02 8c b5 10 90 d5 d7 1a 72 b1 b5 5d 2a ef a7 d6 3d 42 c6 28 15 6b 2a 55 2a cc e9 db a7 ae a0 c7 00 d7 79 d2 c6 ad 2b 4b b2 e9 80 47 36 6f 06 36 ea 43 24 3b 1c a8 05 00 87 21 0a d7 09 14 b2 8a 14 97 cf 3b 79 73 7c 6b Data Ascii: :ZiUVU\T)C Hf:\,y9I&2m#210XZz)a.Q5mk3tgmWkk]keVZ6pr&tbtvfqRags6Hfr]=B(kU*y+KG6o6C$;!;ys\|k
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 9a 42 6a 6a 65 54 b5 a9 59 ba 14 6a 95 a8 a8 84 9b 98 b1 eb 2e b3 b8 76 12 de 29 11 31 32 0b 29 76 d6 8f 6a d6 9a 56 55 2d ca f1 b4 48 69 49 a5 c5 0d 94 cd 32 25 c5 9b c5 c6 b9 9a c9 72 da b9 2a 5a 89 44 29 5a eb 1d 57 5a 55 e7 5b 94 72 dd 79 1d af 93 a9 c9 ab c3 9c f1 6e 96 ce ac ef 4e d5 40 80 06 29 1c cd e7 35 22 b2 a4 76 52 aa 21 13 0a 68 49 0b a2 41 44 51 70 d6 96 e2 95 ad 53 05 49 24 2e 6a a4 74 6a 21 48 e5 a8 54 a4 48 f1 9e 99 cf a7 5a 56 65 19 c4 6f a2 d5 8b 24 04 8a d5 56 14 c4 4c 38 4a a2 95 c3 a4 08 b3 25 92 18 9a 2c 4a 23 b2 ae 6c d6 c7 34 e8 89 40 1a 6b 2a 9b c7 79 ca e9 dd 14 cd 31 9d 78 f2 e8 e7 cf ab a4 93 95 bc fa 5d 77 9e 94 49 8e 77 cd cf a6 53 50 bb e7 9f af e6 e7 a7 4e fe 2f 6d 96 4a 13 2d 1c cc ea c5 d4 b5 25 cb 52 35 66 9d ab f5 47 Data Ascii: BjjeTYj.v)12)vjVU-HiI2%rZD)ZWZU[rynN@)5"vR!hIADQpSI$.jtj!HTHZVeo$VL8J%,J#l4@ky1x]wIwSPN/mJ-%R5fG
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 6f 04 21 08 42 10 84 3e 1b 1c 30 8c 7a 32 d2 93 7b c9 09 68 60 9c 71 49 42 f7 e0 c5 06 33 66 36 5b 9a 9f c8 78 2c b7 4e 29 e3 ca c7 e2 cb 93 c7 7c 2e 7f 3a 09 29 36 64 c1 1e 95 8b ed ed bf 6d ee 18 3a 9d 36 74 21 08 f4 dc 7a 56 de db f6 b5 b7 c8 ef 64 b4 25 e7 2c bc 20 5d e8 ac 21 0c 90 95 94 29 39 a7 3f 5a 1c 75 e2 af 1c f7 f6 de f7 8d ef ae f6 aa bb da db 04 21 86 59 61 3c 49 c4 22 32 f2 f2 d8 a9 52 95 a1 50 0f 8b 87 a1 08 7c d8 c6 3d 17 6a ab fb 48 42 1d 58 f4 21 f3 32 42 18 30 74 7a 38 d9 d1 8c 70 c6 32 9d ab 09 78 2c ac e3 96 b5 27 b1 38 30 62 cc 23 2b 8a 3e 4f 8f fc 87 86 f4 e2 9e 3c 23 d1 ec 96 29 6e 5b 7f 1b e0 79 df c4 12 90 c3 d3 8e 3d 57 6b bd cd c2 38 3a 6c c3 83 a1 0e cf 5d 06 cb 8a cd ae ec 72 4d de 72 b6 cb d5 c0 18 21 08 4a 94 95 9c f3 9b Data Ascii: o!B>0z2{h`qIB3f6[x,N)\|.:)6dm:6t!zVd%, ]!)9?Zu!Ya<I"2RP\|=jHBX!2B0tz8p2x,'80b#+>O<#)n[y=Wk8:l]rMr!J
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 3a 2a 16 83 84 85 fc a7 8b b5 b0 78 06 3c 8e d7 c6 da fb 1f 0e 1c f5 3d 95 9f f0 ef 0e 28 a3 7f cf 57 73 73 10 b8 94 10 9e ba 7b 0e b7 01 49 1d 77 95 ee b1 e8 b6 14 88 ea b8 e9 f9 85 f8 b6 bf 35 1f 45 c4 d9 e5 74 53 cb ba 37 37 95 f5 f8 55 ca d9 37 36 f7 c7 95 ec a1 46 bc a7 2b 64 e5 94 64 84 7a 2c 34 ac 76 ad d1 f7 58 aa 18 36 54 9c 02 a1 b6 e9 c4 77 dd 12 45 34 95 c1 47 89 1b d0 5a af 92 c4 3c 86 bf e2 1e 2b d8 d1 ee 8f 7e a5 63 e1 06 1b 1a 00 bb 75 8c 16 51 4b 2c 16 c3 d5 07 15 6c 02 c7 62 5f a1 41 c7 fa 93 53 5c cb ae 2d fe 88 1a 65 3d a5 40 f6 85 1f 45 c6 33 b5 2a 54 eb b7 97 4f c3 93 a4 fc b4 5c de 57 1c 8f 12 94 e6 ee 1b a5 3c a7 74 5f fb 04 05 91 7a b7 90 aa 34 53 2e 6a 2b de 6f 92 c5 45 23 a7 a2 6a 09 3f b2 a2 d6 ca ba 6d 44 57 0c aa b0 b6 b4 b0 Data Ascii: :x<=(Wss{Iw5EtS77U76F+ddz,4vX6TwE4GZ<+~cuQK,lb_AS\-e=@E3TO\W<t_z4S.j+oE#j?mDW
2024-07-02 14:43:43 UTC	16320	IN	Data Raw: 57 48 df e2 d9 c0 a6 2d 9b bf 05 38 f6 27 53 31 18 29 5a 76 27 5f de 95 1e 4f e4 18 6f 7c 74 ff 00 1d 3c e5 22 a1 0c 9b 17 eb c9 56 2c be 39 35 59 c1 49 55 af c3 76 f9 28 55 85 0b 92 e6 aa 76 79 b5 91 b4 d1 e2 90 8a 9a a9 e8 e2 21 23 49 35 b8 3d c6 c6 65 5d 21 2a 32 cb 84 d5 c3 2e dd 74 b7 e6 04 25 cf 39 ed d2 19 6b c4 43 15 44 5b 21 bf ec 09 43 12 a7 5d 88 88 21 f8 28 52 28 51 c3 c8 93 95 0a bf 83 56 ea d9 a7 50 29 4e 94 b7 f4 25 7d 51 62 e5 3a 25 3f 19 2d ad 08 b9 74 6b c1 37 7b 2d df 18 14 9b f3 66 15 f1 06 73 cd 22 77 6a 09 64 bf c0 b3 c2 1e 6b 7a 38 b8 e8 c9 bf d1 e7 36 38 9b aa 1b ae 52 d1 2a 9e 1f 4a 87 d1 c2 c6 5d 8d f8 f3 d3 0b c3 1f cc 31 5b 4b 94 52 a2 75 a1 56 30 ec 53 ce 6c 53 77 86 7a 5d 2a d6 f9 e8 e9 f3 45 a7 2d 5e 88 35 91 62 ac 9f 92 e7 Data Ascii: WH-8'S1)Zv'_Oo\|t<"V,95YIUv(Uvy!#I5=e]!2.t%9kCD[!C]!(R(QVP)N%}Qb:%?-tk7{-fs"wjdkz868RJ]1[KRuV0SlSwz]*E-^5b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49898	104.17.175.201	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	550	OUT	GET /analytics/1719931200000/4372769.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:43 UTC	1035	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:43 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: B0x/RQDRirCpqEykmPMyJRluU41kwPLo5NTiVdJiIRXuxZD1iRFGVWhdvUGAOaEjZxpbn6iMEww= x-amz-request-id: ZC6MGF6QG1S7CK4J Last-Modified: Fri, 21 Jun 2024 21:04:58 GMT ETag: W/"a4dbc3cbeeb23ec024a464535749ff37" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null Access-Control-Allow-Credentials: false Vary: origin Expires: Tue, 02 Jul 2024 14:45:14 GMT x-envoy-upstream-service-time: 26 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ff9133be-768e-45ee-802d-50071f006b32 x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-7bfb89fbf6-w85d2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: ff9133be-768e-45ee-802d-50071f006b32 CF-Cache-Status: HIT Age: 209 Server: cloudflare CF-RAY: 89cf68e1db7e42eb-EWR
2024-07-02 14:43:43 UTC	334	IN	Data Raw: 37 62 39 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 36 37 31 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 76 61 72 20 5f 70 61 71 20 3d 20 5f 70 61 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 54 72 61 63 6b 69 6e 67 47 61 74 65 27 2c 20 27 41 6e 61 6c 79 74 69 63 73 54 72 61 63 6b 69 6e 67 3a 43 6c 65 61 6e 43 6f 6f 6b 69 65 73 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 Data Ascii: 7b95/** * HubSpot Analytics Tracking Code Build Number 1.671 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];var _paq = _paq \|\| [];_hsq.push(['setTrackingGate', 'AnalyticsTracking:CleanCookies']);_hsq.push(['setPor
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 32 34 38 39 34 39 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 33 33 35 34 36 38 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 36 32 39 32 38 37 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 35 31 36 35 32 38 38 39 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 31 39 32 33 32 32 38 30 35 27 5d 29 Data Ascii: );_hsq.push(['addHashedCookieDomain', '224894981']);_hsq.push(['addHashedCookieDomain', '233546881']);_hsq.push(['addHashedCookieDomain', '20629287']);_hsq.push(['addHashedCookieDomain', '251652889']);_hsq.push(['addHashedCookieDomain', '192322805'])
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 2e 75 74 69 6c 73 2e 6c 6f 67 45 72 72 6f 72 28 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 61 74 68 2e 75 75 69 64 28 29 22 29 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 4d 61 74 68 2e 75 75 69 64 28 29 7d 3b 28 68 73 74 63 3d 68 73 74 63 7c 7c 7b 7d 29 2e 64 65 62 75 67 3d 21 31 3b 68 73 74 63 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 68 73 74 63 2e 63 6f 6f 6b 69 65 73 2e 43 6f 6f 6b 69 65 2c 65 3d 22 68 73 5f 64 62 67 22 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 22 29 3e Data Ascii: )}};Math.uuid=Math.uuid\|\|function(){hstc.utils.logError(new Error("Attempt to use Math.uuid()"));return hstc.Math.uuid()};(hstc=hstc\|\|{}).debug=!1;hstc.log=function(){try{var t=new hstc.cookies.Cookie,e="hs_dbg",i=document.location.hash.indexOf("#hsdbg")>
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 22 3b 74 72 79 7b 74 3d 74 68 69 73 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 69 66 28 70 61 72 65 6e 74 29 74 72 79 7b 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 74 3d 22 22 7d 7d 22 22 3d 3d 3d 74 26 26 28 74 3d 74 68 69 73 2e 64 6f 63 2e 72 65 66 65 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 67 6c 6f Data Ascii: .getParent=function(){return this.parent};hstc.global.Context.prototype.getReferrer=function(){var t="";try{t=this.top.document.referrer}catch(e){if(parent)try{t=this.parent.document.referrer}catch(e){t=""}}""===t&&(t=this.doc.referrer);return t};hstc.glo
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 65 3f 74 2e 73 75 62 73 74 72 28 30 2c 65 29 3a 74 3a 22 22 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 65 61 72 63 68 32 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 74 5b 72 5d 3b 69 66 28 73 26 26 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 73 29 26 26 2d 31 21 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 73 5b 65 2d 31 5d 2c 69 29 29 7b 6e 28 73 2c 72 29 3b 74 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 7d 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 53 69 6e 67 Data Ascii: eString=function(t,e){return t?t.length>e?t.substr(0,e):t:""};hstc.utils.search2dArray=function(t,e,i,n){for(var r=0;r<t.length;r++){var s=t[r];if(s&&hstc.utils.isArray(s)&&-1!==hstc.utils.inArray(s[e-1],i)){n(s,r);t.splice(r--,1)}}};hstc.utils.removeSing
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 21 30 7d 69 66 28 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 69 29 3b 74 5b 22 6f 6e 22 2b 65 5d 3d 69 7d 3b 68 73 74 63 2e Data Ascii: .call(s,n,s);s=t[++n]);return t};hstc.utils.isDefined=function(t){return void 0!==t};hstc.utils.addEventListener=function(t,e,i,n){if(t.addEventListener){t.addEventListener(e,i,n);return!0}if(t.attachEvent)return t.attachEvent("on"+e,i);t["on"+e]=i};hstc.
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 68 61 73 68 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 76 61 72 20 6e 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 65 3d 30 21 3d 3d 28 6e 3d 32 36 36 33 33 38 33 30 34 26 28 65 3d 28 65 3c 3c 36 26 32 36 38 34 33 35 34 35 35 29 2b 6e 2b 28 6e 3c 3c 31 34 29 29 29 3f 65 5e 6e 3e 3e 32 31 3a 65 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 72 61 63 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 Data Ascii: w=function(){return(new Date).getTime()};hstc.utils.hashString=function(t){for(var e=0,i=t.length-1;i>=0;i--){var n=t.charCodeAt(i);e=0!==(n=266338304&(e=(e<<6&268435455)+n+(n<<14)))?e^n>>21:e}return e};hstc.utils.extractDomain=function(t){var e=t.split("
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a 69 5b 63 5d 3d 73 7d 7d 65 6c 73 65 20 63 26 26 28 69 5b 63 5d 3d 65 3f 76 6f 69 64 20 30 3a 22 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 5b 5d 3b 65 3d 65 7c 7c 22 26 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 29 2b 22 3d 22 2b 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 65 29 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 74 5b 72 5d 29 3f 68 73 74 63 2e 75 74 69 6c 73 2e Data Ascii: 0!==i[c]?i[c]=[i[c],s]:i[c]=s}}else c&&(i[c]=e?void 0:"")}));return i};hstc.utils.param=function(t,e){var i=[];e=e\|\|"&";function n(t,e){i[i.length]=hstc.utils.encodeParam(t)+"="+hstc.utils.encodeParam(e)}for(var r in t)hstc.utils.isArray(t[r])?hstc.utils.
