Edit tour

Windows Analysis Report
https://selfcare.firma-remota.it/asmonitor/panel/login

Overview

General Information

Sample URL:	https://selfcare.firma-remota.it/asmonitor/panel/login
Analysis ID:	1466882
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,16248433379570988683,2973663790764214421,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfcare.firma-remota.it/asmonitor/panel/login" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /piwik.php?action_name=Selfcare%20Firma%20Remota%20-%20Funzionalit%C3%A0%20ed%20utilizzo%20%7C%20Guide%20pec.it&idsite=40&rec=1&r=302050&h=8&m=36&s=39&url=https%3A%2F%2Fguide.pec.it%2Ffunzionalita-pannello-firma-remota.aspx%23a_1474450182479&_id=a4896a26507eaf63&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=COGZuh&devicePixelRatio=1&pf_net=0&pf_srv=544&pf_tfr=284&pf_dm1=2563&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: wa.aruba.itConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://guide.pec.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://guide.pec.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 12:36:08 GMTServer: ApacheStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Frame-Options: denyX-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCross-Origin-Opener-Policy: same-originCross-Origin-Embedder-Policy: unsafe-noneCross-Origin-Resource-Policy: same-originContent-Security-Policy: base-uri 'self'Clear-Site-Data: *Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_294.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_185.1.dr	String found in binary or memory: http://areaclienti.pec.it
Source: chromecache_185.1.dr	String found in binary or memory: http://cart.aruba.it
Source: chromecache_294.1.dr	String found in binary or memory: http://errors.angularjs.org/1.6.5/
Source: chromecache_175.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_235.1.dr	String found in binary or memory: http://groups.google.com/group/jquery-en/browse_thread/thread/36640a8730503595/2f6a79a77a78e493#2f6a
Source: chromecache_352.1.dr, chromecache_239.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_352.1.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_235.1.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_185.1.dr	String found in binary or memory: http://manage.pec.it
Source: chromecache_215.1.dr	String found in binary or memory: http://matomo.org
Source: chromecache_215.1.dr	String found in binary or memory: http://matomo.org/free-software/bsd/
Source: chromecache_231.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_269.1.dr	String found in binary or memory: http://schema.org
Source: chromecache_235.1.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_235.1.dr	String found in binary or memory: http://www.google.com/search?q=growl)
Source: chromecache_234.1.dr	String found in binary or memory: http://www.greensock.com
Source: chromecache_234.1.dr	String found in binary or memory: http://www.greensock.com/terms_of_use.html
Source: chromecache_211.1.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_235.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_269.1.dr	String found in binary or memory: https://account-supervisore360.aruba.it
Source: chromecache_305.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_292.1.dr	String found in binary or memory: https://api.usabilla.com/v2/f/
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://areaclienti.arubapec.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_185.1.dr, chromecache_315.1.dr	String found in binary or memory: https://areaclienti.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://areaclienti.pec.it/
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://asbadm.firma-automatica.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://asbadmcredem.firma-automatica.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://asbfe.firma-automatica.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://asbfecredem.firma-automatica.it
Source: chromecache_269.1.dr	String found in binary or memory: https://assistenza.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://assistenza.aruba.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://assistenza.aruba.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://assistenza.aruba.it/informazioni-commerciali.aspx
Source: chromecache_211.1.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_269.1.dr	String found in binary or memory: https://business.aruba.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://ca.arubapec.it/crtest/showcert.php
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_185.1.dr, chromecache_315.1.dr	String found in binary or memory: https://cart.aruba.it
Source: chromecache_174.1.dr, chromecache_306.1.dr, chromecache_305.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_348.1.dr, chromecache_360.1.dr	String found in binary or memory: https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F442d267
Source: chromecache_348.1.dr, chromecache_360.1.dr	String found in binary or memory: https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a075
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://cms.gruppoaruba.it
Source: chromecache_306.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_306.1.dr	String found in binary or memory: https://consent.cookiebot.
Source: chromecache_269.1.dr	String found in binary or memory: https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cd.js
Source: chromecache_199.1.dr, chromecache_344.1.dr, chromecache_342.1.dr	String found in binary or memory: https://consent.cookiebot.com/uc.js
Source: chromecache_174.1.dr	String found in binary or memory: https://consent.cookiebot.com/uc.js?cbid=
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://conservazione.docfly.it
Source: chromecache_269.1.dr	String found in binary or memory: https://conservazione.docfly.it/docflyfe/signin
Source: chromecache_292.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)
Source: chromecache_292.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/
Source: chromecache_241.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac85841
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://demo.areaclienti.arubapec.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://demo.docfly.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://demo.fatturazioneelettronica.aruba.it
Source: chromecache_215.1.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_215.1.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_269.1.dr	String found in binary or memory: https://enterprise.aruba.it/home.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://fatturazioneelettronica.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://fatturazioneelettronica.aruba.it/#login
Source: chromecache_175.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_269.1.dr	String found in binary or memory: https://fibra.aruba.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://fibra.aruba.it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barra-cross-sit
Source: chromecache_269.1.dr	String found in binary or memory: https://fibra.aruba.it/trasparenza-tariffaria.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Montserrat:wght
Source: chromecache_269.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Lato:300
Source: chromecache_199.1.dr, chromecache_344.1.dr, chromecache_342.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Lato:400
Source: chromecache_202.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/gloriahallelujah/v21/LYjYdHv3kUk9BMV96EIswT9DIbW-MIS11zM.woff2)
Source: chromecache_345.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_345.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_320.1.dr, chromecache_345.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_320.1.dr, chromecache_345.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_345.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_345.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_320.1.dr, chromecache_345.1.dr, chromecache_193.1.dr, chromecache_227.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_320.1.dr, chromecache_345.1.dr, chromecache_193.1.dr, chromecache_227.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_307.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_307.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_307.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_307.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_307.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://gestionemail.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://gestionemail.pec.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://gestionemail.pec.it/reset_password/index
Source: chromecache_198.1.dr, chromecache_328.1.dr, chromecache_293.1.dr, chromecache_187.1.dr, chromecache_177.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_211.1.dr	String found in binary or memory: https://github.com/blueimp/Bootstrap-Image-Gallery
Source: chromecache_215.1.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_198.1.dr, chromecache_293.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_293.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_306.1.dr	String found in binary or memory: https://google.com
Source: chromecache_306.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.aruba.it/connettivita/fibra/agevolazioni-servizio/agevolazioni-per-non-vedenti-e-non-u
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://guide.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/docfly-conservazione-sostitutiva.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/fatturazione-elettronica.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/installazionefirma.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/marca-temporale.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/menu/pagamenti-e-fatture/indice.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/servizio-pec/introduzione.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/soluzioni-firma-digitale.aspx
Source: chromecache_342.1.dr	String found in binary or memory: https://guide.pec.it/soluzioni-firma-digitale/firma-remota/gestione-e-utilizzo-firma-remota/funziona
Source: chromecache_342.1.dr	String found in binary or memory: https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/soluzioni-partner.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/spid.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://guide.pec.it/supervisore360.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://help.opera.com/Windows/10.00/it/cookies.html
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/aruba-drive.aspx
Source: chromecache_208.1.dr	String found in binary or memory: https://hosting.aruba.it/documents/tc-files/en/7_privacypolicyhostingcart.pdf
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/domini.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/e-commerce.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/email.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/home.aspx?utm_campaign=barra-cross-sites&utm_source=pec&utm_medium=
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/hosting/linux.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/offerte-domini-hosting-aruba.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/rankingcoach.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/servizio-sms.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/supersite.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/termini-condizioni.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://hosting.aruba.it/wordpress.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://identification.arubapec.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://login.aruba.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://loginspid.aruba.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_185.1.dr, chromecache_315.1.dr	String found in binary or memory: https://manage.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://manage.pec.it/Default.aspx?REDIR=Conv
Source: chromecache_269.1.dr	String found in binary or memory: https://manage.pec.it/Default.aspx?vers=2&action=REDIR&Path=AttKit
Source: chromecache_269.1.dr	String found in binary or memory: https://manage.pec.it/Default.aspx?vers=2&action=REDIR&Path=RinnKit
Source: chromecache_269.1.dr	String found in binary or memory: https://manage.pec.it/Default.aspx?vers=2&action=REDIR&Path=RinnPec
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/1a/1acdceb7-8dab-4494-aba5-85e359cde5f1.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/44/448cc8c6-a77e-488d-8e92-8e1536d9e370.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/77/77ce1edc-2083-457a-a473-b382c473acd9.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/95/9505a537-5daa-4599-ae7c-06d617f4b53c.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/98/98c9b304-9157-437f-90eb-2736f21b79c4.css
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a4da963-a747-4078-9b71-86963f3e27af.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a5ad399-11ce-4f31-bd23-58cfdca26c8b.css
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/9f/9fe696ac-8de6-49e6-88e8-41bd85bb8769.js
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/d1/d192b3cf-9715-4429-8907-ea7356836312.css
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/MediaCDNRepository/files/e6/e6e72a67-33c9-462f-8e7b-0fc05b2c6e9f.jpg
Source: chromecache_269.1.dr	String found in binary or memory: https://mediacdn.aruba.it/images/stickybar/pec-firma-digitale-2023-Dicembre/bg-pec-firma-digitale-20
Source: chromecache_269.1.dr	String found in binary or memory: https://microsoft365.aruba.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://microsoft365.aruba.it/termini-condizioni.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://ml.pec.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://pagamenti.aruba.it/home/default.aspx
Source: chromecache_305.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_174.1.dr, chromecache_306.1.dr, chromecache_305.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://partner.arubapec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://partner.arubapec.it/
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://pec.it/cookie-policy.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://peclog.pec.aruba.it
Source: chromecache_215.1.dr	String found in binary or memory: https://piwik.org
Source: chromecache_215.1.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_191.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_269.1.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_269.1.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_306.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_191.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://registrazionespid.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://registrazionespid.aruba.it/
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://riconoscimento.aruba.it
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://riconoscimentobnl.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://rinnovocdrl.pec.it/Rinnovo.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://search.get.cloud
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://selfcare.firma-remota.it
Source: chromecache_269.1.dr	String found in binary or memory: https://selfcare.firma-remota.it/asmonitor/panel/login
Source: chromecache_269.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://selfcarespid.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://selfcarespid.aruba.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/backup
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/colocation
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/componenti-network
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/contatti
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/crea-infrastruttura-it
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/home
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/home?utm_campaign=barra-cross-sites&utm_source=pec&utm_mediu
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/offerta-server-dedicati
Source: chromecache_269.1.dr	String found in binary or memory: https://serverdedicati.aruba.it/termini-condizioni
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://servicematica.conservazione.docfly.it
Source: chromecache_269.1.dr	String found in binary or memory: https://shop.actalis.com/store/it-it/
Source: chromecache_269.1.dr	String found in binary or memory: https://shop.actalis.com/store/it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barr
Source: chromecache_306.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://spidtest.aruba.it
Source: chromecache_305.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://supervisore.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://supervisore360.aruba.it
Source: chromecache_269.1.dr	String found in binary or memory: https://support.apple.com/it-it/HT201265
Source: chromecache_269.1.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_191.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_269.1.dr	String found in binary or memory: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Source: chromecache_174.1.dr, chromecache_306.1.dr, chromecache_305.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://terna.conservazione.docfly.it
Source: chromecache_269.1.dr	String found in binary or memory: https://twitter.com/arubait
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://videoriconoscimento.arubapec.it
Source: chromecache_292.1.dr	String found in binary or memory: https://w.usabilla.com/a/t?m=b&b=
Source: chromecache_269.1.dr	String found in binary or memory: https://wa.aruba.it/piwik.php?idsite=14
Source: chromecache_269.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://webmail.pec.it
Source: chromecache_269.1.dr	String found in binary or memory: https://webmail.pec.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://whois.nic.cloud/
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/abuse.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/certificazioni.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/chisiamo.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/documents/tc-files/it/11_it_privacy_policy_aruba_spa.aspx
Source: chromecache_348.1.dr, chromecache_360.1.dr	String found in binary or memory: https://www.aruba.it/documents/tc-files/it/21_informativa_privacy_aruba_spa_chatbot.pdf).
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/gdpr-regolamento-europeo-privacy.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/lavora-con-noi.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/listino-pec.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/magazine.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/press-kit.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/sicurezza/difendersi-dalle-truffe-online.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.aruba.it/whistleblowing
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/application-platform.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/cloud-backup/caratteristiche.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/cloud-monitoring/caratteristiche.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/cloud-server.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/database-as-a-service.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/domain-center/caratteristiche.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/home.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/home.aspx?utm_campaign=barra-cross-sites&utm_source=pec&utm_medium=inte
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/hybrid-cloud/caratteristiche.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/object-storage/object-storage-aruba.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/private-cloud/caratteristiche.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/termini-condizioni.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.cloud.it/vps/vps-hosting.aspx
Source: chromecache_208.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://www.cookiebot.com
Source: chromecache_269.1.dr	String found in binary or memory: https://www.datacenter.it/home.aspx
Source: chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	String found in binary or memory: https://www.get.cloud
Source: chromecache_305.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_210.1.dr, chromecache_191.1.dr, chromecache_250.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_306.1.dr, chromecache_305.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_305.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_306.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_269.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_269.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NFRXKCG
Source: chromecache_210.1.dr, chromecache_191.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.
Source: chromecache_250.1.dr, chromecache_189.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Source: chromecache_269.1.dr	String found in binary or memory: https://www.linkedin.com/company/aruba-s-p-a-
Source: chromecache_305.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_269.1.dr	String found in binary or memory: https://www.pec.it/
Source: chromecache_315.1.dr	String found in binary or memory: https://www.pec.it/cookie-policy.aspx
Source: chromecache_269.1.dr	String found in binary or memory: https://www.pratiche.it/
Source: chromecache_269.1.dr	String found in binary or memory: https://www.pratiche.it/?utm_campaign=barra-cross-sites&utm_source=pec&utm_medium=internal-l
Source: chromecache_315.1.dr	String found in binary or memory: https://www.toctoc.me/
Source: chromecache_305.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_269.1.dr	String found in binary or memory: https://www.youtube.com/user/ArubaWebTV

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49727 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@27/384@107/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,16248433379570988683,2973663790764214421,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfcare.firma-remota.it/asmonitor/panel/login"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,16248433379570988683,2973663790764214421,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://selfcare.firma-remota.it/asmonitor/panel/login	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
https://www.cloud.it/home.aspx	0%	Avira URL Cloud	safe
https://img.sct.eu1.usercentrics.eu/1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://selfcare.firma-remota.it/asmonitor/images/04_sm_info.png	0%	Avira URL Cloud	safe
https://serverdedicati.aruba.it/termini-condizioni	0%	Avira URL Cloud	safe
https://guide.pec.it/spid.aspx	0%	Avira URL Cloud	safe
https://registrazionespid.aruba.it	0%	Avira URL Cloud	safe
https://hosting.aruba.it/aruba-drive.aspx	0%	Avira URL Cloud	safe
https://microsoft365.aruba.it/home.aspx	0%	Avira URL Cloud	safe
https://areaclienti.pec.it/	0%	Avira URL Cloud	safe
https://microsoft365.aruba.it/termini-condizioni.aspx	0%	Avira URL Cloud	safe
https://www.cloud.it/database-as-a-service.aspx	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-CBSMR1FX8C&cid=1713985919.1720010249&gtm=45je4710v880708810z8867718176za200zb867718176&aip=1&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&frm=0	0%	Avira URL Cloud	safe
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	0%	Avira URL Cloud	safe
https://assistenza.aruba.it	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://conservazione.docfly.it/docflyfe/signin	0%	Avira URL Cloud	safe
https://serverdedicati.aruba.it/colocation	0%	Avira URL Cloud	safe
https://www.aruba.it/magazine.aspx	0%	Avira URL Cloud	safe
https://www.cookiebot.com	0%	Avira URL Cloud	safe
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	0%	Avira URL Cloud	safe
https://www.aruba.it/documents/tc-files/it/11_it_privacy_policy_aruba_spa.aspx	0%	Avira URL Cloud	safe
https://www.pratiche.it/	0%	Avira URL Cloud	safe
https://hosting.aruba.it/servizio-sms.aspx	0%	Avira URL Cloud	safe
http://matomo.org/free-software/bsd/	0%	Avira URL Cloud	safe
https://www.cloud.it/vps/vps-hosting.aspx	0%	Avira URL Cloud	safe
http://www.greensock.com	0%	Avira URL Cloud	safe
https://fatturazioneelettronica.aruba.it	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/44/448cc8c6-a77e-488d-8e92-8e1536d9e370.js	0%	Avira URL Cloud	safe
https://webmail.pec.it	0%	Avira URL Cloud	safe
https://asbfecredem.firma-automatica.it	0%	Avira URL Cloud	safe
https://www.aruba.it/lavora-con-noi.aspx	0%	Avira URL Cloud	safe
https://hosting.aruba.it/rankingcoach.aspx	0%	Avira URL Cloud	safe
https://shop.actalis.com/store/it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barr	0%	Avira URL Cloud	safe
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js	0%	Avira URL Cloud	safe
https://guide.pec.it/menu/pagamenti-e-fatture/indice.aspx	0%	Avira URL Cloud	safe
https://asbfe.firma-automatica.it	0%	Avira URL Cloud	safe
https://ams.creativecdn.com/tags/v2?type=json&tc=1	0%	Avira URL Cloud	safe
https://ca.arubapec.it/crtest/showcert.php	0%	Avira URL Cloud	safe
https://guide.aruba.it/connettivita/fibra/agevolazioni-servizio/agevolazioni-per-non-vedenti-e-non-u	0%	Avira URL Cloud	safe
https://docsbot.ai/api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx	0%	Avira URL Cloud	safe
https://pec.it	0%	Avira URL Cloud	safe
https://servicematica.conservazione.docfly.it	0%	Avira URL Cloud	safe
https://cms.gruppoaruba.it	0%	Avira URL Cloud	safe
https://fibra.aruba.it/	0%	Avira URL Cloud	safe
https://hosting.aruba.it/email.aspx	0%	Avira URL Cloud	safe
https://hosting.aruba.it/domini.aspx	0%	Avira URL Cloud	safe
https://guide.pec.it/soluzioni-firma-digitale.aspx	0%	Avira URL Cloud	safe
http://malsup.com/jquery/block/	0%	Avira URL Cloud	safe
https://consent.cookiebot.eu/logconsent.ashx?action=accept&nocache=1720010247689&dnt=false&method=strict&clp=true&cls=true&clm=true&cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&cbt=inlineoptin&hasdata=true&usercountry=US-06&referer=https%3A%2F%2Fwww.pec.it&rc=false	0%	Avira URL Cloud	safe
http://cart.aruba.it	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://serverdedicati.aruba.it/offerta-server-dedicati	0%	Avira URL Cloud	safe
https://www.cloud.it/cloud-backup/caratteristiche.aspx	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a4da963-a747-4078-9b71-86963f3e27af.js	0%	Avira URL Cloud	safe
https://selfcarespid.aruba.it	0%	Avira URL Cloud	safe
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/popper.min.js.xhtml?ln=js	0%	Avira URL Cloud	safe
https://www.toctoc.me/	0%	Avira URL Cloud	safe
https://loginspid.aruba.it	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=GET	0%	Avira URL Cloud	safe
https://demo.docfly.it	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)	0%	Avira URL Cloud	safe
https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cd.js	0%	Avira URL Cloud	safe
https://assistenza.aruba.it/	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/1a/1acdceb7-8dab-4494-aba5-85e359cde5f1.js	0%	Avira URL Cloud	safe
https://manage.pec.it/Default.aspx?vers=2&action=REDIR&Path=RinnKit	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/77/77ce1edc-2083-457a-a473-b382c473acd9.js	0%	Avira URL Cloud	safe
http://www.google.com/search?q=growl)	0%	Avira URL Cloud	safe
https://www.aruba.it/listino-pec.aspx	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/9f/9fe696ac-8de6-49e6-88e8-41bd85bb8769.js	0%	Avira URL Cloud	safe
https://fibra.aruba.it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barra-cross-sit	0%	Avira URL Cloud	safe
https://guide.pec.it/docfly-conservazione-sostitutiva.aspx	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://mediacdn.aruba.it/MediaCDNRepository/files/e6/e6e72a67-33c9-462f-8e7b-0fc05b2c6e9f.jpg	0%	Avira URL Cloud	safe
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/bootstrap.min.js.xhtml?ln=js	0%	Avira URL Cloud	safe
https://hosting.aruba.it/wordpress.aspx	0%	Avira URL Cloud	safe
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/logo-aruba-pec.png.xhtml?ln=images	0%	Avira URL Cloud	safe
https://hosting.aruba.it/home.aspx	0%	Avira URL Cloud	safe
https://hosting.aruba.it/offerte-domini-hosting-aruba.aspx	0%	Avira URL Cloud	safe
https://tags.creativecdn.com/02DMJn6RqhevYZYcV7wq.js	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
docsbot.ai	76.76.21.21	true	false	unknown
selfcare.firma-remota.it	217.61.8.139	true	false	unknown
prod-consentcdneu.b-cdn.net	169.150.247.38	true	false	unknown
w.usabilla.com	52.50.116.41	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ams.creativecdn.com	185.184.8.90	true	false	unknown
stats.g.doubleclick.net	173.194.76.154	true	false	unknown
1589314308.rsc.cdn77.org	195.181.175.15	true	false	unknown
blueimp.github.io	185.199.109.153	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
d6tizftlrpuof.cloudfront.net	52.222.206.40	true	false	unknown
googleads.g.doubleclick.net	142.250.185.194	true	false	unknown
docsbot-widget.b-cdn.net	169.150.247.37	true	false	unknown
prod-consenteu.b-cdn.net	169.150.247.38	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
uc-img-sct.b-cdn.net	169.150.247.38	true	false	unknown
analytics.google.com	142.250.181.238	true	false	unknown
td.doubleclick.net	142.250.185.98	true	false	unknown
wa.aruba.it	62.149.188.146	true	false	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false	unknown
docsbot.b-cdn.net	169.150.247.38	true	false	unknown
cdn.docsbot.ai	unknown	unknown	false	unknown
u360.d-bi.fr	unknown	unknown	false	unknown
img.sct.eu1.usercentrics.eu	unknown	unknown	false	unknown
script.crazyegg.com	unknown	unknown	false	unknown
imgsct.cookiebot.com	unknown	unknown	false	unknown
guide.pec.it	unknown	unknown	false	unknown
www.pec.it	unknown	unknown	false	unknown
consentcdn.cookiebot.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
consent.cookiebot.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
consentcdn.cookiebot.eu	unknown	unknown	false	unknown
consent.cookiebot.eu	unknown	unknown	false	unknown
tags.creativecdn.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
widget.docsbot.ai	unknown	unknown	false	unknown
mediacdn.aruba.it	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/images/04_sm_info.png	false	Avira URL Cloud: safe	unknown
https://img.sct.eu1.usercentrics.eu/1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7	false	Avira URL Cloud: safe	unknown
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx#a_1474450182479	false		unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-CBSMR1FX8C&cid=1713985919.1720010249&gtm=45je4710v880708810z8867718176za200zb867718176&aip=1&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&frm=0	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js	false	Avira URL Cloud: safe	unknown
https://ams.creativecdn.com/tags/v2?type=json&tc=1	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/	false		unknown
https://consentcdn.cookiebot.eu/sdk/bc-v4.min.html	false		unknown
https://www.pec.it/cookie-policy.aspx	false		unknown
https://docsbot.ai/api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/panel/login	false		unknown
https://consent.cookiebot.eu/logconsent.ashx?action=accept&nocache=1720010247689&dnt=false&method=strict&clp=true&cls=true&clm=true&cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&cbt=inlineoptin&hasdata=true&usercountry=US-06&referer=https%3A%2F%2Fwww.pec.it&rc=false	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/popper.min.js.xhtml?ln=js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=GET	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/bootstrap.min.js.xhtml?ln=js	false	Avira URL Cloud: safe	unknown
https://selfcare.firma-remota.it/asmonitor/login.xhtml	false		unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/logo-aruba-pec.png.xhtml?ln=images	false	Avira URL Cloud: safe	unknown
https://tags.creativecdn.com/02DMJn6RqhevYZYcV7wq.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://guide.pec.it/spid.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_305.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_210.1.dr, chromecache_191.1.dr	false	URL Reputation: safe	unknown
https://www.cloud.it/home.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/aruba-drive.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://registrazionespid.aruba.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://microsoft365.aruba.it/home.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_306.1.dr	false	URL Reputation: safe	unknown
https://serverdedicati.aruba.it/termini-condizioni	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cloud.it/database-as-a-service.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_352.1.dr	false	Avira URL Cloud: safe	unknown
https://areaclienti.pec.it/	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://conservazione.docfly.it/docflyfe/signin	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://microsoft365.aruba.it/termini-condizioni.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_235.1.dr	false	URL Reputation: safe	unknown
https://assistenza.aruba.it	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_293.1.dr	false	Avira URL Cloud: safe	unknown
https://serverdedicati.aruba.it/colocation	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cookiebot.com	chromecache_208.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://www.aruba.it/magazine.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_215.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_210.1.dr, chromecache_191.1.dr	false	URL Reputation: safe	unknown
https://www.cloud.it/vps/vps-hosting.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/servizio-sms.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://fatturazioneelettronica.aruba.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://www.aruba.it/documents/tc-files/it/11_it_privacy_policy_aruba_spa.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.pratiche.it/	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://matomo.org/free-software/bsd/	chromecache_215.1.dr	false	Avira URL Cloud: safe	unknown
http://www.greensock.com	chromecache_234.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_191.1.dr	false	URL Reputation: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/44/448cc8c6-a77e-488d-8e92-8e1536d9e370.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://webmail.pec.it	chromecache_269.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/rankingcoach.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.aruba.it/lavora-con-noi.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://asbfecredem.firma-automatica.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://guide.pec.it/menu/pagamenti-e-fatture/indice.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://shop.actalis.com/store/it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barr	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_210.1.dr, chromecache_191.1.dr	false	URL Reputation: safe	unknown
https://asbfe.firma-automatica.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://ca.arubapec.it/crtest/showcert.php	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://guide.aruba.it/connettivita/fibra/agevolazioni-servizio/agevolazioni-per-non-vedenti-e-non-u	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/email.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://cms.gruppoaruba.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_210.1.dr, chromecache_191.1.dr	false	URL Reputation: safe	unknown
https://hosting.aruba.it/domini.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://servicematica.conservazione.docfly.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://pec.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://fibra.aruba.it/	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://guide.pec.it/soluzioni-firma-digitale.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://malsup.com/jquery/block/	chromecache_235.1.dr	false	Avira URL Cloud: safe	unknown
http://cart.aruba.it	chromecache_185.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_198.1.dr, chromecache_293.1.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_269.1.dr	false	URL Reputation: safe	unknown
https://loginspid.aruba.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a4da963-a747-4078-9b71-86963f3e27af.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cloud.it/cloud-backup/caratteristiche.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://serverdedicati.aruba.it/offerta-server-dedicati	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://selfcarespid.aruba.it	chromecache_269.1.dr, chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://www.toctoc.me/	chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)	chromecache_292.1.dr	false	Avira URL Cloud: safe	unknown
https://demo.docfly.it	chromecache_366.1.dr, chromecache_359.1.dr, chromecache_315.1.dr	false	Avira URL Cloud: safe	unknown
https://manage.pec.it/Default.aspx?vers=2&action=REDIR&Path=RinnKit	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://assistenza.aruba.it/	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://www.google.com/search?q=growl)	chromecache_235.1.dr	false	Avira URL Cloud: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/77/77ce1edc-2083-457a-a473-b382c473acd9.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cd.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/1a/1acdceb7-8dab-4494-aba5-85e359cde5f1.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://www.aruba.it/listino-pec.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://fibra.aruba.it/?utm_source=pec&utm_medium=internal-link&utm_campaign=barra-cross-sit	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/9f/9fe696ac-8de6-49e6-88e8-41bd85bb8769.js	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://guide.pec.it/docfly-conservazione-sostitutiva.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://mediacdn.aruba.it/MediaCDNRepository/files/e6/e6e72a67-33c9-462f-8e7b-0fc05b2c6e9f.jpg	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/home.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_210.1.dr, chromecache_191.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/wordpress.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
https://hosting.aruba.it/offerte-domini-hosting-aruba.aspx	chromecache_269.1.dr	false	Avira URL Cloud: safe	unknown
http://schema.org	chromecache_269.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
169.150.247.38	prod-consentcdneu.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
169.150.247.39	unknown	United States	2711	SPIRITTEL-ASUS	false
169.150.247.37	docsbot-widget.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
195.181.175.15	1589314308.rsc.cdn77.org	United Kingdom	60068	CDN77GB	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
76.76.21.21	docsbot.ai	United States	16509	AMAZON-02US	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
185.199.109.153	blueimp.github.io	Netherlands	54113	FASTLYUS	false
185.184.8.90	ams.creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
62.149.188.146	wa.aruba.it	Italy	31034	ARUBA-ASNIT	false
52.50.116.41	w.usabilla.com	United States	16509	AMAZON-02US	false
217.61.8.139	selfcare.firma-remota.it	Italy	31034	ARUBA-ASNIT	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	analytics.google.com	United States	15169	GOOGLEUS	false
52.222.206.40	d6tizftlrpuof.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.239.15.219	unknown	United States	16509	AMAZON-02US	false
142.250.185.98	td.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466882
Start date and time:	2024-07-03 14:35:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://selfcare.firma-remota.it/asmonitor/panel/login
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@27/384@107/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://selfcare.firma-remota.it/asmonitor/informazioni-profilo.xhtml?faces-redirect=true Browse: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml Browse: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml Browse: https://guide.pec.it/soluzioni-firma-digitale/firma-remota/gestione-e-utilizzo-firma-remota/funzionalita-gestione-pannello-firma-remota.aspx#a_1474450182479 Browse: https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx Browse: https://www.pec.it/cookie-policy.aspx