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b 32 5d 2c 73 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 6e 3d 73 2e 6c 65 6e 67 74 68 3e 32 7c 7c 32 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 73 5b 31 5d 2e 6c 65 6e 67 74 68 3e 32 26 26 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 7c 7c 73 5b 30 5d 2e 6c 65 6e 67 74 68 3c 6f 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 32 3d 3d 6f 2e 6c 65 6e 67 74 68 26 26 32 3d 3d 6f 5b 31 5d 2e 6c 65 6e 67 74 68 3f 6f 3a 73 3b 76 61 72 20 63 3d 64 65 63 69 6d 61 6c 50 61 72 74 3d 30 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 64 65 63 69 6d 61 6c 50 61 72 74 3d 6e 2e 70 6f 70 28 29 3b 63 3d 6e 2e 6a 6f 69 6e 28 22 22 29 7d 65 6c 73 65 20 63 3d 6e 2e 6a 6f 69 6e 28 22 22 Data Ascii: ,]*)/);if(i){var n,r=i[2],s=r.split("."),o=r.split(",");n=s.length>2\|\|2==s.length&&s[1].length>2&&(0===o.length\|\|s[0].length<o[0].length)\|\|2==o.length&&2==o[1].length?o:s;var c=decimalPart=0;if(n.length>1){decimalPart=n.pop();c=n.join("")}else c=n.join(""
2024-07-02 14:43:43 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 63 65 26 26 74 2e 67 6c 6f 62 61 6c 3d 3d 65 2e 67 6c 6f 62 61 6c 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 3d 3d 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 69 67 6e 6f 72 65 43 61 73 65 3d 3d 65 2e 69 67 6e 6f 72 65 43 61 73 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 66 28 69 5b 72 5d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 30 2c 6f 3d 21 30 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 6e 29 7b 69 66 28 6f 3d 28 73 3d 74 2e 6c 65 6e Data Ascii: return t.source==e.source&&t.global==e.global&&t.multiline==e.multiline&&t.ignoreCase==e.ignoreCase}if("object"!=typeof t\|\|"object"!=typeof e)return!1;for(var r=i.length;r--;)if(i[r]==t)return!0;i.push(t);var s=0,o=!0;if("[object Array]"==n){if(o=(s=t.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49895	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:42 UTC	554	OUT	GET /marketplace/img/saletick.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:43 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "c99-60f3210543740" accept-ranges: bytes content-length: 3225 content-type: image/png connection: close
2024-07-02 14:43:43 UTC	3225	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 24 08 06 00 00 00 cb b0 69 37 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR2$i7pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49906	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:43 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg2.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:43 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "7c7fc-60f3210543740" accept-ranges: bytes content-length: 509948 content-type: image/jpeg connection: close
2024-07-02 14:43:44 UTC	1210	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e1 c3 9f 4f e4 28 1e Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"O(
2024-07-02 14:43:44 UTC	13032	IN	Data Raw: 2a 65 d9 10 05 1d 80 32 88 25 10 22 ca 88 08 c0 e2 8c c2 d3 39 20 08 10 08 6e e3 06 ac 1a 52 d8 17 36 54 43 3a 82 95 49 1a 02 a2 19 5c 83 28 77 0d 70 e0 46 ad 92 ed 2f 89 e0 3d 17 72 04 65 35 9e 99 4d 08 99 09 14 d0 68 05 a1 40 8d c6 8e aa 00 d1 80 2d 6d 16 2a 32 34 ba 6a d9 08 48 24 28 81 97 00 65 c6 51 51 a5 56 54 aa a5 c1 49 50 75 2e 0a a8 a3 06 8e 0c 29 90 4b b2 a0 bb 91 17 52 0e 48 22 aa b1 a5 2e a0 49 20 49 20 42 18 32 95 61 75 20 ac 82 0d 84 bb 48 e0 58 e5 15 22 ec 48 45 74 63 02 ab 09 45 00 6e e1 34 62 43 3d d9 b7 65 6e 62 95 8e 9e b7 7f 9c f4 3c 1d 7a dd 9d b8 6c f6 21 89 b6 c2 e5 b0 82 d0 70 69 0d 19 10 b5 b5 76 25 1a 71 da 5e 5d 0b a8 e2 71 7d 56 0e ac 38 9a 1f 36 c9 68 e8 a5 34 ef 9d 0c eb 06 6e e0 45 f9 e1 ee 73 76 cf 97 99 d9 fa f9 c0 0e 69 Data Ascii: e2%"9 nR6TC:I\(wpF/=re5Mh@-m24jH$(eQQVTIPu.)KRH".I I B2au HX"HEtcEn4bC=enb<zl!piv%q^]q}V86h4nEsvi
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: d7 45 26 3e a1 e1 e6 f6 32 74 61 ce 0e 8e 4d f3 4d d4 b5 09 76 0d 6e 7b 97 aa 66 b4 69 66 6d 39 e9 ac 89 dc fa 73 b3 76 55 73 c6 66 dc 5b 46 ad 7c d7 65 7d 57 65 d5 cd b6 64 3d 5a 42 54 f3 b8 c1 a1 fa 87 8b 0f 43 9d a6 4a 35 68 d1 74 36 e6 ec f0 76 5e c5 1f 27 4b aa 86 2a 24 c2 a5 5c fe 8f 13 a7 9f 68 e1 d9 a6 78 79 7d ee 57 46 00 d3 1b 15 5a f4 4d 73 f6 e9 3c ad 21 ab 1c 86 74 40 0f 6b 33 b5 f3 3a 1c fd 73 c1 d3 e5 fa 2d 17 45 eb d5 e6 7a 19 6b 65 4b 48 e8 00 e4 79 8f 63 e5 fd 1e 0e 7c d1 d0 eb c3 91 7e 99 18 e9 c3 0d 19 77 ca 49 2e 25 5c 45 5d 41 d5 5c 6a f7 62 38 ad ab 54 8a 6b f0 b4 ae 9e 9c 1b b9 75 6c b9 8d 82 35 8b 32 e4 e8 e6 db 2e 72 76 66 e9 c9 4c 0d 54 b7 eb cc 7c 9b ef 67 3e b1 d3 a6 18 50 1d 0c d8 b4 69 0a 0d 19 35 ce cb 39 5a d0 44 cc a9 ba Data Ascii: E&>2taMMvn{fifm9svUsf[F\|e}Wed=ZBTCJ5ht6v^'K*$\hxy}WFZMs<!t@k3:s-EzkeKHyc\|~wI.%\E]A\jb8Tkul52.rvfLT\|g>Pi59ZD
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: e6 e3 f9 fa 00 ca 0d 94 d1 6b 59 75 64 dd 46 7c a6 9d 86 a0 07 b6 58 96 4d 80 d5 9b 46 67 0e 67 ae 5e 86 34 fa 38 c2 7a 0a e2 72 e3 73 9b af a1 bd 71 05 69 60 e6 66 b5 2f 30 6c cc 92 d6 9a a2 5b 67 1e c4 65 e9 f3 f5 ca c6 ec ba 5b b1 ea d6 19 70 f6 e4 76 f5 af 03 9d 9c ce af 29 99 af 51 c6 e7 0a d3 39 c7 f6 6c a5 1a 40 9f 8d cc 69 26 c6 4b 52 9a a0 95 48 d7 01 8f 34 b5 37 9a 2e 43 38 a0 a2 51 31 99 88 81 45 74 d4 90 01 cb 0a 0a b0 36 69 9b 31 48 dc e2 f0 c7 7a f3 b0 64 26 47 ae 22 2d b1 2a 5e 94 8f 56 72 5a 25 c0 a1 ea b0 0b 7a 89 06 68 88 7c 52 c4 97 e8 63 01 72 a5 ec 3c 44 94 2d 39 41 d9 5f 9d bd 45 84 49 e8 1f 39 83 d4 fc f8 25 f4 d7 cd 6d 9a c5 0d 41 60 39 62 9e 00 c6 37 26 b4 6e 63 f4 f1 e7 86 ed 55 3a 45 16 91 e2 d8 75 59 ef 41 a1 19 c5 94 2c 97 9e Data Ascii: kYudF\|XMFgg^48zrsqi`f/0l[ge[pv)Q9l@i&KRH47.C8Q1Et6i1Hzd&G"-*^VrZ%zh\|Rcr<D-9A_EI9%mA`9b7&ncU:EuYA,
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: d7 9c f0 76 fa 3e 99 5c 3e f7 0f 57 36 7d ea e3 3b 36 7c df 43 c1 02 4a 9d a6 79 3d 37 0d 92 95 e8 b0 29 6b e3 ab d1 77 bb 2f e7 fa f5 f2 74 7a e6 7d a9 25 ef c8 93 79 3a 47 47 9f 52 8e e7 73 1d ce c0 ac cf 55 d2 b3 b5 97 58 e9 ed 6b 31 5c 0b 1d bd dc c7 f2 7b 7e 67 0c bb 1b 7c ce 7a 5e 8a f1 e8 77 e7 95 d3 cf ad 2c 47 51 38 af 4a db 7e 1d 28 69 6d 0e a2 30 98 02 02 e2 2e f5 64 ab 63 26 b9 33 6d cf de cd 79 ee 83 ba 12 72 31 f5 72 d3 6e 8c 1d ac e7 93 bb 9d ae 9b 72 b5 69 66 35 d6 8c bb 3e 7d 69 75 0b 9c c1 74 b0 b7 db e1 5e 0f 3f b9 f3 55 a1 e6 e8 73 8c f1 2f 77 3b 65 b7 3c 06 43 08 db 05 cf 99 c4 a6 36 ab 1d b9 a0 6f 87 0b 08 e8 5d d6 5d 19 63 7d 0c 5d 1c f1 38 21 56 94 43 46 80 6a e9 92 8d a0 dd 16 8c f2 97 98 1d 76 07 9c 73 2f aa 4b 19 93 68 ba cf 6f Data Ascii: v>\>W6};6\|CJy=7)kw/tz}%y:GGRsUXk1\{~g\|z^w,GQ8J~(im0.dc&3myr1rnrif5>}iut^?Us/w;e<C6o]]c}]8!VCFjvs/Kho
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 47 e4 20 fa 0f f6 8f b9 fc 37 e7 40 09 b3 e0 98 7c 0f b6 bf c0 20 f0 7c 8f ba c0 41 82 01 ae 8b d6 e8 eb 04 07 ea c2 d4 0a 26 c7 85 f0 63 cb 19 67 2e 36 ad d2 15 f0 55 fc 70 2b 14 fa ad 43 e4 78 d0 5f 0a 35 04 d7 8d 6a 0f b8 fb 08 20 f2 20 fd 07 d8 7e 7b d9 8c 77 d7 92 7e 86 34 10 0d 4d 99 d7 5d fb 3a de fc 08 07 3c 9f 0a a1 35 a2 40 e4 42 db f1 a9 b2 77 fe e1 e3 5a d6 b5 e0 cd 7d 84 d7 3e 47 91 07 fb 47 f8 c4 d8 3e 0f 8d 11 af f2 8f 1a fd 01 d8 65 70 7a e9 a0 9d 52 f5 30 22 0f ab 1b 63 38 61 04 00 43 0b da ec c1 d5 9d 5a 24 0a b1 58 16 72 55 02 72 06 ae 06 09 ad 05 d6 88 e4 03 00 55 d6 b4 3f c0 07 d4 41 07 ea 3f 43 e4 92 4f 8d 79 30 fd 0f 8e 40 86 18 4e fc 01 0f 85 50 9c f8 26 08 be 0c 63 04 de c4 d7 23 c1 84 98 3f d0 3f c2 7f 2d 6b 43 c0 fc 0f d3 7f f1 Data Ascii: G 7@\| \|A&cg.6Up+Cx_5j ~{w~4M]:<5@BwZ}>GG>epzR0"c8aCZ$XrUrU?A?COy0@NP&c#??-kC
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: a4 2a ad 3c f4 10 a9 a4 b2 c3 f4 2d a1 09 81 4b a8 32 a5 c4 77 a2 a7 b4 3e 32 50 d7 4e ab 96 ce 52 08 81 80 64 78 f6 7b 52 58 be a0 d0 44 c8 cc 9d a5 de d5 ab d6 e9 62 c1 3d d1 d8 43 15 8c 07 a0 55 0b 08 ae 5b 65 fb 11 5d ac 66 66 13 a0 7d 4e 25 53 7a 28 b2 cf 22 00 13 7d b4 30 4e 8a fb 3b 73 b5 64 6b 58 b0 21 fc 0a a5 6d 75 22 02 ad d2 22 cb 5c 98 a1 db c2 0f eb fe 86 66 20 24 74 ea 56 a5 e3 5b c8 3e d2 dd f8 de c3 bd a1 a6 cb d8 a2 69 42 c4 1d 84 e8 5a b7 d9 4e 35 f9 36 e2 58 b5 7b ae 64 bf d6 1f da d0 22 13 8f ed 51 70 17 c6 34 8b 6b 6a 3d 02 cf 7a 81 75 57 16 31 d7 9a aa 89 4f 24 98 48 b3 af 02 a5 ad 63 23 c1 76 5a 3c 66 6a c8 aa bb ad 36 8b 8c 2d 1a c6 06 00 15 aa ae d8 2d a9 53 1a fc 51 43 2b 18 a4 bb 3b cb 5d 1b b8 ee 65 4f 70 8d 6e 2c be d6 44 b1 Data Ascii: *<-K2w>2PNRdx{RXDb=CU[e]ff}N%Sz("}0N;sdkX!mu""\f $tV[>iBZN56X{d"Qp4kj=zuW1O$Hc#vZ<fj6--SQC+;]eOpn,D
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 69 6d b1 0c 1b ad c1 37 34 ad be 36 60 9a 13 a2 a2 35 85 76 5e 62 de bf 29 7e 75 ff 00 27 75 df 1f f2 54 7c 9d a2 93 7e 72 2d 8c 06 4e 3d 75 66 56 b6 ee 9a ba a5 d4 80 2a fe 9c 91 55 4b 55 52 f4 f6 44 6e bb 28 61 66 88 f2 a8 d9 22 fe de 3c 13 03 2e d6 bf e4 d9 8d bb 60 48 f1 a3 35 e0 78 df 3e 02 b0 0d d2 cc 2c 13 f1 cd 4d 78 86 ea 29 b0 7f 4e 44 e2 a9 60 48 96 33 53 92 ff 00 17 8b 81 93 56 56 1f f1 e5 67 ad 96 39 8c 02 88 ee 0f b0 14 77 9c c2 eb 11 55 ed 1c 95 5c ac 98 8d 8e 11 f0 f2 27 c8 a4 c4 ce a3 28 d5 9b 4e 35 f9 36 e2 e1 5b 55 8c ca 63 be c3 ef 73 98 8e 5f b8 ad df 67 c0 84 18 20 75 33 97 af c0 82 57 88 55 13 d5 4c 67 c8 75 9d 32 ad 21 58 ca a6 39 f5 5c 4d 37 1f 63 d2 b3 19 29 8f 89 6c c6 ae b7 ca b0 35 a7 05 fd 97 ab da 8f 63 54 2f 7c 7c 8c 87 c6 Data Ascii: im746`5v^b)~u'uT\|~r-N=ufV*UKURDn(af"<.`H5x>,Mx)ND`H3SVVg9wU\'(N56[Ucs_g u3WULgu2!X9\M7c)l5cT/\|\|
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: f8 6f 0b e2 e8 b1 23 79 31 bc 34 1e 16 59 e1 a0 95 f8 1e 0f 87 86 18 de 2a 8d 16 2c a2 2c 6f 1f ff c4 00 4a 10 00 01 03 03 02 04 04 03 05 06 04 05 03 03 02 07 01 00 02 11 03 12 21 31 41 04 13 22 51 10 32 61 71 23 42 81 14 20 52 91 a1 30 33 40 62 b1 c1 05 50 60 d1 24 43 70 72 e1 82 f0 f1 15 53 92 25 34 63 73 a2 06 54 b2 c2 ff da 00 08 01 01 00 03 3f 01 ff 00 a2 52 50 7b 50 69 41 47 f0 b3 e3 1f ea bc ac 7d cc fe c3 1e 18 59 44 fd f2 8a c7 f9 6e 7f 89 8f f4 ce 51 8f e0 a3 c2 7c 21 4f 8c 7d ec fd fc 7f a7 a4 7d ec fd cc 78 80 87 dc 8f bc 10 fd 8c ff 00 d1 89 39 51 fc 16 16 7e ee 16 14 9f f5 56 7e f8 1e 31 fc 29 ff 00 3b c7 fa 7a 7c 2e 56 e9 fc 1c 85 07 c3 3f 76 7f 89 c7 fa 4a 3c 71 f7 63 f8 61 ff 00 46 33 e1 85 63 94 8f e1 24 2b 4f 86 3c 49 fb 85 47 f1 19 ff Data Ascii: o#y14Y*,,oJ!1A"Q2aq#B R03@bP`$CprS%4csT?RP{PiAG}YDnQ\|!O}}x9Q~V~1);z\|.V?vJ<qcaF3c$+O<IG
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 13 66 d6 ea a0 c1 50 cc 14 d7 0c ea 8b 74 ca 73 5d 9c 4a b8 67 28 02 9c d6 11 32 d2 8b cd a0 e1 72 5c e6 40 c9 4f 7b 31 01 dd 96 4e 74 0a fe 1a 05 38 70 ec a5 e2 7c aa 9b 6e 6d 39 ce c8 72 b2 50 60 f6 42 e0 7e 64 6d 20 1c 94 fb 5d 2b 22 f9 84 49 1d 38 59 97 68 be 7c 4e 8a ec 6e 35 4f 06 dd c4 6a 85 47 74 9c 69 1d 93 c3 f5 64 76 9d 51 6e 58 6d 83 a4 2b c5 d2 43 bf 0a 63 80 ba 71 b2 1c b9 1b 99 54 ed a8 5b 83 bb 15 20 c1 74 87 7a 05 f0 8c 5b 0e fc d3 5d e6 ee ae bd b4 ec 0d 18 c8 d5 34 58 de 9e 6e 97 2a 0f 6d 41 c4 b8 8b 7c ae 67 74 df 88 da 8f 25 ac 30 d8 4d e5 bc df 91 a4 a2 4b 48 39 d1 72 78 92 5b 6f 58 82 7f ba be a1 7d 47 5c 01 d3 d1 33 95 66 1c 49 98 8d 13 da 49 73 61 8e 18 3e 8a 9c 0e a9 84 26 15 a4 a8 c8 d5 32 d3 02 a4 e3 3e a8 bd d2 f7 38 9d e7 54 Data Ascii: fPts]Jg(2r\@O{1Nt8p\|nm9rP`B~dm ]+"I8Yh\|Nn5OjGtidvQnXm+CcqT[ tz[]4Xn*mA\|gt%0MKH9rx[oX}G\3fIIsa>&2>8T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49907	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:43 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg1.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:44 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "36b35-60f3210543740" accept-ranges: bytes content-length: 224053 content-type: image/jpeg connection: close
2024-07-02 14:43:44 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 07 08 0a 08 07 0b 0a 09 0a 0c 0c 0b 0d 10 1b 12 10 0f 0f 10 21 18 19 14 1b 27 23 29 29 27 23 26 25 2c 31 3f 35 2c 2e 3b 2f 25 26 36 4a 37 3b 41 43 46 47 46 2a 34 4d 52 4c 44 52 3f 45 46 43 ff db 00 43 01 0c 0c 0c 10 0e 10 20 12 12 20 43 2d 26 2d 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 ff c2 00 11 08 06 a2 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 b0 3f 67 f9 a6 d3 Data Ascii: JFIFC!'#))'#&%,1?5,.;/%&6J7;ACFGF*4MRLDR?EFCC C-&-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"?g
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: c6 22 6c 62 8d 4c 83 7b e7 da 6b 67 5d 1c bb e3 b6 b5 8e ab 79 ae 7d 18 2c e9 cc 67 bc e8 b3 57 35 13 3a c9 52 5c f4 56 3a e3 a5 0d 4a 43 55 73 50 a4 a6 ca 55 16 51 2c 53 51 65 34 ca 44 cb 38 e9 96 f9 c6 5a 65 d3 94 e5 59 74 e3 19 de 7b e2 4b 9d e4 04 3b 8a 97 4a cd e7 7a 29 72 92 d5 92 13 72 e4 9b 04 d5 80 00 aa 97 aa 6a 78 fa 6f 5c 26 5e cc 31 11 b8 35 8a 99 8b 9e a8 cb a2 6b 23 57 2e 27 4b 5c b6 2f 1b 9d d5 e3 a2 bc 72 ae c9 e7 49 d5 b7 2f 56 3a 2b 55 9d ce 7b 72 eb 1a 57 2d dc ee f7 58 eb 94 3c f5 89 88 8e 9c ac 89 b3 af 5f 3f 69 be b8 8b ce b9 3a 78 72 eb c3 d3 5c 7a 67 57 d3 cb dd 8e 9b 6a df 1f 45 3c f9 e3 a8 e1 ea b2 a6 9a c1 78 a6 8f 36 58 25 d6 0b 8e 5c bd 07 ac f9 27 77 3f 5e 19 12 b5 8b ac 85 da b0 72 f4 3e 72 5e 8b e5 72 f7 57 03 ce bb 6b 86 Data Ascii: "lbL{kg]y},gW5:R\V:JCUsPUQ,SQe4D8ZeYt{K;Jz)rrjxo\&^15k#W.'K\/rI/V:+U{rW-X<_?i:xr\zgWjE<x6X%\'w?^r>r^rWk
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: d4 64 ba 2d 79 17 56 46 73 aa 8c ec a9 64 b0 89 de ce 77 a4 89 8d 18 32 0b 54 98 29 25 49 33 a2 a4 e9 92 e8 52 c0 6e 19 28 82 e5 54 02 82 89 06 a8 06 82 9c 33 42 19 52 02 8a 9b 26 6c 88 1a 1b 4c 6d 31 c3 42 a4 ca 4a a1 2b aa 83 6b 5e 6b e8 85 90 e7 4a 94 24 81 90 31 10 de 90 b5 ab 79 eb 78 48 1d c4 d3 6a 5a b5 ca e8 33 b6 5b 7c fa 29 15 4e 86 53 ab ac 8d 72 1c 0e 48 7a 86 46 f2 65 45 d8 97 46 ad 73 3d 75 ac 34 91 74 61 35 39 e7 9b 17 9a 96 7a 0c b4 59 9b 66 5b 69 4b 95 0a 6b 5b e6 bc dd a2 f5 b7 9d e9 9c 23 56 bc eb ae 53 91 f4 f3 ea 17 80 cd 4d 04 b7 75 06 c2 c5 90 11 a6 a6 19 fa 39 cb e6 ef b6 37 31 a6 74 84 74 f5 5b e5 9e cf 3c 70 be 9c ac 82 f6 5c 6b 7a 6b 9c eb 51 c9 d7 a6 ed 72 67 da 9a e6 bd a1 39 34 e8 c4 d7 38 b5 c6 7a 6e 30 34 25 ad 31 d5 74 cb Data Ascii: d-yVFsdw2T)%I3Rn(T3BR&lLm1BJ+k^kJ$1yxHjZ3[\|)NSrHzFeEFs=u4ta59zYf[iKk[#VSMu971tt[<p\kzkQrg948zn04%1t
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 37 6b da e2 42 08 99 52 53 86 32 9e 8f b8 d8 50 58 47 d6 34 3d a6 7d 66 42 aa 90 eb 4d a5 4f d1 88 5e 64 3b d0 b4 e2 2c e6 71 52 b5 d4 cc ce e6 c9 a5 ae 55 01 4d af 60 6d 64 51 44 7b 47 a8 fa eb 5a 44 7a ce a6 66 66 66 66 66 66 65 4e a6 7e b9 f4 06 6d 60 e0 e0 fb 5e 7d a2 20 03 a8 50 a6 d6 25 4c fd 44 fa 01 5a d4 0d 4c ce a6 67 de 03 43 ba da d3 33 33 33 32 0d a6 41 bb 9e d7 59 5d c4 26 34 32 36 1d 7b 87 14 e7 bd ca 66 65 04 0c cd ac 1e 1f 60 e0 fb 82 d7 39 e1 d6 92 4b 83 c6 47 bb de 77 36 9f 70 0b 7d 06 a7 ed 0f b7 e8 48 36 b0 20 83 25 e3 20 76 a2 b5 82 0b 63 e9 08 26 3e c4 97 5e f6 b5 a6 14 fa 47 ad 69 4a fa 8f 40 03 6a 19 42 ca 16 96 fd d3 33 fb 53 33 21 c1 c1 c1 46 8f a0 11 e9 0a 54 45 76 1a a6 66 64 11 b8 a9 68 6d 62 3d 0e e2 a4 1f 46 fb cd ad 33 33 Data Ascii: 7kBRS2PXG4=}fBMO^d;,qRUM`mdQD{GZDzffffffeN~m`^} P%LDZLgC3332AY]&426{fe`9KGw6p}H6 % vc&>^GiJ@jB3S3!FTEvfdhmb=F33
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 7d 46 e0 22 03 79 86 15 d9 ce fd 28 d4 7d 91 f5 c4 6a 23 f4 eb 40 02 b5 ba 87 86 86 cd a2 b6 86 a7 3e ca 81 16 d0 35 45 83 a8 31 92 86 31 8c 22 f3 94 20 da 0d 3d cd 1c b1 a8 2e 0a 65 40 7d 83 95 9e 58 a6 d2 01 d4 6a 50 4e 7d c2 aa 8a 87 f6 ea c2 5f 03 44 b4 d9 af 06 1e 41 91 a9 51 11 50 e4 50 32 83 6c 5e 1c 50 53 7e 81 c5 54 35 49 69 60 65 29 52 9a da a0 51 40 ca 28 09 89 69 04 8a 6a 5c 82 0e 08 6a 49 b0 45 48 21 56 20 a8 44 16 3d 35 c0 2e 9d 5b 96 e9 ca ed 79 70 7a 0a d1 50 82 b4 aa d4 a8 a8 25 04 14 2b 58 7a 07 20 3d 42 2a 02 ac 29 06 d3 21 16 c0 03 1b 42 76 53 98 bb f6 63 ed 85 1f 7c 28 fb 5a 0b ac b9 a0 fe a0 86 e9 f9 03 a8 5a 18 5a a7 4c 45 e8 b9 16 b4 f4 1a 3a a9 6d 03 13 90 69 7a 2e 0a cf 70 0a f5 2a d1 ab 06 68 a8 f4 29 c8 10 ea dd 85 54 32 c1 e1 Data Ascii: }F"y(}j#@>5E11" =.e@}XjPN}_DAQPP2l^PS~T5Ii`e)RQ@(ij\jIEH!V D=5.[ypzP%+Xz =B)!BvSc\|(ZZZLE:miz.ph)T2
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: a6 7f 62 3a 32 3a 17 7f b0 dd ee be 84 73 62 f9 5f e0 5d c8 f8 4c 74 b2 3a 32 34 32 b2 3e 52 b9 78 4c 76 b4 4b 42 8a f1 6d ea 45 e8 be e2 87 bb 24 27 8b 3e a4 3f b0 b9 6f fe 82 21 e7 fc 11 d4 58 54 71 39 be 64 49 4a fb c9 4b 1e 6a 10 8a be b5 d8 f2 c7 f2 4f 38 a2 fc 3d 50 bc 91 38 6b 14 8e 0c be 4f 44 70 fe 58 49 0b ca 8a ff 00 96 88 ff 00 04 e1 2f 96 49 9c 3d ce 1b d4 54 f6 46 de 67 13 e5 6e 5b 12 4b da 44 5f ca 46 a4 69 98 9b f6 65 f9 26 be 67 ea 4e 97 51 fd c9 e7 13 58 9f 4d 0a eb ea 7f dd ea 2f 2b f5 14 57 b8 57 dd 44 f2 48 e2 e8 8e 37 f0 ff 00 27 15 e3 16 49 7c c8 ab f7 87 15 8b 1e 88 d2 ef b1 3e e3 ce e2 3e 64 47 3e 57 f6 23 94 7f 02 c3 94 84 55 c9 d9 3a fb 34 38 99 c9 1c b7 67 b3 3b d9 5b ea 85 85 c4 29 7d 08 6d f6 16 4c 63 44 ab 81 2a dd 29 2e e8 Data Ascii: b:2:sb_]Lt:242>RxLvKBmE$'>?o!XTq9dIJKjO8=P8kODpXI/I=TFgn[KD_Fie&gNQXM/+WWDH7'I\|>>dG>W#U:48g;[)}mLcD*).
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: e9 b1 57 0b 34 7f 82 ab 14 21 66 68 3a 8f 34 85 91 22 88 ae 04 a2 27 91 b2 23 9a 22 ca e0 87 a0 d5 88 52 3b 8f 52 4b 31 ea ce e5 70 1f 73 54 ec 96 62 ce a2 16 b6 21 66 44 8a 23 b1 f4 9f 45 ae c6 3a e3 64 5e 28 89 1d 45 a9 17 88 b5 3e a3 ea 38 8b e6 38 87 13 62 7b 7a 8f 34 3f 30 f5 44 b5 26 8f 33 55 16 a8 ff 00 b4 ec 2d 8d 79 48 ec 2f 32 37 42 d8 8e a4 75 22 b7 20 c8 3f 9a e2 1e 74 43 52 08 89 b1 b1 99 12 22 19 2a 12 25 a8 fc 16 32 44 86 48 95 8c af e9 d0 dd 91 8e 48 8e c3 7a 8c 7a b3 b8 cd 58 96 85 73 29 65 32 b2 4f 54 36 4f 44 3a 5d 43 cc 5c 53 4f 43 51 b7 75 c3 6f 12 fb d9 08 9c f8 54 d5 33 47 43 ff 00 50 bb 1a d8 97 94 54 ff 00 e8 93 c0 95 47 91 2c d2 22 b2 22 84 ee 48 97 63 ea 64 7b 89 65 ea 7f 74 15 31 25 aa 2e be 42 ca ac ad ca 36 32 b6 53 52 a6 a8 Data Ascii: W4!fh:4"'#"R;RK1psTb!fD#E:d^(E>88b{z4?0D&3U-yH/27Bu" ?tCR"*%2DHHzzXs)e2OT6OD:]C\SOCQuoT3GCPTG,""Hcd{et1%.B62SR
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 9c f0 ce 7b b3 bb 24 93 c0 7c 22 4b 24 92 4b 3c 32 58 11 a4 c1 65 ec 18 93 50 7d 09 fc 06 0b 99 81 c2 dc 87 95 60 eb 2a 41 84 3b 83 d1 f1 1e 41 2c 9c e2 4f 0d 64 77 b2 0d bd 32 57 18 9e 1c dc 0b 6b c9 28 c9 a4 04 a2 c8 20 4f 53 44 86 c0 e9 0b 1d b1 4b 58 43 06 7d 9b 2c f0 41 12 63 11 d8 5c 62 d6 c0 1c bb 36 f6 8e cb 23 19 e9 02 14 24 35 9d 91 9b 9e 13 29 c3 36 26 dc 8b 8c 90 b2 cb 2c f1 9c 75 e1 f0 79 23 c1 e4 2c cb 2c b2 08 32 cd 82 0f c8 48 80 f0 43 0f 8c b2 cb 3c 3e 0b 7c 33 11 03 a5 c1 42 fd ba e6 6c b8 01 0a 33 2c 78 dc 65 a7 2e a4 86 4a 2d bd 2c 74 13 0d 68 ad 57 63 12 3d d8 30 e4 8b 98 12 6e 69 9f 2c 30 b9 fa 9c 3d 59 65 96 59 65 90 59 32 c1 5f a2 4f 6e ee bd c7 a9 c6 f3 a4 6c f2 0b 2f 11 fd c9 1c 35 f3 61 c5 13 e9 67 9c 81 7e d9 67 76 58 b0 97 02 Data Ascii: {$\|"K$K<2XeP}`*A;A,Odw2Wk( OSDKXC},Ac\b6#$5)6&,uy#,,2HC<>\|3Bl3,xe.J-,thWc=0ni,0=YeYeY2_Onl/5ag~gvX
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: e4 b2 7c 19 9f 60 b3 c2 59 65 92 78 cf 39 e4 24 93 f2 cb 2c b3 c1 f0 65 90 59 65 96 41 e4 cb 1b 2c b2 c6 cb 1b 1b 3c 32 cf 39 61 e1 96 41 64 16 59 66 cb 2c b2 cf 19 67 86 41 67 86 59 fb f0 0f 00 78 61 66 7c 18 58 78 65 85 84 03 61 61 61 61 21 e4 cb 3c 85 92 59 65 96 59 64 07 8c b1 10 20 b2 cb 2e 2c b0 db 2c 3c 67 ef c6 6f e1 8c 19 25 9e 72 4b 3c 98 78 d2 31 b3 ce 19 61 04 96 79 c2 c2 23 ce 78 e2 cb 2c 82 cb 32 cb 20 f3 96 16 10 10 78 cf 39 66 78 02 78 75 6d 3a bf 49 67 c1 11 88 09 2e d5 a2 fd 64 8d b6 71 63 e2 dd 92 d8 c4 ed ec b2 f4 59 f6 4e 0b 26 30 1c 30 92 1e 98 5f 97 0f 76 1e 89 0f a8 01 c0 5f b1 65 86 04 c8 f4 b0 1e 06 a6 06 48 f9 75 ea 47 a9 83 cd a7 db 0e 86 05 ea c0 e8 81 7a ba 7a 6d 7c 87 f5 04 c6 de e7 97 4d c7 d4 ea cd 1f 29 f8 49 9e a4 17 2f Data Ascii: \|`Yex9$,eYeA,<29aAdYf,gAgYxaf\|Xxeaaaa!<YeYd .,,<go%rK<x1ay#x,2 x9fxxum:Ig.dqcYN&00_v_eHuGzzm\|M)I/
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 63 ed b2 1c ff 00 8a 0b 34 5b 9c 88 3e e0 a3 37 7f d9 d8 b4 d0 ff 00 b6 3e 9d 4f 51 13 81 07 d3 6a 4a 87 e9 22 19 c5 fb 1f 2a 7b 7b fd 0b 3f 6a 16 ee 84 f9 70 e2 80 fa 48 ef b7 dd 90 3d ba b4 85 6f bb 80 e7 57 a0 d9 45 ea 07 da 90 cf b0 63 c8 ff 00 19 40 e7 50 87 46 ca b2 7e ec fb 9b 05 ab d0 70 5b 77 c7 32 01 75 1a 5d 21 0e b7 62 38 20 f1 10 9e 27 50 44 d5 95 e8 b8 07 02 ed d1 68 42 7e 48 87 77 5e d6 c9 81 d1 b6 58 a7 24 07 9e 3c 48 4e 16 f4 9b 2f c5 72 13 4d b3 b7 5e c9 5c e5 c5 3e dc 7f 6e df b0 39 f5 88 63 eb 0d 5e 36 47 73 27 30 46 59 85 0e 30 fa 2c 9c 79 2d 57 70 97 e8 04 a9 ee d6 4b 9f 6d f8 30 8e d8 75 ee 3f b2 5d f6 42 7c b6 53 de c6 7c ec f1 0d 25 93 c6 27 1b 76 f6 48 48 1c 6c 61 5d f4 32 25 a6 71 05 ed c9 c1 89 72 bd e1 66 20 3b 62 89 c8 96 3f Data Ascii: c4[>7>OQjJ"*{{?jpH=oWEc@PF~p[w2u]!b8 'PDhB~Hw^X$<HN/rM^\>n9c^6Gs'0FY0,y-WpKm0u?]B\|S\|%'vHHla]2%qrf ;b?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49904	142.250.185.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:43 UTC	944	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 14:43:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Yj1YL9YuN7nLvrkKTqo0VA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:44 UTC	499	IN	Data Raw: 32 61 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2afe<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 70 37 6d 6c 74 6d 2d 31 48 51 39 6e 6d 54 56 68 45 47 58 44 44 6b 6a 75 69 58 44 65 4f 41 79 50 68 6e 74 6d 5a 64 56 6a 37 49 46 31 6f 42 6e 41 61 74 56 38 78 2d 70 66 68 49 55 31 33 61 5f 47 47 66 4a 76 4c 52 5a 4d 45 61 70 71 57 6c 62 71 49 44 78 6b 77 70 69 73 62 59 6c 43 67 53 6e 69 52 43 57 76 78 59 63 69 53 61 58 79 44 47 64 62 34 74 61 44 54 39 4d 44 50 41 44 41 45 70 67 41 69 5a 4a 55 46 47 5f 55 34 52 30 5a 42 61 57 6b 54 4c 49 66 68 61 70 64 6e 69 74 4c 69 63 4b 51 5a 72 33 5f 46 4b 68 52 50 2d 78 61 45 63 41 74 58 73 74 70 78 56 4e 4b 71 46 53 57 34 4f 44 72 6e 70 48 76 52 57 4f 6a 57 75 67 53 37 50 31 46 57 5f 37 53 6c 31 68 2d 50 6b 48 54 4f 65 30 61 71 4f 47 45 6c 5a 66 41 36 5a 46 4c 6e 52 67 57 75 64 43 34 38 33 34 46 61 75 76 6e 64 45 6e Data Ascii: p7mltm-1HQ9nmTVhEGXDDkjuiXDeOAyPhntmZdVj7IF1oBnAatV8x-pfhIU13a_GGfJvLRZMEapqWlbqIDxkwpisbYlCgSniRCWvxYciSaXyDGdb4taDT9MDPADAEpgAiZJUFG_U4R0ZBaWkTLIfhapdnitLicKQZr3_FKhRP-xaEcAtXstpxVNKqFSW4ODrnpHvRWOjWugS7P1FW_7Sl1h-PkHTOe0aqOGElZfA6ZFLnRgWudC4834FauvndEn