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.78, 108.177.15.84, 34.104.35.123, 216.58.206.42, 142.250.186.99, 142.250.186.42, 142.250.185.106, 142.250.185.138, 142.250.185.170, 172.217.16.138, 142.250.186.106, 216.58.212.170, 142.250.181.234, 142.250.185.202, 142.250.184.202, 172.217.18.10, 142.250.186.138, 142.250.185.234, 142.250.186.74, 142.250.74.202, 104.115.82.35, 104.115.82.18, 23.55.225.27, 20.12.23.50, 192.229.221.95, 20.242.39.171, 172.217.23.99, 142.250.184.227, 13.85.23.206, 104.22.52.85, 104.22.53.85, 172.67.29.81, 142.250.185.74, 104.22.0.79, 172.67.20.213, 104.22.1.79, 142.250.185.67, 142.250.184.200, 142.250.184.234, 216.58.206.74, 142.250.186.170, 172.217.16.202, 216.58.212.138, 142.250.185.99, 2.18.64.31, 2.18.64.26, 2.17.190.7, 23.215.19.90, 142.250.186.131, 2.18.64.212, 2.18.64.220, 204.79.197.237, 13.107.21.237, 142.250.185.206, 13.107.42.14, 104.19.148.8, 104.19.147.8
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, mediacdn.aruba.it.cdn.cloudflare.net, clientservices.googleapis.com, script.crazyegg.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, bat.bing.com, consent.cookiebot.com-v2.edgekey.net, www.gstatic.com, guide.pec.it.cdn.cloudflare.net, consentcdn.cookiebot.com-v1.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, e3849.dsca.akamaiedge.net, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, imgsct.cookiebot.com.edgekey.net, www.pec.it.cdn.cloudflare.net, xandr-g-geo.trafficmanager.net, dual-a-0
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://selfcare.firma-remota.it/asmonitor/panel/login

Input	Output
URL: https://selfcare.firma-remota.it/asmonitor/login.xhtml Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as username and password.","There is no sense of urgency created in the text.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Aruba Selfcare - Firma digitale OCR: English v pgg VACTALIS Remote Signature MANAGEMENT PANEL Login Username Username or user@domain Password Password Have you miss the username? Login Have miss the password? If yw need help please check the guide here. kowto do if I no longer have the phone to generate OTP codes, how do I log in? You have to before log in with username + password and, on the next screen, follow the device replacement Read the guide
URL: https://selfcare.firma-remota.it/asmonitor/login.xhtml Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as username and password.","The text does not create a sense of urgency or interest.","The webpage does not contain a CAPTCHA or any anti-robot detection mechanism."]}
Title: Aruba Selfcare - Firma digitale OCR: English v pgg VACTALIS Remote Signature MANAGEMENT PANEL Login Username Username or user@domain Password Password Have you miss the username? Login Have miss the password? Questo sito web utilizza i cookie Accetta tutti Per offrirti un'esperienza di navigazione sempre migliore, questo sito utilizza cookie propri e di terze partit partner selezionati_ I cookie di terze parti potranno anche essere di profilazione. Leggi la nostra Informativa sull'uso dei cookie per saperne di Personalizza pi oppure vai su 'Personalizza" per gestire le tue impostazioni. Cliccando "Accetta" acconsenti alla memorizzazione dei cookie sul tuo dispositivo. Cliccando su "Rifiuta" accetti la memorizzazione dei soli cookie necessari. Rifiuta tutti Mostra dettagli >
URL: https://selfcare.firma-remota.it Model: gpt-4o	```json{ "phishing_score": 2, "brands": "Aruba PEC, Actalis", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "firma-remota.it", "reasons": "The URL 'https://selfcare.firma-remota.it' appears to be legitimate as it uses a subdomain of 'firma-remota.it', which is associated with the brand names Aruba PEC and Actalis. The webpage design and content seem professional and consistent with a legitimate service provider. There are no obvious social engineering techniques, suspicious links, or other red flags typically associated with phishing sites. The login form is prominent, but this is expected for a remote signature management panel. There is no CAPTCHA present, which is not necessarily a red flag. Overall, the evidence suggests that this is a legitimate site."}

URL: https://selfcare.firma-remota.it Model: gpt-4o	```json{ "phishing_score": 2, "brands": "Aruba PEC, Actalis", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "firma-remota.it", "reasons": "The URL 'https://selfcare.firma-remota.it' appears to be legitimate as it uses a subdomain of 'firma-remota.it', which is associated with remote signature services. The page prominently displays logos of Aruba PEC and Actalis, which are known brands in the digital certification and remote signature space. The login form is prominent, but there is no evidence of social engineering techniques or suspicious links. The absence of a CAPTCHA is noted but not necessarily indicative of phishing. Overall, there is insufficient evidence to classify this site as a phishing site."}

URL: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency or interest, as there are no calls to action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Username recovery OCR: English v OAru&a2EC 'ACTALIS Username recovery Enter the required data and press the Submit button. An email will be sent to you with your username. Email Submit Copyright 02024 Aruba S.pA- RI. 01573850516 - All rights reserved Cookie Policy_ - Personalizza Cookie Questo sito web utilizza i cookie Accetta tutti Per offrirti un'esperienza di navigazione sempre migliore, questo sito utilizza cookie propri e di terze parti, partner selezionati. I cookie di terze parti potranno anche essere di profilazione. Leggi la nostra Informativa sull'uso dei cookie per saperne di Personalizza pi oppure vai su "Personalizza" per gestire le tue impostazioni. Cliccando "Accetta" acconsenti alla memorizzazione dei cookie sul tuo dispositivo_ Cliccando su "Rifiuta" accetti la memorizzazione dei soli cookie necessari_ Rifiuta tutti Mostra dettagli >
URL: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": true,"reasons": ["The webpage contains a CAPTCHA mechanism in the form of 'I'm not a robot' checkbox.","The text does not create a sense of urgency.","The webpage does not contain a login form."]}
Title: Username recovery OCR: English v OAru&a2EC 'ACTALIS Username recovery Enter the required data and press the Submit button. An email will be sent to you with your username. Email I'm not a robot Submit Copyright 02024 Aruba S.pA- RI. 01573850516 - All rights reserved Cookie Policy_ - Personalizza Cookie Questo sito web utilizza i cookie Accetta tutti Per offrirti un'esperienza di navigazione sempre migliore, questo sito utilizza cookie propri e di terze parti, partner selezionati. I cookie di terze parti potranno anche essere di profilazione. Leggi la nostra Informativa sull'uso dei cookie per saperne di Personalizza pi oppure vai su "Personalizza" per gestire le tue impostazioni. Cliccando "Accetta" acconsenti alla memorizzazione dei cookie sul tuo dispositivo_ Cliccando su "Rifiuta" accetti la memorizzazione dei soli cookie necessari_ Rifiuta tutti Mostra dettagli >
URL: https://selfcare.firma-remota.it Model: gpt-4o	```json{ "phishing_score": 2, "brands": "Aruba", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": true, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "firma-remota.it", "reasons": "The URL 'https://selfcare.firma-remota.it' appears to be legitimate as it uses a subdomain of 'firma-remota.it', which is associated with Aruba, a known brand. The webpage includes a CAPTCHA, which is a common security feature. There are no obvious social engineering techniques or suspicious links present. The presence of a prominent login form is typical for a username recovery page. Overall, the site does not exhibit characteristics typical of phishing sites."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:04 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.979708302251535
Encrypted:	false
SSDEEP:	48:86djWTsPHkXHHleidAKZdA1P4ehwiZUklqehgy+3:870sl8O/y
MD5:	B904B6E832358DC4681175DABE01E947
SHA1:	83E7FF88D55F2CA579443E6D36B6242BE13A51F3
SHA-256:	C37D259C2CD884DC75A46C059768BD68400B894380135BECF3CC61779040440C
SHA-512:	A63FEFB69E97F2382E42E89221B8AA388CA222146FF50DD1BA6F6D6B4E7E225308FA1C06142FDA11CF6796F6AA396CA210AD55869BC9009663B905A218F45F17
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....._..E.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.d...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:04 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9939598669450294
Encrypted:	false
SSDEEP:	48:8GdjWTsPHkXHHleidAKZdA1+4eh/iZUkAQkqehvy+2:8P0sl9F9QWy
MD5:	32C3CB96CF214B34416EB88FD7EF82DD
SHA1:	22779B3DA376CE371DD833B7F3B1B41388567761
SHA-256:	4668D11E5E43D8B7F3D44820678FD9D4F03E9AA2A66AD19B7BFB650142B77C09
SHA-512:	A99691D58A8423AE529D6C5B88E93894C1FDD7D07703EC240424C51BEE749BBCBC80F09F8BA76C8798E6B3C2B168723DAC0D4DE1C4CF4A05C857966B5AB37CE9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....>W..E.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.d...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0054242949708065
Encrypted:	false
SSDEEP:	48:8+djWTsPHVHHleidAKZdA1404eh7sFiZUkmgqeh7sly+BX:8n05lgInLy
MD5:	9BB5F9D0F8E81D439FE496F9DB77B05A
SHA1:	1CF68A10D860875B04E1F238D75811F8971993BB
SHA-256:	51A2208A9DBCEA41783C10D929E872ECC26A6838F439F8533DE9323E3B134B98
SHA-512:	77145490B9B7A2D6B00B0DC88A3CA5141C7042A18C6DF424855989ECDB4063984C2C1CF173188B497694003A636E5E8405217738421D313CEF095F14D7B23BEB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:04 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9954910815415268
Encrypted:	false
SSDEEP:	48:8xdjWTsPHkXHHleidAKZdA1p4ehDiZUkwqehTy+R:8W0slq5Ny
MD5:	2C55FCCCBE0D251DE3287921B77F02A5
SHA1:	8C5031851B8CBA5304C91BC88BA2A731664E9D24
SHA-256:	FB326B66B115E9123BAEA7B6B046B06E365BE058A906E52C78D04BB0E537C045
SHA-512:	8F4EA1E9FBB2CAE7DEFC8204F548994D0083755051A7B324076510FD1BAACBEC6CD9B136622BB684450964D87504E49716CB4DBFD934455E63CC11A9D6D36B2F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....R...E.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.d...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:04 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9822836035348494
Encrypted:	false
SSDEEP:	48:8+djWTsPHkXHHleidAKZdA1X4ehBiZUk1W1qehBy+C:8n0slEb9hy
MD5:	478423E079CF346D49FFEC173E2403A6
SHA1:	CA2BF075B4FA140185CB311FA5643BC0B8C82CB5
SHA-256:	A6C1CA5C11C27CE2109400C85CD62D7D10F40C193060B364D6B9173718DF617D
SHA-512:	9951515B8A2B04AE370FB37308BD947B0D621EE26401089F3576931921FEEFF665CEB1927E7F38E16455CF75E989B68CC808C2116AC1E8F030B8E1F0D3EE05C6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........E.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.d...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:04 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9940621753073846
Encrypted:	false
SSDEEP:	48:8cdjWTsPHkXHHleidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbLy+yT+:8x0slRTcJTbxWOvTbLy7T
MD5:	784D61EBE845CA5265FC66DA81669894
SHA1:	5318D120524F4778A9C4F03A39C9B2A2812C47FC
SHA-256:	B98D97C6EF4411131B0A0354466750CF59AE8A593EBD855E466DF4D1E09CFFC1
SHA-512:	A8D5634CC755EDF6C007FE1D353F8DD86A1EFF4436785C447BD01DC51EC8A71E27820D051D3B734660ED76DE522FBA47907E89C79BB8D80CEF979088B328FCBA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......E.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.d....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.d....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.d.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.d...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4602)
Category:	downloaded
Size (bytes):	211015
Entropy (8bit):	5.5388567168488505
Encrypted:	false
SSDEEP:	3072:hqXWxnaiJ9iVVZLVFhffA03jPgvLMzU46yFWqM0bukMT97:hqmxn+VV9V7vcDqM0qkMTh
MD5:	7D52584A8EC2C501C11C20956026858D
SHA1:	393BAE76C8DAADDA3126E0708514235D73DC3DDD
SHA-256:	70A432FBC575198A9DE81BE8A5AD4C5B146C9C3ED40242000373E014D5984740
SHA-512:	9FB53DEE56E29B222B001DB71EEAD3114BE1842DA0C2ED26B0F8575D95407B14B6DB1B3A9156E23DB34D73422B1037FFA69FFB8D2330C62B1D1C64CC39A8AF60
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NGBVM8V
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"},{"function":"__dbg"},{"function":"__c","vtp_value":"true"},{"function":"__c","vtp_value":"G-E2F7WTEL7K"},{"function":"__c","vtp_value":"false"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"environment"},{"function":"__c","vtp_value":"G-P13DV571M8"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",5],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":["macro",6],"vtp_ignoreCase":true,"vtp_map":["list",["map","key","prod","value",["macro",6]],["map","key","dev","value",["macro",3]],["map","key","test","value",["macro",3]]]},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key",["macro",2],"value",["macro",3]],["map","key",["macro",4],"value",["macro

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60332)
Category:	downloaded
Size (bytes):	492118
Entropy (8bit):	5.39640410265774
Encrypted:	false
SSDEEP:	6144:zWw5fSUMER+dZPMIuDC3g7whgnn0S5K4PTzj6EuO3tkz:pSO+dZPMIIY7m0S5KiT/xMz
MD5:	02B9B24596CB9274DC2E61BB22D5067E
SHA1:	36F08BF54946851EDAD8773A8ABE646C02D7A524
SHA-256:	7BCBE596309450622D40F6304474D64FB2F3CDC05A20C2AFB2654C3F5D9E158F
SHA-512:	44FF29DC0595E76C9B533EB43FBDFD4885678F16538AA3A07BB52972084B56C57416E13E09C836EF03A2C3F1B183633F25E089B25707A33B6C670BD51A28FF13
Malicious:	false
Reputation:	low
URL:	https://widget.docsbot.ai/chat.js
Preview:	(()=>{var e={729:e=>{"use strict";var t=Object.prototype.hasOwnProperty,n="~";function r(){}function a(e,t,n){this.fn=e,this.context=t,this.once=n\|\|!1}function o(e,t,r,o,i){if("function"!=typeof r)throw new TypeError("The listener must be a function");var l=new a(r,o\|\|e,i),u=n?n+t:t;return e._events[u]?e._events[u].fn?e._events[u]=[e._events[u],l]:e._events[u].push(l):(e._events[u]=l,e._eventsCount++),e}function i(e,t){0==--e._eventsCount?e._events=new r:delete e._events[t]}function l(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(n=!1)),l.prototype.eventNames=function(){var e,r,a=[];if(0===this._eventsCount)return a;for(r in e=this._events)t.call(e,r)&&a.push(n?r.slice(1):r);return Object.getOwnPropertySymbols?a.concat(Object.getOwnPropertySymbols(e)):a},l.prototype.listeners=function(e){var t=n?n+e:e,r=this._events[t];if(!r)return[];if(r.fn)return[r.fn];for(var a=0,o=r.length,i=new Array(o);a<o;a++)i[a]=r[a].fn;return i},l

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (444)
Category:	downloaded
Size (bytes):	51241
Entropy (8bit):	5.1257167366515475
Encrypted:	false
SSDEEP:	768:G3qCi70auzqbxpvpGzk2Lhgxl7uF1vaZqqYdT+KSIEFYAPle41:JXj4WQhgsC0+KSVPd
MD5:	5B1B1EE1CC2F3B95318E0FDE86B2ED5B
SHA1:	1AA2D56CEFF2D2DC30933BF73B91518BDD893C80
SHA-256:	C13D034EAF2FA73680D0ABDBE02AC23B73E3128B5C7F0EE7018EB7B3FBE84A72
SHA-512:	CC9E084C4B22079A9C772B3DAAE11B48F140E4D1D29265DC0F95A8013C6A15F6B4FDD100432B5EB0501557939CF73EC0889C39F0D8D7F43166B8F4D5CC5EB45B
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/b9/b99214fe-32df-4d82-b817-750dcbd6ce12.js
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/).* Copyright 2011-2019 Twitter, Inc..* Licensed under the MIT license.*/if(typeof jQuery==='undefined'){throw new Error('Bootstrap\'s JavaScript requires jQuery')}.+function($){'use strict';var version=$.fn.jquery.split(' ')[0].split('.').if((version[0]<2&&version[1]<9)\|\|(version[0]==1&&version[1]==9&&version[2]<1)\|\|(version[0]>3)){throw new Error('Bootstrap\'s JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4')}}(jQuery);+function($){'use strict';function transitionEnd(){var el=document.createElement('bootstrap').var transEndEventNames={WebkitTransition:'webkitTransitionEnd',MozTransition:'transitionend',OTransition:'oTransitionEnd otransitionend',transition:'transitionend'}.for(var name in transEndEventNames){if(el.style[name]!==undefined){return{end:transEndEventNames[name]}}}.return false}.$.fn.emulateTransitionEnd=function(duration){var called=false.var $el=this.$(this).one('bsTransitionEnd',function(){ca

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3552
Entropy (8bit):	7.224486584984091
Encrypted:	false
SSDEEP:	96:CSMwknmWpj+k5hkbHDH+NG0Zn3GpI2epGAIwgMC5K:CShknrijedpdIw9b
MD5:	B7EFB4EAA1D028685FC3802EA5507E6A
SHA1:	65784CC063B7BD92DDD468F5A468B3C05A214219
SHA-256:	3DCED64F46A08F8F2C3BA33FD0BA28E70D150D8CD05E4811C17E05D9B9E74ADA
SHA-512:	A9CDE394766CA71E465E02EDC2F1625AECFC68B2D819A12C655834740FA95A23A75F2C54AB65030E0788E33328ED0225ABC90CBC5ED729336D2FEB29B06A1BE0
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app/img/miniself_remota_2.aspx
Preview:	.PNG........IHDR...F...8.....@..5....pHYs................;iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2021-03-05T20:13:05+01:00" xmp:ModifyDate="2022-07-29T11:27:49+02:00" xmp:MetadataDate="2022-07-29T11:27:49+02:00" xmpMM:InstanceID="xmp.iid:440490a5-6d2f-6848-9d96-c1af4d32525c" xmpMM:DocumentID="adobe:docid:photoshop:128f92bd-42da-664f-868a-54b58b9c46da" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3460), with no line terminators
Category:	downloaded
Size (bytes):	3460
Entropy (8bit):	4.921555430985933
Encrypted:	false
SSDEEP:	48:zqVWXtn1MPGDGgcPGDnPOv1bsB8j4YyZgaKlqXLCLqUDKmmVb+YAyCT:eVWXt1AgJWgYyrtbI/k7i
MD5:	866C649E05319240C17908994D59F7BB
SHA1:	D0D37F364EC6408849116799B92A0F1231BB2777
SHA-256:	D85418A76707414680ED747A6E4312202DD563A392ED33BFB93362CF6498644C
SHA-512:	4D2C2F26DF915D127DE4C24689FFBDBF727AD17B80FD8100A13832202DDF32101F1EC9B048BA5671F879BD7278BB07087F7D3D954273327840786274C9F0E2D7
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/19/19971a4b-7643-4f47-a784-bfe22a87773b.css
Preview:	@charset "UTF-8";@font-face{font-family:cloud;src:url(/MediaCDNRepository/files/38/38315ccb-cc7c-4837-84ad-f86b32b13423.eot);src:url(/MediaCDNRepository/files/38/38315ccb-cc7c-4837-84ad-f86b32b13423.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/6f/6fdafdb6-d669-4221-881e-ce128a92ef1f.woff) format("woff"),url(/MediaCDNRepository/files/f2/f2e4feda-3f44-4c47-9fc0-5c0df3fcce58.ttf) format("truetype"),url(/MediaCDNRepository/files/be/beb77220-bd21-4b3a-b3d0-2a90716b2cd2.svg#cloud) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:cloud!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=clo-]:before,[class*=" clo-"]:before{font-family:cloud!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transf

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	447053
Entropy (8bit):	7.7114084706802855
Encrypted:	false
SSDEEP:	6144:RF1bUoW0Mq3SEw1130Pbu9IfMnlYnm2ttaCZ3AvFuRlHt37NGdDtAxLfRYIT1w/2:R/EqCD1p04IEnlYnhrseHt3RmDozRT5
MD5:	DE0741E8A689DE6313A88D5CA8BE682E
SHA1:	803F25D699267E434B85677D316AD5F1C1B9408C
SHA-256:	C0FBDFAC69D6AB506C5CF74794BB8B9B02D0D870E64D0B81EE51EDD10AA367D0
SHA-512:	A410BAE1EC5B053C98951C0D3A2AFC5F0268B5AC1A520D0D91FACC6B29AF117644C5098C9A832A72C45D3BCE25C7AD47623DA8675D2E18D01D5A15FB1C472104
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/firma-app-aruba-otp/img/video_otp_firma.aspx:2f7aed5e472cd8:0
Preview:	... ftypisom....isomiso2avc1mp41../.moov...lmvhd..................B.................................................@...................................trak...\tkhd......................Bh................................................@........P.....$edts....elst..........Bh............mdia... mdhd..............2...R.U......-hdlr........vide............VideoHandler.....minf....vmhd...............$dinf....dref............url .......gstbl....stsd...........{avc1...........................P.H...H...............................................%avcC.B......gB....@.5....j...h.<.... stts...........................$stss...............Z...........k....stsc........................stsz..............-:..........................................................................................................................4d...................................................................................&............................................................................................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://imgsct.cookiebot.com/1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 83 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2021
Entropy (8bit):	7.84848730258957
Encrypted:	false
SSDEEP:	48:50i5f7/uIRKyf0TwmtWZ2XlIMFBMp2Q/sS48kmRcDQrg0DUqgiONhX1uV:5N5D/usKyMrtPpJMNfkmScU02iT
MD5:	EC0A524136F4F6E6D04C71C4FD563278
SHA1:	FAEC092CFFE543EFC133E982F340E68073006E90
SHA-256:	6C7DE0B208D3A32C177B4A80C41E7E2164E080591DC1729747D426E18C7F44F9
SHA-512:	C79A94C3E902BFF2D2CA975FA517B60FFADFF1D5B2454207C34C5965170C0C76176EC76C311022A60BF7C8493A736C4010E52BA193B247EE131D92C4063B0833
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/images-firma-remota/acquisto-rinnovo/36.aspx?width=83&height=80
Preview:	.PNG........IHDR...S...P.....e&I.....sRGB.........gAMA......a.....pHYs..........o.d...zIDATx^.{l.E..+j\|$.5i........Q.T.D......(..M...QPAAC..1...#.1.J..%j..>.z.......J!.".....N.q..m{-s.7.......vv.7..I..9:#TSS3...9..........w....5.........g........9r..#G..9Jt......3........+@.....D..J0...V....H,.q.......7].....4...S68..Ew........)..`...D.....q.. .b. Q4...z..h1..P+...E.At...#.7@..6...\|)S......@.4.....B.=.....!..I .\|.. .....]...{.X.-a....J....v.3m..;R".7.....g.....=.,..;../.m.....1(..Q+.....<..iL.pc6L..P..t\.`9>.q....1......A"RyC.4fe{S/W.,U.u%.L...<D.6`.....73h.....Dp{..vR....3-.T....=..Z.}=..f....~..[.#l............._.3U.;.......-.#..f...Pvj..%..UH~,$.Pa...L.<...r.....4....y-z....6..].ifX.q...{.....XE)TP......ifH....>^h..P.(...63......gf.c.!..B:..u DzX....._..>.=...uA.G.g.'....<./.#q..9.].v2.......?+.?.n;....0..xk.d.P..!....F..,.......Qr^$Y.P..^4.0......";q,...;......&..:M..3.........!i7....G..Qk....O.#..;%..D...V.:..!.x`.b..cVVyE.).R.Ud.[0..

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	111824
Entropy (8bit):	5.167747012076771
Encrypted:	false
SSDEEP:	1536:Jb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:X3okfYD8P9un/buVYEMwFK
MD5:	BF990FE9BCB509BCB0D1E39AEABA6FF0
SHA1:	77C15028E120ACED8F887111B6DDADEEBF86DA98
SHA-256:	EA833E2735A61A60B815B434DA037B82495D0E3C5436340AE79247AF6D25488B
SHA-512:	F1698F69EF26A913268D958EFAF68416DE6B7DFB3A71F81D7BA036152248F7A76A76512E74A09E33C2EE4F1E0547DAAF77CCCF5EF535F3D8C34EE0839BFBC264
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.eu/uc.js?cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&implementation=gtm&consentmode-dataredaction=dynamic&culture=it
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){function finallyConstructor(callback){var constructor=this.constructor;return this.then((function(value){return constructor.resolve(callback()).then((function(){return value}))}),(function(reason){return constructor.resolve(callback()).then((function(){return constructor.reject(reason)}))}))}function allSettled(arr){var P=this;return new P((function(resolve,reject){if(!arr\|\|void 0===arr.length)return reject(new TypeError(typeof arr+" "+arr+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var args=Array.prototype.slice.call(arr);if(0===args.length)return resolve([]);var remaining=args.length;function res(i,val){if(val&&("object"==typeof val\|\|"function"==typeof val)){var then=val.then;if("function"==typeof then)return void then.call(val,(function(val){res(i,val)}),(function(e){args[i]={status:"rejected",reason:e},0==--remaining&&resolve(args)}))}args[i]={status:"fulfilled",value:val},0==--remaining&&resolve(args)}for(var

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1663), with no line terminators
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	5.217721245286449
Encrypted:	false
SSDEEP:	48:/5PAloB8hGjRhyClnbiGHSdOcPeUX6OVRH:/P8gCmpuem3
MD5:	F71083994F007A254C8E88E6845C8B50
SHA1:	E8C400C1BC237AA2C74069B331845A8073D9B081
SHA-256:	1D74721DC1D63D6DE6209D8C377FADC14F584DC054A7455D6030458D6261AF45
SHA-512:	F6F05DE7C9349D086AE853665F8F5C0D053107EAFB97DEC8E076EA65A1E2107BFB7BE4691B1C4E2FFCC266143B167778FB54617DE867457EDF93FF7932E972B9
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fCustom%2fcross-domain-analitycs.js
Preview:	(function(){"use strict";function o(){try{dataLayer.push(arguments)}catch(n){console.log("gtag func :",n)}}function r(n,t="",i=""){try{if(!n.startsWith("#")){var u=new URL(n),f=u.searchParams;f.set("client_id",t);f.set("session_id",i);u.search=decodeURIComponent(f.toString());n=u.href}}catch(e){console.log(r,e)}return n}function s(t,i){try{var u=document.querySelectorAll(h);n&&console.log("Found: "+u.length+" URLs to replace");u.length&&u.forEach(u=>{var f=u.getAttribute("href");u.href=r(f,t,i);n&&console.log("To replace:",f,"->",u.href);u.addEventListener("click",function(u){n&&u.preventDefault();var f=this.getAttribute("href");n&&console.log("CLICK ORIGINAL:",f);f&&f.includes("client_id=")&&f.includes("session_id=")?n&&console.log("client_id \|\| session_id params already exist in the URL!"):(this.href=r(f,t,i),n&&console.log("CLICK REPLACED:",this.href))})})}catch(f){console.log(s,f)}}const u="G-CBSMR1FX8C",h='a[href^="https://manage.pec.it"], a[href^="http://manage.pec.it"], a[href^=