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 54 6f 72 4e 76 48 73 46 4f 48 44 78 6a 76 5a 55 63 70 74 49 7a 37 52 6d 78 56 78 6f 67 4a 65 6f 54 63 52 4b 44 53 46 4e 6f 6f 35 71 48 32 78 38 78 41 59 5a 53 4d 4a 5a 77 49 49 2d 65 56 68 77 38 74 7a 39 76 4a 54 6d 74 36 53 59 4f 30 54 51 34 31 65 6c 42 41 4d 4d 5a 68 45 5f 36 4a 57 4b 68 6f 63 57 35 68 45 31 4b 42 4d 72 34 32 49 63 62 30 47 68 50 6b 51 4d 46 54 50 71 45 4e 31 57 43 5f 6d 56 4a 31 35 45 30 4b 37 30 4c 30 2d 75 4b 50 63 47 67 45 52 4d 70 41 43 68 6f 49 72 63 7a 61 37 61 66 4d 54 56 49 35 63 38 71 36 4f 67 74 70 58 61 6e 57 41 35 30 76 2d 38 63 53 6e 62 50 67 4d 32 39 37 50 2d 71 47 6c 5f 4d 77 58 75 6c 2d 4a 56 64 4d 79 76 4a 46 74 61 73 6b 47 42 6c 66 31 74 54 51 33 4d 68 6b 66 43 50 52 7a 68 76 75 59 58 43 34 4e 73 30 41 52 7a 74 71 4c Data Ascii: TorNvHsFOHDxjvZUcptIz7RmxVxogJeoTcRKDSFNoo5qH2x8xAYZSMJZwII-eVhw8tz9vJTmt6SYO0TQ41elBAMMZhE_6JWKhocW5hE1KBMr42Icb0GhPkQMFTPqEN1WC_mVJ15E0K70L0-uKPcGgERMpAChoIrcza7afMTVI5c8q6OgtpXanWA50v-8cSnbPgM297P-qGl_MwXul-JVdMyvJFtaskGBlf1tTQ3MhkfCPRzhvuYXC4Ns0ARztqL
2024-07-02 14:43:44 UTC	785	IN	Data Raw: 64 47 63 55 31 57 5a 32 49 35 64 6c 52 49 59 69 74 72 56 56 56 79 56 6a 4a 46 61 48 64 4a 63 6d 6c 59 5a 44 52 4c 4e 6d 49 35 4e 43 39 6c 54 58 55 72 5a 31 68 69 63 47 68 53 51 6c 56 76 64 31 56 44 52 6e 49 31 54 47 4a 72 55 54 45 34 54 47 68 46 64 6b 56 49 56 54 68 7a 61 54 63 30 52 6c 4a 44 59 6b 74 49 57 58 46 76 51 30 70 6e 52 47 45 78 56 6d 6f 30 51 6e 42 72 4d 47 68 32 65 45 5a 4a 54 6d 74 48 62 57 45 32 62 7a 56 50 54 6a 68 59 55 30 56 76 62 55 68 69 52 55 46 31 4f 56 6c 35 55 33 68 77 55 32 73 7a 52 55 35 4b 53 6b 4e 34 54 45 4e 72 56 32 52 6d 51 57 67 35 53 54 42 32 51 6c 4a 36 55 6e 52 43 53 7a 42 79 57 47 4a 31 62 6d 78 70 55 30 4e 79 65 6e 52 68 59 58 56 68 4e 6a 6c 50 63 47 77 79 61 6d 46 4a 62 32 6c 78 52 56 52 4e 64 45 52 74 54 54 5a 55 65 Data Ascii: dGcU1WZ2I5dlRIYitrVVVyVjJFaHdJcmlYZDRLNmI5NC9lTXUrZ1hicGhSQlVvd1VDRnI1TGJrUTE4TGhFdkVIVThzaTc0RlJDYktIWXFvQ0pnRGExVmo0QnBrMGh2eEZJTmtHbWE2bzVPTjhYU0VvbUhiRUF1OVl5U3hwU2szRU5KSkN4TENrV2RmQWg5STB2QlJ6UnRCSzByWGJ1bmxpU0NyenRhYXVhNjlPcGwyamFJb2lxRVRNdERtTTZUe
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 32 63 34 36 0d 0a 56 64 33 4d 6d 31 69 4f 58 63 34 53 48 68 4c 4e 55 31 5a 55 55 77 33 53 47 46 55 4e 56 6b 72 55 54 68 6b 54 30 56 77 62 45 78 4a 4e 56 70 79 64 55 74 4e 64 6b 35 71 52 6c 59 7a 4e 45 4d 77 4f 48 42 58 59 55 52 42 61 30 4a 72 54 6c 64 53 61 58 70 6a 54 44 4a 42 4d 6e 70 77 4e 32 64 6f 5a 32 52 6a 4e 30 5a 4a 64 6e 51 34 53 6a 42 59 56 30 78 4b 4d 48 67 72 4e 30 5a 56 63 30 78 47 65 44 4a 51 4b 33 46 34 62 6d 59 32 51 7a 4a 43 55 47 39 43 4e 47 35 61 5a 54 64 6d 64 48 70 6e 59 33 6b 76 4f 57 45 32 56 6b 4e 30 4d 47 35 4d 53 55 4e 44 56 48 52 45 55 6b 4e 69 5a 46 46 46 4f 45 4a 74 5a 6a 45 31 53 58 4d 32 61 45 74 32 62 6d 70 76 52 6b 31 52 61 46 6f 35 59 6b 56 6a 52 48 63 33 57 6c 68 47 64 58 46 55 53 31 51 35 52 45 46 33 61 33 70 34 54 57 Data Ascii: 2c46Vd3Mm1iOXc4SHhLNU1ZUUw3SGFUNVkrUThkT0VwbExJNVpydUtNdk5qRlYzNEMwOHBXYURBa0JrTldSaXpjTDJBMnpwN2doZ2RjN0ZJdnQ4SjBYV0xKMHgrN0ZVc0xGeDJQK3F4bmY2QzJCUG9CNG5aZTdmdHpnY3kvOWE2VkN0MG5MSUNDVHREUkNiZFFFOEJtZjE1SXM2aEt2bmpvRk1RaFo5YkVjRHc3WlhGdXFUS1Q5REF3a3p4TW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49905	142.250.185.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:43 UTC	944	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=u3dvz27msl8v HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 14:43:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-mmTOnGthwy4LiDiUKGIBEQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:44 UTC	499	IN	Data Raw: 35 37 36 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5762<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 2d 4e 31 67 63 64 54 42 66 77 6a 4a 59 6c 48 39 63 64 72 73 4d 44 6b 65 64 49 4d 37 67 72 6a 6b 74 44 75 6c 67 34 69 73 47 43 75 75 55 37 62 4c 67 4a 36 52 55 44 4a 44 65 43 50 66 74 5a 36 42 47 61 6f 77 77 62 35 6a 73 5f 2d 47 75 55 6c 5a 59 6e 54 39 64 4f 37 72 79 6e 78 39 31 6a 72 64 4f 6a 62 6b 71 4a 31 68 45 46 38 76 32 69 6c 46 4f 58 42 67 2d 4e 57 59 65 37 37 30 61 4f 4c 4a 44 73 50 65 75 6e 4d 77 64 73 6d 7a 42 74 5f 37 61 33 50 57 31 4d 44 73 5f 45 47 72 32 46 6f 79 65 56 2d 46 66 67 65 31 47 50 76 72 76 4e 4c 38 35 43 71 76 49 65 30 72 75 4c 41 50 4d 52 48 53 49 34 55 37 4a 59 48 4d 57 56 54 51 70 48 44 44 74 47 30 6b 4b 59 45 56 7a 46 37 6c 62 30 50 36 6f 4b 31 7a 63 77 4f 47 59 73 43 41 45 6f 63 4a 6d 46 51 31 57 6a 65 4d 4a 63 5f 78 33 64 48 Data Ascii: -N1gcdTBfwjJYlH9cdrsMDkedIM7grjktDulg4isGCuuU7bLgJ6RUDJDeCPftZ6BGaowwb5js_-GuUlZYnT9dO7rynx91jrdOjbkqJ1hEF8v2ilFOXBg-NWYe770aOLJDsPeunMwdsmzBt_7a3PW1MDs_EGr2FoyeV-Ffge1GPvrvNL85CqvIe0ruLAPMRHSI4U7JYHMWVTQpHDDtG0kKYEVzF7lb0P6oK1zcwOGYsCAEocJmFQ1WjeMJc_x3dH
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 41 35 67 79 33 4a 72 61 46 79 64 52 2d 49 67 62 51 34 7a 6a 41 6f 56 50 53 2d 4c 42 65 68 5f 42 4c 4e 78 6f 75 63 58 52 4e 55 66 46 55 44 4b 7a 68 77 66 44 44 61 62 4e 76 2d 67 35 61 37 6d 30 30 7a 32 2d 5f 63 75 42 33 42 42 42 5f 37 78 68 4f 35 5f 6b 41 52 32 46 39 2d 30 6e 32 62 75 4e 4b 44 6f 4a 32 30 79 63 63 51 53 46 59 4f 73 62 49 4c 46 73 31 6f 30 48 39 50 6e 58 62 72 6e 77 36 74 36 6f 35 76 5a 53 75 67 34 42 52 6b 72 36 59 73 41 46 6c 72 2d 52 6a 41 67 5f 42 6d 67 4f 4c 48 44 39 4e 73 46 68 79 37 43 43 6e 43 6d 43 79 6c 2d 33 32 35 32 59 4d 4d 32 70 61 48 44 4d 6c 33 74 4b 76 61 58 6e 4b 68 57 44 49 68 56 63 72 5f 57 44 56 63 57 39 59 62 69 6d 33 45 64 64 75 50 39 64 35 73 32 79 56 6b 57 75 5f 67 57 59 5a 4c 7a 61 72 75 37 6a 65 37 6b 39 54 71 4f Data Ascii: A5gy3JraFydR-IgbQ4zjAoVPS-LBeh_BLNxoucXRNUfFUDKzhwfDDabNv-g5a7m00z2-_cuB3BBB_7xhO5_kAR2F9-0n2buNKDoJ20yccQSFYOsbILFs1o0H9PnXbrnw6t6o5vZSug4BRkr6YsAFlr-RjAg_BmgOLHD9NsFhy7CCnCmCyl-3252YMM2paHDMl3tKvaXnKhWDIhVcr_WDVcW9Ybim3EdduP9d5s2yVkWu_gWYZLzaru7je7k9TqO
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 5a 72 52 7a 46 71 4e 54 52 6a 52 32 70 4c 57 6b 68 58 51 6b 39 47 61 43 74 51 65 48 56 4a 64 43 74 4d 63 47 31 45 52 54 67 35 55 6c 52 58 4e 31 64 70 59 30 51 76 4e 6d 64 56 65 6b 64 53 51 55 64 7a 52 30 64 4c 54 30 4a 47 57 48 64 45 57 47 39 4c 55 6e 64 70 51 6b 70 4f 57 44 6b 30 4e 57 39 52 59 6e 52 4a 52 30 4e 45 52 33 52 75 5a 56 41 77 4b 30 4e 69 57 55 35 33 53 6a 6c 42 55 48 5a 47 59 30 46 79 4d 7a 64 5a 65 56 5a 54 62 48 4a 53 53 33 68 69 61 58 4e 54 61 45 70 36 59 53 74 71 59 6e 42 55 65 55 73 31 52 6b 78 32 61 6e 4e 7a 53 45 63 72 57 44 6c 68 57 56 5a 6f 56 6e 4d 35 55 7a 42 74 53 30 78 6c 56 44 42 43 62 6e 67 7a 64 6d 74 43 54 54 41 34 55 47 4a 31 5a 30 51 33 62 48 52 5a 61 46 56 55 4d 58 42 6e 53 6d 78 61 62 6c 64 79 5a 55 39 4c 62 6e 70 35 4c Data Ascii: ZrRzFqNTRjR2pLWkhXQk9GaCtQeHVJdCtMcG1ERTg5UlRXN1dpY0QvNmdVekdSQUdzR0dLT0JGWHdEWG9LUndpQkpOWDk0NW9RYnRJR0NER3RuZVAwK0NiWU53SjlBUHZGY0FyMzdZeVZTbHJSS3hiaXNTaEp6YStqYnBUeUs1Rkx2anNzSEcrWDlhWVZoVnM5UzBtS0xlVDBCbngzdmtCTTA4UGJ1Z0Q3bHRZaFVUMXBnSmxabldyZU9Lbnp5L
2024-07-02 14:43:44 UTC	1390	IN	Data Raw: 4e 43 74 69 63 30 4a 72 64 44 46 51 5a 47 68 6e 4f 56 46 58 64 47 51 30 53 6e 46 5a 64 6d 31 75 52 6e 45 72 4e 48 64 53 54 6b 74 59 57 57 4a 76 53 30 51 35 55 54 4e 58 4c 30 30 79 55 30 68 54 52 48 6c 49 65 6a 4a 47 53 6d 64 70 4d 45 64 74 4c 30 5a 4f 54 32 77 72 52 6c 56 49 56 6b 5a 50 52 7a 6c 71 52 7a 49 30 52 47 31 69 56 56 68 6a 51 6b 6f 78 52 6b 46 72 4c 7a 4e 48 4f 48 4d 7a 54 57 64 48 61 44 52 5a 52 7a 41 7a 5a 6d 73 78 4b 32 49 31 4e 6b 46 4f 51 6b 52 43 62 30 74 4f 55 7a 4e 4a 61 55 64 71 4f 55 49 30 4d 33 70 30 57 55 4e 6d 56 55 70 68 64 7a 64 77 52 55 46 78 55 54 52 4e 4d 58 4e 6f 5a 45 4e 56 59 6b 6c 4c 52 6b 46 70 62 7a 52 49 5a 46 4e 7a 4e 32 5a 42 56 57 74 6d 4b 31 67 7a 57 55 6b 32 54 6a 46 6f 4e 6d 73 35 61 6c 52 54 55 32 4a 4e 54 44 56 Data Ascii: NCtic0JrdDFQZGhnOVFXdGQ0SnFZdm1uRnErNHdSTktYWWJvS0Q5UTNXL00yU0hTRHlIejJGSmdpMEdtL0ZOT2wrRlVIVkZPRzlqRzI0RG1iVVhjQkoxRkFrLzNHOHMzTWdHaDRZRzAzZmsxK2I1NkFOQkRCb0tOUzNJaUdqOUI0M3p0WUNmVUphdzdwRUFxUTRNMXNoZENVYklLRkFpbzRIZFNzN2ZBVWtmK1gzWUk2TjFoNms5alRTU2JNTDV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49908	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg3.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:44 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "8d75f-60f3210543740" accept-ranges: bytes content-length: 579423 content-type: image/jpeg connection: close
2024-07-02 14:43:44 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f4 5f 5b e6 4e 6a Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE_[Nj
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 50 10 58 a9 22 0a 40 21 80 a1 8a 80 00 18 08 04 08 0a d6 45 23 52 96 42 20 80 b5 5e 64 74 72 c6 c0 90 0c 43 85 55 ea 44 28 c9 da 13 94 89 2c b3 6c 95 2c 2c af 52 71 6e 35 29 5c b2 8a f5 9a f7 05 8c 57 bc d3 bc 46 c4 47 51 0e 56 80 a8 40 85 91 a0 48 52 10 12 96 44 a5 41 20 25 74 e5 94 a9 22 a5 8e 59 44 94 80 71 64 d1 62 52 1a e4 df 3f 31 e8 f1 f0 3a f9 e2 cb 55 12 b9 4a 85 68 b0 34 67 9a d2 a7 4b 19 96 72 4d 97 35 ad 8a d2 99 65 6d 64 5a be 27 8c 4b 1d fb fe 4f 6f 13 d3 e2 cf 71 a7 9f 5b f9 75 8d 51 d3 8d 77 16 63 ae ae 5d 65 2c f3 bb 66 ea 5b 2e 72 eb 8d fc 7a f2 39 7a b4 59 6f 4e 1c fe 1e ae be b8 d3 cb d5 e6 a5 d6 c7 37 3a c1 d2 5b ce ad 2d 5e 96 33 93 4e 8f 9e e3 de e1 ac e1 e9 2f c5 d1 8d d9 1e ab bf 8b 8f e8 c7 a3 d7 3a 7a f2 c0 d7 9d f1 fb f9 59 d5 Data Ascii: PX"@!E#RB ^dtrCUD(,l,,Rqn5)\WFGQV@HRDA %t"YDqdbR?1:UJh4gKrM5emdZ'KOoq[uQwc]e,f[.rz9zYoN7:[-^3N/:zY
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 85 67 33 af 3e 77 5e 51 40 a3 78 78 b6 4b 83 a7 38 5c db 9d 6a e5 d2 51 8b a7 28 ee 22 ab 8d 5c f7 d6 f1 fa 6e e7 a7 96 6e b3 35 58 b4 6f 9f 3f b7 1b a6 e7 9b 46 b0 ec 89 0d 45 29 64 8c 7b c4 ab ce fa fc 5a a6 fd 2f cf f7 e3 b8 e9 70 f4 64 b2 dc ef 9d db 8c 98 d3 8e 91 87 96 fe 1b dd c7 75 a5 1b 99 37 98 47 57 87 7e 4f 7e 3a 23 4f 3e d8 fa 60 ba cb be 47 4c 4f 9e ba dc 3a 70 3d 9c b0 ef 1d 0e 5b 92 e4 de 66 98 f5 35 f3 b9 35 8f 41 e0 f6 d3 73 9b 4d 98 b5 99 f7 2a de 5a d8 64 b9 9e 95 5c 5e 72 bd 3c 79 1e 9e 7a 73 67 8b eb 7e 67 af 93 d6 f6 bc fd ae c6 f8 bd fc dd 2e 3d a9 4c bd f9 e1 de 37 f0 dd be 6e f3 bb c7 d3 9d 7d 32 e2 9e bc e3 71 ce f5 73 e2 fa b3 ee 3e 4f 6a b2 e5 7a b9 0b d0 f3 f4 b7 17 87 ee e3 56 db 7c 3d f9 fe ae 55 70 f6 f3 f8 74 ee 79 24 f0 Data Ascii: g3>w^Q@xxK8\jQ("\nn5Xo?FE)d{Z/pdu7GW~O~:#O>`GLO:p=[f55AsM*Zd\^r<yzsg~g.=L7n}2qs>OjzV\|=Upty$
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: e9 9f 63 78 c3 c7 ed f2 5e df 3e 5d ba f8 b4 e2 d0 b0 d6 67 a9 ee ae fd 34 cd 5e 4f 3e 7e 79 d1 75 7e 77 c7 c7 5e 1f 59 cb e9 79 5b d4 6e 68 dc b7 37 27 5c c3 6f 4b e4 d7 23 aa 32 eb 49 f4 bc 5f 46 7d 17 37 d3 7e 7e fc c7 a7 3e aa 35 ba 79 1e 5a f2 fd 31 e6 fa f2 85 93 b7 07 76 ae 59 b3 15 13 cd d3 8d fa ee 5d 7d d2 7c 27 e8 f9 1f 3b d3 f3 6f 46 3a 61 f4 49 66 94 5c 5a e7 1e 98 c0 59 8b 7d cb 25 6e 2d 6b 3d ba f1 99 f2 ba b1 65 84 6b 0f a2 5d bc 1b 99 3b 2e e7 7b 3f 33 a4 6e 79 5e ac 54 d5 aa f2 d7 87 73 ae 76 dd 79 8c 6d e5 b7 8c a7 3a b3 9e a5 db 0b ae 32 c5 fd a7 3b b4 d7 99 2d e5 67 3a f1 9a ba b3 74 97 72 6d f2 47 a9 5f a2 e4 ef a8 93 c4 e8 f9 b0 b9 4b 26 b0 77 eb 47 5d 47 59 ba e6 9d 67 7f 9f 76 5d 53 64 f1 aa b5 65 d7 3c ae fc f3 6f 06 e5 6d 6e ce Data Ascii: cx^>]g4^O>~yu~w^Yy[nh7'\oK#2I_F}7~~>5yZ1vY]}\|';oF:aIf\ZY}%n-k=ek];.{?3ny^Tsvym:2;-g:trmG_K&wG]GYgv]Sde<omn
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: cf b5 16 5b 35 19 9c dd 79 ab 84 ad 06 80 92 17 4f 52 2a 0a 5b 19 85 ab 36 dc cd 1c f5 46 f3 1b 52 36 a2 cc e5 a9 59 1d 6b 6f 2b 4b 17 e3 ae 8e 7d f3 f4 e5 29 ac bd 78 c0 d1 9e d6 f9 7d b5 fc 9f a3 c1 fa bc 6d 99 e7 5d 59 2e ec dd 3a cf 36 ca b1 d3 3e a5 fa ce 89 73 e6 b9 a7 8d 74 ed b3 ad aa cd 11 b6 b2 c4 f6 e4 e3 4b 1c e8 b6 ba bf 19 e7 77 90 ab 21 46 6d ac ca e8 96 62 8a f7 af 55 35 ed 75 3c 0b 9f 27 9e 96 e5 7c ee c9 3d 16 f7 f4 cf 44 d5 d3 09 4b 49 01 00 80 56 20 95 92 56 4b 34 0b 22 42 c8 a0 02 d0 08 6a 04 14 08 07 20 30 01 88 60 44 8d 22 56 03 81 53 2a 95 26 55 21 08 06 20 18 00 4b 22 52 83 ce 98 08 00 09 ac a5 72 00 a0 08 63 18 86 44 00 8a 02 11 1a 8a 00 49 5c 48 92 b8 63 94 12 43 52 b4 49 0a 8d 91 66 bd 1a 02 21 73 cb df 96 8d f3 6c f2 fa f8 e1 Data Ascii: [5yOR[6FR6Yko+K})x}m]Y.:6>stKw!FmbU5u<'\|=DKIV VK4"Bj 0`D"VS&U! K"RrcDI\HcCRIf!sl
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 59 df 37 3a d4 ab 9f 4c 9e 5f 5e 0f 8d f5 37 f9 b9 f0 bd de 59 eb 9f 77 87 a2 76 62 b8 39 fa a9 ef 21 e8 e5 6f 1d cf cb db 95 eb f3 9e ae 4f ae 75 78 7d ce 62 5c 35 c6 f5 71 c3 df 1b 74 f5 9f 5b e2 55 31 ca f3 7b 38 de 3f 56 9f 5f 80 b9 c7 c7 e8 59 e2 f5 6f e1 c7 0f 6c 89 38 c9 db 53 cd 8e b5 a2 66 5b c6 5e 9c b4 f6 f3 7a 17 18 76 f3 78 fe 7f 53 d8 ef e6 5b f2 bf 51 e4 b7 ca 9d 71 f4 9e 47 53 ae 79 bc f7 9f af 3b ce 0e ee 9b 73 f4 d5 59 65 eb 9a f5 69 d3 57 3d f5 3c f9 cb ac 4d 25 33 5f 4d 43 2b 33 6c b5 99 37 7d a7 c7 f5 63 f4 e7 ce fb 7c d6 a6 db 37 62 e1 dd cf cd d0 c4 e7 f6 c9 9b ab 96 b3 ed 9f 7a f5 5c 35 86 e3 91 d3 0e cb b7 3a 79 eb cd cc 95 ce 98 9e 55 f6 ce 11 2f d3 fd dc ef e9 94 a9 00 01 0a c2 4c d1 7e a2 a0 04 00 20 48 d8 00 91 02 2b 10 0c 11 Data Ascii: Y7:L_^7Ywvb9!oOux}b\5qt[U1{8?V_Yol8Sf[^zvxS[QqGSy;sYeiW=<M%3_MC+3l7}c\|7bz\5:yU/L~ H+
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: de 9c e8 c6 be 77 f3 fe af a1 ef e6 e4 f3 ed d7 eb c7 d0 fb 7e 5c 52 17 11 b8 85 ca 01 00 81 50 00 00 00 00 c1 18 c0 8f 3e 8a 59 ef 9b b9 54 86 a8 60 20 01 8d 02 2a 00 f3 aa b1 d3 ca fc cf d2 4e 4e af 5f 05 33 5d 9f a1 f2 67 d3 91 95 9e 2f 57 4f e7 7d 0c 9e 0f 57 47 3d 34 74 ce 1f ab f3 b5 78 7d bc ab 9e 5f 9f d1 3e 9c 76 f1 eb 4e 7d 1d dc 4e 5f a9 bf cf cf 8d d3 b6 7d 71 d9 e4 f4 7a 4f 9d f4 49 bf 2f f5 b9 fa 3f 9d 30 77 e1 e7 3e a7 8e 8e f8 e7 5e 56 f7 f3 57 cb af a4 fb 1f 02 9f 3f 75 2c b5 9d 5d f8 43 34 f8 1f 72 9e fc a5 e2 f5 43 ed fc 8b f7 cf 6f cb fa 7c ff 00 d0 fc 59 f2 ef 5f 7f 38 14 00 00 80 00 00 00 00 00 00 00 00 00 00 00 02 0d 00 10 02 b1 00 00 d0 01 02 83 44 0a 0d 10 c4 03 12 80 00 89 a0 00 00 00 04 00 02 01 80 94 15 30 51 00 51 00 00 12 b4 Data Ascii: w~\RP>YT` *NN_3]g/WO}WG=4tx}_>vN}N_}qzOI/?0w>^VW?u,]C4rCo\|Y_8D0QQ
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: b2 a8 c0 c2 97 e6 61 e0 53 47 5c c6 7c 4b f3 52 8c 5a 3a de 0d e0 aa b0 c7 c1 a3 11 ee a1 2f 54 0c a9 fe a2 3f b6 3f bd f9 03 ed 3e 87 f6 38 ce 30 0f d8 27 43 3f a8 f3 9b d1 47 2a 36 62 ae 84 27 94 f9 9a 82 6f d3 7c 66 fb 91 80 e2 c7 ce 2a 82 54 d8 ce 80 47 e0 c6 cf 07 73 f0 9b 12 d8 ae aa c9 ee af 2b 4a 45 56 d8 d4 f4 d3 ca f5 d1 d9 72 db 88 aa d0 d7 12 9e 0d 50 fd 47 0e cf c4 00 50 2c 67 e3 1e ce 2d cb 6c 8f a0 9b 69 61 e5 0f 89 b8 36 c6 9c 1b ad 61 d2 92 55 42 52 0b 0d 65 d7 db 64 aa b6 06 f0 2a 77 1a 70 6c 82 a6 e6 b5 02 0e 26 95 a9 4e 1c 57 95 4a 09 18 5c 91 38 d5 5d f6 86 6c 5c 7e e1 67 e0 cc c1 61 3e 3b ba 5d ea 1f 11 00 4a 9d f8 39 da a3 20 2c 8b c6 ca 7f e6 6a b9 ad 61 56 be 47 8f 00 aa 5c 99 99 8d 75 65 ae 76 af 0f 3d 31 a8 fe ad 43 9a 6c 47 4e Data Ascii: aSG\\|KRZ:/T??>80'C?G6b'o\|fTGs+JEVrPGP,g-lia6aUBRed*wpl&NWJ\8]l\~ga>;]J9 ,jaVG\uev=1ClGN
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 4d b5 77 5d 70 8a c6 b7 f4 72 79 f7 6b a5 ef 95 d4 95 d7 6d 5c 92 bc 22 91 ba 55 6e 53 02 9a da da 0d b2 aa 82 2d e4 6f ba 94 a5 97 f7 5b f1 a3 ad 81 39 6f d3 a7 74 b0 25 dd 84 96 bf 13 71 e5 0f 89 bd 8e 33 9d bf 4f fc 21 33 ba 41 fe 70 31 e4 de c7 40 37 55 68 d0 ad 73 de 22 b1 9e 0c c6 f6 3b e4 bd b5 51 47 7d 96 ae 0b 96 9c ea ab a7 26 ec c1 41 3b c7 0e db 2d 6b 5b d3 0f 30 e2 be 2b e3 b9 b3 29 55 b2 9f 9d 9c 7c a7 24 6c 0a c7 7b 2f 26 5b 6c aa 96 b9 a8 c3 ae 84 be e0 65 58 1d d9 f4 58 f5 c6 fa 64 0a cf 58 0e d1 c6 ca a8 96 d7 59 5e d5 84 fd 31 13 b3 e7 7b 51 55 60 3a 83 3b 70 8e 24 79 40 4e b9 73 b1 38 2d 6d ad 8e 05 5a 90 a4 d7 13 68 49 d9 56 ad 87 69 fb 9a 26 57 b9 60 f1 4f cf 1d 46 07 d3 91 24 fa 09 fc 67 2f 35 d5 c6 5c 86 15 2f 02 84 5e 73 e4 ef cc Data Ascii: Mw]prykm\"UnS-o[9ot%q3O!3Ap1@7Uhs";QG}&A;-k[0+)U\|$l{/&[leXXdXY^1{QU`:;p$y@Ns8-mZhIVi&W`OF$g/5\/^s
2024-07-02 14:43:44 UTC	16320	IN	Data Raw: 4d 7a 09 af 45 f9 49 76 4d 55 47 cb b7 3a 2f 76 88 d6 3c c8 71 6c 16 08 f6 07 3d d9 87 93 8b 83 45 bd 5a 9e ce 5f 51 fa ba 75 b9 f1 14 f9 7c 1c 94 a7 e0 d0 bc 9e ae 9b 4a 0e 15 d1 5d f9 0f 92 f7 63 9a 16 b0 a5 cf 4c e3 32 ad 6c a3 db 71 2b ee a3 63 64 bd 56 d5 d4 6d 7b f3 ba 5d 96 0b 71 ec a8 cc 3b 93 76 d0 ce 6a c4 2b 06 80 2c 63 97 e3 6d 24 4b 54 f1 76 b2 29 65 9c 1d d5 50 08 ce bb 45 b1 d5 71 fb ac 52 29 e2 41 9c 9c ca af 69 de 02 35 c9 cd ae 85 8a 2d 17 b2 b7 33 59 df 8a a9 6b 5d 70 78 c1 db a5 5a cf 06 8a dd d5 a9 ae 62 d1 bb f3 f2 aa 55 39 99 73 4f 2a ac 18 95 d2 ec 53 07 15 6e 64 98 e4 51 45 a5 ae c8 c2 2a a3 aa 5b 5f 3e 61 0a de 21 e2 1d dd 8c 00 99 53 02 00 f1 66 f9 d1 6d 8c c0 95 9f 30 d4 5c 2a 15 3b d4 2d e7 94 dc 03 91 b6 9e 29 a9 a9 a8 b0 18 Data Ascii: MzEIvMUG:/v<ql=EZ_Qu\|J]cL2lq+cdVm{]q;vj+,cm$KTv)ePEqR)Ai5-3Yk]pxZbU9sOSndQE[_>a!Sfm0\*;-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49913	104.16.117.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	689	OUT	OPTIONS /livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e HTTP/1.1 Host: api.hubspot.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-hubspot-messages-uri Origin: https://www.above.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:44 UTC	1332	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 18 Connection: close CF-Ray: 89cf68e9b9d54374-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.above.com Allow: HEAD,GET,OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-zqnx6 x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 3503fb87-4dd0-43f4-977c-98cbbee60c15 x-request-id: 3503fb87-4dd0-43f4-977c-98cbbee60c15 Set-Cookie: __cf_bm=S5BuDJz3E0lZIMZClYdkB6oqPcDGJh2tOeKPYUu0DoU-1719931424-1.0.1.1-s7xFVyBEMG2CCs6CsbltHqRZL1sgiLJz2IfWYsCFHPDpolH3HxQedrxtrzc7mLFToMdmvv2b3svJ1bcvzT45jg; path=/; expires=Tue, 02-Jul-24 15:13:44 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-07-02 14:43:44 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 58 6e 51 72 34 4d 38 32 44 42 57 45 5a 51 4b 4f 43 79 71 4e 47 71 71 39 39 49 4e 25 32 46 55 55 4d 54 4e 57 78 65 4e 68 7a 54 43 69 61 79 39 64 63 6d 6a 49 70 50 48 41 69 6c 52 59 67 4a 61 67 68 67 65 6a 68 43 5a 25 32 46 58 71 25 32 42 78 4b 46 50 55 77 6f 73 71 74 52 72 45 64 75 52 79 76 76 44 6f 46 4a 57 76 7a 6a 5a 65 35 43 37 59 4a 68 4e 67 69 49 5a 72 76 71 46 61 6d 54 42 56 45 38 4d 39 4e 6a 39 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnQr4M82DBWEZQKOCyqNGqq99IN%2FUUMTNWxeNhzTCiay9dcmjIpPHAilRYgJaghgejhCZ%2FXq%2BxKFPUwosqtRrEduRyvvDoFJWvzjZe5C7YJhNgiIZrvqFamTBVE8M9Nj9w%3D%3D"}],"group":"cf-nel","max_age":6048
2024-07-02 14:43:44 UTC	18	IN	Data Raw: 48 45 41 44 2c 20 47 45 54 2c 20 4f 50 54 49 4f 4e 53 Data Ascii: HEAD, GET, OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49911	104.18.242.108	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	611	OUT	GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=4372769 HTTP/1.1 Host: api.hubapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.above.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:44 UTC	1296	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:44 GMT Content-Type: application/json;charset=utf-8 Content-Length: 115 Connection: close CF-Ray: 89cf68e9da99c3ee-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.above.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Max-Age: 180 X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 125 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-dbd2r x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 70195c9e-4bae-4179-9514-63aafcf62510 x-request-id: 70195c9e-4bae-4179-9514-63aafcf62510 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D2NR6ST7U%2BnKhR%2BPw2EVS%2B1F2TW8Gy3eP6%2F8djikhieQnvhkAPLbYV5QckeoNOme7lg%2F1S2jv0NL8XOU3MbP6mVszRABXUy8OSs1f6qBWCP%2BlSpedWzKjdGLYZsSuafI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-07-02 14:43:44 UTC	73	IN	Data Raw: 7b 22 70 69 78 65 6c 73 22 3a 7b 22 41 44 57 4f 52 44 53 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 33 31 38 39 39 31 30 38 34 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 Data Ascii: {"pixels":{"ADWORDS":[{"pixelId":"318991084","limitedDataUseEnabled":fals