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	120858
Entropy (8bit):	5.095200876902264
Encrypted:	false
SSDEEP:	768:F7LGxw/Cc/bki1r+mtGIuiHz4hm9IAX8OAZpjRH/mKyf2BZU+JCOS51FfvH1Fl:2w/hWDIuiHz4hmn8lZH5LCOYr
MD5:	6B65A8E862582C77CB84E3C7C992D4F0
SHA1:	285FCE09157B33F2A726B6CD67DD5912F219A0D0
SHA-256:	3C32DEA318CD27757C6CDA8ED9646CAF4D1E59DDEB8ADD00B95A6C8EE00AF296
SHA-512:	5D2C7276F42C98BCC3868552A759558E9ADE2BBD0811C5AA74BA3825E138D3D211DF4CBA13C639246374B075D67195B3E1343177EF9BEF78C365CA17BEEF1300
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a5ad399-11ce-4f31-bd23-58cfdca26c8b.css
Preview:	/! Bootstrap v3.4.1 (https://getbootstrap.com/).* Copyright 2011-2019 Twitter, Inc..* Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)//!normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css*/html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (982), with CRLF line terminators
Category:	downloaded
Size (bytes):	1404
Entropy (8bit):	4.99400149873673
Encrypted:	false
SSDEEP:	24:ARqoWgu3ffpH08NwcaEgtup7ODHELxvRQahAVnkknkIPXh+KixPZk1nU5PKr:AFpAf5TNwcxg8kDH+dkXY1xKu5PKr
MD5:	3E225B9FD0F6899D0B85ED20F881F347
SHA1:	5A80223E28B2F3D62E65CA461A35796902097E3C
SHA-256:	5AD2C50BED88D83ABE8C5A3689A06D64F213C9777F0F0A818537E615E2440F1C
SHA-512:	548092246A35BD51E8367E4A0163120794616F30B536D8638107D51F3E1EBDC4857F4DB55F1BF10D5D16D74F1CD3B76B7C83FDA50386B669FE2E59939D8C20FA
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.eu/logconsent.ashx?action=accept&nocache=1720010247689&dnt=false&method=strict&clp=true&cls=true&clm=true&cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&cbt=inlineoptin&hasdata=true&usercountry=US-06&referer=https%3A%2F%2Fwww.pec.it&rc=false
Preview:	CookieConsent.setCookie("{stamp:%27WSCy3wXcJYhUyLuZUJs8RYX1UpZYlZr0BW/uOpfr73NfU/HuIbsotw==%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cmethod:%27explicit%27%2Cver:2%2Cutc:1720010249599%2Cregion:%27us-06%27}", new Date(1735907849599), '/', '', '');..if (typeof CookieConsent.resetBulkDomains!='undefined') {CookieConsent.resetBulkDomains(["areaclienti.arubapec.it","areaclienti.pec.it","asbadm.firma-automatica.it","asbadmcredem.firma-automatica.it","asbfe.firma-automatica.it","asbfecredem.firma-automatica.it","cart.aruba.it","cms.gruppoaruba.it","conservazione.docfly.it","demo.areaclienti.arubapec.it","demo.docfly.it","demo.fatturazioneelettronica.aruba.it","fatturazioneelettronica.aruba.it","gestionemail.pec.it","guide.pec.it","identification.arubapec.it","login.aruba.it","loginspid.aruba.it","manage.pec.it","ml.pec.aruba.it","partner.arubapec.it","pec.it","peclog.pec.aruba.it","registrazionespid.aruba.it","riconoscimento.aruba.it","riconoscimentobnl.aruba

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.787190602698568
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKvUjfXNIqHWaee:PLKdXNQKv2fXLHL
MD5:	F66834120FACCB628F46EB0FC62F644C
SHA1:	15406E8EA9C7C2E6EF5C775BE244FE166933BFCB
SHA-256:	8F063AE681A530A407EA4D17859790D9E45FD81CE5B3BB6202FC9E30CEF95996
SHA-512:	7C596E61967FE787BC29D262C945D7EB4E02F9F574D3C8C664F333C9C3B4DD4AFF1DFCDE8F34BE1ACFAF8C05423C1C118A4BFD50684A7CD9F90E5F40FBC89653
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89497
Entropy (8bit):	5.289615951893921
Encrypted:	false
SSDEEP:	1536:pjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:pIh8GgP3hujzwbhd3XvSiDQ47GK/
MD5:	51175AC478A2EEC31F39C648260A1044
SHA1:	A9AC4B258FA956D5C4918CB8781D4B20BBBD65AF
SHA-256:	72037311A4DFDE4D042DF73E31B7CBEAFC0BDF2AAA605B69AFF3326015A396DA
SHA-512:	3AC522D66DC441C53EDDFC27347AE85A1FD2E77ED26750919DFC6C6937AEB2FD8DEFA087B6D89CA696D23D85F38BAEB79B7D6D9127920B244B7348D475CD8E3E
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/9a/9a4da963-a747-4078-9b71-86963f3e27af.js
Preview:	/!jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license/!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2167
Entropy (8bit):	5.326637840810004
Encrypted:	false
SSDEEP:	48:HOW0RVc+u7OWbN0oDOL21RVc+u7OLPN0oDOCcRVc+u7OCjN0oD:HOWwVc+u7OWbNHOL2PVc+u7OLPNHOCYG
MD5:	28F19B32C4742D4C2DD6C8F97D33886B
SHA1:	295C93AC11CF9A8DC8C3A8CA03542C3B0FFC0488
SHA-256:	A62B46C69982F34433D223167FF4838DEDE363D9F8A1D22E07A8D203A347E941
SHA-512:	DC0D724DD0B00D11C370AD06FB78FFD07660326DFDCC5EE9D30B6289AE6B8F62DD9F0C2D49E08F7CC0433C6E1BA886FB87D5ACB3454C49578A12FF5745CCDF0A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:300,400,700"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020,

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4009
Entropy (8bit):	7.935491366537182
Encrypted:	false
SSDEEP:	96:oEx7i0981jG9NjAVcFHyDf7rJhfF6RBv5ufvk7Jx2uolkVaWXLhj:lx7iG81jMNUiFafJrfs73HJaQ
MD5:	6F8425694AD619F4C66EB4D91E0C5433
SHA1:	BC4FC53B73D9ABE662721CFC7507E6BBD23EAA71
SHA-256:	7BA047D58CF070D78DB9E0C7CD43D66628B3E7800192103BCDF01D0A58041C75
SHA-512:	457A7093087396EBD1D1124B3FCF3F079B44E40437E07F258FCE2D9EAABE04DE2E6FD31FF21EE82CF7B94A8B0EE50F34415A6824EA248DB48DC2CD10064B5144
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d...>IDATx^...\E........6;s....d. .."b...pK.\|`y.@4..H.......A1^.....R...(........%.&!$.,fC.....}z..fvvgg....W}u.........>.=.;C....6l..c.N......7vn......=... ..zzzN.P&.....d.\|..C...2d.!C..#. .;.2.."c..^..'.C....5...r..._..........?9.w.,C..]..AO.F{$. .S..=..wG........>...q.\|~lSS.+].......^.i.....Gl....a.....-.....\......G..R.A.P.......b.[q.8b.......0g. b.I..#QyP.y_.q.zZ...b..:.."<.{C.....]...6>....>..].gV...<)..qj....ZJC.t..aa..1...(....y....,...IE/.[L..dH.[.(.....^Z..N....}.....:3L.\|.=en...v.- .c._.l........e?...v7e..}......ra.~.<.Nm.,u.t.#..U 0....".1G...x.D.w...R..Y.Qty.....e..T...&..R....n."R..[...x..l.N....].Sc.......D..T.....&.......X.=s.K......O...yX...=.XL6.:.g. S.P]..M\9.y.D...7.9.y...U..]...1.B....p8..D.."..f.........v*.h./.}.. ....K]..)V.1..?.6..?CW...9D.w...E p....s/....e..D...Gi.I.4.\|>.g\...;.....m.".\|.2.....e.....3.......=..osY.BF`.....

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	68831
Entropy (8bit):	7.953623294001741
Encrypted:	false
SSDEEP:	1536:xXaZt0Hop/ixdwD9uzpJCQRtDb9IHPJdK56nuy2Fs8PFjtJRnFO/X9fklqbN:hAOIp/ixdI9uFRl2PyYnuy2lFY9cYN
MD5:	7D204335699ED2BBA60EE73560CBF864
SHA1:	DB116F85A336001253E9D021714F6D5454C20946
SHA-256:	C09227A16A0E60B769798378EA491791D887B322B5C4E59E62256BBF8190264E
SHA-512:	00BE01E64DED02A8E8C2201D1C4D2935E0973517570F9AA19CEE62A12F3AFAFEF21F9D3511A93D25914727608251E8DEB38A9CD46ECBBCC53690E9C939655D0B
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/firma-app-aruba-otp/riconfigurazione-per-problemi-o-cambio-telefono/images/attiva_firma9.aspx
Preview:	.PNG........IHDR.............N.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-18T16:35:12+02:00" xmp:MetadataDate="2023-04-18T16:35:12+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:f16dc663-5dda-5b4b-815d-cc3c773244cf" xmpMM:DocumentID="adobe:docid:photoshop:05b2bfe0-edbb-0348-9106-1aebac134c0a" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	102415
Entropy (8bit):	7.973491238962925
Encrypted:	false
SSDEEP:	3072:qeCB499jdEXW3CqYoW2psnhkhImCdZPbdjdy:Qaz4WSxUpsnhFxdBJdy
MD5:	3BF59CDD759499C3D0B6845A6AF6C207
SHA1:	5B2DCEC8967ED29A1390D5F0DFC9AC820168C880
SHA-256:	C3EA5B5BFF6D74FC92C1645EDA1D60B12CF26582A9FD2A282DA83BD54D7BB2D3
SHA-512:	C3355B9ADF9F375C677DA379AD207CAF5709D8451773CAF5511B3674EAE52ADEBB750C874B7D9F7490F8736272D9A5699C025C47CE2F79C17B03E0E154102406
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/firma-app-aruba-otp/riconfigurazione-per-problemi-o-cambio-telefono/images/attiva_firma10.aspx
Preview:	.PNG........IHDR.............,.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-19T15:07:28+02:00" xmp:MetadataDate="2023-04-19T15:07:28+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:9fa02340-8bdb-2e4d-8c22-db253b7b47eb" xmpMM:DocumentID="adobe:docid:photoshop:761eb5ac-68b6-9a42-94cc-f48d687b6ef4" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
Category:	downloaded
Size (bytes):	102804
Entropy (8bit):	5.3364527553253405
Encrypted:	false
SSDEEP:	1536:3GLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:3GLXGFKT79DSs6WCE
MD5:	1D6864709DB6B20418228B3327F5E090
SHA1:	C3C02CD59138C0C468BAFD653D95276D619D0C5F
SHA-256:	47E4EE744C576FE52FE74A169A738169A4505BC6EC35FADF26784FF68BD81A3E
SHA-512:	6192083890B6B957234D09EA6CD1290178DCD15E4683551E14EE852454B8AC191C06F2A620F3B9D307DDFC383292824E8B140A918FE9D1E3972A7336D53A519D
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvt7FfUXzZD5sR-AbZjpIXTFugqwM1qzD64EkfDtGQAufe1DhDgsduiLLOV_CgqQMAdYBFsAxyGrhBocTghNxkiVSfy3GiJEwnrl4r4VJqY1Zpqw5ViV96_16WRSzoNMOTGZ8AsI1&t=74258c30
Preview:	.//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/bootstrap.min.css.xhtml?ln=css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
Category:	downloaded
Size (bytes):	12877
Entropy (8bit):	4.402185035278289
Encrypted:	false
SSDEEP:	192:ceIzngx4bZWCN1ZR9l5g3OShyEy6EssiEaLFuJov:cTzngCbcCN1ZR9g3OShysrDk+v
MD5:	EEBD643F4F3DC6F3BBA6ACCA739C9453
SHA1:	4E37DC1103B95C92E4AD63F7807CD5307BEB5592
SHA-256:	A4B4B78097D1614863BD64235AF4DBC9B4B4EE04EEDF03A03D200047717C5830
SHA-512:	961B750FA3E3DABB5EFC26CC6AA8C336E5863E7A496EBA0BB0254747EDF8B3B43F63B3A3A432A69BD8BFF053C06E9AF9673F320D66C36ED42A9DE8A68209D4D5
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE html>.<head id="j_idt1">. <title>Recover password</title> . <script async="true" defer="true" src="//www.google.com/recaptcha/api.js?onload=renderReCaptchaCallback&render=explicit&hl=en_US"></script>. <script type="text/javascript">. var renderReCaptchaCallback = function () {. document.getElementById('recaptcha').innerHTML = "";. grecaptcha.render('recaptcha', {. 'sitekey': '6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO'. });. };. </script><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/bootstrap.min.css.xhtml?ln=css" /><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css" /><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/jquery-ui.css.xhtml?ln=css" /><link ty

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29479), with no line terminators
Category:	downloaded
Size (bytes):	29561
Entropy (8bit):	5.220085568653827
Encrypted:	false
SSDEEP:	384:7joGueFuPvzaiGzSB51KEbV37zMlyM0C3jiKQlW3qI:78GueFkMzq1KEJLzQys3jfQlWN
MD5:	E188CA38A0A52731FB1170A312D7A672
SHA1:	8FC0680D3F1BB2EBF85EBB5D1C523C82F1009571
SHA-256:	3B34C31AED6E9172D68B45E5721159723DCAE80D479B25F167636CAAFB3A5B1D
SHA-512:	F3D4D64E3B7C91EB9CF4B7ECBB83C04137DE5178C232B5B87BB7ADB960CE7710387CE219353574F8237C7C796CA2BADEBD28FED429EF7D61BA24459745737E7F
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetResource.ashx?stylesheetname=kbcloudcss
Preview:	.marker{background-color:#f00}html,body,#form{height:100%}img{border:0}body{background-color:#fff;color:#333;font-size:12px;margin:0;font-family:Tahoma,Arial}#wrapper{min-height:100%;height:auto !important;height:100%;margin-bottom:-210px}#pushfooter,.zoneFooter{height:210px}h1{color:#222;font-size:18px;font-weight:normal}h2{font-size:14px}h3{font-size:120%}h4{font-size:110%}h5{font-size:100%}h2,h3,h4,h5{color:#222;font-weight:normal}.hpbottom a{text-decoration:underline;color:#035791;font-size:14px;line-height:20px}.hpbottom p{margin-top:5px}a{text-decoration:underline;color:#035791}a:hover,a:focus{text-decoration:none;color:#035791}.ErrorMessage{color:#f00}div#homekb div.repeater{display:none}.disclaimer:after{content:"Le operazioni descritte hanno esclusivamente carattere esemplificativo: l'uso improprio o non eseguito con la dovuta attenzione e competenza, pu. causare la perdita parziale e/o totale di dati e in alcuni casi pu. compromettere il corretto funzionamento della macchin

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	5.3818675097387905
Encrypted:	false
SSDEEP:	12:UNAFVO6ZRoT6p5e3LOKayVVey90H1BGuL/6f7:RVOYsrwy96DGSSf7
MD5:	F70846B2DBA212A758C4A85FA9404407
SHA1:	6911D678AF6059B9CDCFA3FD92138D85F3ACF25E
SHA-256:	3418E8A8A5C5F275858EC1DCF3709FE4D4ACE669F5283BA828D12BA59FCB05C8
SHA-512:	66453F829FE93B40F9B2958744569490FA4B35F27ED04F6F2AD619FF27504E041FD94E9EC71E5E9600B168B1DDE46333010F7E3C8BF041EE702A79CCFA679DA7
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Gloria+Hallelujah
Preview:	/* latin */.@font-face {. font-family: 'Gloria Hallelujah';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/gloriahallelujah/v21/LYjYdHv3kUk9BMV96EIswT9DIbW-MIS11zM.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (337)
Category:	dropped
Size (bytes):	9417
Entropy (8bit):	5.178074833427295
Encrypted:	false
SSDEEP:	192:8HUDeA8K9L3R8fHaYoi+3T+bZRLSg0v4zfseMsI0:8HUgOL3R8fHaYoj2ZRLS54L
MD5:	9C2945AE6D06ED92953D73172F508668
SHA1:	D41021EAD70FF45F8EB0DF0F90668EEAA829F4B3
SHA-256:	9C9206E11341DE1282C0DEF51983E99BD945FB7F157D98A2C2E55CA87EF43B0E
SHA-512:	C3AE94938C3A6D9DB80E206EC5CDE52F9433BDD11F51D437ECFDFD6E3EF050227068A350AF63941BA2E605E3B936A3F57A662E142E3B2AC5AD089AF9B6A0745C
Malicious:	false
Reputation:	low
Preview:	/.##########################.## ARUBA SELFCARE THEME ##.##########################./../* SIZING /.@media (min-width: 576px) {...w-sm-25 { width: 25%; }...w-sm-50 { width: 50%; }...w-sm-75 { width: 82%; }...w-sm-100 { width: 100%; }.}.@media (min-width: 768px) {...w-md-25 { width: 25%; }...w-md-50 { width: 50%; }...w-md-75 { width: 82%; }...w-md-100 { width: 100%; }.}.@media (min-width: 992px) {...w-lg-25 { width: 25%; }...w-lg-50 { width: 50%; }...w-lg-75 { width: 82%; }...w-lg-100 { width: 100%; }.}.@media (min-width: 1200px) {...w-xl-25 { width: 25%; }...w-xl-50 { width: 50%; }...w-xl-75 { width: 82%; }...w-xl-100 { width: 100%; }.}../.TYPOGRAPHY.*/.:root {..--font-family-sans-serif: 'Lato', sans-serif;.}.html, body { font-family: 'Lato', sans-serif; }..h1, .h1, .text-xxl { font-size: 36px; }.h2, .h2, .text-xl { font-size: 30px; }.h3, .h3, .text-lg { font-size: 24px; }.h4, .h4, .text-md { font-size: 18px; }.h5, .h5, .text-sm { font-size: 14px; }.h6, .h6, .text-xs { font-size: 12p

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	459
Entropy (8bit):	7.2178604004222064
Encrypted:	false
SSDEEP:	12:6v/75/6Ts/vQFN0I44gsHoFumMTp4RTLJAWdfsezsEX9:I/6hgsIEN4xJAa3Jt
MD5:	10B1D7E81719234AC5909AFCFC97481A
SHA1:	5B3F95346F0859CE1038EE5B7475C4C7F9D4DFCB
SHA-256:	70E61D9C81CE624161859DCF32291B2D6EAC3CC05CDE2A6CB275888A7477224F
SHA-512:	DEDBB5CC08FFBD1272071F0F9953C9EAEC49C57AAFBFC1374BCC086EF6B3B500B78867A70167DFB32F59FE723226FD58CD617F186CA2F9D04E994510B937B271
Malicious:	false
Reputation:	low
URL:	https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media
Preview:	.PNG........IHDR...............c....pHYs.................sRGB.........gAMA......a....`IDATx..U.q.0..s........A.A... l.....A........"....M....[.K...$...=>I.....a\E.........HF.a...-Fk`.~....>...S.<K......ma..../M..$....,`{..D.g....Z..[...W..........[j.....-..#.../h.K..91...}...KtZ>u..I.w g{....}?".;.'.....p&C.I.Z....7.)...WK.y8...[oi.gGic4....7....KP{...@{.{........y~...!p....~...k'....u0.4.=....F.....A...wxt.I...g>.F..n[..P4l.....IEND.B`.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (42112), with no line terminators
Category:	downloaded
Size (bytes):	42116
Entropy (8bit):	5.129398708407116
Encrypted:	false
SSDEEP:	384:BwKJGKiUyV/o4xXO4W1Ck0ISpp9kDqYMz5qKC7el9w/:vJ/nyV/oyXO4BpI+qFel9w/
MD5:	D9CA60E1F51AC1E0683E0175E24722AF
SHA1:	E69A612F8842A564BA15A8D6A827D87304689969
SHA-256:	D85BF856ED4EB394EEE900422B9FE77DD7E90C3DABE3CDA111489F2076B37E83
SHA-512:	BA402623220A99CD7C99D15CE5F6DAABA62AD46220552EFBD4916F21FD172A0C082E23B88AE70F75AC289CA3D9968FFDF102D97F32918F2DD561FE41DCF0B3AE
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=custom
Preview:	.repeater h2 a{color:#222!important}.repeater h2 a:hover{color:#1474bd!important}#menuLeft #menuElem li ul{display:none!important}#menuLeft #menuElem li.Highlighted ul{display:block!important;padding-left:0!important;margin-top:0!important}#menuLeft #menuElem li.Highlighted ul li{border:none;padding-left:18px!important}#menuLeft #menuElem li.Highlighted a,#menuLeft #menuElem li.Highlighted ul li.Highlighted a,#menuLeft #menuElem li.Highlighted ul li.Highlighted ul li.Highlighted a{color:#1474bd!important;text-decoration:none!important}#menuLeft #menuElem li.Highlighted ul li.Highlighted ul li a,#menuLeft #menuElem li.Highlighted ul li a{color:#222!important;text-decoration:none}#menuLeft #menuElem li a:hover,#menuLeft #menuElem li ul li a:hover,#menuLeft #menuElem li.Highlighted ul li.Highlighted ul li a:hover,#menuLeft #menuElem li.Highlighted ul li a:hover{color:#1474bd!important;text-decoration:underline!important}#menuLeft #menuElem li.Highlighted ul li ul,#menuLeft #menuElem li ul

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2405), with no line terminators
Category:	downloaded
Size (bytes):	2405
Entropy (8bit):	5.004532312770702
Encrypted:	false
SSDEEP:	48:zKtqQT6HPGDI8PGD3DFkge+qjSzkIbqPqI7c:WtqQT69R5neqMc
MD5:	D01AF3C004985EA9293D56740CF2FDE3
SHA1:	3E32F156A97DC882A502489F4FBDB93183980FD2
SHA-256:	F4575CAF48C8A7D1DA549D5827B6E60F3F3C36E7292AC5AB1BF182AFDDD667AD
SHA-512:	028B9AF3C11CAB4602B813B2A604A9AE71B7B0B98B329BDFA78E83848CD15DD659E2B4B725F57B102348E657C9BBC1BC1E372E1380F84F90EAE095421BCEBFDF
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/96/968f8e58-ea07-4d30-bdab-50048d61676e.css
Preview:	@charset "UTF-8";@font-face{font-family:serverdedicati;src:url(/MediaCDNRepository/files/26/266facde-d046-494f-9239-87587e7b6fc0.eot);src:url(/MediaCDNRepository/files/26/266facde-d046-494f-9239-87587e7b6fc0.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/05/05a8fb50-aa4a-4ed2-adeb-0897aa13ba50.woff) format("woff"),url(/MediaCDNRepository/files/b9/b98e508d-7abb-4af3-911e-43a56a418716.ttf) format("truetype"),url(/MediaCDNRepository/files/0c/0c9bf572-2cdb-468f-a453-398b7fe1fc25.svg#serverdedicati-svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:serverdedicati!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=ser-]:before,[class*=" ser-"]:before{font-family:serverdedicati!important;font-style:normal!important;font-weight:400!important;f

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0ZRn:UZRn
MD5:	F9A953BAB1849D8760CEE1BC03E3861B
SHA1:	CE2986C36EE8321EB50FA1763F706C52E10B3E49
SHA-256:	682C9DED7D1D0AAD6CF11F62C516056D93057DF8DA37FCEB736CF631805AEE44
SHA-512:	64B58FDF1E5EDF0043FC2BA4E8DA66589A180E0703AA1F2CB648888F31DCC60620EC9C57DD52F5E958DF88BCE8E99802DD826DA52BAAEAACA83F2BBEBAA0BC51
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmb_-csYqqIbRIFDcpxJlM=?alt=proto
Preview:	CgkKBw3KcSZTGgA=

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65390), with CRLF line terminators
Category:	downloaded
Size (bytes):	143912
Entropy (8bit):	4.769471332439353
Encrypted:	false
SSDEEP:	1536:4UBewQzM9HSqEwCff6mH/yOI0kbwoVtqvRN:BQzM9H7E3kJ2
MD5:	2A6B87C7F55D0FADD0899C5E08B30EAB
SHA1:	6ED18646126A9CD357F91DC935003C738E3EF0BB
SHA-256:	4319AF483DCBAA7CBD8F61A90EBD0A3B49941FD70FFD98337B34CC1E86BE04C5
SHA-512:	493DD11B8EC2738B51FF269E7BEDB9205E699FF94CFED558DF32A1501D0460D05251EFFC635C290B857397DF1F6A9C5B6D4CD4DAAC2F7633C364091B722EAF40
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cdreport.js?referer=www.pec.it&culture=IT
Preview:	CookieDeclaration.culture = 'it';..CookieDeclaration.userCulture = 'en-US';..CookieDeclaration.lastUpdatedDate = 1718574948753;..CookieDeclaration.InjectCookieDeclaration('<style type="text/css">....CookieDeclarationDialogText, .CookieDeclarationIntro, .CookieDeclarationLastUpdated { margin: 0 0 14px 0 }....CookieDeclarationType { display: block; margin: 12px 0 12px 0; padding:8px 8px 0 8px; border: 1px solid #333333; vertical-align: top; }....CookieDeclarationTypeHeader { font-weight: bold; }....CookieDeclarationTypeDescription { margin: 2px 0 16px 0; }....CookieDeclarationTable { table-layout: fixed; width: 100%; border-collapse: collapse; border-spacing: 0; margin: 0 0 18px 0; padding: 0; border: 0; font-size: 100%; font: inherit; vertical-align: baseline; }....CookieDeclarationTableHeader { font-weight: bold; border-bottom: 1px solid #777777; text-align: left; padding: 4px; overflow:hidden; }....CookieDeclarationTableHeader[dir=\'rtl\'] { text-align: right; }....CookieDeclarationTa

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23159
Entropy (8bit):	3.8211949717841156
Encrypted:	false
SSDEEP:	96:5S+8kEWm+gdrwZjbXpcBxNXrNGBQfpwXLHiX8Gvsc5g702j1pEsPEoEyLoOHCteN:5S7k6OZO5UR7rzMoXRvFKR6JiI
MD5:	B45E30154E62FD8F4FFB0D56AD8BA650
SHA1:	55BC2D000442D849C05BA33A1B5B613B1157AEE4
SHA-256:	22592D7B2B641638D29365BCD37C451932FB72E33E585C6117F5A2C32C9D62F8
SHA-512:	71CDA13B07A94897E390363AD15EEC36A657B859C4488B32750978DEF5190A08A63D92D3CF0F0641228357D60105A5A630C989B19EA15270650B43D1075EAFED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....pHYs...............L.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015.5 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2016-07-07T12:25:27+02:00</xmp:CreateDate>.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2963
Entropy (8bit):	4.3933300754972855
Encrypted:	false
SSDEEP:	48:3cxmybmpArhIjLBRFJDuF+eIW3yF5+sQSfSEmeaW:MlsuH+ex3W5+uq30
MD5:	BB35770A7F467FBEC1BFBAA71B291C03
SHA1:	95931CEF88B6EED9BEFC2DDCCD7A7D50D5F11B3F
SHA-256:	66EC3872204D77A16270EE3430BA28AF7103A7669DB3E82B83E427AE50E83827
SHA-512:	C009DCA186669C80E39DEB11BD368B1B555A80670D7245B862A7D1062757178AA32AE29896DBD7EC1A2AAB114B15D80CE90C7C45748636FE9D87ED09D853FA2D
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSScripts/Custom/bootstrap-image-gallery.js
Preview:	/.. Bootstrap Image Gallery 3.0.1.. * https://github.com/blueimp/Bootstrap-Image-Gallery.. .. Copyright 2013, Sebastian Tschan.. * https://blueimp.net.. .. Licensed under the MIT license:.. * http://www.opensource.org/licenses/MIT.. /..../global define, window */....(function (factory) {.. 'use strict';.. if (typeof define === 'function' && define.amd) {.. define([.. 'jquery',.. './blueimp-gallery'.. ], factory);.. } else {.. factory(.. window.jQuery,.. window.blueimp.Gallery.. );.. }..}(function ($, Gallery) {.. 'use strict';.... $.extend(Gallery.prototype.options, {.. useBootstrapModal: true.. });.... var close = Gallery.prototype.close,.. imageFactory = Gallery.prototype.imageFactory,.. videoFactory = Gallery.prototype.videoFactory,.. textFactory = Gallery.prototype.textFactory;.... $.extend(Gallery.prototype, {.... modalFactory: function (

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HextkY:Of
MD5:	5FC77E00F6686BF270A552B5C2985067
SHA1:	806DF381929341E7A25D719527706ED0D5AAFE0D
SHA-256:	9386815700A0FD30D05B84A315C5EA067BB5FB81FC23A414A918DF996D63C3D6
SHA-512:	C7A2554DBE6D9312DA8DBB90D12652FA58C2021A41329C83CFB1FFB7E524E82D20250C5C843083ED4F3154ED32650B4555AB2783D7011614F097288E191A7B71
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnbcB6S1pIy0BIFDQ9tFNU=?alt=proto
Preview:	CgkKBw0PbRTVGgA=

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2026
Entropy (8bit):	7.843430866451899
Encrypted:	false
SSDEEP:	48:Hyxf+pPiWMy+PsahphoJ+h9bsjByxz8yZiVzvuJcLH+rkSzbrR:Hyxf8kyes4dh9bloyZIvuZHl
MD5:	08F8E253C93289C60C70D0C9C6464598
SHA1:	53FB20928C735058DEC769174A2175A2B5549950
SHA-256:	60DF9FFCA364492CF4C5844A901589F60D68937CE0A4FB73241824898E5A7021
SHA-512:	BE51B4FCF70D3C97F352D9511FEA64140B0C2E7B2E14A38C81FC050E8C09A3B808E00676E3A12EB22CF67EC01D058CA2E7939CCDCC30F90A31EE0BE20F07B542
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.yl.U...r..-m...=.R.A...^.".DQQ.!...$x..x.(..R%@.T.l...P..-.S.P.m9.ZhA..........c.}........{.y.f......xnyyy...5.............8xc....~.'....~..Y..@ .....@ ......%..^.... ........n.G.q.B..........=7.4x..u....Q..R...f.^..a.......%p.\....&.~.2..G......s...f...r.yz..]P.S.u.....Y...Kx...\.#.).y.rg).%A=.A..Q...Y.6.T.88.....&..4.`9\|..!...........R.........\|.',hJ......`...8.... ...\..L.zn.....,h.p...........v.._C.E....W.....b.........{Y`d... w.G..&.S.../.-.=.E.....g.h...>...l#...;...W.\|.....#.../.?..r.L..ei.....r..S.mZo.hx.r......Jg.=..@......D....q.........NugA...a..bO...6.....mb...i..B....px.r.y.m.J_.r........2x.q.@%......!.%..H.#9.a....D,).;..."..b...R..S.KU.wgy...A..Y.Y..V@..<...H..5w@.'.p....D.0.......;..V.`.......5..#!..V`. ...4.... {K^.......!.u.0.d.8..).."..Q`. ....z...X.......k. ...y.....*.a...R....`.D.@+.e^yp..y.S.V..Y..0......?.........Y...p.u..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601)
Category:	downloaded
Size (bytes):	66611
Entropy (8bit):	5.4933107404620225
Encrypted:	false
SSDEEP:	1536:IydsUOQKezcVo9hm8s28Hy2Fyl5mrDKuR8WE1I3TFtof6:IaHj9hgmutR8RAF5
MD5:	FE839F02E9A6558AA77A25FD5BE73766
SHA1:	02ADE38E4B474F82671A6FE5CF620B37E463CC6E
SHA-256:	307B220AA73890FB08C1E7F9D033A72238D33F10A9BD6A8DE48D355ED3D138CF
SHA-512:	2C066F46832C6592343ABD7A01B696927B2969F6836C9A651B8395886F2AD2D34E73C050370601D733DE0BCEC8C6DA4923BF7BD348679EBC77A8416DE3A5C4C6
Malicious:	false
Reputation:	low
URL:	https://wa.aruba.it/piwik.js
Preview:	/!!. Matomo - free/libre analytics platform. . JavaScript tracking client. . @link https://piwik.org. * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js. * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js/LICENSE.txt). * @license magnet:?xt=urn:btih:c80d50af7d3db9be66a4d0a86db0286e4fd33292&dn=bsd-3-clause.txt BSD-3-Clause. */.;if(typeof _paq!=="object"){_paq=[]}if(typeof window.Matomo!=="object"){window.Matomo=window.Piwik=(function(){var r,b={},z={},J=document,g=navigator,ab=screen,W=window,h=W.performance\|\|W.mozPerformance\|\|W.msPerformance\|\|W.webkitPerformance,t=W.encodeURIComponent,V=W.decodeURIComponent,k=unescape,L=[],H,u,al=[],y=0,af=0,X=0,m=false;function p(at){try{return V(at)}catch(au){return unescape(at)}}function M(au){var at=typeof au;return at!=="undefined"}function C(at){return typeof at==="function"}function Z(at){return typeof at==="object"}function x(at){return typeof at==="string"\|\|at instanceof String}function ak(at)

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1909
Entropy (8bit):	6.4035411408206455
Encrypted:	false
SSDEEP:	48:K/6IYJVknA9Wp2Kp9xlotY3klHVy3pPZHGygtS:KS7knmWp20xWt7lHV2HGJS
MD5:	9B416F5C59BB76CF53AC7B4C0F552E61
SHA1:	E9EA4A430AC637C558CDCA3C2E03810741DC6B50
SHA-256:	4C669C1D9C1323964EC46EC123D237F08945B3C537A26C32D0A02B6B191DACA9
SHA-512:	F72F461A0AFB103A056DA361A71288BE3BC428CB5A97777734E6D42DCE63AC6ADFC151B854BB9ECCDAC0AC6B23BFFBE8C4C632D9CBD0EF626B8990D0AFDFC279
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;mG.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 22.2 (Windows)" xmp:CreateDate="2023-02-14T14:46:42+01:00" xmp:MetadataDate="2023-02-14T14:46:42+01:00" xmp:ModifyDate="2023-02-14T14:46:42+01:00" xmpMM:InstanceID="xmp.iid:cd6c258c-b920-d149-bbb4-139aac73e739" xmpMM:DocumentID="adobe:docid:photoshop:5d10c394-671a-e34b-9cd0-e934b4f261ae" xmpMM:OriginalDocumentID="xmp.did:57a9e932-9c2c-334e-a177-5c12521fcb3f" dc:format="imag

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1471), with no line terminators
Category:	downloaded
Size (bytes):	1473
Entropy (8bit):	4.912360504346025
Encrypted:	false
SSDEEP:	24:IIG16g5GfKSAyeJxI6VMgq7XQoIbF/zkntLoF:Ifz5TJNo7VsBbF/zWtLq
MD5:	2F5D344C18B80B08553E361344335A05
SHA1:	2A9D798497B03E3963A794BBE5D92F42C4F86454
SHA-256:	5BB127C134EBC163E9A59D725847582DC1396C2165A4186370213B2650A39EA8
SHA-512:	F6D895B66DF648343F2383B159FBB19A2CF073DF41BE23307902DA2409CC93188622C26353F00A2C5E8A9D3D5F5F3DAE6DDAC4E94118B60BFF7E88A2091E2461
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=bootstrap-image-gallery
Preview:	@charset "UTF-8";.blueimp-gallery .modal-body{position:relative;text-align:center;padding:0 0 56.25% 0;overflow:hidden;cursor:pointer}.blueimp-gallery .modal-footer{margin:0}.blueimp-gallery .modal-body img,.blueimp-gallery .modal-body .video-content video,.blueimp-gallery .modal-body .video-content iframe,.blueimp-gallery .modal-body .video-content a{max-width:100%;max-height:100%;margin:auto;position:absolute;top:0;right:0;bottom:0;left:0}.blueimp-gallery .modal-body .video-content video{display:none}.blueimp-gallery .modal-body .video-playing video{display:block}.blueimp-gallery .modal-body .video-content iframe{width:100%;height:100%;border:none;left:100%}.blueimp-gallery .modal-body .video-playing iframe{left:0}.blueimp-gallery .modal-body .video-playing img,.blueimp-gallery .modal-body .video-playing a{display:none}.blueimp-gallery .modal-body .video-content a{cursor:pointer}.blueimp-gallery .modal-body .video-content a:after{font-family:"Glyphicons Halflings";-webkit-font-smooth

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 82, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6078
Entropy (8bit):	7.8855954500707295
Encrypted:	false
SSDEEP:	96:nw6iltsVjcwRvghIF5Qj0aLfhwFzVYR/ozRXOqN1I6UNSjRFhVAb0QcjU:riLsVo+vwIFaj0aLfI+K3IFUjNVocI
MD5:	3BC04F4012FF58939E863E27B6BF7C31
SHA1:	660B38117ADB43026F11BCFC11684708175C6914
SHA-256:	D939102A740468BC9C7E27D99ABDDE38E8CF81594E406ED33B3FA87553E8E618
SHA-512:	8297D31FCB6AF06F625F78894A6646159DF9F9376B4AC6903556ECE64D06BAB18DBCAC5E7D957D494FCD35BBAA4694FC5F31B4ECB7417D3F3E24EB53F9A1B775
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/content/home/bureau-veritas-9001.aspx
Preview:	.PNG........IHDR.......R.......o.....sRGB...,.....PLTE..............x..zhj_opccdY.........qrhmocjl_fh\kmaadW..y}qy\|p.....................................jl_~.t...{}sdf[orf.....................~.u..............fh[...hj]..............xY^P..bfYtwk......dgZ..}...svj......^bT.......kna...W[L.........wznqth.........X\M...SWH...HL<.....z...QUF...MQB...vymmpc..................%..)s^Rltf.......{}r...h]O.)-..........,P^LadVVZKUYJ...X\N\`RR`N.:8............b\LZ^P]aS[_P...SaPY]N[_Q}.tVcQ{MF.11.@<...oZN.%(.................pv..............lr.hn....3>..W^............ ...09.ah.fl..,6.w..DN...T^M.......(3.IO....8A.PX..........\d.#-..#......&......75.GB.8=......KSxTL.........<E..............f`RZcS..........&0.........".AK...........z..v{................P[J.42.-7.19kbS.6>.-6.-4...quhp x.....tRNS..(Ddy...5.p........................T..................................R.........................e.......9...............................................................

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.54591452195184
Encrypted:	false
SSDEEP:	3:zn/IuhkaGKLC2BliTn:MrNg0T
MD5:	AF6E017F00D9C3196F59F7E3FE564EF2
SHA1:	985E9B361B2AD0FFB41D614CDD4758B09D8F19CD
SHA-256:	E5EA811BD0D6B54CB03996FF20DDB9F25195A6EF1966A81945AFD781FF14E3FB
SHA-512:	0944958DECF78279EFC33FE96F834EFABF0FBC5B956D10AE03C5FA669895ABF5549D4D603110B498A899211B68FADDD8501B587EA323F5B9067364CF5A9CF898
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgklCVDP2rvAABIFDXCKDJcSBQ1fcf3aEgUNU1pHxQ==?alt=proto
Preview:	CiAKBw1wigyXGgAKDA1fcf3aGgUImgEYAgoHDVNaR8UaAA==

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2017
Entropy (8bit):	7.828179860916644
Encrypted:	false
SSDEEP:	48:RNAOvl6GDawFI5KEI/8RE/m1QsldFmNam45k7zAwEO6:nfQAwuv/muiHeAo6
MD5:	15669440DD604063E343073EAA3F0B22
SHA1:	8D6D0E995E4C5505FB1C94F59227DD2F510567C9
SHA-256:	722D46AA2624626A2C58F535CEFBEDB2009B823CCB9DEC05B7122708D44CD550
SHA-512:	42C3E1C6E3936D0F7E4FD6B93F6BCD03DE4B12809D377A1ACF2F5E7981DC03352AE37F335418308A06B98BD4C2C454D8C8AC8F49EEF85FBB7BCEFFF335907D88
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-gestione/44.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d...vIDATx^.oSU.........2[...n.n.7 .L....(.:.7..B0A$..QT..`......P..T.*.G.u.1:1...a......9Wj....m.w;....{....8.K.Ba-...6].p..V)Bg.m8..\|Ccc.M2T.A.a./^,.IJQjnn.G....R(...B.P(,.....p..mt:.K.v..(......j....(..C ..x.QL.M:......d.p.%F..q./...9.K 8...W......I.g.9.0....a.E.....6G$......7....g..2..Y..\|,}S...h.Lv{..{_..@.5.k2..Y.`.)P~;n.e2....SXv....`.Lw{\...0..4$.....IE!...[ .....zER....'}S.<n..e......R7.!.....!....W.7..}5...w.t..:c.^..v..,.\.Q.....i...._(N...yGa_...@.j...Bd.MDz?..".v.N........WA/..X.8.J:...Y...x.Q.O.<...Xg.........=P..1?..........+Rm...vK?.f.........o.f..D2).B].Thk...?....G]......&.!....z.@].....V0..p..]'>wS.@^...K$.f..^......2....9h.p[...~{.%......_ ....$..b<.\....2@.......`w@...K.....q.G.W.8Aj...........q.$Ql.@6z>...:...5..$.;.Kp.1...Q..d..6..(.......ST....i...A2K.s.\S9.....p.1..`....;_$.S....S.o..../.b...7.......r'`..ji...:.......+....+..\|.k..I.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	6.4282828900243985
Encrypted:	false
SSDEEP:	24:v1hxWwjx82lY2T3UVmqxHyJ3VTbYGDYP5BAQkhSw9:96Nn2wTSJ39Yb5yQkhSw9
MD5:	BEF29AA03FFFB349B419844B0F2681F6
SHA1:	28256BFAF9910AF9DB73C78B48E3A64A676D3152
SHA-256:	EE7659D04E27B13D46603CA59607443213EC85833535524A50AA65EE41170BCD
SHA-512:	7A5CEC23059DCC5779440F85CD050D6125697C180D7AE3EFC9CDBE2003B11072869F09BE3DEC8D299C19F4398991F770401B889113E77D82FF790B5C76727A0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:606AF30B4D4D11E89B46BE5708C52ADA" xmpMM:DocumentID="xmp.did:606AF30C4D4D11E89B46BE5708C52ADA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:606AF3094D4D11E89B46BE5708C52ADA" stRef:documentID="xmp.did:606AF30A4D4D11E89B46BE5708C52ADA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6.......IDATx.b...?.-.......x\|...i@..._..C.+.X.T.ns.X...o....@..m.../&.`t.........l.^..(0...pY.CD..B1.8...L..X...S.j

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1122
Entropy (8bit):	6.4282828900243985
Encrypted:	false
SSDEEP:	24:v1hxWwjx82lY2T3UVmqxHyJ3VTbYGDYP5BAQkhSw9:96Nn2wTSJ39Yb5yQkhSw9
MD5:	BEF29AA03FFFB349B419844B0F2681F6
SHA1:	28256BFAF9910AF9DB73C78B48E3A64A676D3152
SHA-256:	EE7659D04E27B13D46603CA59607443213EC85833535524A50AA65EE41170BCD
SHA-512:	7A5CEC23059DCC5779440F85CD050D6125697C180D7AE3EFC9CDBE2003B11072869F09BE3DEC8D299C19F4398991F770401B889113E77D82FF790B5C76727A0C
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/images/04_sm_info.png
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:606AF30B4D4D11E89B46BE5708C52ADA" xmpMM:DocumentID="xmp.did:606AF30C4D4D11E89B46BE5708C52ADA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:606AF3094D4D11E89B46BE5708C52ADA" stRef:documentID="xmp.did:606AF30A4D4D11E89B46BE5708C52ADA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6.......IDATx.b...?.-.......x\|...i@..._..C.+.X.T.ns.X...o....@..m.../&.`t.........l.^..(0...pY.CD..B1.8...L..X...S.j

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23159
Entropy (8bit):	3.8211949717841156
Encrypted:	false
SSDEEP:	96:5S+8kEWm+gdrwZjbXpcBxNXrNGBQfpwXLHiX8Gvsc5g702j1pEsPEoEyLoOHCteN:5S7k6OZO5UR7rzMoXRvFKR6JiI
MD5:	B45E30154E62FD8F4FFB0D56AD8BA650
SHA1:	55BC2D000442D849C05BA33A1B5B613B1157AEE4
SHA-256:	22592D7B2B641638D29365BCD37C451932FB72E33E585C6117F5A2C32C9D62F8
SHA-512:	71CDA13B07A94897E390363AD15EEC36A657B859C4488B32750978DEF5190A08A63D92D3CF0F0641228357D60105A5A630C989B19EA15270650B43D1075EAFED
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/fatturazioneelettronica/icone/14.aspx
Preview:	.PNG........IHDR.............<.q.....pHYs...............L.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015.5 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2016-07-07T12:25:27+02:00</xmp:CreateDate>.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4009
Entropy (8bit):	7.935491366537182
Encrypted:	false
SSDEEP:	96:oEx7i0981jG9NjAVcFHyDf7rJhfF6RBv5ufvk7Jx2uolkVaWXLhj:lx7iG81jMNUiFafJrfs73HJaQ
MD5:	6F8425694AD619F4C66EB4D91E0C5433
SHA1:	BC4FC53B73D9ABE662721CFC7507E6BBD23EAA71
SHA-256:	7BA047D58CF070D78DB9E0C7CD43D66628B3E7800192103BCDF01D0A58041C75
SHA-512:	457A7093087396EBD1D1124B3FCF3F079B44E40437E07F258FCE2D9EAABE04DE2E6FD31FF21EE82CF7B94A8B0EE50F34415A6824EA248DB48DC2CD10064B5144
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/fatturazioneelettronica/icone/15.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d...>IDATx^...\E........6;s....d. .."b...pK.\|`y.@4..H.......A1^.....R...(........%.&!$.,fC.....}z..fvvgg....W}u.........>.=.;C....6l..c.N......7vn......=... ..zzzN.P&.....d.\|..C...2d.!C..#. .;.2.."c..^..'.C....5...r..._..........?9.w.,C..]..AO.F{$. .S..=..wG........>...q.\|~lSS.+].......^.i.....Gl....a.....-.....\......G..R.A.P.......b.[q.8b.......0g. b.I..#QyP.y_.q.zZ...b..:.."<.{C.....]...6>....>..].gV...<)..qj....ZJC.t..aa..1...(....y....,...IE/.[L..dH.[.(.....^Z..N....}.....:3L.\|.=en...v.- .c._.l........e?...v7e..}......ra.~.<.Nm.,u.t.#..U 0....".1G...x.D.w...R..Y.Qty.....e..T...&..R....n."R..[...x..l.N....].Sc.......D..T.....&.......X.=s.K......O...yX...=.XL6.:.g. S.P]..M\9.y.D...7.9.y...U..]...1.B....p8..D.."..f.........v*.h./.}.. ....K]..)V.1..?.6..?CW...9D.w...E p....s/....e..D...Gi.I.4.\|>.g\...;.....m.".\|.2.....e.....3.......=..osY.BF`.....

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1128
Entropy (8bit):	6.475934272673602
Encrypted:	false
SSDEEP:	24:e1h4SHWwjx82lY2T3/Vq5aWDaoyJ3VwabuapGeKa7Jfvuc6+:kKS2Nn2DooJ3RaiJl
MD5:	4516813F55D3709D5A28F584CF61B58C
SHA1:	A0AF1499BEC3741F0C96CEAB2E36A4119DAA18DB
SHA-256:	9E61AEFA5BA1C443F01F6617E1B4381EAF539BDFBA6365899D7CECC2A32C7DEA
SHA-512:	87A770F3E84EFCB08EEACB6FD9CCCF022DAAC961CD82E96D5DBB2D69896E48AE5534A69E0EFFFADAD26B96129334FEB8BF1229B53613A6EAABDC385E727B4C40
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/menu/images/gotomainsection-home.aspx
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:55C7FE9F96A611EBBE8BA71D2AF53714" xmpMM:DocumentID="xmp.did:55C7FEA096A611EBBE8BA71D2AF53714"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55C7FE9D96A611EBBE8BA71D2AF53714" stRef:documentID="xmp.did:55C7FE9E96A611EBBE8BA71D2AF53714"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.6}.....IDATx.b...?.@.&......ZL;..N.......I2....-^.....^C...B-+.......x...4.....ZX\|.jx.........'....HpiPu'(.....@..Jd

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.299013596664044
Encrypted:	false
SSDEEP:	12:UNmF3O6ZRoT6pfD3DhKa+WRzxcb65wCgDrqAF3O6ZRoT6pfDZfKayVVey90H1BGt:33OYs21RVc+u/r3OYsPwy96DGSSf7
MD5:	11B8F27B7E5B7848389F4D869C11ACC4
SHA1:	C6D90C5B580D6049FFD37EF3A990BCE80DB73433
SHA-256:	77D9907CA853AB885FD7A35A29FAAF4206B8FE47347CD9C12391D64451AD6F37
SHA-512:	E5F60B3B5DECEBF8876A99AD845557FADB278C400C82F7C2009C5171A621281B4647CE9B5F25E4D5A4F99055FDC6FE85976C2D6A98FF0803D7E763C9B393F3FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	195
Entropy (8bit):	5.978204962252687
Encrypted:	false
SSDEEP:	3:yionv//thPlt2tq9/61pxe/lVFIgNtfPI1ANIN+GJIzzYoGe3lxxhyNI/qvZnh38:6v/lhPOtq9Oe/6ServUzY2PByvxqfp
MD5:	262D2B1CCDCCB4C250FD54174DC32ABF
SHA1:	B125CD1816393FEA43EA96B334792A2EC5150D5A
SHA-256:	60CB61062C85D82879DDCF9B4C354676C512020A39B520AAAEBE287F4AE39310
SHA-512:	7FF9D074FEDF2167EB753AD12B7139CD969CB6B9541C7B0C7F307EABD349C22E34E90E5F2316B0A40D22ACD15DD2B0C6847415DACBAE39493C58EAE63807E104
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/menu_divider.aspx
Preview:	.PNG........IHDR....... .......Y+...EPLTErrr...ppp(((...ccc@@@888333***%%% .........llliii\\\VVVQQQLLLGGG...S.{....9IDAT...... ....-.....H~..".~...05.#..<w.8.O..J.x.....J..{(.c.....IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1241
Entropy (8bit):	6.710015299166655
Encrypted:	false
SSDEEP:	24:d1h4SHWwjx82lY2T3/VCRlUgv2yJ3VNat6bGOVisj4MvUgGguiBri4R:DKS2Nn2Dw1J3npXj4MMgwidi4R
MD5:	68FAAC36F798044F1FC6D9D2FA4B7956
SHA1:	9140B91E6FF97FF84BA885F1BB1A5FC2D67E2FC3
SHA-256:	02D49B62B3A2672680A18F2B4C9B17F4F7DE91647529BFCD370B2242E10BB346
SHA-512:	EB12ADB2967FCF8F9B3F00BC56C3583CB21781DC798C5EBA43DBCB63BFD14EBB396A583DD6A4965AAE0310D1D6F72B51E281B1768B4BAEAEC26B91A4BD4D73B0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:5925B3ADDB4D11EC9F288311D5EB4DE3" xmpMM:DocumentID="xmp.did:5925B3AEDB4D11EC9F288311D5EB4DE3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5925B3ABDB4D11EC9F288311D5EB4DE3" stRef:documentID="xmp.did:5925B3ACDB4D11EC9F288311D5EB4DE3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.<w....NIDATx..U1..P...\|.!..^@.. '....b#6.b.c...j.#X......A...+b.q.Y...S.y.>3.1.G.... `Q.AY.........4M.^.d...[.....dY^E

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40329
Entropy (8bit):	5.24641079736423
Encrypted:	false
SSDEEP:	384:ovrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:oTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	AECA88483779AC14B47F14389139050F
SHA1:	B2D6ADDFD778216B8577A9788144F6313900B05E
SHA-256:	38DEAF33D1C84196E4C4F3C76C67587090CF261D423B9BEF9BADF535BC146A2F
SHA-512:	31E647B1ED341AD8D5DB4E991008F3A79169CCC0DC68E63DA0F0533E1F9875B871336B5B5C953B267AE4788F0ADFCE6F54E3492C4FEB8E087021AB84258F16BE
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OBkLIP3yLsgaeq0969ileglYbtIrz5sMRykCVXTq6GAJ9WzMlHfEo78kO-Ve-4RiTWQm755lKKI3DIQXd7N62Otkts64KKOqUAK8k67jBmzfWQEPw7qlbAc-6cCUrXr0pmrRUh01&t=74258c30
Preview:	.//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20322)
Category:	downloaded
Size (bytes):	20456
Entropy (8bit):	5.215797690903835
Encrypted:	false
SSDEEP:	384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9/:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9/
MD5:	74A3346AD114F835024BB3C2CBCCE1F6
SHA1:	89F912DF6DF64083A2BB3BFCE496CB6427E376C2
SHA-256:	6ACC5EEBFC83C2AABC8251D201DF3004C6AAF801565A9E7D75196F2AC2B380C7
SHA-512:	F4E6E66A5042D3899B92B636018E868C06437071FD781FBE1E120CD9C95ADB13612B310E3C5D015D16F0F1875AB5972104F188F98F213D252A36256703DC0491
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/popper.min.js.xhtml?ln=js
Preview:	/. Copyright (C) Federico Zivolo 2018. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){if(!e)return document.documentElement;for(var o=ie(10)?document.body:null,n=e.offsetParent;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent;var i=n&&n.nodeName;return i&&'BODY'!==i&&'HTM

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5370
Entropy (8bit):	7.9532799377948935
Encrypted:	false
SSDEEP:	96:I+UFlLlUZr78zFTECLxKl2wGtg6+kWlF9i2DdOH444+9MsQ34d:INWrgBTol2fg6zWlzdu4+2sX
MD5:	D29FFD0F442021A358C952BD0742AF79
SHA1:	A4FC4D35961D1D02C3D3D47B07BF312B09DC4F35
SHA-256:	7A952705C912E71EB0E4F42E999C674173CD518663A8461C40BC15A4615D4E98
SHA-512:	E949A4A478572CADFAEE74C766D6ED70B404E14C6E0351065B08F30413951F53BD0D090894983FE704AFE101BF0603A308831A753CBE63EA8918594C17113005
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/images-firma-remota/acquisto-rinnovo/61.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.\.x.W..i...RE)%Fk.j.Rj.V..7J.j+b.XAi.Z.....oj4f.......f.......;_.\|.$_b....\9......=.<.M.t....3g.bbbN.o:....'.\.r2""...U.@.....C..].p.].mt..i.n....p...Z./_.{...QQQ......W.....oa..........8P"<<.rXXX^.t$......{w..~.m.......o.4iR.....o$~.tww./.n.=.-..c.....>.-......>.@.U.&....,Y...H.\..\|..._}...=;.Ll..........;v..-[V1K.+.."...2e.H.....#s{..!.V...o....8..6....n..a..-.w..S.fM..@.% @N.8!0.r..A......U.Z.Y.V-.2e.E.o..{.....0aB..a.d.../Z..T``..C.d......').n.,X.@../n]....w.m.68........\|.M..Y.<y.....[.......f....}.r......Y3...s..#/.r...3@L?...E......... >6V.f..z..R...x...v. 1{v[j......cG..u.9s6...>..l..'....9rX.Gz......p..;...g.,.9s(...+$~Y2Jp....c{.....f.W..j.y.....5........O?.4..4Q........K@..\..DN.q.Ar..O9.a...U.l..+4...s...H.y..3~.......?.....8P)\|...i.Qri. ..A"....#.qA.r....\.....k.......7.....l....G....G'X\..]...O.RJ.(.&.C......Bt.zn.."..7n...