2024-07-02 14:43:44 UTC	42	IN	Data Raw: 65 7d 5d 7d 2c 22 65 6e 68 61 6e 63 65 64 43 6f 6e 76 65 72 73 69 6f 6e 45 76 65 6e 74 53 65 74 74 69 6e 67 73 22 3a 7b 7d 7d Data Ascii: e}]},"enhancedConversionEventSettings":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49909	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	555	OUT	GET /marketplace/img/salecard5.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:44 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "91b-60f3210543740" accept-ranges: bytes content-length: 2331 content-type: image/png connection: close
2024-07-02 14:43:44 UTC	2331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 24 08 06 00 00 00 c1 ec c7 65 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRK$etEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49910	103.224.182.24	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	555	OUT	GET /marketplace/img/salecard3.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:44 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "983-60f3210543740" accept-ranges: bytes content-length: 2435 content-type: image/png connection: close
2024-07-02 14:43:44 UTC	2435	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 24 08 06 00 00 00 2a db 7c 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRH$*\|ftEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49912	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	555	OUT	GET /marketplace/img/salecard7.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:44 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:44 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "919-60f3210543740" accept-ranges: bytes content-length: 2329 content-type: image/png connection: close
2024-07-02 14:43:44 UTC	2329	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3e 00 00 00 24 08 06 00 00 00 d1 8c 89 b9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR>$tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49915	172.217.16.196	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-62880640-4&cid=663184279.1719931418&jid=161793010&_u=YEBAAEAAAAAAACAAI~&z=1699798225 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:45 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49921	104.16.117.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	795	OUT	GET /livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e HTTP/1.1 Host: api.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 X-HubSpot-Messages-Uri: https://www.above.com/marketplace/pollyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.above.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:45 UTC	1127	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:45 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 89cf68edec028cda-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.above.com Cache-Control: no-cache, no-store, no-transform, must-revalidate, max-age=0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-4zw49 x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 62c9c7ed-8f53-44be-9de4-0e7150846085 x-request-id: 62c9c7ed-8f53-44be-9de4-0e7150846085
2024-07-02 14:43:45 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 77 52 34 58 41 58 39 37 41 77 6a 51 6f 65 47 31 6c 71 47 52 71 34 76 38 64 51 4e 53 47 6a 41 7a 69 67 6a 6f 47 2e 70 61 48 31 55 2d 31 37 31 39 39 33 31 34 32 34 2d 31 2e 30 2e 31 2e 31 2d 56 39 58 75 64 79 2e 4c 34 61 42 35 7a 77 44 6a 77 66 59 2e 70 43 39 4c 68 45 62 53 65 42 61 71 4d 47 36 66 42 56 77 76 47 44 61 37 77 53 46 74 30 57 53 41 4b 78 47 69 74 5a 4d 57 6f 34 70 76 75 6d 51 33 77 75 70 4c 6a 6f 4c 6c 4d 43 74 47 6d 45 6b 77 5a 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 30 32 2d 4a 75 6c 2d 32 34 20 31 35 3a 31 33 3a 34 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=wR4XAX97AwjQoeG1lqGRq4v8dQNSGjAzigjoG.paH1U-1719931424-1.0.1.1-V9Xudy.L4aB5zwDjwfY.pC9LhEbSeBaqMG6fBVwvGDa7wSFt0WSAKxGitZMWo4pvumQ3wupLjoLlMCtGmEkwZg; path=/; expires=Tue, 02-Jul-24 15:13:44 GMT; domain=.hubspot.com; HttpOnly; Secure;
2024-07-02 14:43:45 UTC	287	IN	Data Raw: 31 31 38 0d 0a 7b 22 40 74 79 70 65 22 3a 22 48 49 44 45 5f 57 49 44 47 45 54 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 40 74 79 70 65 22 3a 22 48 49 44 45 5f 57 49 44 47 45 54 5f 4d 45 54 41 22 2c 22 72 65 61 73 6f 6e 22 3a 22 4e 4f 5f 4d 41 54 43 48 49 4e 47 5f 57 45 4c 43 4f 4d 45 5f 4d 45 53 53 41 47 45 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4e 6f 20 6d 61 74 63 68 69 6e 67 20 77 65 6c 63 6f 6d 65 20 6d 65 73 73 61 67 65 20 66 6f 72 20 70 6f 72 74 61 6c 20 34 33 37 32 37 36 39 20 70 61 67 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 62 6f 76 65 2e 63 6f 6d 2f 6d 61 72 6b 65 74 70 6c 61 63 65 2f 70 6f 6c 6c 79 66 69 6c 6c 2e 69 6f 20 6f 72 20 76 69 73 69 74 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 61 72 67 65 74 69 6e 67 Data Ascii: 118{"@type":"HIDE_WIDGET","metadata":{"@type":"HIDE_WIDGET_META","reason":"NO_MATCHING_WELCOME_MESSAGE","description":"No matching welcome message for portal 4372769 page https://www.above.com/marketplace/pollyfill.io or visitor does not match targeting
2024-07-02 14:43:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49925	104.18.244.108	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:44 UTC	411	OUT	GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=4372769 HTTP/1.1 Host: api.hubapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:45 UTC	1232	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:45 GMT Content-Type: application/json;charset=utf-8 Content-Length: 115 Connection: close CF-Ray: 89cf68eedc844328-EWR CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Max-Age: 180 X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-v4qnt x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: b88d5520-a80a-421f-a6ed-66348890c92b x-request-id: b88d5520-a80a-421f-a6ed-66348890c92b Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AkzNXNmBg5MkElBd%2BD6oKhyjyPkEFyRxnEjvNUhzSdPLIVtQzeExyvIXyv22rJejxOf58ISKODjjbu1T6oBPH68vdIDAaCv59yep5kg0ycuJRHPGK3eDpFp8YGwDm4Yi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-07-02 14:43:45 UTC	115	IN	Data Raw: 7b 22 70 69 78 65 6c 73 22 3a 7b 22 41 44 57 4f 52 44 53 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 33 31 38 39 39 31 30 38 34 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 65 6e 68 61 6e 63 65 64 43 6f 6e 76 65 72 73 69 6f 6e 45 76 65 6e 74 53 65 74 74 69 6e 67 73 22 3a 7b 7d 7d Data Ascii: {"pixels":{"ADWORDS":[{"pixelId":"318991084","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49926	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:45 UTC	555	OUT	GET /marketplace/img/salecard4.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:45 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:45 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "860-60f3210543740" accept-ranges: bytes content-length: 2144 content-type: image/png connection: close
2024-07-02 14:43:45 UTC	2144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 24 08 06 00 00 00 db d0 27 eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRG$'tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49928	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:45 UTC	577	OUT	GET /marketplace/img/for-sale-backgrounds/forsalebg4.jpg HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:45 UTC	238	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:45 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "7df79-60f3210543740" accept-ranges: bytes content-length: 515961 content-type: image/jpeg connection: close
2024-07-02 14:43:45 UTC	14242	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 06 b1 0a 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f1 5e bf 9a 47 2c Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE^G,
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: 08 2d 01 e1 a0 10 84 24 4a 80 a8 00 d0 09 00 42 24 0a c2 24 14 00 21 2a 41 00 48 41 a5 61 a1 86 08 62 05 49 20 d9 16 4b 10 24 a8 45 89 02 b0 08 a4 49 41 40 50 ab 06 0d 48 6a 30 61 a6 8d 11 a1 94 a3 a9 08 cb 07 19 4c 8c a2 95 15 62 40 10 81 21 00 42 12 94 92 00 2a a4 b0 02 51 62 89 64 b2 12 00 46 6a 21 0a 98 23 43 ab 2c 01 05 02 40 a8 18 01 09 06 09 06 09 08 41 a2 11 62 2e 92 20 60 0c 3a c5 60 10 08 0a d1 49 52 08 46 a6 94 d1 08 a0 08 61 94 90 62 00 02 81 08 96 02 10 81 00 c1 50 42 00 89 08 42 04 2a 48 31 03 2b 05 58 64 0b 15 86 08 48 30 cd 31 00 22 04 00 08 56 24 52 a7 29 40 ba db 94 95 65 5d 84 75 54 04 1d 5a 9d 6c b6 cd 1d 62 40 2f 0b 9f 2f 1b c7 9f 1e e7 8e bb 79 74 ef e5 cd d6 3c a7 7c df 8e ff 00 42 e1 9e 4f 6e 3a b9 76 fa 07 5e a7 be 75 eb 57 68 48 Data Ascii: -$JB$$!AHAabI K$EIA@PHj0aLb@!BQbdFj!#C,@Ab. `:`IRFabPBB*H1+XdH01"V$R)@e]uTZlb@//yt<\|BOn:v^uWhH
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: ed d7 6f cb 9e 77 4b 76 54 75 bd 0e 53 7f 9d a0 d1 9d d1 9c 75 f1 78 7b cd 92 53 b6 a8 a4 ef f9 af 3f 9c d5 aa 33 31 fa 2f 07 bd d5 ce 59 66 2e b6 fe 73 59 d7 ef 9f 49 ee 68 de ab e2 f3 ff 00 25 cc e3 33 6e 6e 8c 44 de b5 f1 99 f6 1d 1e 6b d9 7d 0f 9a 66 dd e6 74 75 bc eb 13 a7 8d d1 33 4d 26 af 77 8e f8 5d 33 d0 e6 cf 31 b3 9d 9d 2f 89 fa 1a f4 7e 7b de f0 a5 cd 97 79 a7 3e 77 af 3e 17 ea 5d 58 d7 73 c9 9e b7 97 a7 3b b7 3a d7 d4 f8 b7 e4 bd d3 51 ca ec 7c 67 67 38 fa 9c de b6 6a f0 3d 7a a7 51 75 ad 11 6e 66 2e b2 bb 5a 56 b3 36 ae 7d ea 17 67 3b 78 cf 45 e6 c7 23 b3 91 ea e8 f9 02 cc 66 8d ea bb a8 cb d5 37 4f 23 15 56 ee 33 b7 cb 1c 3e fa 4a 12 eb e5 37 65 cb ef 57 5a 27 37 a5 d7 ce 3e 72 aa f9 60 f4 6e c9 34 c5 1a b5 56 9c 64 2e ec ce 57 5d 08 eb 63 Data Ascii: owKvTuSux{S?31/Yf.sYIh%3nnDk}ftu3M&w]31/~{y>w>]Xs;:Q\|gg8j=zQunf.ZV6}g;xE#f7O#V3>J7eWZ'7>r`n4Vd.W]c
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: b2 7a 3f 3c ca 89 ab d7 f2 e3 af c3 5e 27 ea 76 2c 08 c5 d6 d3 bd 73 ba eb 46 60 3a 38 9c 9d d3 a0 cc 94 96 ba d2 43 5c 99 ab 5c 9d 9f 3f 3d b8 cb e2 7a 4e 1a f0 1e dd f3 3b ee 8d 5d 52 54 5b 93 e5 4e 9a b3 04 69 c3 6f 27 a1 f1 67 66 33 7c be 1b e9 eb 67 3d 75 7c bc f1 f4 d6 7e 95 35 74 64 e7 b0 f9 b8 f2 fe c7 37 b6 ed b3 d0 78 f3 77 1c a5 d7 5f ce eb 72 d7 9e f5 63 4f 17 9f f7 ce 97 29 d7 e1 af 1d f4 59 eb a9 e7 9b 57 cc fa d5 74 9d 3f 26 74 65 e1 7e b6 e9 de d1 ab a3 66 33 96 bb be 6c e6 db 4e 65 36 e7 da fc a9 ae 77 5d 5b 9b e8 7c d8 ee 78 b9 9e 79 ed 79 b5 e4 be 9e a4 9e 9f c1 38 1e 97 43 33 bd e4 d7 98 f7 3c 0f d8 de 5e b5 f3 bb 64 eb 70 cf a2 f1 c1 d9 e0 bd fa 16 6d e5 17 5a cb 77 76 72 d1 9f 75 a6 6d 91 2d 3a 57 99 7c b2 4d 19 b5 e9 32 bf 19 e8 f1 Data Ascii: z?<^'v,sF`:8C\\?=zN;]RT[Nio'gf3\|g=u\|~5td7xw_rcO)YWt?&te~f3lNe6w][\|xyy8C3<^dpmZwvrum-:W\|M2