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	5.168490899475983
Encrypted:	false
SSDEEP:	12:qTj2v571pt+cYoq7c4CD/EPEo8ecVHNnUEcwaxMELIx83rR+b/II:0j291pt+cYo+c4C7E8oOdcHLIxMrcb/t
MD5:	3D08665FA4C7BCF9FA2DCBBC7EFE1D0F
SHA1:	BA57ECEE011A4B99D4BB56707325C8E4D0FB8A2B
SHA-256:	738E5435F2D18427D291A0D6289EEE0EBBC87B596D6003919F255760AC293104
SHA-512:	E86FC61D20680F6F486C61E3730ACA4CDEBEE3AD0670C69EC177691AE979F81951DBD409F8CDA648AB2EBED13C5A2BFB57174FB5167EECB15300B807FC7BBF3E
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
Preview:	<!doctype html><html><body><script>(function(){var n="CookieConsentBulkSetting-";this.handleRequest=function(t){function f(n){t.source.postMessage(n,t.origin)}var i,e,o,r,u;try{if(i=t.data,e=typeof i=="string",e&&(i=JSON.parse(i)),o=i.value&&i.value.expireMonths&&i.value.expireMonths===0,!i.serial\|\|o){f("bcEmpty");return}r=n+i.serial;switch(i.action){case"get":u=JSON.parse(localStorage.getItem(r));u?f(u):f("bcEmpty");break;case"set":localStorage.setItem(r,JSON.stringify(i.value));break;case"remove":localStorage.removeItem(r)}}catch(s){}};window.addEventListener("message",this.handleRequest,!1)})()</script></body></html>

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51898)
Category:	downloaded
Size (bytes):	52277
Entropy (8bit):	5.6050193994602315
Encrypted:	false
SSDEEP:	1536:taiwo4k3dcVs7c8uegPMSuOaS/n3TDLOt3XG9S7G0HaeA:tkk3Qs7c84RuFS/386l
MD5:	3C775963727F3E13E5CD0927786589A6
SHA1:	EEC239A0F5A5D7ECFE73AF9B355C6A36F692A281
SHA-256:	C4947B19A664CCE0432853C701098966766D54F72439B21DF7F079CF86CD5E06
SHA-512:	1F162F0AB0A76803CCBA5EAB5716393D8BA7D103FDF7F770E7F7A3155A7C5C7EFBB27D680F7E057F67C7065AA2852393897A6108D6AF420F694111F7A22AC90B
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/9f/9fe696ac-8de6-49e6-88e8-41bd85bb8769.js
Preview:	/!. VERSION: 1.11.2.* DATE: 2013-11-20.* UPDATES AND DOCS AT: http://www.greensock.com.. @license Copyright (c) 2008-2013, GreenSock. All rights reserved..* This work is subject to the terms at http://www.greensock.com/terms_of_use.html or for.* Club GreenSock members, the software agreement that was issued with your membership... @author: Jack Doyle, jack@greensock.com.*/eval(function(n,t,i,r,u,f){if(u=function(n){return(n<t?"":u(parseInt(n/t)))+((n=n%t)>35?String.fromCharCode(n+29):n.toString(36))},!"".replace(/^/,String)){while(i--)f[u(i)]=r[i]\|\|u(i);r=[function(n){return f[n]}];u=function(){return"\\w+"};i=1}while(i--)r[i]&&(n=n.replace(new RegExp("\\b"+u(i)+"\\b","g"),r[i]));return n}('(17(e){"5v 5u";19 t=e.6h\|\|e;1a(!t.5c){19 n,r,i,s,o,u=17(e){19 n,r=e.1s("."),i=t;1b(n=0;r.1c>n;n++)i[r[n]]=i=i[r[n]]\|\|{};18 i},a=u("4F.4A"),f=1e-10,l=[].6G,c=17(){},h=17(){19 e=9h.1x.9i,t=e.1Z([]);18 17(n){18 n 2a 3K\|\|"3T"==1j n&&!!n.28&&e.1Z(n)===t}}(),p={},d=17(n,r,i,s){15.4v=p[n]?p[n].4v:[],

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19975
Entropy (8bit):	5.184556328371548
Encrypted:	false
SSDEEP:	384:x97dMv78xcq7wM9Ay3Pgd2cuiB876JGhef6ywBsw2kBEjzSvUt/7EIl:/iv789UURS2liB8mJ354TMr
MD5:	CE66B58F12D39F89DA6A346150F6890D
SHA1:	91E2DB2DB3F4ECD1105628D9466087738DC7B1AE
SHA-256:	BF476C1D65C0F4439C39577ADBA99004598B06B7D21385ABE14294E6024D64F1
SHA-512:	17474C00A0310FFCEF8F06DE00576DA06CFCBA26A46938F447A16DDEFF1E72A47C4746E6E9E08BAD7DE5444EB84EDF7D20268E55B92CFB3BF6BFD9A32ACB7926
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery.blockUI.js.xhtml?ln=js
Preview:	/!. jQuery blockUI plugin. * Version 2.70.0-2014.11.23. * Requires jQuery v1.7 or later. . Examples at: http://malsup.com/jquery/block/. * Copyright (c) 2007-2013 M. Alsup. * Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. . Thanks to Amir-Hossein Sobhi for some excellent contributions!. /..;(function() {./jshint eqeqeq:false curly:false latedef:false */."use strict";...function setup($) {...$.fn._fadeIn = $.fn.fadeIn;....var noOp = $.noop \|\| function() {};....// this bit is to ensure we don't call setExpression when we shouldn't (with extra muscle to handle...// confusing userAgent strings on Vista)...var msie = /MSIE/.test(navigator.userAgent);...var ie6 = /MSIE 6.0/.test(navigator.userAgent) && ! /MSIE 8.0/.test(navigator.userAgent);...var mode = document.documentMode \|\| 0;...var setExpr = $.isFunction( document.createElement('div').style.setExpression );....// global $ methods f

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2727), with no line terminators
Category:	downloaded
Size (bytes):	2727
Entropy (8bit):	5.008645731230602
Encrypted:	false
SSDEEP:	48:z+8it/LNPGD0WPGDLPXPYShqO8evqKgJDM:a8it/bPXEedgu
MD5:	7B8410B6C45D500706EE1FACCD4B0DB5
SHA1:	CBD28A5F044BAC1DBE3EDD678A9CB9D12BC6BB03
SHA-256:	1F7771D0F0DE2AC7339494E8505DCF0829D971E30B053161D38518D1E03D44BE
SHA-512:	B8723881F98DDC286A25DD5EAC12550907C4802FCB6933773DBE035B549361B9FB29F28A955D3F9E4750678C087879C16F8DF9C6B6CB6B2BF059A837D16F2473
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/37/3798f35f-6424-44ce-ba3d-8bcf4e9608d8.css
Preview:	@charset "UTF-8";@font-face{font-family:business;src:url(/MediaCDNRepository/files/3b/3bbe36c7-216e-4fd8-8b22-94a1cf3cb1ab.eot);src:url(/MediaCDNRepository/files/3b/3bbe36c7-216e-4fd8-8b22-94a1cf3cb1ab.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/42/42c16dd3-d4c1-4445-b316-bdeb7c19d069.woff) format("woff"),url(/MediaCDNRepository/files/60/60ca806c-26ab-411e-ac0f-89b4fbdba4e4.ttf) format("truetype"),url(/MediaCDNRepository/files/5e/5e1939b0-df8d-4ae1-ba53-032347bc20ca.svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:business!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=bus-]:before,[class*=" bus-"]:before{font-family:business!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-tra

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56359), with no line terminators
Category:	downloaded
Size (bytes):	56359
Entropy (8bit):	5.908311343417257
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFW+JVEEM:4UcW6v+0Bb6hXwW4nxM
MD5:	4ADCCF70587477C74E2FCD636E4EC895
SHA1:	AF63034901C98E2D93FAA7737F9C8F52E302D88B
SHA-256:	0E04CD9EEC042868E190CBDABF2F8F0C7172DCC54AB87EB616ECA14258307B4D
SHA-512:	D3F071C0A0AA7F2D3B8E584C67D4A1ADF1A9A99595CFFC204BF43B99F5B19C4B98CEC8B31E65A46C01509FC7AF8787BD7839299A683D028E388FDC4DED678CB3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255077
Entropy (8bit):	5.159924850590287
Encrypted:	false
SSDEEP:	3072:aDaXIPaLI9fB8NPJDppujVOUc9b3QRppuzpGBICAvFBFak8J3:jIyk9WSV3vBiY
MD5:	998AE069071C7046531F2403D3B35C30
SHA1:	58344A0909CCCBF8B7D006C0B0EC4BDF440EF798
SHA-256:	E9A2938427213B593D34A60F31A19B9DB0138ACC9CE8656195A6B7CC1820F858
SHA-512:	9E3B3059EBAD6C0F5126FB0F1D40AE7956C948B0B14E0A931844CF7C5D726B8C2C31FA01286766A722BBA90B9D81749B5B642D358B652ECE3CF047754CD2EC0F
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js
Preview:	/! jQuery UI - v1.13.1 - 2022-02-15. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effe

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3427
Entropy (8bit):	7.923649591356064
Encrypted:	false
SSDEEP:	48:Vu4BoBiHFOm1BOZq4mdaY6g5wz+oWpGuFLTXEnbkbbh9qk6L51dAdhc:32iHFOmF4xgiz+oelFnX0Cd6ndA7c
MD5:	06FA13A6BDFCB7E0A20206EDFED0D16E
SHA1:	B71CA2AAD27EFBA89C03730D31CFA959A7C6E6AA
SHA-256:	6993376D27F42B3C89A3CF68C7237AD7B0041BCBF69AD58F482D5AFC7FCC0DF9
SHA-512:	38C5E8DC522484C3AB56BFF96CD99A19EC3A36EDE54B8C6C38DAA88501792A8D568D66FF870E8380CA7EA8CB2E3F64FA89BEC5E2E201DB93F8636FA395B97CC5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...T....m...0;.y..%Fc4..-'...%&&.D...1G,..1..Q!"......;x.E.... ...v....9w..w.L.qvy.s~g..{.W.7......~..a;v.X..!.6l.v...k...3U.....sg/=)$..^{...X.3U.P.B...T.P.B...E+-~+.....C.....$.(6..X ...:Z\|$x.D...(../...\.o_.T'.....<."TN.....E...8Q.'....O...p.t..(?.'.n.J..r..P9.<0...(....Y\(..w...r...{.=N{.F.~...:_.+X.0ds...FdZ.zFmE.7...`...7...[../.6.o.Es.(wl.(\|\`DF.i.V1OL..U...Po.-...N.F.G:.K.e.s.x...........v:(w?b.?/..a..h.b.r.x.....3..;...\.Y..{Uvqy:;5m.2.s..^.]R.~kp........Pq.8E...>qd...t..".Yp..:.c.....2....^..U....{.e.....Wx;WVf...b..b.h\|@...y.U..g....@....^..{...B5..J.J.OXSU.....6Rc...Y.f.<..!..E.T\|.........C.!.M.LT..x..\...h.0..C.1....+.p3....9[.0V..W...v....'e....N.X2.....A:]p.f......e...M.H(b.b..X'..j......KLq....1..\8..=b]MEvp~..b.H..m...p.....Lz.Lz..E9'...:k.78.R.T+0........JP(...c.H...CWTx......G.N..P..4.....v....`......

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6424)
Category:	downloaded
Size (bytes):	7612
Entropy (8bit):	5.046375455160168
Encrypted:	false
SSDEEP:	192:2CUCShNy+kunEkt9d4oR/yDjhO7hNy+kZRnyBOhO7hNy+kXetUhsgvzs7D:2CULhs+RnEkt9xR/yXhuhs+eRny8huh5
MD5:	37460B13081569D777A6C525D11E2FCB
SHA1:	518F96F18901E5FDDF63F8475B196C42F4960ED4
SHA-256:	9FF715F900C7834D1B6EF2890758E8747090555959DA4FAF7F3B754DDDAAB723
SHA-512:	1E7F790E4DEC3967CA021FB7860F731FFD31BF1F0851802B67B37270EE71C8260DDD26C4C864D57758A99A216594CFE2734FEE092156B2A09BAF9B99CF90882D
Malicious:	false
Reputation:	low
URL:	https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html
Preview:	<!doctype html>.<html ng-app="ubWidget">.<head>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">. <link rel="stylesheet" href="https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css" />. [if lt IE 9]>. <script type="text/javascript" src="//d6tizftlrpuof.cloudfront.net/live/campaign/js/e2456a107d.legacybrowser.js"></script>. <![endif]-->. <script type="campaign/form">{"id":"61e5994f10e1ef313b774e38","version":18,"form":{"pages":[{"type":"form","fields":[{"type":"mood","caption":"Mood","autoSubmit":true,"forceRequired":false,"fixed":false,"interactive":true,"showHideRule":[],"validationText":"Seleziona almeno un valore","title":"","points":5,"options":[{"title":"Hate","value":"1"},{"title":"Dislike","value":"2"},{"title":"Neutral","value":"3"},{"title":"Like","value":"4"},{"title":"Love","value":"5"}],"name":"Quanto_stata_utile_questa_guida_","empty":"Pleas

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x100, components 3
Category:	downloaded
Size (bytes):	15992
Entropy (8bit):	7.951597078789241
Encrypted:	false
SSDEEP:	384:QjRCEsyjwo9ZFAhqAWw2Ia+ArpiO/D25/0:QjRCEs69ZChqzIa+YD25/0
MD5:	F4B8DDE38AEC505B9D5E50164C83A1DF
SHA1:	4059DFEFE80762062869B8B5F6DE21121F57620F
SHA-256:	AD4E438A7539EAE072CC22B2B865768751FD0B28531619601B2EDF9633E9E448
SHA-512:	1D0DD7AABFA2A8F2E44677C58976F84884C41C9740183B658D49B6B0C80073D8F20CF87B9F6528C1729B156E79CA454F675283F947156D97EEA36617E020E04F
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/menu/banner/20220525-spidpro.aspx
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:457e9153-7a87-e848-95ae-c0ffd552780f" xmpMM:DocumentID="xmp.did:F1D71A16DB7011EC84BFF052AABEF6A4" xmpMM:InstanceID="xmp.iid:F1D71A15DB7011EC84BFF052AABEF6A4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:457e9153-7a87-e848-95ae-c0ffd552780f" stRef:documentID="xmp.did:457e9153-7a87-e848-95ae-c0ffd552780f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	83472
Entropy (8bit):	7.962891454897581
Encrypted:	false
SSDEEP:	1536:xPGaMN68lY7FB/z/qBGDQ1iKPjpvj7zzY+8+ZmMtJyVUBjjWDKZR/r:5Gj5e7FB/z/qBGDQ1iKL5PYcm8JyVmjd
MD5:	B1DD401FFD94DD20E896B23A2601C772
SHA1:	F04BE83659EF212512090CEE8267A3BF53F94E88
SHA-256:	8A65AE2C5098394A8C99CCF053ECB95196FB563A6C4103E54BF78370FD5F47F8
SHA-512:	75E3E18CEE7175F6642BCAB240E6ADA25306A3AC6A559233F22D6BCCEEDE8BB780DCB49AF3C82F0E87A38A01D71786CE296CF69AD820AB116509DDCA174A5A23
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/firma-app-aruba-otp/riconfigurazione-per-problemi-o-cambio-telefono/images/attiva_firma8.aspx
Preview:	.PNG........IHDR.............N.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-18T16:07:14+02:00" xmp:MetadataDate="2023-04-18T16:07:14+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:6eaf70e0-02ba-5c4f-bee5-68a007d3ef70" xmpMM:DocumentID="adobe:docid:photoshop:969437b0-cfa7-2d42-9a9d-e1707fd46ada" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8550), with no line terminators
Category:	downloaded
Size (bytes):	8550
Entropy (8bit):	4.7580799742283615
Encrypted:	false
SSDEEP:	48:ixPGDwd/tNQDz5eUjZQahrXIiXCxQ849XpiSQAipDfp79NTMjKct3ThGJejM9ep1:intNQR6axm4wAqSeAQ96MfAsDATzM/0
MD5:	10C403293F837A965EF5F45FFB4B99CE
SHA1:	41BF12C5CFC610F41ADCC90F0EB88CC4DF55F4C9
SHA-256:	A331E696359BC98E9A1B1C13BE28FA6FA23D3C620CC655F2C3D06E64CD4E092C
SHA-512:	959121B803F0D279777EC310F91B0135C6E41E34507C338E96627B0829E4CECB0BE883442337C6CBCB80220BD694BFB0485A4B811EE2E56A70CC30D7E2CE4C32
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/98/98c9b304-9157-437f-90eb-2736f21b79c4.css
Preview:	@charset "UTF-8";[class*=" aru-"]:before,[class^=aru-]:before,[data-icon]:before{font-family:multipurpose!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@font-face{font-family:multipurpose;src:url(/MediaCDNRepository/files/61/61a06ba3-be21-4389-bf6d-47d9101a8fa3.eot);src:url(/MediaCDNRepository/files/61/61a06ba3-be21-4389-bf6d-47d9101a8fa3.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/da/da3764f8-0911-43ad-aa9f-820b294dfb1b.woff) format("woff"),url(/MediaCDNRepository/files/ec/ec576f2e-1dae-48db-8ca4-e13ab9b27602.ttf) format("truetype"),url(/MediaCDNRepository/files/da/dac8f90f-1a2e-4641-9aa7-f26bef7fa247.svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{content:attr(data-icon)}.aru-account-m:before{content:"\62"}.aru-account-m2:before{content:"\63"}.aru-account-m3:before{

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 224 x 49, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3873
Entropy (8bit):	7.815784304558348
Encrypted:	false
SSDEEP:	48:tQHgs7IDJFiPfLAioOyIx518y2olBLmcIN+KNoghEz470aOQaX4nJEMG18qPVGwp:t/2ui3LAvIxp7NIAKNrOzW0aOQsKqdRp
MD5:	E666498E62797D774F777F3ECDE50263
SHA1:	1125648DE230A4FA8C10F30FD954E5A2BC551736
SHA-256:	770332C436E924456DD996873065BAAADEC5D9AD11C7E49010D3F752D5DB8367
SHA-512:	C66E855E3FCA3D31E8457F16AE18CC2FB8DA8E1847AFFDAA2B65CBCC054C5C2ECB1EE82F9C276119EFE3FF5E0049B32421C45A7DBAC155695417BC5175F257E4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.......UY....PLTE............................................................................................................................"......................w...,%..................r..~..}...........v......(!.'........5-q....'z..~...$..&.z..n......( ......l........p...$.....) .0(....(....o...<5.......#.........../%.!.................+!./&.........\|.........$......$.4-.( ..&..........QG.......PF.TJ....A:.......F=.?7.%..G>.(..XN.......KB.I@.D=.......<4.:0.1'.-#.!..ND..........KA.90.0'..&.(!..........MC.+#.* .......]T.LC.F=.D;.@7.;3.7/.3..........e[.H?.D=.>6.=5.6..6-.+"......q...ia.%.."..!..........z...aX.JA.A9.<3.4,./(.'.................d\.6-.3,.1).$....................RJ.D<.D;.$..".."...........e].XQ.A8.;3.7...&.$.....]U.UL.RI.KB.5-.2.&!....YP.TK.H@.*$.....n...ztRNS.........{..).\HW.......q8$..ula..........f..O".SLB=;4.D...../......sRI9.......pc`4+..........qoVI...............ytGwW.....bIDATh..gXSW..O.a#..e. jqT[kk..{.wsWvH @.0..{+ K, Z...{.:...

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3956
Entropy (8bit):	7.301292360477301
Encrypted:	false
SSDEEP:	96:CSSwknmWpjBo4KXhkbHMW4H6NG0bZniGp7eyCIcrS7iJebas:CS/knxo1iH4a9eyI8tp
MD5:	25597DE3E510E1D3340BB3AA573A3502
SHA1:	1BAA4CABB65C9FD659F46B9B3FB1281A90551F8E
SHA-256:	48356099E17AB1D4CD6DEC6A0522C9B7D88677CDA60F3385722AD88FAE00940E
SHA-512:	AC75E98555D1FE8F68D617ECCA1F7CE4B09200618B5AE98FF1E5D344CCEE0DF4FC1B4A3F8B4068E8958260FEC127F6F2C8FAA26D2EBC4F22BB3AA1004D172534
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/acquisto-registrazione-e-attivazione-spid/altre_immagini/images-(2)/miniotp.aspx
Preview:	.PNG........IHDR...F...8.....@..5....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de, 2022/03/14-11:26:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2021-03-05T20:13:05+01:00" xmp:ModifyDate="2022-04-14T15:48:28+02:00" xmp:MetadataDate="2022-04-14T15:48:28+02:00" xmpMM:InstanceID="xmp.iid:d2d48dfc-70e5-3842-8364-ffc86350707a" xmpMM:DocumentID="adobe:docid:photoshop:246a5411-b5cb-e748-a055-2e764d5ff842" xmpMM:OriginalDocumentID="

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3956
Entropy (8bit):	7.301292360477301
Encrypted:	false
SSDEEP:	96:CSSwknmWpjBo4KXhkbHMW4H6NG0bZniGp7eyCIcrS7iJebas:CS/knxo1iH4a9eyI8tp
MD5:	25597DE3E510E1D3340BB3AA573A3502
SHA1:	1BAA4CABB65C9FD659F46B9B3FB1281A90551F8E
SHA-256:	48356099E17AB1D4CD6DEC6A0522C9B7D88677CDA60F3385722AD88FAE00940E
SHA-512:	AC75E98555D1FE8F68D617ECCA1F7CE4B09200618B5AE98FF1E5D344CCEE0DF4FC1B4A3F8B4068E8958260FEC127F6F2C8FAA26D2EBC4F22BB3AA1004D172534
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...8.....@..5....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de, 2022/03/14-11:26:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2021-03-05T20:13:05+01:00" xmp:ModifyDate="2022-04-14T15:48:28+02:00" xmp:MetadataDate="2022-04-14T15:48:28+02:00" xmpMM:InstanceID="xmp.iid:d2d48dfc-70e5-3842-8364-ffc86350707a" xmpMM:DocumentID="adobe:docid:photoshop:246a5411-b5cb-e748-a055-2e764d5ff842" xmpMM:OriginalDocumentID="

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2314
Entropy (8bit):	6.693204169773155
Encrypted:	false
SSDEEP:	48:kq7D4knA9WI08tbTFl3aH7LS3YHIS/TjYTXpXH7l8g+smrul:kW8knmWI08RmH7LFHISbjYTXpXbl8Nst
MD5:	AB963F5E1138D6F1E00EC5DDF5DDA000
SHA1:	F71F2AC30C4E5918621D56B23B4CD78896DF6E75
SHA-256:	7DE779FCC1E6FA39B4E75ADCCCD05B839E6795DBBE9C48EFAD100F03A784C9C9
SHA-512:	5188A04F1AFDA465971AD7EFDD999F76C0043FE34B77D7D2D31F977B206146C96AA11EB2CC01904910E8D70BBECAEDBAE5BFB2B316A3D3578B168FB806952BDE
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/72/721863fc-e613-4f51-8009-15f479aa4ef4.png
Preview:	.PNG........IHDR..............w=.....pHYs...#...#.x.?v...1iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Windows)" xmp:CreateDate="2022-10-06T08:20:36+02:00" xmp:ModifyDate="2022-10-06T08:25:05+02:00" xmp:MetadataDate="2022-10-06T08:25:05+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:c99740a8-942c-fa44-8a72-48d4415e79ee" xmpMM:DocumentID="adobe:docid:photoshop:ae49b895-724e-7a45-b464-a93a89a27bdc" xmpMM:OriginalDocumentID="xmp.did:2e331c

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5370
Entropy (8bit):	7.9532799377948935
Encrypted:	false
SSDEEP:	96:I+UFlLlUZr78zFTECLxKl2wGtg6+kWlF9i2DdOH444+9MsQ34d:INWrgBTol2fg6zWlzdu4+2sX
MD5:	D29FFD0F442021A358C952BD0742AF79
SHA1:	A4FC4D35961D1D02C3D3D47B07BF312B09DC4F35
SHA-256:	7A952705C912E71EB0E4F42E999C674173CD518663A8461C40BC15A4615D4E98
SHA-512:	E949A4A478572CADFAEE74C766D6ED70B404E14C6E0351065B08F30413951F53BD0D090894983FE704AFE101BF0603A308831A753CBE63EA8918594C17113005
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.\.x.W..i...RE)%Fk.j.Rj.V..7J.j+b.XAi.Z.....oj4f.......f.......;_.\|.$_b....\9......=.<.M.t....3g.bbbN.o:....'.\.r2""...U.@.....C..].p.].mt..i.n....p...Z./_.{...QQQ......W.....oa..........8P"<<.rXXX^.t$......{w..~.m.......o.4iR.....o$~.tww./.n.=.-..c.....>.-......>.@.U.&....,Y...H.\..\|..._}...=;.Ll..........;v..-[V1K.+.."...2e.H.....#s{..!.V...o....8..6....n..a..-.w..S.fM..@.% @N.8!0.r..A......U.Z.Y.V-.2e.E.o..{.....0aB..a.d.../Z..T``..C.d......').n.,X.@../n]....w.m.68........\|.M..Y.<y.....[.......f....}.r......Y3...s..#/.r...3@L?...E......... >6V.f..z..R...x...v. 1{v[j......cG..u.9s6...>..l..'....9rX.Gz......p..;...g.,.9s(...+$~Y2Jp....c{.....f.W..j.y.....5........O?.4..4Q........K@..\..DN.q.Ar..O9.a...U.l..+4...s...H.y..3~.......?.....8P)\|...i.Qri. ..A"....#.qA.r....\.....k.......7.....l....G....G'X\..]...O.RJ.(.&.C......Bt.zn.."..7n...

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1502), with no line terminators
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	5.766576802394819
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlhJ6+KVCe2TLv138EgFB5vtTGJrdcl/1t4glvllLt41rE0oi:VKEcidKo7R3evtTA2tX7m12nxLrwUnG
MD5:	9CA32C7FB8314BFCF9647D2EC3D5CE7B
SHA1:	18302408DDE8CC0CA4BD4C63920514D41B338BF3
SHA-256:	286D98CBC284EEB0F58A30142C0BC954F17E0ADB79BF9D03A012A222AD9CDEC7
SHA-512:	3076CAC6F67B6D37C6FB543BF7BE6F4E9DCC7AA8843A87D70183C7ECD657088AA5DB709AE467DA3DA87B32087D16F4723353366493F52992A04D23FE21C431CC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=renderReCaptchaCallback&render=explicit&hl=en_US
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('renderReCaptchaCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treat

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 82, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6078
Entropy (8bit):	7.8855954500707295
Encrypted:	false
SSDEEP:	96:nw6iltsVjcwRvghIF5Qj0aLfhwFzVYR/ozRXOqN1I6UNSjRFhVAb0QcjU:riLsVo+vwIFaj0aLfI+K3IFUjNVocI
MD5:	3BC04F4012FF58939E863E27B6BF7C31
SHA1:	660B38117ADB43026F11BCFC11684708175C6914
SHA-256:	D939102A740468BC9C7E27D99ABDDE38E8CF81594E406ED33B3FA87553E8E618
SHA-512:	8297D31FCB6AF06F625F78894A6646159DF9F9376B4AC6903556ECE64D06BAB18DBCAC5E7D957D494FCD35BBAA4694FC5F31B4ECB7417D3F3E24EB53F9A1B775
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R.......o.....sRGB...,.....PLTE..............x..zhj_opccdY.........qrhmocjl_fh\kmaadW..y}qy\|p.....................................jl_~.t...{}sdf[orf.....................~.u..............fh[...hj]..............xY^P..bfYtwk......dgZ..}...svj......^bT.......kna...W[L.........wznqth.........X\M...SWH...HL<.....z...QUF...MQB...vymmpc..................%..)s^Rltf.......{}r...h]O.)-..........,P^LadVVZKUYJ...X\N\`RR`N.:8............b\LZ^P]aS[_P...SaPY]N[_Q}.tVcQ{MF.11.@<...oZN.%(.................pv..............lr.hn....3>..W^............ ...09.ah.fl..,6.w..DN...T^M.......(3.IO....8A.PX..........\d.#-..#......&......75.GB.8=......KSxTL.........<E..............f`RZcS..........&0.........".AK...........z..v{................P[J.42.-7.19kbS.6>.-6.-4...quhp x.....tRNS..(Ddy...5.p........................T..................................R.........................e.......9...............................................................

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 349 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10559
Entropy (8bit):	7.96271268296138
Encrypted:	false
SSDEEP:	192:TSD6Stdfy8fbvet1uAbcRgY3m7idCEJuMViBFFM2zq78CUFGmawAU:GdqPY9m7QCEJB0fh+8CNwT
MD5:	D938D8A468D6A66E7E04656A6A8B3FBA
SHA1:	A3033AF6173B1164C738824055F2F8B8BECDE6C3
SHA-256:	C28B88BD019974E12A7C74771D87EF177F23B5BFA99936DBCD06248ED7083E39
SHA-512:	5FC6A0942C063BBF2D35286988F4C114DE8165E6A75658510A3B6745DBF2003768B5C84FDBA20D32B60F745336F5E7A1E9223D7DD82C0FFF5B00142AC89D34D9
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/menu/banner/20220426-riconoscimento-devisu.aspx
Preview:	.PNG........IHDR...]...\......f.....pHYs...............(.IDATx..{..W}.?.;=..dk<R._...,N...H......B6...1....}...!9{H.G....H`..'.N......H....2...A.{y,f..caca..$.4..w...N.]..=..3.S.s.tw.{oUW}.W......c(.>....B[B)U.Zo...X...D...""3...M..@..y!.(...d...}......w..H.....N..5$........11V...0.\|.6.L..tF...T.{2.S.vk!...^X)..R.d.........&8..e.....B..t.K.S...m..X....c......y(H..\I7.H..K....%.H..l.I.c1.k.c..>.&I......=9{.. ..P.n.a).nH..3.L.V...^.=.z.XH..#.z.......<.r..j+>..$.zHz......p[`-WD.R.r5..m3,....N.H,...:.2......<.y......a..:c]3.f/..s...._...$y....'..w.....b...t... ..).......T...T..0.=..NG.....+[7.R...2KdDG.;...QK.4Y..o........R..Ed..3...R._Z..t...&]..!.njK....TCG..!C.O.<a...b!&. \|-S.......11......uY.q.Hy...\..B.....t...!.`..7c7i.Q.X9$.........GH.9.t,.AB.Y.A.>...1d;;........x....fh.tEdM....j'...*:MB.37.K...@>"}...........1.."...u.%...w.....n....f.#...].u.v7...`v...sc.`L..E\..@.4..Q.kk..e..:.....>..[.E..[..\.n...n.T......).r.....T..b/...p.fE..!...xa.'a?

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 44, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4570
Entropy (8bit):	7.913453778959953
Encrypted:	false
SSDEEP:	96:7HAQU87SGhFzuzXK5XrcOEbGvZu9eEmszKFSKt3MpLpRQ:7HPRSGho7KVfvZu9eEmsz43MpNRQ
MD5:	23C7EBA60E4607E0FD4A0AA87F863B46
SHA1:	870A66E2059CC7DDB6DF0C214924C2AD3B454C22
SHA-256:	87132EED1FC1EB394C5BE278B23F5A3D164B89F63DDEC689C9B37DCD71D22EBE
SHA-512:	19DE9BB384216F77E5CF671DD94FB178C74322209853E15E04DA13A08958B3FBBFD50FFCE6738C88581209D617D9F3A54332AFCC5A292EA57DF930DD5EDE248D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.............PLTE.............ts.........zzz.rqzyyzyy...zyy......{zz\|{{zxx{zz...xww......}{{\|\|\|.........~~~..................zyy...}\|\|...{zz.........xxx......\|\|\|............{zz...~}}zyy...{zz{zz{zz............yxx{{{.........{yy............zyyyxx}\|\|.!....yxxyxx~}}{zz............yxx.5-..................}\|\|{yyzxx.!....s...$.~}}.0(i..g...)"P.....p.....ywwywwm...'.o...4...k.....t..u..p...%.............r..\|{{.........{yy.+".;3.'...&m..n...-".........{zz\|zzxvv.5-................' .( .&................................TJ.OE.......RH.......'..H?....KA....F>.6-.+!....A9.91.YO.QG.ND.>6.KB.#.......]S.B:.A8.( ....G>.C<.;3..'.......kb.^W.E<.4-.............cY.......ia.>6.>5.-&.&.."........JF.4,.0&."...........#.....SM.70.5-...z......UK..'.&........+$.(".%.....PF./+..........84......m....tRNS.....$.....Y....l#.]*..ge......G....;0.vl62+.....tpVOB<.....yr^O.....}..xcHA7..c.......S......v5........_J"....?,%.............lQ92......zjU=....a.V.....IDATh..ILSA..BA.C/.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8240
Entropy (8bit):	7.83954280680851
Encrypted:	false
SSDEEP:	192:HkT8O90tU5d7LiJ5MLtV1H4Y7JmQppH2Im:HUh90K5dai5V1YY7JHpNm
MD5:	7295BA7D35C48A17A3785D22E0AD07F0
SHA1:	72B6FBCDCD8C7581E8C00C6776AE301CF9224CBD
SHA-256:	51BF303172B0D9105FAD5D37071C0AA98C3D76C2F36E68B57E5E5C8286A14873
SHA-512:	DC240AAE96D61E328EBD6E3A070AA1F5982B9F3A9D58A7D69546191152CBEC356BB30570BD6D24C977682F941BBEC7CB5ABA5D7DAAC223D97D1E68C3214CE037
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...^......> .....gAMA......a.....sRGB.........PLTELiq..d..c..b..d..d..d...........c..c..d..E..e..d..c..d..d..c..d..d..d.....d..c..d..d..c..d..d..d..d..d..d.....d...........d..e..d.....d..b..`.....d..d.t........t...e..d..d.......t...d.p......d.t...............d....t..t...d.y...d....t..t..t............c9....d.......d...........d.t..............s...........s..t..t....w.....g..x...s..t..........c.....c........d....t.....!!.........U[n................uC..............c..b?5#.......y...................I=&.Q.r?..a........E.X7......r>.A..x@...j...u.D.....f..0..'#zc72.....B7$'~...........[..M..K.....K..^....T%!...H.zE..FUF+.-&..[.........R.l?..90!.L2........m..........^.I.d;...[as.X.O.YaO/iV2........X.Mty........9.......cj}.....lX3.....w..O.....n<.p=Db..U......"n.6g...............XTP..S.....vtRNS.........4.....y.q.F@.U.....=..6....e.."i....S..}Gt.?\,...a.j.....\...T.....F....B.D...K.[.c.z..;......m.+.3...D:....LIDATx....o......U,.:.@..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	23558
Entropy (8bit):	4.459213786361872
Encrypted:	false
SSDEEP:	384:cIDGvuz1auA6hS6mHj8NJjC2GCtAOkW8zQRaaWJpThRjO2cklyAXX:cfvZTHj8NJjC2GCtAOkW8zQ4aWJpThRp
MD5:	202DC1D3A3D8C03D75D9876C261F8572
SHA1:	EDE42C18EB02763CC409C26137BF25111FD98A3C
SHA-256:	98C2DD1F31ADF1D6F7B8601A712D10382BDE376E32CC0CB73548CA7A81FC9EAC
SHA-512:	0F1E89644E30AFAF58DA879009A942B197977B92FCC20396B1F7173CF7D641B891BD86CF2B3D4F96602E3AF16A02366C89240303B80A56CB45F2BBB31052B9F9
Malicious:	false
Reputation:	low
Preview:	...... ......................(...n...00.............. ..........>...........h.......00.... ..%..N!.. .... ......F........ .h....W..(... ...@........................................................................................................................................................................................................................................................................................................................................{.................9.......s..................y9.{.............................y;.................................................?...................................................................................................................................................................................................................................................................................(....... .................................................................................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 369 x 99, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6809
Entropy (8bit):	7.965386915896602
Encrypted:	false
SSDEEP:	192:TFvWJtM4qTHACxqq+g765iGK773AbWiV1KOZhNzsjZ2iP:5uXM4qTrxqZH5yQbWiVFY5
MD5:	45069ECD80D799CA1E88CF51314A4034
SHA1:	2AC4793095C5A1FFA17F3677632657C9F9BA90E2
SHA-256:	2970C34C34B40E1276068B6744953BA34C1707F24222C8C440834C709C338F85
SHA-512:	4B249EE2752A0E66D9CF3E8E538A9185F7C7D5D29A588C6F08D31B9DAD765E2A3B4CF50C7FCF1CA0BFBC40C0C9BEAB6B910B0BCBFA0381848C97E5393A067BFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...q...c.....Z0......PLTE........................(((555...ppp............~~~...EEE......SSS......bbb............."""......yyy...jjj...<<<...uuuKKK........[[[...5....IDATx..Z... .l........H..Guwo=+z.OZ...0.!..."...Z..D^..w.u.U........r....+..8B3{. ...G..\.p....z\|..g...S...vv....s8 ...uq4..A...4......m@e,...../..Z#....c.ah..i.........Dxw.......C...:...&..xw%.B..8.Jr.h...;.......*., z...!..#....V.X.s...JH..0......@i:...F.V.Q.6.".o.R....Rf..2.a.i../.=.V.."..6....!f..m..............1............'.C....O..1.VB.....NL.6Y`...Y..Lv\BK.&.q.f...^.gc.....Ua?.Q..{.....s.fn..._.)..d.u+L&.h.{....(.).u=j\DU...~.t^.'&AR..]..k...h.A......M.tq4.v..>`[<...j..MN..K`pM\|.b...zaZ.v.P......r/....r....Z...j.&.XB.....(..\|......vf....KU..>.........qZG.._.g.>N..R.w4N.....v._.[.i..!byL.!.^#.;..1..TCv.....\|........t..........KK..".}.._.XL.@...K}...q-{Z.n...c.re;..&........e..bZ...7u-....b..-..9.T...G..6.qg}..DI$6i...`.Lk.B&...\.W\|@.r..d........:....'..K

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694624
Encrypted:	false
SSDEEP:	3:3xICkY:3JkY
MD5:	940D0D00323D588F58F798C28D980A88
SHA1:	1AF0C3C4B3CFA85BE3380A87197F91A804B3E294
SHA-256:	61974285D8709E7BDB60CEDF8A828AEC0782DA2B42202909F2A48E9641767352
SHA-512:	CCD4047E370CFF282C41B97A0C1B61B71DEA06758D60BF130694E3B95F4175536A4BEAF2AA9A2EAF2911A3520FDAD8BF2F22A92D53D414B308C4648547C67B1E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmfBQVtjHeIrxIFDcpxJlMSBQ1TWkfF?alt=proto
Preview:	ChIKBw3KcSZTGgAKBw1TWkfFGgA=

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://img.sct.eu1.usercentrics.eu/1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8931
Entropy (8bit):	7.955010225116947
Encrypted:	false
SSDEEP:	192:5IIHUCD4wa3S/EXw/Kcqyn+UjXeIQFNkTzw/:/0wD/zKcPhK4w/
MD5:	2589A0C12B3B70014C32143D4D357011
SHA1:	DB9FCD73D6101D19435C4B9788CC49493364F0EC
SHA-256:	46070E40E45EBC8CF2DCE5084018BD8EAD9AF4D77C03EEE0189DB98F4B9B3D50
SHA-512:	BB5A5DCFBB2E4D2CFBF5AFF432EE92563AD7E709D766C0A8FC85D30B6DCBE439277DD3F86EFE59B51621E506A844517F06AFC27CA5A340786B288EE747EDBB8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Z.......\|.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8652), with no line terminators
Category:	downloaded
Size (bytes):	8652
Entropy (8bit):	5.274300877678452
Encrypted:	false
SSDEEP:	192:ux/RVkBf/JuW5ycizDLv6ffNi6W+E0+We:4AfhsSLnE0a
MD5:	5774015B2E5051A514F28E12C42950C3
SHA1:	38D945D4D8C76D8F94A4E2B07BB2F4E175903C74
SHA-256:	A781F06821E9B4A2FB594B61E505D0F665C2BADFCE315496F524A78B7DF53702
SHA-512:	474ACD9A4BB0924C8C2B0B1A465950FB5CFD4C43C0487785412EDB9071EBD75D2F22F53498028F131F58C068FE0D5342D1BDE40A6923DB6F5CF075E7F907A65A
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/44/448cc8c6-a77e-488d-8e92-8e1536d9e370.js
Preview:	class Sticky{constructor(e){this.id=e&&e.id\|\|"aruba-sticky-bar",this.cookie={cookieName:e&&e.cookieName\|\|"ArubaSticky",cookieValue:e&&e.cookieValue\|\|1,exdays:e&&e.exdays\|\|7},this.breakpoints=e&&e.breakpoints\|\|{},this.callBacks=e&&e.callBacks\|\|{},this.css="#"+this.id+"{display:none;position:fixed;left:50%;bottom:0;transform:translateX(-50%);z-index:90000;width:96%;max-width:1398px;background-color:#0a2a2d;font-family:inherit}#aruba-fibra-sticky-bar.sticky-visible{display:block}#"+this.id+"-close-btn{display:block;position:absolute;top:-5px;right:-5px;font-weight:normal;color:#fff;text-decoration:none;cursor:pointer;font-size:42px;z-index:3;border:0;background:0 0;padding:0 10px;text-shadow:1px 0 5px #0a2a2d;line-height:1.075}@media (prefers-reduced-motion:no-preference){#"+this.id+"{display:block;opacity:0;transition:visibility .4s ease-in-out,opacity .4s ease-in-out;visibility:hidden;}#"+this.id+".sticky-visible{visibility:visible;opacity:1;transition:opacity .4s ease-in-out}}@media (m

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	5.054956398715744
Encrypted:	false
SSDEEP:	6:TMVBd/4WxuJn4mc4sLzA4Xgq5MRJVxewQ196OQb:TMHdgWYevMxxsSOQb
MD5:	E7CEC866B0BE26E08FDFBD31F72D9DA3
SHA1:	7CBEDD2A953CDEF6086078E45FE5F5EC2C7FFC5B
SHA-256:	436B4E482F532AD9C79F9648505BFF28E63CC125C72DEC1D91B7AABA7C9D91C9
SHA-512:	F554BAA66A04FE118DB8FC1DB1800D4A509C30E87EDBEC1434A1E6FEF817080CFAAE60CFE6D1AAB30AF9B960E597B8C0104E031551CF592E49CE882B02C71250
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml"><head id="j_idt2">. <title>index</title>. <meta http-equiv="refresh" content="0;URL=login.xhtml" /></head><body></body>.</html>

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	234095
Entropy (8bit):	5.231813909288078
Encrypted:	false
SSDEEP:	3072:S2cpaKqwyf2YapQNk6hNO6jIjHunR4hc419hIs:S2coKzyf2YapQNk6hNO6Qh9h
MD5:	C7CD925EEF1FBFF8FF86E9F559759CD3
SHA1:	CDD5D80D6576B65494BB850C8B179A013F23096F
SHA-256:	37F5C9A102657BA5B222D743849A4F208A904CCA5A9E7B593E59E3964CCEBB1F
SHA-512:	AEE4E8219C7A8F3053E0AED2FA1B6D3D6E1CA6B2605D22DEDC513EC8F5D50AADF8C122F9791DCF136AE3A979117E27EF0CB3E1A953FCA85D0AFCEE975FECD66D
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/CMSPages/GetResource.ashx?stylesheetname=pec&v=175
Preview:	.iosfixmodal{overflow:scroll;-webkit-overflow-scrolling:touch}.noscroll{position:fixed;width:100%;height:100%}#the-body{background:#f2f2f1;color:#222;font:400 14px/1.42857 'Lato',sans-serif}a,a:hover,a:focus{color:inherit;outline:none;-moz-outline:none}a.anchor,span.anchor{text-decoration:none !important;position:relative;display:block;top:-90px;width:1px}.pg-content a.blue{color:#337ab7}h1,h2,h3,h4,h5,h6{font-family:'Lato',sans-serif;font-weight:300}h1{font-size:48px;color:#ac1b1e}h2{font-size:30px}h3{font-size:24px}h4{font-size:18px}h5,h6{font-size:15px;font-weight:bold}.dashed{border-style:dashed;border-color:#ccc}input{border:1px solid #ddd}img,svg{height:auto;max-width:100%}.form-modal a,#top-links a:hover{text-decoration:underline}.site-list a:hover,#top-links .lang-selector>a:hover,#l-topassist a:hover,#l-presale a:hover{text-decoration:none}#l-topassist{padding-right:3px}#l-topassist span{display:inline-block}.lang-list,#the-footer ul{margin-left:0;padding-left:0;list-style-typ

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (337)
Category:	downloaded
Size (bytes):	9417
Entropy (8bit):	5.178074833427295
Encrypted:	false
SSDEEP:	192:8HUDeA8K9L3R8fHaYoi+3T+bZRLSg0v4zfseMsI0:8HUgOL3R8fHaYoj2ZRLS54L
MD5:	9C2945AE6D06ED92953D73172F508668
SHA1:	D41021EAD70FF45F8EB0DF0F90668EEAA829F4B3
SHA-256:	9C9206E11341DE1282C0DEF51983E99BD945FB7F157D98A2C2E55CA87EF43B0E
SHA-512:	C3AE94938C3A6D9DB80E206EC5CDE52F9433BDD11F51D437ECFDFD6E3EF050227068A350AF63941BA2E605E3B936A3F57A662E142E3B2AC5AD089AF9B6A0745C
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css
Preview:	/.##########################.## ARUBA SELFCARE THEME ##.##########################./../* SIZING /.@media (min-width: 576px) {...w-sm-25 { width: 25%; }...w-sm-50 { width: 50%; }...w-sm-75 { width: 82%; }...w-sm-100 { width: 100%; }.}.@media (min-width: 768px) {...w-md-25 { width: 25%; }...w-md-50 { width: 50%; }...w-md-75 { width: 82%; }...w-md-100 { width: 100%; }.}.@media (min-width: 992px) {...w-lg-25 { width: 25%; }...w-lg-50 { width: 50%; }...w-lg-75 { width: 82%; }...w-lg-100 { width: 100%; }.}.@media (min-width: 1200px) {...w-xl-25 { width: 25%; }...w-xl-50 { width: 50%; }...w-xl-75 { width: 82%; }...w-xl-100 { width: 100%; }.}../.TYPOGRAPHY.*/.:root {..--font-family-sans-serif: 'Lato', sans-serif;.}.html, body { font-family: 'Lato', sans-serif; }..h1, .h1, .text-xxl { font-size: 36px; }.h2, .h2, .text-xl { font-size: 30px; }.h3, .h3, .text-lg { font-size: 24px; }.h4, .h4, .text-md { font-size: 18px; }.h5, .h5, .text-sm { font-size: 14px; }.h6, .h6, .text-xs { font-size: 12p

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=2924666&time=1720010249829&url=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 8, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.058173694042473
Encrypted:	false
SSDEEP:	3:yionv//thPl93hWBmgPnHGwiRSaScxBx202m4Sikgt2up:6v/lhPTP0aScxB8WikgtVp
MD5:	8F019521B1FC003CB64EB73360BE6BAD
SHA1:	6E7B10E76C67DDE70AC1E2792067ACD673B0B68F
SHA-256:	020FF64CBF3DC1E2FFAD458D5810B2F94285469F4F4DF7DB81BA594660AF2C5F
SHA-512:	0E9BB28331848F4A7288D57BCD52B60F9DF13FC130794E315B862B53292F31B433DC347557BD603948478DD6AF9475E41B66DD0BA2E6EA9127582876A3493F0F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Xb.....PLTE...""""""""""""""""""c..q....tRNS....w.7..uw....IDAT..c.......$...2."..b.`.E..4....H......IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17566), with no line terminators
Category:	downloaded
Size (bytes):	17648
Entropy (8bit):	5.253633792924061
Encrypted:	false
SSDEEP:	192:KgBj6fUyLoAa10eTc2kjETiNMPRajnq4NuF7+Xbj1deVLSWhxxglFRnWbYpo9fW3:vjoGue8mqMPRajnq4NutLFISDoh
MD5:	D33406B2B0E121CBC78025C7B1503BF8
SHA1:	2C9E7E5984421470AE0168C77897C3C5AAE41717
SHA-256:	6A92CD3B7C6BDB89D91D38449DC884D891AFBE44C5EAEC7FD74E5CBE40A4AC14
SHA-512:	A0F959497ED2F7BA4F15F19122B07B3EEF2EE318B63239F85274EBA36A0E12D85F7E3A7DCF53A15C01E42E85F9AE747A53E86D10145BF1EDF0E603718D6F33F4
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=unified-style
Preview:	.no-id .id-display-none,h1 .id-display-none{display:none}.CMSBreadCrumbsCurrentItem{color:#9b9b9b}.grayBox{font-size:unset;border-bottom:1px solid #d6d3d3;padding-bottom:10px;color:#9b9b9b}.grayBox a{color:#1474bd;text-decoration:none;padding-left:0!important}.grayBox span{padding-left:0!important}.grayBox a:hover{color:#1474bd;text-decoration:underline}.CMSBreadCrumbsCurrentItem{color:#9b9b9b}body{color:#222;font-family:'Lato',sans-serif;font-size:14px;font-weight:400;margin:0;height:100%}#businessline div{float:right;width:120px;height:92px;border-left:1px solid #e1e1e1;text-align:center;font-size:10px;line-height:12px}#businessline span{font-size:30px;line-height:36px;padding:14px 0 0 7px;position:relative;bottom:0;display:block;color:#000}#bl-hosting a,#bl-pec a,#bl-server a,#bl-cloud a{color:#000;text-decoration:none;display:block;height:92px}.ratingStar,.rating-star{font-size:0;width:13px;height:12px;margin:0 2px;padding:0;cursor:pointer;display:block;background-repeat:no-repeat}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZIn2Q5yVm40vQfNiRSlXOLONGx9O8rUMt_K8Zu0JjQTAd4IymQ2&t=638459860569584809
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5945), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	162391
Entropy (8bit):	5.388962184057448
Encrypted:	false
SSDEEP:	3072:NyjsU/rXADaw0zOuvoSAfofRz/g47H3m+2RbRxcr5y3A3Gb7M6MvwoIfTi7H3m+k:GsU/rXADaw0zOuvoSAfofRz/gtVO5NGp
MD5:	7F1C737716614ED21A8E041C0330D2B6
SHA1:	02C29DC7874BFD98CD841E69E741D2FFFECE48FF
SHA-256:	2F583BAA87DB76CA59EEAA745B66136C36C764EC73345A2139CB07B7243DEB44
SHA-512:	E2052EA3CA0A318E6E77CC7DB317ED9A5DC0F24631CA2880C58021F82770776CEFC27917D0C2FE1492E988997FF5274FFAAA0E2A9C16F03696D2C0CAF2BF554A
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/cookie-policy.aspx
Preview:	<!DOCTYPE html>..<html lang="it-IT">..<head id="head"><title>...Cookie policy \| Pec.it..</title><meta charset="UTF-8" /> .<meta name="robots" content="noindex,nofollow" /> .<script data-cookieconsent="ignore">..window.dataLayer = window.dataLayer \|\| [];..dataLayer = [{.. 'environment': 'prod',.. 'platform': 'site',.. 'lang': 'it'..}];..</script>.... Google Tag Manager -->..<script data-cookieconsent="ignore">(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NFRXKCG');</script>.. End Google Tag Manager -->....<meta http-equiv="X-UA-Compatible" content="IE=edge" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" id="viewport">..<meta name="PTRG" content="42">..<meta n

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39370)
Category:	downloaded
Size (bytes):	39373
Entropy (8bit):	5.513503001490316
Encrypted:	false
SSDEEP:	768:j07PC4LifTB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48n96:Ye3gxF8bvyB5TPCWJqHQ9c
MD5:	C5FC28C57A072765C966EE010CF77B3A
SHA1:	FAA51716230984C5CC60D0067D9165BBC5D7583D
SHA-256:	942A9BA1FE78B402E8B52B83058DBBABDE8DB6B4D1DEBF960D6D5AFE5192DB52
SHA-512:	A1F0F1A1D1F4DDCD2946E85B2DB51867EE4D2F7B436B0B126B246B8EF895B72C67EA25358F50872135DEB68957521C51E663014E225F8E0B077F7A8BCD0977D2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4744
Entropy (8bit):	7.937443330283719
Encrypted:	false
SSDEEP:	96:FksPD2It9v/Xrnt6wWDyafDqlW+CVOcGFKzLTqMe46iaXD:vRt9v/XztMXs+dRLToJiw
MD5:	2D996934570CFC85694B757AED1A67EE
SHA1:	0D33BFBC2F9343CB2ADE1D9AEE3E90F259CFD986
SHA-256:	17EB47DB4EFB4DCEF6AD594BC8E16CC3BDCFDA72FCE84D6D225DD0E6F53590E5
SHA-512:	AD9E60BCD476E5B1A4A60533D16209278813BF845F592D02B440BF1DF0AE9296CDB8A46FBFCB354BED118CD0B087C2600FB9897831244635116F867660A72B1B
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/images-firma-remota/acquisto-rinnovo/buste.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..xS..i....m..]o....].7l.`......qH...411...d..N.@.4.R.<......I(.0..$S ...9...B..#.$r....O.WOW..............9s&........o...=..M.>pA...F....i..]B.y.T>\|.......(..F8.j....X. ......pevvn.-vf.^..B._.eW"e....2$._...}...T..........F..Od.5...Jqut.xL.#.j4..Z......c...4.e..Y0..MtT...r.....j....o...}aa..BBD10Pt.......4..7W.$..{+*Lx.....O..........S.V{a.J-....[##.....(.........'.z.....F..:......x~Cbb...I.....(a....e4.f.&Z....R).....h.......w.A..._....@C...J%........e.......8.in.0.VX...cc..wU...t..j..`...8,..........`m...7J.k..s..d..t..........!x.k.(vO.7..L...a...S..8....J...../"B.Z.]......A.!.u`.[...W.c.....X~..........(((H.C]..i.d.i.}C..W#Xv..#.,.+..d.f.c..BEW.^.....Z.zxd.;.w..k?...C5........e..Y..Z..^.a.(.{....N...?0.y*O.vMQ(.5 /NB.w.........xl.0..V......Rn........x. .......@.X^....S4.k.`Y.....8v9....w..$..`.e.s.3H..Z..8..OBR.......23...\|^ZZ.....T:......h-.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
Category:	downloaded
Size (bytes):	102804
Entropy (8bit):	5.3364527553253405
Encrypted:	false
SSDEEP:	1536:3GLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:3GLXGFKT79DSs6WCE
MD5:	1D6864709DB6B20418228B3327F5E090
SHA1:	C3C02CD59138C0C468BAFD653D95276D619D0C5F
SHA-256:	47E4EE744C576FE52FE74A169A738169A4505BC6EC35FADF26784FF68BD81A3E
SHA-512:	6192083890B6B957234D09EA6CD1290178DCD15E4683551E14EE852454B8AC191C06F2A620F3B9D307DDFC383292824E8B140A918FE9D1E3972A7336D53A519D
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvt7FfUXzZD5sR-AbZjpIXTFugqwM1qzD64EkfDtGQAufe1DhDgsduiLLOV_CgqQMAdYBFsAxyGrhBocTghNxkiVSfy3GiJEwnrl4r4VJqY1Zpqw5ViV96_16WRSzoNMOTGZ8AsI1&t=74258c30
Preview:	.//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 8, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	5.058173694042473
Encrypted:	false
SSDEEP:	3:yionv//thPl93hWBmgPnHGwiRSaScxBx202m4Sikgt2up:6v/lhPTP0aScxB8WikgtVp
MD5:	8F019521B1FC003CB64EB73360BE6BAD
SHA1:	6E7B10E76C67DDE70AC1E2792067ACD673B0B68F
SHA-256:	020FF64CBF3DC1E2FFAD458D5810B2F94285469F4F4DF7DB81BA594660AF2C5F
SHA-512:	0E9BB28331848F4A7288D57BCD52B60F9DF13FC130794E315B862B53292F31B433DC347557BD603948478DD6AF9475E41B66DD0BA2E6EA9127582876A3493F0F
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/arrow-up.aspx
Preview:	.PNG........IHDR..............Xb.....PLTE...""""""""""""""""""c..q....tRNS....w.7..uw....IDAT..c.......$...2."..b.`.E..4....H......IEND.B`.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:TPunrEiCRn:TPl
MD5:	E38D747C671BE49D10A55438A1D2B8DB
SHA1:	85A69AC4D4123BB77B02C7D76D1691817C7CD84F
SHA-256:	5B16AB17D4ABDB0AB295F5137213BD08892DFB233E4846C38D0017D32A54E1C4
SHA-512:	B6594E087C45B974F0F59676EC3EF4B1914B388467D59B4AC068FE2BC22918FF0EBD4E230ABFF36157A7F03AAF8D74706BD7D70490A41735C891EB0B9481638E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnulUTdd067IhIFDXCKDJcSBQ1fcf3a?alt=proto
Preview:	ChIKBw1wigyXGgAKBw1fcf3aGgA=

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 686 x 702, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	108185
Entropy (8bit):	7.969102521397079
Encrypted:	false
SSDEEP:	3072:meoeIC8D2Vch25mzNWxPWk3UxTFkxJQpc9X:n8D5UsBmWboJQpIX
MD5:	0F52E85CC66D4FFAC9F9C5DCFA6BC7B2
SHA1:	7AB84D49040D10A9D15F3DDA599BA241DEDF0F3F
SHA-256:	BBB38FEED2A12B6B2CC1F440166A96B1FA4C108410E0D617637FF4AB560BC78A
SHA-512:	D1E17AAEB46A6D6AEA6472402127072A543E51478A4233FB220C0C9AB78836A030EE413B4490F9639F355C5227D51B26D0DFB75B3F2EC859CEAD2B9B9E2DCB30
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/utilizzo-spid/spid-app-aruba-otp/images/testapp.aspx
Preview:	.PNG........IHDR.............c)......pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)" xmp:CreateDate="2018-02-15T12:34:27+01:00" xmp:ModifyDate="2023-04-12T11:58:53+02:00" xmp:MetadataDate="2023-04-12T11:58:53+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:284e

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6697), with no line terminators
Category:	downloaded
Size (bytes):	6697
Entropy (8bit):	4.782337471782297
Encrypted:	false
SSDEEP:	48:zhQBNt+MifFHIPGDIZQPGDjpG2mveMtMoQgfPneG9A/R84jH2EZ7fPzP4D4lJEmj:uNt+MiZY5px0vfPP9eZ2dD4/Em0CDnx
MD5:	43EEDD7A37F54B0AD7729D4A35B68A1F
SHA1:	F7F510C3E50B3C04653EDB5025DA4FCD697AE5D4
SHA-256:	C7C6DE177AFFE630253EB5B0E6EA4BECC5547141E53D42844DC8080CEAED3BB6
SHA-512:	3F5FCF42EDA6E668D391481314431CED81905C707061D0B1047B8B6A0D6F8C350DB73E89A770EFC3F051732D29538A671B86735816A0FDEBCCDA2EC2B176D1DD
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/92/925ef166-01ad-4835-9e3f-77f08e11eee0.css
Preview:	@charset "UTF-8";@font-face{font-family:pec;src:url(/MediaCDNRepository/files/8e/8edfce0b-fcfe-4573-9aa2-559e4939c0c9.eot);src:url(/MediaCDNRepository/files/8e/8edfce0b-fcfe-4573-9aa2-559e4939c0c9.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/11/11276767-167d-440b-96e9-342596c727b5.woff) format("woff"),url(/MediaCDNRepository/files/9b/9bf90db9-8dcf-4630-803e-7e85b1cae9c5.ttf) format("truetype"),url(/MediaCDNRepository/files/f3/f300d965-4184-40d9-8480-a00623df71f1.svg#pec-svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:pec!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=pec-]:before,[class*=" pec-"]:before{font-family:pec!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2487), with no line terminators
Category:	downloaded
Size (bytes):	2487
Entropy (8bit):	5.383854492625954
Encrypted:	false
SSDEEP:	48:0SHAyWrfKyGSB8jVDtn607LdH2FQfqb2oiubPh9a7Q5nGByTwl0M:0zrf38nf5Wq02aPna7sGByUl0M
MD5:	D9469560DB85AFE5C886107B43851343
SHA1:	FAFD49EB9293BBAFEC2D6E5BF18A0B82A9B8B5C0
SHA-256:	1BD6111E025122506B1839CD0EA69FA2C8D3803A0D3DCACC72C96086FD7DA822
SHA-512:	218B807BFA7F54B11FB9BF9CCDD6568B306B3D16269E52EC69314E2B85C295274CF1E19F76FB3F1722292024744DD3009F8073F6DAD5D93D20D4BFC4D3FC1D7D
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/77/77ce1edc-2083-457a-a473-b382c473acd9.js
Preview:	!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"==typeof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.cloneNode(!0);f.childNodes.length;)d.appendChild(f.firstChild);a.appendChild(d)}}function b(b){b.onreadystatechange=function(){if(4===b.readyState){var c=b._cachedDocument;c\|\|(c=b._cachedDocument=document.implementation.createHTMLDocument(""),c.body.innerHTML=b.responseText,b._cachedTarget={}),b._embeds.splice(0).map(function(d){var e=b._cachedTarget[d.id];e\|\|(e=b._cachedTarget[d.id]=c.getElementById(d.id)),a(d.parent,d.svg,e)})}},b.onreadystatechange()}function c(c){function e(){for(var c=0;c<r.length;){var j=r[c],k=j.parentNode,l=d(k),m=j.getAttribute("xlink:href")\|\|j.getAttribute("href");if(!m&&h.attributeName&&(m=j.getAttribut

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 44, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1732
Entropy (8bit):	7.407515851731747
Encrypted:	false
SSDEEP:	48:WRl/LPPtOoLkOThG/Fu4zYzEsR1s4W+92U+hLm:WR1PPwIUu4zYgs1W+Etm
MD5:	C5D71B3F5260B7D42423CF6A1112DE4C
SHA1:	79E6595BA72555A97F6D5E5C281EEC925DFCC0BE
SHA-256:	490E57EC6C835FD6B96C15652A4ECAA500D9C61131A0C8C4306D3867414F16D3
SHA-512:	E9F9887DB901F626D36D576EBDCAC44E6B564D4C62EDB355EA05B78017B703AA6EECBBC9DB48C39B47B3F2921B1E24EE86B809FD66C89DE1611BD50E14F51A1C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......Q....PLTE...qrqdkpqrqpv{qrqqrq......qrqqrqqrqqrqqrqqrqqrqqrq.Bh.Agqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrq...qrqqrq...qrqqrq....Bh....Bh.Bh....Bh.Bhqrq.Bhqrq.Bhqrq.Bh.Bhqrq.Bh.Bh.;d.Bh...Ml........@fqrqqrq.Bhqrq.Bh....Bh.Bh.......Bh......(Pq......f}..Bh.Ej....Bh....Bh.Bh.Bh.Bh.Bh.Bh.Bh.Bh.Bh>a\|6[y...........?a\|4Yx............................Bh.Bhqrq....:c....@f.=d.........tRNS.O.....O.......^G%......Y...`]U93...wC>.+...seL..}l#.............U/'$...........~K65...............tofA........}qa]YXWUI=7(.4.....CIDATX...gS.Q...7...t4!..I.$t....(..{.w.gm..w........Cvfsg.I.}3......f.<......kZ.._.{......t...+.m...g..._....=....q..X!~;.?......e..Z..w[4.r.Km.f.....-1.9,.Sb.i,....]8f..f.........i..@ ..%..+..&..$..> .L....I.K...6.b./..No........h.L.p...a0.. )RK.+.d...L..)I.....I.]..;......c.e..........X.HO$"*.>=..B.R\|...b......$.D..r...b........p.6<......4.H......:M.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
Category:	downloaded
Size (bytes):	23558
Entropy (8bit):	4.459213786361872
Encrypted:	false
SSDEEP:	384:cIDGvuz1auA6hS6mHj8NJjC2GCtAOkW8zQRaaWJpThRjO2cklyAXX:cfvZTHj8NJjC2GCtAOkW8zQ4aWJpThRp
MD5:	202DC1D3A3D8C03D75D9876C261F8572
SHA1:	EDE42C18EB02763CC409C26137BF25111FD98A3C
SHA-256:	98C2DD1F31ADF1D6F7B8601A712D10382BDE376E32CC0CB73548CA7A81FC9EAC
SHA-512:	0F1E89644E30AFAF58DA879009A942B197977B92FCC20396B1F7173CF7D641B891BD86CF2B3D4F96602E3AF16A02366C89240303B80A56CB45F2BBB31052B9F9
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/favicon.ico
Preview:	...... ......................(...n...00.............. ..........>...........h.......00.... ..%..N!.. .... ......F........ .h....W..(... ...@........................................................................................................................................................................................................................................................................................................................................{.................9.......s..................y9.{.............................y;.................................................?...................................................................................................................................................................................................................................................................................(....... .................................................................................................................