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: 70 a3 64 b4 51 91 a4 bf 25 a6 86 89 0f 25 b9 34 89 5a b9 4d 5c d5 e8 95 6e 17 42 c8 db ad 99 ce ea e6 fa 75 4f 4b 46 ad b0 64 bb 33 a3 c6 2e 0c ab 54 ed 63 58 ba 17 45 16 89 66 2d 92 02 6d ce ed ae 97 9e 59 9c d3 d1 97 55 e1 4b 20 c4 4b 12 ab 6a d5 14 29 f2 e9 79 e6 5e b3 36 f5 d1 e3 9a ea 8e 8b b3 68 a0 45 04 a5 aa 75 6d cc 71 48 56 57 b2 d1 a0 a0 16 5b 10 a8 0a 2d 28 f0 d2 34 4a 0b af 96 7a 5c b3 c6 f4 5c db da 96 55 45 80 86 14 b7 2b 32 79 05 5f 55 e6 81 34 b7 33 7e 9c a5 c1 d6 db 20 18 7c c7 c9 a2 12 88 40 00 85 25 3e 25 99 6b c2 de 4d 9c a4 b7 27 52 ee 5d ce 36 1d 1f 3e 76 f0 9d 3f 3d ab 57 17 69 9b ad af 4c 9d ad 1b bc de fa a7 a5 ae d7 cc 23 02 52 8f 2e ae 79 df cd 8f 6b f0 6c ba dc e7 2f ae b1 f5 64 e9 77 4c e5 d3 1e f4 a8 6d 11 69 9e 9f 22 99 f7 Data Ascii: pdQ%%4ZM\nBuOKFd3.TcXEf-mYUK Kj)y^6hEumqHVW[-(4Jz\\UE+2y_U43~ \|@%>%kM'R]6>v?=WiL#R.ykl/dwLmi"
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: ed dc bb 50 88 8b 42 00 e1 22 b0 50 85 60 00 40 53 c3 06 14 a4 7a 24 49 43 36 0e 59 40 52 16 45 ea 82 96 09 48 85 4c 30 29 12 b4 34 d0 54 97 8c a0 cb 95 f3 56 96 11 31 1e 53 cd 79 5e 7e 95 2b 96 e1 ae 2d ca fd 4f 3d d9 9b a5 5d 5e af 9e 67 06 95 da 73 05 57 a5 3b b4 74 26 a0 5c db 0a 6c a6 a2 84 78 aa 82 ad 1a 78 92 55 a2 e8 65 bb 20 94 6c 96 a5 85 7e 93 9e 0b a9 20 21 b5 cb 24 32 90 90 54 5b 16 ea 43 91 04 a9 95 12 e1 9a c3 35 c6 d6 90 4a 4a bf 23 94 b6 dc 4d 38 1c 86 e3 d8 2d af 6d 6c e9 e6 c1 6f 4a 73 ee f5 83 52 41 53 6c 66 0d 05 48 a9 6e 68 cd 99 34 27 1b ca f3 dc f6 df c8 35 2f 3a 38 4d 53 d5 6f 65 fa 9b 36 af 2e 67 9e e2 e5 72 68 f6 76 f3 36 f7 b6 69 67 58 4a 54 c9 5f 2d 73 38 aa c2 59 d1 ea d1 d6 68 e8 4d cc f9 d5 39 59 a5 74 99 89 2a c3 58 fb 59 Data Ascii: PB"P`@Sz$IC6Y@REHL0)4TV1Sy^~+-O=]^gsW;t&\lxxUe l~ !$2T[C5JJ#M8-mloJsRASlfHnh4'5/:8MSoe6.grhv6igXJT_-s8YhM9Yt*XY
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: c8 4d ed 48 3c 19 be db 07 ec 7f e7 12 4e c1 e3 7b de ff 00 80 fe 23 e4 f0 3e 75 fc 37 c6 e6 ff 00 a1 e4 ff 00 3d ff 00 94 41 04 1c 08 38 1f 0b 36 d3 7b de f7 b9 bd f3 be 07 d1 3b e4 41 f2 3f 86 b5 fc 47 fe a0 fe 07 fc 6b 07 f2 13 b7 6e c5 bb 6c 10 41 04 1e 75 af f2 83 fe 6d 18 61 82 6f 7c 6f fc 1b 10 41 c0 e0 cd 7f 8b 73 7f 63 e0 c3 09 27 f9 6f fc 63 81 c0 82 08 39 1c ef b7 6e db de f7 bd ef 7b f9 51 c0 e5 9b e1 54 2f f4 1f 23 ec 7f ea 0f 8d ee 1f f1 80 aa 3f 9e f7 b2 77 04 52 26 c1 1f 1b fb 1f e1 df f2 1c ef e9 a1 85 7f b8 f9 3c 88 3f d7 bf e2 4f 06 18 7f d3 a9 ad 6b 5a d6 b4 00 82 0f ad ef 7b fe a3 e1 78 79 ae 02 84 03 f8 8e 40 fe 83 ff 00 4b 7b 13 7b e3 7b 3f c8 7f 00 a0 6f b7 03 ef 7b de f9 1c ec 10 c1 b7 be 37 bd ef fc 1b de f6 0e f7 fd 04 1f 0d c9 Data Ascii: MH<N{#>u7=A86{;A?GknlAumao\|oAsc'oc9n{QT/#?wR&<?OkZ{xy@K{{{?o{7
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: d7 2b 7e 05 3e 67 1b c5 5c 4e 4d 5a 41 89 91 54 4a af 5c ca 86 35 b5 e2 4f 27 4c c3 b4 c5 89 53 51 55 49 66 4d 5b e9 4d 74 de 4f 66 6e b9 d9 de c5 bb d5 4d b6 66 ad 19 d0 2b 4a db f6 db 29 b2 a7 b0 77 cf 5a df 0a a6 4b 96 d8 31 b0 bc 6d d8 3e fb 2b a2 e7 a1 7c 76 6e 25 35 e3 91 4a d0 af dc e5 e4 c2 1d 09 44 95 39 bd ae 66 51 54 ca ca ba 63 f1 80 95 38 c8 39 0b 6f eb ae 26 3e 3c 4c 0c a7 f2 8d da a5 c3 a2 5b 63 2f ab 0f 28 bb c5 14 39 b2 fa 1a ca 9c 1c c4 a2 1c 23 3b e3 b9 c9 a2 b4 5b 45 72 d7 d5 2d ff 00 4d e5 55 b1 58 e2 aa 2e ad a6 35 7a 78 b3 f2 7e 6f 43 04 6b eb ef 0d ed 8a 8f 90 e8 a2 87 a1 a3 26 9a 06 50 d5 54 57 8a cb 9c 59 e8 b2 16 2d 8b 76 44 12 b6 b0 e3 cc 2b bc 87 97 d1 33 a3 1a c5 ee 1d 9a 55 3b e1 cb ac d9 76 1d 89 e0 42 c2 68 c1 ce b5 c6 e6 Data Ascii: +~>g\NMZATJ\5O'LSQUIfM[MtOfnMf+J)wZK1m>+\|vn%5JD9fQTc89o&><L[c/(9#;[Er-MUX.5zx~oCk&PTWY-vD+3U;vBh
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: b4 65 6a da ca ac 89 19 5d 55 75 01 31 62 47 6d 24 da c6 5b 68 6c 73 8a d4 7a 85 04 76 f7 31 ec 15 28 5a 8a fb 74 22 0e 86 a3 51 5d 7a ec ac ad 86 2c ae 6a 06 67 da ac 11 58 3a 2d 16 8b ef bb 27 24 c1 16 d0 7a 32 05 95 c3 18 00 c1 82 71 5c d0 06 1e 35 ae 90 f0 bc 2a cd a9 ec 22 af ac 42 18 24 68 15 07 23 19 70 53 09 70 45 05 1a 66 f0 f2 a2 5d a2 ce 8c 90 46 62 12 bd a1 d8 e7 42 74 00 d6 c1 ac 38 fd 3a 1a bd 51 2b 0a eb 2b 65 89 3b d8 ba 50 c0 8d 3b 6f 5c 6a 08 26 8f 16 4d 6b a0 1a eb ea 2b a9 ae 44 30 31 3b e0 15 61 35 34 63 c2 ff 00 88 60 04 68 4b 0e 89 85 f9 bf 37 e0 6c 1f ca d4 7a d7 9e c6 6b 8d 03 d4 23 a0 82 6c 19 8f 45 f1 da c6 49 b7 30 4d 92 66 94 75 85 66 e0 3b ef b8 54 00 0c 52 60 23 8d 18 14 a3 27 ac 56 13 5a 8b 07 16 20 50 15 15 53 86 56 af 4b Data Ascii: ej]Uu1bGm$[hlszv1(Zt"Q]z,jgX:-'$z2q\5*"B$h#pSpEf]FbBt8:Q++e;P;o\j&Mk+D01;a54c`hK7lzk#lEI0Mfuf;TR`#'VZ PSVK
2024-07-02 14:43:45 UTC	16320	IN	Data Raw: 26 60 cc ab c0 3e a1 80 13 ed 0a a7 a5 ae ce b2 e6 bc 27 b5 dd 72 13 55 a6 1c 9a e2 64 c2 0e 70 8c 29 a7 20 ef a2 a9 39 d4 6a 15 83 38 6f 74 1d ee d3 fc d8 6f e5 f7 5c ca a2 df a2 75 d9 29 fe d0 60 26 87 3a 75 46 aa 25 3c d4 19 c7 fc f3 00 39 9a 39 45 30 14 27 3c 00 0e 53 39 70 f4 28 7a 90 d6 b4 c1 5c ba ec 0e 07 a9 0b 27 e1 e7 03 3d f0 9f 77 e5 fc a3 2b d8 d8 56 51 69 6c 5c 4a 65 51 07 55 56 91 68 c4 6c 8d f9 d9 12 11 07 ea bb 2f cb 77 94 60 e5 43 ba bb 61 1c b5 d9 bb 02 76 45 85 cc d9 16 cb 76 d5 5b d7 ee 9e c5 3c d2 75 46 91 69 da 55 5a 74 5b 56 ec 1f ec 85 76 bb 38 68 50 f2 d9 e9 fa a7 d4 2d 17 7b 34 2a a0 e5 73 4d db ca fc 8a 35 89 1d 5d 93 dc ec 26 d6 d0 f5 6f 28 d2 32 ed 10 a8 ec e8 80 aa db 06 e8 9a e4 82 5b 3a aa 8f 64 13 d3 b7 94 43 a3 fc d3 b9 Data Ascii: &`>'rUdp) 9j8oto\u)`&:uF%<99E0'<S9p(z\'=w+VQil\JeQUVhl/w`CavEv[<uFiUZt[Vv8hP-{4*sM5]&o(2[:dC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49927	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:45 UTC	555	OUT	GET /marketplace/img/salecard6.png HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418
2024-07-02 14:43:45 UTC	233	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:45 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:17 GMT etag: "859-60f3210543740" accept-ranges: bytes content-length: 2137 content-type: image/png connection: close
2024-07-02 14:43:45 UTC	2137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 24 08 06 00 00 00 17 49 1d 00 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRT$ItEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49929	104.16.117.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:45 UTC	523	OUT	GET /livechat-public/v1/message/public?portalId=4372769&conversations-embed=static-1.16706&mobile=false&messagesUtk=9c2f6c86e8e34ea2be9f0ad50b6d2a5e&traceId=9c2f6c86e8e34ea2be9f0ad50b6d2a5e HTTP/1.1 Host: api.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:45 UTC	1346	IN	HTTP/1.1 400 Bad Request Date: Tue, 02 Jul 2024 14:43:45 GMT Content-Type: application/json;charset=utf-8 Content-Length: 98 Connection: close CF-Ray: 89cf68f23b1943c2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform, must-revalidate, max-age=0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-7dd59b876-mg4jb x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 7e7c131e-5447-4510-83fd-aaef1e0d4493 x-request-id: 7e7c131e-5447-4510-83fd-aaef1e0d4493 Set-Cookie: __cf_bm=MYrRLCTRlKmnoeNcnFQOZfur7hesiZAB2sItD8xkFbI-1719931425-1.0.1.1-XF0SS.MAqr2ah0dz6FLalK.IidMgyt905W05v0RI_C.yTe3Z4rKPjVfs6AvTLOanO4ZEyD8VO_QN.sEW1le7zg; path=/; expires=Tue, 02-Jul-24 15:13:45 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-07-02 14:43:45 UTC	513	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 6e 4e 68 48 66 70 31 37 69 79 68 34 4d 7a 44 69 6a 49 37 52 34 68 66 59 64 71 31 31 4a 71 78 4c 25 32 42 31 5a 4e 32 68 25 32 46 41 61 41 61 79 57 73 75 39 78 64 4b 66 62 6e 36 34 47 6d 72 67 73 62 32 32 78 6b 32 34 6b 43 53 54 69 59 4e 6e 6e 76 56 6f 35 34 4d 4d 76 31 6b 5a 31 68 51 6b 55 76 74 41 39 4a 57 41 50 58 46 42 69 52 47 6a 51 72 55 58 6a 69 6d 30 79 25 32 46 51 38 6e 74 6a 25 32 46 63 71 36 6b 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=inNhHfp17iyh4MzDijI7R4hfYdq11JqxL%2B1ZN2h%2FAaAayWsu9xdKfbn64Gmrgsb22xk24kCSTiYNnnvVo54MMv1kZ1hQkUvtA9JWAPXFBiRGjQrUXjim0y%2FQ8ntj%2Fcq6kQ%3D%3D"}],"group":"cf-nel","max_age":60
2024-07-02 14:43:45 UTC	98	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 75 72 6c 20 66 6f 75 6e 64 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 37 65 37 63 31 33 31 65 2d 35 34 34 37 2d 34 35 31 30 2d 38 33 66 64 2d 61 61 65 66 31 65 30 64 34 34 39 33 22 7d Data Ascii: {"status":"error","message":"No url found","correlationId":"7e7c131e-5447-4510-83fd-aaef1e0d4493"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49932	142.250.185.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:46 UTC	847	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:46 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 02 Jul 2024 14:43:46 GMT Date: Tue, 02 Jul 2024 14:43:46 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:46 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');
2024-07-02 14:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49934	216.58.206.66	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:46 UTC	1390	OUT	GET /td/rul/318991084?random=1719931424565&cv=11&fst=1719931424565&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 14:43:46 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnCSP_xA3CsgoItSWKDaO_vmqjcf8sY9Jzz2pyXwHY5vG8yTlVPhF5bp3Ez; expires=Thu, 02-Jul-2026 14:43:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-02 14:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49935	142.250.185.66	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:46 UTC	1266	OUT	GET /pagead/viewthroughconversion/318991084/?random=1719931424565&cv=11&fst=1719931424565&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 14:43:46 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkZR7NWVpgifDWXmi52PRjqP5zlQVCqXvQIgtkcI3an6SFqy0cUn8AIOi13; expires=Thu, 02-Jul-2026 14:43:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 14:43:46 UTC	379	IN	Data Raw: 61 37 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a78(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 20 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 Data Ascii: unction(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("Cr
2024-07-02 14:43:46 UTC	918	IN	Data Raw: 38 39 39 31 30 38 34 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 39 39 33 31 34 32 34 35 36 35 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 39 39 32 38 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 36 71 30 7a 61 32 30 30 7a 62 38 35 33 32 33 38 32 30 36 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e Data Ascii: 8991084/?random\x3d1719931424565\x26cv\x3d11\x26fst\x3d1719928800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be46q0za200zb853238206\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26tag_exp\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.