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 224 x 49, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3873
Entropy (8bit):	7.815784304558348
Encrypted:	false
SSDEEP:	48:tQHgs7IDJFiPfLAioOyIx518y2olBLmcIN+KNoghEz470aOQaX4nJEMG18qPVGwp:t/2ui3LAvIxp7NIAKNrOzW0aOQsKqdRp
MD5:	E666498E62797D774F777F3ECDE50263
SHA1:	1125648DE230A4FA8C10F30FD954E5A2BC551736
SHA-256:	770332C436E924456DD996873065BAAADEC5D9AD11C7E49010D3F752D5DB8367
SHA-512:	C66E855E3FCA3D31E8457F16AE18CC2FB8DA8E1847AFFDAA2B65CBCC054C5C2ECB1EE82F9C276119EFE3FF5E0049B32421C45A7DBAC155695417BC5175F257E4
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/content/home/aruba-pec.png
Preview:	.PNG........IHDR.......1.......UY....PLTE............................................................................................................................"......................w...,%..................r..~..}...........v......(!.'........5-q....'z..~...$..&.z..n......( ......l........p...$.....) .0(....(....o...<5.......#.........../%.!.................+!./&.........\|.........$......$.4-.( ..&..........QG.......PF.TJ....A:.......F=.?7.%..G>.(..XN.......KB.I@.D=.......<4.:0.1'.-#.!..ND..........KA.90.0'..&.(!..........MC.+#.* .......]T.LC.F=.D;.@7.;3.7/.3..........e[.H?.D=.>6.=5.6..6-.+"......q...ia.%.."..!..........z...aX.JA.A9.<3.4,./(.'.................d\.6-.3,.1).$....................RJ.D<.D;.$..".."...........e].XQ.A8.;3.7...&.$.....]U.UL.RI.KB.5-.2.&!....YP.TK.H@.*$.....n...ztRNS.........{..).\HW.......q8$..ula..........f..O".SLB=;4.D...../......sRI9.......pc`4+..........qoVI...............ytGwW.....bIDATh..gXSW..O.a#..e. jqT[kk..{.wsWvH @.0..{+ K, Z...{.:...

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6174
Entropy (8bit):	7.888089384832391
Encrypted:	false
SSDEEP:	96:8SK2m59lVQh3IFYh36zdRlNBMDStfuiIBZkl3IPCZPUQaSPZBKu:DOLg8uUlL0Wf7IZkl3HZHKu
MD5:	753357B69906A9085D1E8637ECAA16E1
SHA1:	133457B14AB8C2914928E91D184DCDB7D571F35A
SHA-256:	DDF4E3CEC692AB7433C73B9AEE912671DDD8B49C6F797EC54A5C9F57E3CA6942
SHA-512:	F82300DB7E846B0840533C84C6284EA4BBE7644D815EBBF2E200659256C4739C207B0C622AD08B7FA83D22AA7368AED3B4D7099EE950C6ABB73F810B92EEBC6B
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/social.aspx
Preview:	.PNG........IHDR.......Z.......\|.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:DE41F44852A011EE9E4CA0B389953E92" xmpMM:DocumentID="xmp.did:DE41F44952A011EE9E4CA0B389953E92"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DE41F44652A011EE9E4CA0B389953E92" stRef:documentID="xmp.did:DE41F44752A011EE9E4CA0B389953E92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?.......IDATx..].x.E.>......%,..A.........2...G.y"..*........">.Y$.0H.0l. .m. .......@...FH.N..Js...Vw.....W]}.....:u.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	111824
Entropy (8bit):	5.167747012076771
Encrypted:	false
SSDEEP:	1536:Jb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:X3okfYD8P9un/buVYEMwFK
MD5:	BF990FE9BCB509BCB0D1E39AEABA6FF0
SHA1:	77C15028E120ACED8F887111B6DDADEEBF86DA98
SHA-256:	EA833E2735A61A60B815B434DA037B82495D0E3C5436340AE79247AF6D25488B
SHA-512:	F1698F69EF26A913268D958EFAF68416DE6B7DFB3A71F81D7BA036152248F7A76A76512E74A09E33C2EE4F1E0547DAAF77CCCF5EF535F3D8C34EE0839BFBC264
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/uc.js
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){function finallyConstructor(callback){var constructor=this.constructor;return this.then((function(value){return constructor.resolve(callback()).then((function(){return value}))}),(function(reason){return constructor.resolve(callback()).then((function(){return constructor.reject(reason)}))}))}function allSettled(arr){var P=this;return new P((function(resolve,reject){if(!arr\|\|void 0===arr.length)return reject(new TypeError(typeof arr+" "+arr+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var args=Array.prototype.slice.call(arr);if(0===args.length)return resolve([]);var remaining=args.length;function res(i,val){if(val&&("object"==typeof val\|\|"function"==typeof val)){var then=val.then;if("function"==typeof then)return void then.call(val,(function(val){res(i,val)}),(function(e){args[i]={status:"rejected",reason:e},0==--remaining&&resolve(args)}))}args[i]={status:"fulfilled",value:val},0==--remaining&&resolve(args)}for(var

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 82, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6095
Entropy (8bit):	7.8819892109428995
Encrypted:	false
SSDEEP:	96:MHd9ocWCjMiZ1SaV8VoSpEPXSp76RvuXQo7y2Rkpg1OQlDHrfpJAPbTxsrGKj/Po:MHzor3c1DiojP86RvS7y2kFSDjMgRzPo
MD5:	0CD2E0829C4156B63C3EF4613EED5001
SHA1:	4B67793525961F69DED1BA55BEB39D3842DAD08B
SHA-256:	C6879D00D38510B396AF794BA8490767415B4951385F79B01ECA488941551364
SHA-512:	98C03B2D343A8F767E14FA6BCCDE51438EF2A293DF5F142CE5B985936806E1C1197569609BF3523492405E8AC53665BC8BE0BCFB2DEA2D7EF4E131293D3E2303
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R.......o.....sRGB...,.....PLTE..............z..\|jmaoqfcdY..v......mocjl`gk]gj]lobfh\..z{qy\|p.....................................il_...cfYore.....................psg`cV_bU..v..............gi\.................xY^PcgYtwk.......}...rui......_cU.......kna...W[L......xzo............X\NSWH......HL<...ehZ..{QUF..~...MQB...vymmpc....................%..)..&."s^Rltf.......{~r...f_P.)-..........'(R]L`dVVZKUYJ^bT...\`R...R`N.86............b[L...Z^P]aS......SaP...Y]O}.uVcQ{MF.....z.11beW.@<...oZN.%(P^L.............~.....pv..............lr........w..#..+,........... ...3;.ag.ek../8.hn.W^...........(2.IO....:A.PX.DN..............6?.[c..#W_O....GB........KSxTL......<F.....%......+6ZcS.............!...%0.AJ.....AL.v{.`f....................-7.3;kbS...vxn........tRNS..(Ddu....5........................Q.................................W.........................e.......9..R.................................................................

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 82, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6095
Entropy (8bit):	7.8819892109428995
Encrypted:	false
SSDEEP:	96:MHd9ocWCjMiZ1SaV8VoSpEPXSp76RvuXQo7y2Rkpg1OQlDHrfpJAPbTxsrGKj/Po:MHzor3c1DiojP86RvS7y2kFSDjMgRzPo
MD5:	0CD2E0829C4156B63C3EF4613EED5001
SHA1:	4B67793525961F69DED1BA55BEB39D3842DAD08B
SHA-256:	C6879D00D38510B396AF794BA8490767415B4951385F79B01ECA488941551364
SHA-512:	98C03B2D343A8F767E14FA6BCCDE51438EF2A293DF5F142CE5B985936806E1C1197569609BF3523492405E8AC53665BC8BE0BCFB2DEA2D7EF4E131293D3E2303
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/content/home/bureau-veritas-27001.aspx
Preview:	.PNG........IHDR.......R.......o.....sRGB...,.....PLTE..............z..\|jmaoqfcdY..v......mocjl`gk]gj]lobfh\..z{qy\|p.....................................il_...cfYore.....................psg`cV_bU..v..............gi\.................xY^PcgYtwk.......}...rui......_cU.......kna...W[L......xzo............X\NSWH......HL<...ehZ..{QUF..~...MQB...vymmpc....................%..)..&."s^Rltf.......{~r...f_P.)-..........'(R]L`dVVZKUYJ^bT...\`R...R`N.86............b[L...Z^P]aS......SaP...Y]O}.uVcQ{MF.....z.11beW.@<...oZN.%(P^L.............~.....pv..............lr........w..#..+,........... ...3;.ag.ek../8.hn.W^...........(2.IO....:A.PX.DN..............6?.[c..#W_O....GB........KSxTL......<F.....%......+6ZcS.............!...%0.AJ.....AL.v{.`f....................-7.3;kbS...vxn........tRNS..(Ddu....5........................Q.................................W.........................e.......9..R.................................................................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 375, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	808
Entropy (8bit):	7.636232307899128
Encrypted:	false
SSDEEP:	24:UoSDxElA0opylIQ7OrDKN0XukvS1qhKixzfryWbfDbGxboD1:UomKa0opylr0DKaXC0ASrf/CxMD1
MD5:	7F53D7B4EF5EF79D5B90D9F0D4A10C75
SHA1:	017944C6803608E56C0A0FE98F656DD86247452D
SHA-256:	73BA5C1DCDAD0BA447307D9DA6C28459B38B35C643439C70ED1F82BD1C136F80
SHA-512:	66F2050FC78CF872EDC59A4E9C5C6308AD8E9A0617E7E13F55F2D1CD1F8B016F10ADF5A66B8DDE6629D0C33B4F155A73F1CCDA87542AAAC9FDC0BACC0C921CBF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......w.......,'....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..\.n.0..D..?..B.....B..i/;.1..c/.q.bc}..!D...e.,K.DT..b.@....#!Yh..mf!..........Z..M.i...y.........,.D-U...E..m.....D.J2C^.......^..i...Qc..-..#...03@4.-.F.....g.9.D..D..v...D...k..ha1....1...(.D)I...\|.s].T.5..@P0.7.Z...)...m..)...pw/D.Y.m>..[.1.n..3.y....#A......Yh{..w...s.....e...w&..1.Z..h..I-..<...4)6...f.....Z!3C.;..mvc..t\|.H.xq$.wR;..VG.E^..d....@...3.b).@+ .^....}...$.!.1...%..D].;.Q.B..;..&a.......y..P&4.F..."SZ.:C\..Z.a...H.....Np....k.A.0F..l-..zvw....F..O.z#....c..;+$...i.y.K......p...L.."sa .....l.E;..81..[;.WX...Dc..=.^N.Z..&...:s/......Vpd>B.Y*..).e0..U..%..V)...M...%.}...h#...L.-.u ...?.\..........."..s/.....je.N@..Z..hy.&..X....:rS.y7..B....}.4.A.......IEND.B`.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 82, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2925
Entropy (8bit):	7.772797541212802
Encrypted:	false
SSDEEP:	48:uMr3QByqTmYzZBCw+R+c7jdifn7f5yYEz7NvWNVm4LG7sI3UF8imqG:HrABy/SZ0VRB7g7f5yDz8V/LG7s16lqG
MD5:	5F46F15E9DB81D1B15F194F185D664A0
SHA1:	1B58C8C8836197D8034C615728BA6C5325D6058D
SHA-256:	04BC894482C478881A9457DC7278AF163FE3D37AEA65AD87A2ABBC8E029F8504
SHA-512:	A6AF2FC7C163BE73AA06B6AC37493E83124683A33F7C8A5A83ABDAE2693F87CF53FA942F779E396E489DCF8932616E49C3B80F638853D501E06FCC7061FDBFA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t...R........>....sRGB...,.....PLTE....:u.<v.Bz.?x.L..P..H~............Lv..8t'X...........5t2_........>x/_.....w..\...C{....#U..7w.2t\|.....8e..@}.=\|.2r6b..G.+]..C{.4q.;z.=z.0nEp.............Tz....f..@k.=h.Jr.................Tv.Bm..>x......c.....,Y.... Q.4\.....)i.:yu.. R.Z\|.k........I~.H.p.................n..5g.....,u.5..B{.-.Pea...s.J....1}erW...Wl[..M........8....7...0....:.....;t......>~..+.....P....D{..#...4Rp.."K....+S...Z..1.....tRNS.................................................................................................................................................IDATx.._.X....&\/..<..0..".. . ...Uh...8..}.X....{......n?........K.7.{.9....u.{..^?B.]E...H.T..(.w.JXJ...t....@i...A...Th4..:d.N..{....22:66:b.#.jm..ts....^...pB...t..... $...J.....l......@'..'+.sz..oC)..=.....3.@9.n..'..6..u.T.8.o..`9.1.M(..BSfF......c..M.S!<+...!d...Q}...../b.G\|.c.9S.(EI....q3c....<....P4..b.b....^.Z.A5...Kq\|.x...{?(..t...........Q.L-

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1143
Entropy (8bit):	7.6481183499590335
Encrypted:	false
SSDEEP:	24:ARKCJE8Qmi/R7cbU5fmS/txIH4oojkHFtBYa4xV8WGSJOMg64N:onQLZfeSszoAveayJn/q
MD5:	7AF468673780C76F84C2E5A08DB5DCE7
SHA1:	5B9812DAE619300CE093F98E12FB78E5B6AFF536
SHA-256:	98166B0EDF25E8C81855E42E4E5144E343CB8E705B0881DBF6594F63977E0881
SHA-512:	3DF85767EE849759DC1C78188674DA47D18126FEA4210A1D6C267B8E692E348EDE672980471FBFBAF708CFBB06FDE7959674B209164135D528EEC71F325F3C64
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/mac/icon/otpmobile.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.ih.g..w.g.hIU.^....`Q+..!.x..U+(V.....j-..... "j.../..QP<R/.......)%..P%m.L"E.......l..a....?.#..?3;......]466.mkkk.T.........H$&ZQ....loo....Y...V .r+EQ....}...Ia-.gy.a....~.=../............6.U....../Rs.`<.....\....)].e8....6e...s...0_.B.6.3..1e..W.....yt......ks=.....(D.......38.......h.........."PH......{.4..p=<...2.7UH..^.o..0.g....3.c..7.G.9....oJ...5@.....P..(D........h.B4@!....P..(.W....J..~..`.....Z..7.yp..`-cCT...........P(1...q..x].g.Cp..}=.g}.~....p....B.y._.X9<...>...Uii.x...H..G .u..&)~..M..w...2....8$5g(..c8...D.I..&;...3..........Zm..<.y.v.<.y...i.>..e.@.h..G^....D..X..l."W....!C....v.>.0<Qm.....K.0;.....n[j+CWG.F8...,\|..8...........X.ug8.7Nm..c.ix.=h..W../.$.a..`.A.`..5..+....vSf8.g.2'.....v;cpl.........-./..W....P..(D........h.B4@!....P..(D........h.B.*.u..N...`Q<...]w3d../...9.y..~#.......p.C..~..7.{6@.........@...\|P.S......1i..b..$.w...

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2024
Entropy (8bit):	6.3196224029517145
Encrypted:	false
SSDEEP:	48:pha4knA9WIrH42t5fRO8f3j1HKLS35tYHdrn3QVGUx:pnknmWIr5vvHKL1HdjAV7x
MD5:	F7124FE3BF7C1C84874735D423F9359F
SHA1:	B8F2BE9E02CD36F184AF90497DD2BA7BF089D6C0
SHA-256:	BBDB93113F035468A03E4D9042A30D950536AFF78012F848BA248DDCE286A6BE
SHA-512:	CE19183DCB195B9A8222FFCF7E40A2F27003F74D6A237A3D812DC6F913B5A015CF65A78ADE261051D167E785FAB49B747DCF455CCA4C8024788AD634D80ED279
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/0a/0a427406-cead-4afa-b9d2-4f82c6233d85.png
Preview:	.PNG........IHDR.............;0......pHYs...#...#.x.?v...2iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 137.da4a7e5, 2022/11/27-09:35:03 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.1 (Windows)" xmp:CreateDate="2021-10-30T14:05:42+02:00" xmp:ModifyDate="2023-02-27T16:43:57+01:00" xmp:MetadataDate="2023-02-27T16:43:57+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:6a4a619a-20c4-d544-b236-e1f15d120e83" xmpMM:DocumentID="adobe:docid:photoshop:b874e895-ec27-4d4c-9d52-b0652ab72320" xmpMM:OriginalDocumentID="xmp.did:83401

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8560), with no line terminators
Category:	downloaded
Size (bytes):	8752
Entropy (8bit):	5.307030683486384
Encrypted:	false
SSDEEP:	192:OehhtTY+7nkxsOUBXrB8E1q4bDlajoAYoGXT7l:OejtTZkxsO8B8Ejla8AYoGX3l
MD5:	64B9CBE38672AA71A64CF3B41D43AF55
SHA1:	2FA81AD0AFF1C0104CCC1AD2CDEEFFF22842DE8D
SHA-256:	3DEE2611EDDEE94A03D13845DD406A0ABA7D3D86F1215498DBB18C4127085DEA
SHA-512:	CE189C3797BADD3EB301A3FBE7C53EBAE57220D691FB5C2FB5244B0F7F719279D588BAEBCFE5223B3BD0D705FBFDA1441F8BED1C2A18B981D66F61394859D93F
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/cookiepolicy.js.xhtml?ln=js
Preview:	!function(e){var i;e.cookiesDirective=function(a){var s=e.extend({explicitConsent:!1,position:"bottom",duration:0,limit:0,cookieScripts:null,privacyPolicyUri:{it:"privacy.html"},inlineAction:!0,lang:"it",scriptWrapper:function(){},fontFamily:"helvetica",fontColor:"#FFFFFF",fontSize:"13px",backgroundColor:"#8a8a8a",backgroundOpacity:"90",linkColor:"#FFFFFF",message:{it:"Per offrirti un'esperienza di navigazione sempre migliore, questo sito utilizza cookie propri e di terze parti, partner selezionati. I cookie di terze parti potranno anche essere di profilazione.<br> Se vuoi saperne di pi. e ricevere indicazioni sull'uso dei cookie, o se vuoi negare il consenso all'uso dei cookie, clicca ",en:"To provide an even better browsing experience this site uses its own cookies and those of selected third parties and partners. Third-party cookies may also be profiling cookies.<br> If you would like to know more and to receive information on the use of cookies, or if you would like to withdraw yo

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89500
Entropy (8bit):	5.28977521478275
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/
MD5:	7C14A783DFEB3D238CCD3EDD840D82EE
SHA1:	AD886E472B3557F3DC7DFA2BC43468AB8D1CEF5B
SHA-256:	80F04717F32EA0320C5E8618FBACEDD1FEE3A8775AD8292140A6113551D4B5B0
SHA-512:	FA3E021CA60A9ADBE570C6565C7370727904C4396C23A4C519DAF258D05FAE3E17BFB7607A0AB6DFE2B7150A4EC1B6A95E6D49675291BE5F6A4E5679AD78D858
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery.min.js.xhtml?ln=js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (632)
Category:	downloaded
Size (bytes):	35766
Entropy (8bit):	5.292987416111328
Encrypted:	false
SSDEEP:	768:BmDgg7rVYGSnyXrwlL/QApN2Yr2rkNd0jWYijIXP6XsrJu:DlnPlUA/NdIWYi0XSXsrJu
MD5:	CC7CE87733CAAEAD6B0AC110F1323F13
SHA1:	0125E467FE59AA34EAE5DD44BFA08BAA739C388B
SHA-256:	FFFD793A5D13697B39EB13A35D70DA478B61582147097AF3CA181871BDD109D8
SHA-512:	CE354087F335CEE0E92E894B56D44CB6A9B104723E4E4E853D6452F2600F70A52A55CF2AFE84D4BBB2481EE174C97E06C3F2318E65F9210909DBE455079E6547
Malicious:	false
Reputation:	low
URL:	https://w.usabilla.com/6c82bc643068.js?lv=1
Preview:	(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.console;if(a&&a.error)try{a.error.apply(a,arguments)}catch(c){}else if(d.opera)try{d.opera.postError.apply(d.opera,arguments)}catch(c){}}function f(a){var c=a[0],k=a[1],b=0<k?p[k]:l,f=Array.prototype.slice.call(a[2]),h=f.shift();a=g._.fh[c]=g._.fh[c]\|\|[];.k=g._.eh[c]=g._.eh[c]\|\|[];g._.ph[c]=g._.ph[c]\|\|[];if(b){if(b=b[h])try{var d=b.apply(b,f)}catch(n){var e=n}else e=Error("unknown deferred method '"+h+"'"),m(e.toString());d&&(p[c]=d);if(e){for(;k.length;){c=k.shift();try{c(e)}catch(n){m(n)}}k.push=function(a){a(e)}}else{for(;a.length;){c=a.shift();try{c(d)}catch(n){m(n)}}a.push=function(a){a(d)}}}else m("cannot call deferred method '"+h+"' on 'undefined'")}function t(){for(var a=h.shift();a;){if(u)var c=!1;else{var b=a[1];c=0<b?p[b]:l;var e=Arr

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/bootstrap.min.js.xhtml?ln=js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	168517
Entropy (8bit):	5.400754535964317
Encrypted:	false
SSDEEP:	3072:hQD7v0vGCBCMUQj7rYWMteQ0AE21keUJoI99FmqZ:u0DoYcWM9F/I9FvZ
MD5:	07A72B597F2FC10D6F88C8277D903D94
SHA1:	AEE1F2A2174D18B9BA0C8652E39290DEA2F71DF9
SHA-256:	CC1CB5976581021DAF3C5F2B9E314C517BA3B1F90A8F26B4272E63EB22A3D3E4
SHA-512:	1B77F8A335F7DB526AEB4FC0A95F65820499B2B97C215B31C22F73FF0C35FC3915E2B4DCCF1FC32E4B9F225E3C56045DCC361A745052189197A6D192D5733443
Malicious:	false
Reputation:	low
URL:	https://d6tizftlrpuof.cloudfront.net/vendor/1.6.5/angular.min.js
Preview:	/. AngularJS v1.6.5. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return W(a)&&0<a}function K(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.5/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function oa(a){if(null==a\|\|Za(a))return!1;if(I(a)\|\|C(a)\|\|z&&a instanceof z)return!0;var b="length"in Object(a)&&a.length;return W(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(E(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400), with no line terminators
Category:	downloaded
Size (bytes):	400
Entropy (8bit):	4.959308887680108
Encrypted:	false
SSDEEP:	12:CqK8ZS3c/NPqfPq+8qZJqqK8DDqK8uW8qK8+d+:CqK8D/ZqXx8qbqqK8vqK8uNqK8+d+
MD5:	784A828A414957BAAFE296EB04B217A2
SHA1:	98BF4DB2964F80B0D649CBD696E619AEB8E99238
SHA-256:	5D1F17A805E51C2FC4FB792380DF938DF52B9C0796D029BAF1C05A65A578400C
SHA-512:	629495162E6E8BCD1E646A584E98506F23D887A875963F9CFC58D5D752E3649C5AF9D213DB3B433B79F7C87C078C4471B89D5D51016697B1FA5B64CE18531B48
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetResource.ashx?_webparts=677
Preview:	.predictiveSearchResults{position:absolute;z-index:999999;background-color:hsl(0,100%,100%);width:100%;border:1px solid hsl(0,1%,60%)}.predictiveSearchHolder{position:relative}.predictiveSearchCategory{background:hsl(47,100%,89%)}.predictiveSearchResults .selectedResult{text-decoration:underline}.predictiveSearchResults a{text-decoration:none}.predictiveSearchResults>*{color:black;padding:3px 4px}

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8774), with no line terminators
Category:	downloaded
Size (bytes):	8774
Entropy (8bit):	4.769850046039699
Encrypted:	false
SSDEEP:	48:z/tNEPGDQxPGDRDz5eUjZQahrXIiXCxQ849XpiSQAipDfp79NTMjKct3ThGJejM0:7tN+gR6axm4wAqSeAQ96MfAsDATzM/0
MD5:	8DE315698E12A7874FEDFCE42AF043EB
SHA1:	7BCB73FB10FEE07385F05FDBE20D6D14C40679FF
SHA-256:	44F37A0492792A0D78DA27813CDB32DDA9343A5BF3325E6ED33846107EB7F272
SHA-512:	E2BEB915E96F00375F6DF988B1E93885B47F504689312A263873469DA86CD4A063A6006767B24B13635B9E804ACD2D687A892FE7E09F4F0305CF312281C14BCA
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/33/33a6ec4b-462c-4ce1-883f-7a74adf8cb39.css
Preview:	@charset "UTF-8";@font-face{font-family:multipurpose;src:url(/MediaCDNRepository/files/61/61a06ba3-be21-4389-bf6d-47d9101a8fa3.eot);src:url(/MediaCDNRepository/files/61/61a06ba3-be21-4389-bf6d-47d9101a8fa3.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/da/da3764f8-0911-43ad-aa9f-820b294dfb1b.woff) format("woff"),url(/MediaCDNRepository/files/ec/ec576f2e-1dae-48db-8ca4-e13ab9b27602.ttf) format("truetype"),url(/MediaCDNRepository/files/da/dac8f90f-1a2e-4641-9aa7-f26bef7fa247.svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:multipurpose!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=aru-]:before,[class*=" aru-"]:before{font-family:multipurpose!important;font-style:normal!important;font-weight:400!important;font-variant:normal!import