2024-07-02 14:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49936	142.250.185.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:46 UTC	835	OUT	GET /js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le8eZoUAAAAACvL0yuXhE6cd7XioIzzzi5a1br8&co=aHR0cHM6Ly93d3cuYWJvdmUuY29tOjQ0Mw..&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=3gtzvu7mtr88 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:46 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18253 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 27 Jun 2024 11:27:25 GMT Expires: Fri, 27 Jun 2025 11:27:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 443781 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:46 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 69 66 28 21 28 76 3d 28 6e 3d 6e 75 6c 6c 2c 58 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 76 29 7c 7c 21 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 55 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(n,v){if(!(v=(n=null,X.trustedTypes),v)\|\|!v.createPolicy)return n;try{n=v.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U}
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 76 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 29 7b 71 28 28 28 58 3d 28 55 3d 28 58 3d 46 28 28 76 26 3d 28 66 3d 76 26 34 2c 33 29 2c 6e 29 29 2c 46 28 6e 29 29 2c 65 28 58 2c 6e 29 29 2c 66 26 26 28 58 3d 6e 59 28 22 22 2b 58 29 29 2c 76 29 26 26 71 28 4f 28 58 2e 6c 65 6e 67 74 68 2c 32 29 2c 55 2c 6e 29 2c 58 29 2c 55 2c 6e 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 29 7b 66 6f 72 28 58 3d 28 76 7c 28 55 3d 5b 5d 2c 30 29 29 2d 31 3b 58 3e 3d 30 3b 58 2d 2d 29 55 5b 28 76 7c 30 29 2d 31 2d 28 58 7c 30 29 5d 3d 6e 3e 3e 58 2a 38 26 32 35 35 3b 72 65 74 75 72 6e 20 55 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 2c 79 29 7b 69 66 Data Ascii: ache-2.0','/','var vK=function(n,v,U,X,f){q(((X=(U=(X=F((v&=(f=v&4,3),n)),F(n)),e(X,n)),f&&(X=nY(""+X)),v)&&q(O(X.length,2),U,n),X),U,n)},O=function(n,v,U,X){for(X=(v\|(U=[],0))-1;X>=0;X--)U[(v\|0)-1-(X\|0)]=n>>X8&255;return U},T=function(n,v,U,X,f,y){if
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 50 28 33 39 33 2c 28 50 28 28 4a 28 32 37 38 2c 28 4a 28 32 31 33 2c 66 2c 28 4a 28 35 30 36 2c 28 50 28 31 30 30 2c 28 4a 28 32 31 36 2c 28 50 28 31 32 2c 28 50 28 32 34 35 2c 28 4a 28 34 31 32 2c 66 2c 28 66 2e 6f 62 3d 28 4a 28 32 35 2c 66 2c 28 4a 28 28 4a 28 35 30 30 2c 66 2c 28 4a 28 32 34 30 2c 66 2c 28 28 50 28 33 38 2c 28 28 66 2e 63 6f 3d 28 50 28 32 38 2c 28 50 28 33 35 35 2c 66 2c 28 4a 28 32 34 2c 28 4a 28 31 35 2c 66 2c 28 28 4a 28 33 33 31 2c 28 4a 28 28 4a 28 33 31 32 2c 28 4a 28 33 37 2c 66 2c 28 4a 28 33 33 33 2c 28 28 4a 28 33 35 30 2c 66 2c 28 50 28 36 39 2c 28 50 28 33 38 39 2c 66 2c 5b 31 36 30 2c 28 50 28 31 31 33 2c 28 50 28 31 39 30 2c 28 50 28 32 37 30 2c 28 28 28 55 3d 28 66 2e 59 3d 66 2c 28 66 2e 50 3d 28 66 2e 55 3d 5b 5d 2c Data Ascii: P(393,(P((J(278,(J(213,f,(J(506,(P(100,(J(216,(P(12,(P(245,(J(412,f,(f.ob=(J(25,f,(J((J(500,f,(J(240,f,((P(38,((f.co=(P(28,(P(355,f,(J(24,(J(15,f,((J(331,(J((J(312,(J(37,f,(J(333,((J(350,f,(P(69,(P(389,f,[160,(P(113,(P(190,(P(270,(((U=(f.Y=f,(f.P=(f.U=[],
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 28 3b 4e 3e 3d 44 2e 6c 65 6e 67 74 68 3b 29 44 2e 70 75 73 68 28 46 28 64 29 29 3b 4e 3d 44 5b 4e 5d 7d 45 2e 70 75 73 68 28 4e 29 7d 64 2e 4b 3d 28 64 2e 50 3d 5a 42 28 64 2c 72 2e 73 6c 69 63 65 28 29 29 2c 5a 42 28 64 2c 45 29 29 7d 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 76 4b 28 7a 2c 33 29 7d 29 2c 32 30 30 29 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 29 7b 28 7a 3d 28 48 3d 46 28 7a 29 2c 65 28 48 2c 7a 2e 59 29 29 2c 7a 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 7a 5b 31 5d 2c 7a 5b 32 5d 2c 56 29 7d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 2c 5a 29 7b 28 5a 3d 28 74 3d 28 77 3d 65 28 28 74 3d 28 48 3d 28 77 3d 46 28 7a 29 2c 46 29 28 7a 29 2c 46 29 28 7a 29 2c 5a 3d 46 Data Ascii: (;N>=D.length;)D.push(F(d));N=D[N]}E.push(N)}d.K=(d.P=ZB(d,r.slice()),ZB(d,E))})})),f),function(z){vK(z,3)}),200),f,function(z,H){(z=(H=F(z),e(H,z.Y)),z)[0].removeEventListener(z[1],z[2],V)}),f),function(z,H,t,w,Z){(Z=(t=(w=e((t=(H=(w=F(z),F)(z),F)(z),Z=F
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 28 7a 29 2c 75 3d 22 22 2c 7a 29 29 2c 48 29 2e 6c 65 6e 67 74 68 2c 30 29 3b 74 2d 2d 3b 29 52 3d 28 28 52 7c 30 29 2b 28 52 72 28 7a 29 7c 30 29 29 25 5a 2c 75 2b 3d 68 5b 48 5b 52 5d 5d 3b 50 28 77 2c 7a 2c 75 29 7d 29 2c 66 29 2c 5b 5d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 50 28 28 74 3d 46 28 28 48 3d 6c 28 28 77 3d 46 28 7a 29 2c 7a 29 29 2c 7a 29 29 2c 74 29 2c 7a 2c 65 28 77 2c 7a 29 3e 3e 3e 48 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 65 48 28 34 2c 7a 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 69 66 28 48 3d 7a 2e 49 2e 70 6f 70 28 29 29 7b 66 6f 72 28 74 3d 6c 28 7a 29 3b 74 3e 30 3b 74 2d 2d 29 77 3d 46 28 7a 29 2c 48 5b 77 5d 3d 7a 2e 4f 5b 77 5d 3b 28 48 5b 33 37 39 5d Data Ascii: (z),u="",z)),H).length,0);t--;)R=((R\|0)+(Rr(z)\|0))%Z,u+=h[H[R]];P(w,z,u)}),f),[]),f),function(z,H,t,w){P((t=F((H=l((w=F(z),z)),z)),t),z,e(w,z)>>>H)}),function(z){eH(4,z)})),f),function(z,H,t,w){if(H=z.I.pop()){for(t=l(z);t>0;t--)w=F(z),H[w]=z.O[w];(H[379]
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 76 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 76 7d 2c 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d Data Ascii: nction]"\|\|typeof n.call!="undefined"&&typeof n.propertyIsEnumerable!="undefined"&&!n.propertyIsEnumerable("call"))return"function"}else return"null";else if(v=="function"&&typeof n.call=="undefined")return"object";return v},or=function(n,v,U){if(n.length=
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 76 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 79 2c 68 29 7b 6e 2e 79 68 28 79 2c 74 72 75 65 2c 68 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 28 61 28 6e 2c 28 79 3d 21 6e 2e 57 2e 6c 65 6e 67 74 68 2c 5b 4a 67 5d 29 29 2c 79 29 26 26 54 28 6e 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 28 6e 2e 55 3d 5b 5d 2c 66 3d 6e 2e 43 28 29 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 20 6e 2e 65 63 28 79 29 7d 29 29 2c 6e 2e 41 2b 3d 6e 2e 43 28 29 2d 66 7d 65 6c 73 65 7b 69 66 28 55 3d 3d 41 29 72 65 74 75 72 6e 20 66 3d 76 5b 32 5d 2c 50 28 32 37 34 2c 6e 2c 76 5b 36 5d 29 2c 50 28 33 34 38 2c 6e 2c 66 29 2c 6e 2e 42 28 76 29 3b 55 3d 3d 4a 67 3f 28 6e 2e 4f 3d 6e 75 6c 6c 2c 6e 2e 78 6c 3d 5b 5d 2c 6e 2e 52 3d 5b 5d 29 3a 55 3d 3d 58 4e 26 26 51 2e Data Ascii: v[1])(function(y,h){n.yh(y,true,h)},function(y){(a(n,(y=!n.W.length,[Jg])),y)&&T(n,true,false)},(n.U=[],f=n.C(),function(y){return n.ec(y)})),n.A+=n.C()-f}else{if(U==A)return f=v[2],P(274,n,v[6]),P(348,n,f),n.B(v);U==Jg?(n.O=null,n.xl=[],n.R=[]):U==XN&&Q.
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 26 32 35 35 2c 58 26 32 35 35 29 2c 66 21 3d 76 6f 69 64 20 30 26 26 79 2e 70 75 73 68 28 66 26 32 35 35 29 29 2c 76 3d 22 22 2c 55 26 26 28 55 2e 6d 65 73 73 61 67 65 26 26 28 76 2b 3d 55 2e 6d 65 73 73 61 67 65 29 2c 55 2e 73 74 61 63 6b 26 26 28 76 2b 3d 22 3a 22 2b 55 2e 73 74 61 63 6b 29 29 2c 55 3d 65 28 33 37 39 2c 6e 29 2c 55 5b 30 5d 3e 33 29 29 7b 6e 2e 59 3d 28 76 3d 6e 59 28 28 55 5b 30 5d 2d 3d 28 76 3d 76 2e 73 6c 69 63 65 28 30 2c 28 55 5b 30 5d 7c 30 29 2d 33 29 2c 28 76 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 29 2c 76 29 29 2c 55 3d 6e 2e 59 2c 6e 29 3b 74 72 79 7b 71 28 5b 39 35 5d 2c 31 39 30 2c 6e 29 2c 71 28 4f 28 76 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 76 29 2c 31 32 2c 6e 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 59 3d Data Ascii: &255,X&255),f!=void 0&&y.push(f&255)),v="",U&&(U.message&&(v+=U.message),U.stack&&(v+=":"+U.stack)),U=e(379,n),U[0]>3)){n.Y=(v=nY((U[0]-=(v=v.slice(0,(U[0]\|0)-3),(v.length\|0)+3),v)),U=n.Y,n);try{q([95],190,n),q(O(v.length,2).concat(v),12,n,9)}finally{n.Y=
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 63 61 74 63 68 28 79 29 7b 78 28 79 2c 74 68 69 73 29 2c 76 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 66 2e 6c 29 7d 29 7d 7d 2c 56 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 3d 3d 36 32 7c 7c 6e 3d 3d 32 37 30 29 76 2e 4f 5b 6e 5d 3f 76 2e 4f 5b 6e 5d 2e 63 6f 6e 63 61 74 28 55 29 3a 76 2e 4f 5b 6e 5d 3d 5a 42 28 76 2c 55 29 3b 65 6c 73 65 7b 69 66 28 76 2e 62 6d 26 26 6e 21 3d 34 33 33 29 72 65 74 75 72 6e 3b 6e 3d 3d 33 38 39 7c 7c 6e 3d 3d 31 32 7c 7c 6e 3d 3d 32 38 7c 7c 6e 3d 3d 33 35 35 7c 7c 6e 3d 3d 31 31 33 7c 7c 6e 3d 3d 31 39 30 7c 7c 6e 3d 3d 33 39 33 7c 7c 6e 3d 3d 36 39 7c 7c 6e 3d 3d 33 37 39 3f 76 2e 4f 5b 6e 5d 7c 7c 28 76 2e Data Ascii: catch(y){x(y,this),v(function(h){h(f.l)})}},V={passive:true,capture:true},P=function(n,v,U){if(n==62\|\|n==270)v.O[n]?v.O[n].concat(U):v.O[n]=ZB(v,U);else{if(v.bm&&n!=433)return;n==389\|\|n==12\|\|n==28\|\|n==355\|\|n==113\|\|n==190\|\|n==393\|\|n==69\|\|n==379?v.O[n]\|\|(v.
2024-07-02 14:43:46 UTC	1390	IN	Data Raw: 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 47 2f 74 68 69 73 2e 6e 29 7d 29 2c 6e 3d 6e 65 77 20 55 2c 55 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 58 29 7b 6e 2e 4f 70 28 58 29 2c 76 2e 4f 70 28 58 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 76 3d 28 58 3d 5b 6e 2e 64 33 28 29 2c 76 2e 64 33 28 29 5d 2c 6e 65 77 20 55 29 2c 58 7d 5d 7d 2c 41 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 28 76 2e 70 75 73 68 28 6e 5b 30 5d 3c 3c 32 34 7c 6e 5b 31 5d 3c 3c 31 36 7c 6e 5b 32 5d 3c 3c 38 7c 6e 5b 33 5d 29 2c 76 2e 70 75 73 68 28 6e 5b 34 5d 3c 3c 32 34 7c 6e 5b 35 5d 3c 3c 31 36 7c 6e 5b 36 5d 3c 3c 38 7c 6e 5b 37 5d 29 2c 76 29 2e 70 75 73 68 28 6e 5b 38 5d 3c 3c 32 34 7c 6e 5b 39 5d 3c 3c 31 36 7c 6e 5b 31 30 5d 3c 3c 38 7c 6e 5b 31 31 5d Data Ascii: ath.sqrt(this.G/this.n)}),n=new U,U),[function(X){n.Op(X),v.Op(X)},function(X){return v=(X=[n.d3(),v.d3()],new U),X}]},Ag=function(n,v){(v.push(n[0]<<24\|n[1]<<16\|n[2]<<8\|n[3]),v.push(n[4]<<24\|n[5]<<16\|n[6]<<8\|n[7]),v).push(n[8]<<24\|n[9]<<16\|n[10]<<8\|n[11]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49941	142.250.186.100	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:48 UTC	1372	OUT	GET /pagead/1p-user-list/318991084/?random=1719931424565&cv=11&fst=1719928800000&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL20DmjA08YFXGRXnBDIZABhULxCzUdKoHTLncqSifN1QXkwlc&random=1732568169&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:49 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49943	104.16.117.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:50 UTC	1194	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=MYrRLCTRlKmnoeNcnFQOZfur7hesiZAB2sItD8xkFbI-1719931425-1.0.1.1-XF0SS.MAqr2ah0dz6FLalK.IidMgyt905W05v0RI_C.yTe3Z4rKPjVfs6AvTLOanO4ZEyD8VO_QN.sEW1le7zg; _cfuvid=L3.3oE.vP4RNeg6dQTZbpbcaMFgfCTHQ5ela.BtBNT0-1719931425670-0.0.1.1-604800000
2024-07-02 14:43:50 UTC	1203	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:50 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 89cf690e5f860ca5-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-756b8c8b56-npjwb x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 2500156e-056d-4fd5-8b38-599ac17741c2 x-request-id: 2500156e-056d-4fd5-8b38-599ac17741c2 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHON1ME2XjgZ1Nn6OPd%2FedG2e2xycrrA1CTDn64k6ySNG9D5tiAXt7TXEDMX6dA%2Bh23UDoRWJHkpY%2Fkd8mfMVxv4tVF0saWUh71yd0kP4lt07K7zpv4UKbEo%2BPOMA1RPDacd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-07-02 14:43:50 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49942	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:50 UTC	1018	OUT	GET /img/favicon.ico HTTP/1.1 Host: www.above.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.above.com/marketplace/pollyfill.io Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418; _gcl_au=1.1.546774914.1719931425; __hstc=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1; hubspotutk=0dca1bcd2cadc7edcbc1e681d60f4646; __hssrc=1; __hssc=192322805.1.1719931428243
2024-07-02 14:43:50 UTC	250	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:50 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "3aee-60f321044f500" accept-ranges: bytes content-length: 15086 content-type: image/vnd.microsoft.icon connection: close
2024-07-02 14:43:50 UTC	15014	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ff ff ff 2c ff ff ff 7e ff ff ff c6 ff ff ff ee ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ee ff ff ff c6 ff Data Ascii: 00 %6 % h6(0` $,~
2024-07-02 14:43:50 UTC	72	IN	Data Raw: ff ff ff 5c ff ff ff 04 c0 03 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 00 c0 03 00 00 Data Ascii: \

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49945	172.217.16.196	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:50 UTC	1139	OUT	GET /pagead/1p-user-list/318991084/?random=1719931424565&cv=11&fst=1719928800000&bg=ffffff&guid=ON&async=1&gtm=45be46q0za200zb853238206&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&hn=www.googleadservices.com&frm=0&tiba=pollyfill.io%20-%20Above.com%20Marketplace&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=546774914.1719931425&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL20DmjA08YFXGRXnBDIZABhULxCzUdKoHTLncqSifN1QXkwlc&random=1732568169&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 14:43:50 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 14:43:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 14:43:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49947	104.16.117.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:52 UTC	961	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=4372769&pu=https%3A%2F%2Fwww.above.com%2Fmarketplace%2Fpollyfill.io&t=pollyfill.io+-+Above.com+Marketplace&cts=1719931428248&vi=0dca1bcd2cadc7edcbc1e681d60f4646&nc=true&u=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1&b=192322805.1.1719931428243&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=MYrRLCTRlKmnoeNcnFQOZfur7hesiZAB2sItD8xkFbI-1719931425-1.0.1.1-XF0SS.MAqr2ah0dz6FLalK.IidMgyt905W05v0RI_C.yTe3Z4rKPjVfs6AvTLOanO4ZEyD8VO_QN.sEW1le7zg; _cfuvid=L3.3oE.vP4RNeg6dQTZbpbcaMFgfCTHQ5ela.BtBNT0-1719931425670-0.0.1.1-604800000
2024-07-02 14:43:52 UTC	1205	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 14:43:52 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 89cf691cbe0542b5-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-756b8c8b56-vtjjp x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: fb9395b2-79ff-4a77-b07c-b9e5e00f7158 x-request-id: fb9395b2-79ff-4a77-b07c-b9e5e00f7158 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9eRyBqmzB2R0D%2F1154t0UtFgVmTgnrI1qaijphUMOMTXyVj7VjORROVhmu%2BoVqj8DAkh6PBFwBCL5dIFfqlFtJoA%2Ff79%2FhsGHdVx9YiKy5IgFvKagCz7gxd%2BssztVnI7Cw1a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-07-02 14:43:52 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49946	103.224.182.24	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:43:52 UTC	760	OUT	GET /img/favicon.ico HTTP/1.1 Host: www.above.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mkqn53thef0n4qidmbupkal931; _gid=GA1.2.1984477665.1719931418; _gat_UA-62880640-4=1; _ga_DQB7CZVNQD=GS1.1.1719931417.1.0.1719931417.60.0.0; _ga=GA1.1.663184279.1719931418; _gcl_au=1.1.546774914.1719931425; __hstc=192322805.0dca1bcd2cadc7edcbc1e681d60f4646.1719931428243.1719931428243.1719931428243.1; hubspotutk=0dca1bcd2cadc7edcbc1e681d60f4646; __hssrc=1; __hssc=192322805.1.1719931428243
2024-07-02 14:43:52 UTC	250	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 14:43:52 GMT server: Apache last-modified: Thu, 18 Jan 2024 05:59:16 GMT etag: "3aee-60f321044f500" accept-ranges: bytes content-length: 15086 content-type: image/vnd.microsoft.icon connection: close
2024-07-02 14:43:52 UTC	2646	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ff ff ff 2c ff ff ff 7e ff ff ff c6 ff ff ff ee ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ee ff ff ff c6 ff Data Ascii: 00 %6 % h6(0` $,~
2024-07-02 14:43:52 UTC	12440	IN	Data Raw: 00 00 00 ff 00 00 00 ff 00 00 00 ff 70 70 70 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c8 c8 c8 ff 13 13 13 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 7a 7a 7a ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fa fa ff 5b 5b 5b ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 23 23 23 ff dd dd dd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: pppzzz[[[###

Target ID:	0
Start time:	10:42:34
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:42:38
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1904,i,16630701791680087282,18044772249093209314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:42:41
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pollyfill.io"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pollyfill.io

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Windows Analysis Report
http://pollyfill.io