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	111824
Entropy (8bit):	5.167747012076771
Encrypted:	false
SSDEEP:	1536:Jb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:X3okfYD8P9un/buVYEMwFK
MD5:	BF990FE9BCB509BCB0D1E39AEABA6FF0
SHA1:	77C15028E120ACED8F887111B6DDADEEBF86DA98
SHA-256:	EA833E2735A61A60B815B434DA037B82495D0E3C5436340AE79247AF6D25488B
SHA-512:	F1698F69EF26A913268D958EFAF68416DE6B7DFB3A71F81D7BA036152248F7A76A76512E74A09E33C2EE4F1E0547DAAF77CCCF5EF535F3D8C34EE0839BFBC264
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/uc.js?cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&implementation=gtm&consentmode-dataredaction=dynamic&culture=it
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){function finallyConstructor(callback){var constructor=this.constructor;return this.then((function(value){return constructor.resolve(callback()).then((function(){return value}))}),(function(reason){return constructor.resolve(callback()).then((function(){return constructor.reject(reason)}))}))}function allSettled(arr){var P=this;return new P((function(resolve,reject){if(!arr\|\|void 0===arr.length)return reject(new TypeError(typeof arr+" "+arr+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var args=Array.prototype.slice.call(arr);if(0===args.length)return resolve([]);var remaining=args.length;function res(i,val){if(val&&("object"==typeof val\|\|"function"==typeof val)){var then=val.then;if("function"==typeof then)return void then.call(val,(function(val){res(i,val)}),(function(e){args[i]={status:"rejected",reason:e},0==--remaining&&resolve(args)}))}args[i]={status:"fulfilled",value:val},0==--remaining&&resolve(args)}for(var

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.741729296672174
Encrypted:	false
SSDEEP:	3:dmSsuQzT8yrVo9EeXgCYYn:k1uQ/8ysF
MD5:	C80785603F11495BB16ED48C44F1EB73
SHA1:	580D792BA095CA4845C63961D49CC295EE55E536
SHA-256:	ADE91092873687D4EF5AB87FCD905C67C60C2A65081B04818BF8B9DE48BB5569
SHA-512:	7EF8A2D27CEE2701EE83F642AE777BCEDF6851563803606D02B9F40150E9A0F8B27FEA46FD4529DD3C0805D0ABAED929807FE7A2F1306D874D7EC2AA80DEDE51
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQlfbyzZjPU6CRIFDXUI4zgSBQ1P-bV-EgUNMJj60hIFDbwVwuQ=?alt=proto
Preview:	CiwKBw11COM4GgAKCw1P+bV+GgQIVhgCCgcNMJj60hoACgsNvBXC5BoECEsYAg==

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277), with no line terminators
Category:	downloaded
Size (bytes):	1277
Entropy (8bit):	4.847958754560118
Encrypted:	false
SSDEEP:	12:lMtQAAE0u8KTpi++LlV3fAGe3A2L98xR0iEbJPGeJHnX+VrajCVAedG:d93KTpi+AlV3KA2hGpEbJHnia
MD5:	301458F3C0FD51FF5B455D2A4415797E
SHA1:	50C0DEB1E81D93005ED15E0CFA56B417F9E334BD
SHA-256:	7EEF7ECFBD44626028C85FFA72F85D5F72B7AABFB19CE32DD84927F36EBC817D
SHA-512:	81FB6AB705A99FA3E6241AAD5CD05F78615A1145B5F3401F9BA6D4FEF0354654DA88CE46CDF2A0588CE17D18D9304C8F4A2480A15A0B2F0A47A752BFC2AC74A8
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=csscookiebot
Preview:	#CybotCookiebotDialogTabContent .CybotCookiebotDialogDetailBodyContentCookieContainerButton .CybotCookiebotDialogDetailBulkConsentCount,#CybotCookiebotDialog #CybotCookiebotDialogDetailBulkConsent .CybotCookiebotDialogDetailBulkConsentCount,#CybotCookiebotDialog #CybotCookiebotDialogHeader,#CybotCookiebotDialog #CybotCookiebotDialogDetailFooter{display:none}#CybotCookiebotDialog.CybotEdge #CybotCookiebotDialogBodyEdgeMoreDetails a{outline-offset:10px}.yt-player--overlay{padding-bottom:56.25%;height:0;position:relative;z-index:1;display:flex;align-items:center;align-content:center}.yt--image,.yt-player--in_overlay,.yt-player--overlay::after{position:absolute;top:0;left:0;right:0;bottom:0;display:block}.yt-player--overlay .yt--image{object-fit:cover;width:100%;margin:0;height:100%;max-width:none}#otherservice .yt-player--overlay .yt--image{padding:0}.yt-player--in_overlay{z-index:2;display:flex;flex-direction:column;justify-content:center;padding:20px}.yt-player--overlay a,.yt-player--ov

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	226870
Entropy (8bit):	5.452936493117246
Encrypted:	false
SSDEEP:	3072:EBLeyZWZTBUIncwuP0bteuvQ+AMPpgArl0xYu5GpJnsO:EBLeyURBU7P0bvQQGArHu5GpJnf
MD5:	072B2C3ACF701DD53DF6CE69EA15C1A7
SHA1:	9EEFC6F1A848B8F10498B7DC298AF62646465F5E
SHA-256:	63BAE03AA97278ACB1D6F7863E593999BBDC5D280D2FA5A3050F234CE5EEE850
SHA-512:	30C4CE7EFC91156E8258E89BCE6ABAD64893E3304FEA99C64AF1C46DD2CF8F57CB154CC76FF5962BEF423C321707BD53ABBDAF42805117F6FFA870E91D1DC1C5
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	5.168490899475983
Encrypted:	false
SSDEEP:	12:qTj2v571pt+cYoq7c4CD/EPEo8ecVHNnUEcwaxMELIx83rR+b/II:0j291pt+cYo+c4C7E8oOdcHLIxMrcb/t
MD5:	3D08665FA4C7BCF9FA2DCBBC7EFE1D0F
SHA1:	BA57ECEE011A4B99D4BB56707325C8E4D0FB8A2B
SHA-256:	738E5435F2D18427D291A0D6289EEE0EBBC87B596D6003919F255760AC293104
SHA-512:	E86FC61D20680F6F486C61E3730ACA4CDEBEE3AD0670C69EC177691AE979F81951DBD409F8CDA648AB2EBED13C5A2BFB57174FB5167EECB15300B807FC7BBF3E
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.eu/sdk/bc-v4.min.html
Preview:	<!doctype html><html><body><script>(function(){var n="CookieConsentBulkSetting-";this.handleRequest=function(t){function f(n){t.source.postMessage(n,t.origin)}var i,e,o,r,u;try{if(i=t.data,e=typeof i=="string",e&&(i=JSON.parse(i)),o=i.value&&i.value.expireMonths&&i.value.expireMonths===0,!i.serial\|\|o){f("bcEmpty");return}r=n+i.serial;switch(i.action){case"get":u=JSON.parse(localStorage.getItem(r));u?f(u):f("bcEmpty");break;case"set":localStorage.setItem(r,JSON.stringify(i.value));break;case"remove":localStorage.removeItem(r)}}catch(s){}};window.addEventListener("message",this.handleRequest,!1)})()</script></body></html>

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10205)
Category:	downloaded
Size (bytes):	329254
Entropy (8bit):	5.597444025993776
Encrypted:	false
SSDEEP:	3072:gjo4lgjdQaiJ9iVVZLQOFChf3K0zjHgvLMzU467JXDBin0bukMW/IA3Lm/QhUi:p4GQ+VV9QOFKREHVin0qkMW/IA3Lm/un
MD5:	29B417B67150BA606D335D67A2FF069A
SHA1:	C4390BC49261DE7988818711343463FE802E6627
SHA-256:	B5901A4A96D16E40EF0BEEA9C1EE69F63605026C9F86AB0D8635A603C448AEBC
SHA-512:	FE841C206C71FF5B5A1C756CA83C950DB12180781282FF4AA5D57C417A384038B97691527AA983DF0F841C7F696E5DBB65201AAB40DEA38F1482BD5E4E06595A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/desusertion?id=G-CBSMR1FX8C&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"37",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":32,"vtp_rules":["list","^login\\.aruba\\.it$","^cart\\.aruba\\.it$","^pec\\.it$","^nowtrade\\.it$","^pecsb\\.it$"],"tag_id":110},{"function":"__ogt_ga_send","priority":22,"vtp_value":false,"tag_id":108},{"function":"__ogt_referral_exclusion","priority":22,"vtp_includeConditions":["list","ecomm\\.sella\\.it","sandbox\\.gestpay\\.net","paypal\\.com","pec\\.it"],"tag_id":111},{"function":"__ogt_dma","priority":22,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":112},{"function":"__ogt_1p_data_v2","priority":22,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13268)
Category:	downloaded
Size (bytes):	322582
Entropy (8bit):	5.570021526460415
Encrypted:	false
SSDEEP:	3072:zquGqHpxT2yaiJ9iVOZLNFChf3K0JjngvLMzU467dbeOKfy4WqM0bukMkVn:zqexT2y+VO9NFK38ymTqM0qkMk9
MD5:	AEB71564CCF022F406340D9A574BEDA9
SHA1:	073233C9B1179C3EE335FFD3CCD5AEAFA9C29CCC
SHA-256:	BA2942623D57AC5730BED9F66A8A6CF922F4BBFD72EDEA6BFFC9B2E9F711D046
SHA-512:	D93B74E1508268738D238F62041F4B5C19CE9EEA3D07CE267DC58DFC6381F493F514AB0A151D02A5EB0CAF35A0FB67F877E631CAD34152553F4F2EAFCA271659
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NFRXKCG
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"62",. . "macros":[{"function":"__e"},{"function":"__dbg"},{"function":"__c","vtp_value":"true"},{"function":"__c","vtp_value":"G-W7KF3XW372"},{"function":"__c","vtp_value":"false"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"environment"},{"function":"__c","vtp_value":"G-CBSMR1FX8C"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",5],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":["macro",6],"vtp_ignoreCase":true,"vtp_map":["list",["map","key","prod","value",["macro",6]],["map","key","dev","value",["macro",3]],["map","key","test","value",["macro",3]],["map","key","staging","value",["macro",3]]]},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_rep

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5490
Entropy (8bit):	5.436366017288857
Encrypted:	false
SSDEEP:	96:AOOEalwOOEaZFZOhOOEaMOOEahVc+udOOEaSZNAOOxMalwOOxMaZFZOhOOxMaMO5:YloQTEtmS+lSQ1OtcS9lBQWNtjST
MD5:	3F6D96F3ADCD0497DC946FEF5C797C95
SHA1:	3711D96E32FF90780235762108DFB8FBC88D6740
SHA-256:	51865FD1E27F59A9887AD7A6CB65200F8A49E2193A1CE04F4CD0F0D56120B31E
SHA-512:	B23C71B50BF2F6644EED1CE89E8B127BA0195466C29842B0AFCDFE196C9F1FB02EA3ABC16E7C05D4D1B5E795A5BCD6EA87D890CE9BB98E25C8BE2106C612AA38
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Montserrat:wght@400;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	4.78886240395924
Encrypted:	false
SSDEEP:	12:YSAWJrNvbQV8rArDtCgvP3QFWINegzhRsH5:YSpzfuCgv/gX7sH5
MD5:	CACCB58AE4356BCCE62271B2BFF2C55B
SHA1:	B9C526747E6E0131FCF7BBE2283F5BFCF01EDDE1
SHA-256:	DA3DBCD64128413A5AF9825B98E2BC118D6A99D3F680644368504B3FA6B96E4F
SHA-512:	2E9FFBB856F636439468BEADB5175CA47D3D52255A15AC372CF1A697A53D0418CE07DE4F6BFF8582055BD702E7C8B8C02460119DE1648E3BD131A70640D43F46
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.eu/consentconfig/171bc42f-3eec-4afe-be43-f3c81c141fa7/settings.json
Preview:	{"widget":{"enabled":false,"position":{"position":"bottom-left","distanceVerticalPx":10,"distanceHorizontalPx":10},"theme":{"closed":{"backgroundColor":"#141414","foregroundColor":"#FFFFFF"},"opened":{"backgroundColor":"#FFFFFF","foregroundColor":"#141414","highlightColor":"#1032CF","shadeColor":"#D6D6D6","changeBackgroundColor":"#1032CF","changeTextColor":"#FFFFFF","changeBorderColor":"#1032CF","withdrawBackgroundColor":"#FFFFFF","withdrawTextColor":"#141414","withdrawBorderColor":"#1032CF","detailsBackgroundColor":"#F2F2F2"}},"content":{"cultures":["it","en"],"default":"it","autodetectLanguage":true}}}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	23558
Entropy (8bit):	4.459213786361872
Encrypted:	false
SSDEEP:	384:cIDGvuz1auA6hS6mHj8NJjC2GCtAOkW8zQRaaWJpThRjO2cklyAXX:cfvZTHj8NJjC2GCtAOkW8zQ4aWJpThRp
MD5:	202DC1D3A3D8C03D75D9876C261F8572
SHA1:	EDE42C18EB02763CC409C26137BF25111FD98A3C
SHA-256:	98C2DD1F31ADF1D6F7B8601A712D10382BDE376E32CC0CB73548CA7A81FC9EAC
SHA-512:	0F1E89644E30AFAF58DA879009A942B197977B92FCC20396B1F7173CF7D641B891BD86CF2B3D4F96602E3AF16A02366C89240303B80A56CB45F2BBB31052B9F9
Malicious:	false
Reputation:	low
Preview:	...... ......................(...n...00.............. ..........>...........h.......00.... ..%..N!.. .... ......F........ .h....W..(... ...@........................................................................................................................................................................................................................................................................................................................................{.................9.......s..................y9.{.............................y;.................................................?...................................................................................................................................................................................................................................................................................(....... .................................................................................................................

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 78, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	19530
Entropy (8bit):	7.979767998989139
Encrypted:	false
SSDEEP:	384:enFFP3c36Dwyu7t6CNNHWxvA3XI0yntRVhaDtO9xwf7Sh66waRJsIKFlUf:ePPsqDwyu5dLUIHst5aD+lYaRVKFSf
MD5:	48E5E2AF6AD58498F04AA34D0742FA43
SHA1:	24BAA0EA542706DE02B1198B9BC8BF05D9DFA1D2
SHA-256:	16EA4E843AAB020D7578505EEF9FED7A3D5C19201C5207EE3335BAAA798E4DEB
SHA-512:	C22FF30002FABEB043B4A4343E627AE37A72550BAC0D7C8CBB7955840C70527B29BD7F400CC1990B90251E097292A5484025A5D583E7D19EC9FE8CE4279D0D02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......N......Qm.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:4AE819F6FBBC11DA85688BC2AEC50348" xmpMM:DocumentID="xmp.did:ACBAE13140B111ECB36F89C71F68C6C4" xmpMM:InstanceID="xmp.iid:ACBAE13040B111ECB36F89C71F68C6C4" xmp:CreatorTool="Adobe Illustrator 24.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="uuid:3f1da139-7a14-4793-be0d-8aca5b1f70bb" stRef:documentID="adobe:docid:illustrator:dd12bed0-4079-11ec-8655-8b19750c69ee"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default"

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	102415
Entropy (8bit):	7.973491238962925
Encrypted:	false
SSDEEP:	3072:qeCB499jdEXW3CqYoW2psnhkhImCdZPbdjdy:Qaz4WSxUpsnhFxdBJdy
MD5:	3BF59CDD759499C3D0B6845A6AF6C207
SHA1:	5B2DCEC8967ED29A1390D5F0DFC9AC820168C880
SHA-256:	C3EA5B5BFF6D74FC92C1645EDA1D60B12CF26582A9FD2A282DA83BD54D7BB2D3
SHA-512:	C3355B9ADF9F375C677DA379AD207CAF5709D8451773CAF5511B3674EAE52ADEBB750C874B7D9F7490F8736272D9A5699C025C47CE2F79C17B03E0E154102406
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-19T15:07:28+02:00" xmp:MetadataDate="2023-04-19T15:07:28+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:9fa02340-8bdb-2e4d-8c22-db253b7b47eb" xmpMM:DocumentID="adobe:docid:photoshop:761eb5ac-68b6-9a42-94cc-f48d687b6ef4" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2026
Entropy (8bit):	7.843430866451899
Encrypted:	false
SSDEEP:	48:Hyxf+pPiWMy+PsahphoJ+h9bsjByxz8yZiVzvuJcLH+rkSzbrR:Hyxf8kyes4dh9bloyZIvuZHl
MD5:	08F8E253C93289C60C70D0C9C6464598
SHA1:	53FB20928C735058DEC769174A2175A2B5549950
SHA-256:	60DF9FFCA364492CF4C5844A901589F60D68937CE0A4FB73241824898E5A7021
SHA-512:	BE51B4FCF70D3C97F352D9511FEA64140B0C2E7B2E14A38C81FC050E8C09A3B808E00676E3A12EB22CF67EC01D058CA2E7939CCDCC30F90A31EE0BE20F07B542
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/fatturazioneelettronica/icone/05.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.yl.U...r..-m...=.R.A...^.".DQQ.!...$x..x.(..R%@.T.l...P..-.S.P.m9.ZhA..........c.}........{.y.f......xnyyy...5.............8xc....~.'....~..Y..@ .....@ ......%..^.... ........n.G.q.B..........=7.4x..u....Q..R...f.^..a.......%p.\....&.~.2..G......s...f...r.yz..]P.S.u.....Y...Kx...\.#.).y.rg).%A=.A..Q...Y.6.T.88.....&..4.`9\|..!...........R.........\|.',hJ......`...8.... ...\..L.zn.....,h.p...........v.._C.E....W.....b.........{Y`d... w.G..&.S.../.-.=.E.....g.h...>...l#...;...W.\|.....#.../.?..r.L..ei.....r..S.mZo.hx.r......Jg.=..@......D....q.........NugA...a..bO...6.....mb...i..B....px.r.y.m.J_.r........2x.q.@%......!.%..H.#9.a....D,).;..."..b...R..S.KU.wgy...A..Y.Y..V@..<...H..5w@.'.p....D.0.......;..V.`.......5..#!..V`. ...4.... {K^.......!.u.0.d.8..).."..Q`. ....z...X.......k. ...y.....*.a...R....`.D.@+.e^yp..y.S.V..Y..0......?.........Y...p.u..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8240
Entropy (8bit):	7.83954280680851
Encrypted:	false
SSDEEP:	192:HkT8O90tU5d7LiJ5MLtV1H4Y7JmQppH2Im:HUh90K5dai5V1YY7JHpNm
MD5:	7295BA7D35C48A17A3785D22E0AD07F0
SHA1:	72B6FBCDCD8C7581E8C00C6776AE301CF9224CBD
SHA-256:	51BF303172B0D9105FAD5D37071C0AA98C3D76C2F36E68B57E5E5C8286A14873
SHA-512:	DC240AAE96D61E328EBD6E3A070AA1F5982B9F3A9D58A7D69546191152CBEC356BB30570BD6D24C977682F941BBEC7CB5ABA5D7DAAC223D97D1E68C3214CE037
Malicious:	false
Reputation:	low
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-sprite-7295ba7d35c48a17a3785d22e0ad07f0.png
Preview:	.PNG........IHDR...<...^......> .....gAMA......a.....sRGB.........PLTELiq..d..c..b..d..d..d...........c..c..d..E..e..d..c..d..d..c..d..d..d.....d..c..d..d..c..d..d..d..d..d..d.....d...........d..e..d.....d..b..`.....d..d.t........t...e..d..d.......t...d.p......d.t...............d....t..t...d.y...d....t..t..t............c9....d.......d...........d.t..............s...........s..t..t....w.....g..x...s..t..........c.....c........d....t.....!!.........U[n................uC..............c..b?5#.......y...................I=&.Q.r?..a........E.X7......r>.A..x@...j...u.D.....f..0..'#zc72.....B7$'~...........[..M..K.....K..^....T%!...H.zE..FUF+.-&..[.........R.l?..90!.L2........m..........^.I.d;...[as.X.O.YaO/iV2........X.Mty........9.......cj}.....lX3.....w..O.....n<.p=Db..U......"n.6g...............XTP..S.....vtRNS.........4.....y.q.F@.U.....=..6....e.."i....S..}Gt.?\,...a.j.....\...T.....F....B.D...K.[.c.z..;......m.+.3...D:....LIDATx....o......U,.:.@..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61602
Entropy (8bit):	7.951129667501272
Encrypted:	false
SSDEEP:	1536:6H4gb5/MrbqDZVlFOTj6klsAW6NxnNdcrWtikA3oKAg:Yl/wqDHlFOT2klvlNdNFtikOoY
MD5:	4F2F08A03EA6C5D8F1D36ABA6164945D
SHA1:	C5FAD5CD2FA9168F0FD4BFB6F270FFCF333AEEAA
SHA-256:	3DE486761DFB010E04A85783301CD27E4A1C9D3F3B3E16473FE542B20B7A88C2
SHA-512:	780ED042ABC694A04019C96B6B28E7799E64D876A0272DD67E1132F975D9A55A007415096BC392CD372E0BFB8C72719A4B86ABD7B95571AABAE12108BA416E31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-19T15:10:14+02:00" xmp:MetadataDate="2023-04-19T15:10:14+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:8ace8d7d-582e-b342-a575-46466da89775" xmpMM:DocumentID="adobe:docid:photoshop:78401544-f1f0-7a45-b479-ea6cdc4add4c" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	373477
Entropy (8bit):	5.475325393892637
Encrypted:	false
SSDEEP:	6144:DFk2s5SuQx4PVlFyITI7+QFIruk02OCACPBDNBOFpmy+pftESzSpSWu:RkznyITI7+QFz2OCLWu
MD5:	3908B94CB614FA38A89B3819D3B6BC78
SHA1:	FF1767440F9042B741AB29695F8A49F904EACA12
SHA-256:	EF2170318D7CBF0AEBDDCA5B98AC123F1D4DC00BA05108768CE7397BB1FBD596
SHA-512:	4700DA7EF9D91D36EFF4C2BAB6A38DB7AF7EC4ECFE101BC9C0C586BD762A6EB5BBB3BD41A4D0325CCF7B9EF75084AFEB7B91F4126EA73A04F0F6F7228C68C70F
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cc.js?renew=false&referer=selfcare.firma-remota.it&dnt=false&init=false&culture=IT
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#CybotCookiebotDialog .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner *{background:transparent;box-sizing:border-box;color:inherit;font-family:inherit;font-size:15px;margin:0;outline:0;padding:0;vertical-align:baseline}#CybotCookiebotDialog .CybotCookiebotDialogPromotionBannerWrapper,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner{display:none}#CybotCookiebotDialogWrapper.CybotCookiebotDialogActive+#CybotCookiebotDialogBodyUnderlay{opacity:.75;pointer-events:auto}@media screen and (min-width:1280px){#CybotCookiebotDialogWrapper{opacity:0;transition:opacity .5s ease}#CybotCookiebotDialogWrapper.CybotCookiebo

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
Category:	downloaded
Size (bytes):	23558
Entropy (8bit):	4.459213786361872
Encrypted:	false
SSDEEP:	384:cIDGvuz1auA6hS6mHj8NJjC2GCtAOkW8zQRaaWJpThRjO2cklyAXX:cfvZTHj8NJjC2GCtAOkW8zQ4aWJpThRp
MD5:	202DC1D3A3D8C03D75D9876C261F8572
SHA1:	EDE42C18EB02763CC409C26137BF25111FD98A3C
SHA-256:	98C2DD1F31ADF1D6F7B8601A712D10382BDE376E32CC0CB73548CA7A81FC9EAC
SHA-512:	0F1E89644E30AFAF58DA879009A942B197977B92FCC20396B1F7173CF7D641B891BD86CF2B3D4F96602E3AF16A02366C89240303B80A56CB45F2BBB31052B9F9
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/favicon.aspx
Preview:	...... ......................(...n...00.............. ..........>...........h.......00.... ..%..N!.. .... ......F........ .h....W..(... ...@........................................................................................................................................................................................................................................................................................................................................{.................9.......s..................y9.{.............................y;.................................................?...................................................................................................................................................................................................................................................................................(....... .................................................................................................................

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (427), with no line terminators
Category:	downloaded
Size (bytes):	431
Entropy (8bit):	5.347823414833305
Encrypted:	false
SSDEEP:	12:qTEuxVDEeR/gH/sI0llokRt/Jq5e/mvRDEetI:0EuxZR/gkrlllRt/qee9+
MD5:	875927332F52C86065894BA05CABB6C4
SHA1:	EECFFDA9610D7210201786C268A07E9CF6B5CCEB
SHA-256:	270D2FB55AA801662897590A27EC1C152407FA36BE1D6678C27FD8C1859239E4
SHA-512:	CF4CF396621A0A581160A4A1181A55E1E76DAFBE45B81079C008ECB4D139D33AD1FE66540061F83F13CE6F54837E9886ACFBAA8A0A38F0F983701378BA6DB990
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/informazioni-profilo.xhtml?faces-redirect=true
Preview:	<!doctype html><html lang="en"><head><title>HTTP Status 404 . Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 . Not Found</h1></body></html>

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11312)
Category:	downloaded
Size (bytes):	11350
Entropy (8bit):	5.166368638121566
Encrypted:	false
SSDEEP:	192:Sz9JXY5XaqjPPQvq9ERQByXNrIT0P+Ryhy/y05yWy3yryty96y/Cuy1Ryrayvy5V:Sz9JXY5Kqz4C9bByXNrIT0PMyhy/y05C
MD5:	D5F3C03230344A18CE90677A745DA12A
SHA1:	CA4F74D31DDDF789C6AC6FAAD299209B25B435AC
SHA-256:	D27F65A086D5473244BDA4AB5FF122B6F26853E5ECB77893B11E99494405DC4E
SHA-512:	D12E0E0CB6CD0ABA04FF86C0B56806970D50E453A3C7C912FE4726DC72EE5B490291730AE5192C1C43C8F703970BAB923FD08DABD5EEFEF00DF7BDA172F4A50E
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cd.js
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.void 0===window.CookieControl&&(window.CookieControl={}),window.CookieControl.CookieDeclaration=function(){this.scriptId="CookieDeclaration",this.scriptElement=null,this.isInternalAlias=!1,this.geoRegions=[],this.culture="en",this.userCulture="en-GB",this.lastUpdatedDate=null,this.init=function(){var requestParam="",d=document.getElementById(this.scriptId);function getCookiebotDeclarationJumpUrl(script){var scriptSrcParts=script.src.split("/"),baseUrl=scriptSrcParts.slice(0,scriptSrcParts.length-1).join("/");return baseUrl+"/cdreport.js"}if(!(d&&"script"===d.tagName.toLowerCase()\|\|(this.scriptId="CookiePolicy",d=document.getElementById(this.scriptId),d&&"script"===d.tagName.toLowerCase()))){for(var tagsAll=document.getElementsByTagName("script"),i=0;i<tagsAll.length;i++){var currentTag=tagsAll[i],currentTagSrc=currentTag.hasAttribute("src")&&currentTag.getAttribute("src").toLowerCase();if(currentTagSrc&&currentTagSrc.match(new RegExp(".+cookiebot.+/

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17699)
Category:	downloaded
Size (bytes):	18294
Entropy (8bit):	5.635268705885141
Encrypted:	false
SSDEEP:	384:zivzvbYTbwlubOX65o6sCqYf3eae+RrN5vyyA:UvOVqe1spYmaec56R
MD5:	C574B81B0185052C9ADE18167DEDD04A
SHA1:	F4F4A197DECB45BA3DEF3E947E89E7CA7ED6E52C
SHA-256:	69FC80852D90B1EA7847C901FADDF6EC2B74C848ADBA398F7F21E8AEB006717C
SHA-512:	70009063FF0B24385B6B3633ED3B615846872D4BD8FA4A92B9C8F22B8986C95E7BD4B594C1E3D23CB8D24EFE2ED32D143AC6DBECCD64D43D4092EEF945A02911
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var Z=function(t){return t},Q=function(t,T){if(!(T=(t=null,B.trustedTypes),T)\|\|!T.createPolicy)return t;try{t=T.createPolicy("bg",{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(m){B.console&&B.console.error(m.message)}return t},B=this\|\|self;(0,eval)(function(t,T){return(T=Q())&&t.eval(T.createScript("1"))===1?function(m){return T.createScript(m)}:function(m){return""+m}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var F=function(T,t){for(t=[];T--;)t.push(Math.random()*255\|0);return t},X,tX=function(T,t,B){if((t=typeof T,t)=="object")if(T){if(T instanceof Array)return"array";if(T instanceof Object)return t;if((B=Object.prototype.toString.call(T),B)=="[object Window]")return"object";if(B=="[object Array]"\|\|typeof T.length=="number"&&typeof T.splice!="undefined"&&typeof T.propertyIsEnumerable!="undefined"&&!T.prop

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	5.325258465232942
Encrypted:	false
SSDEEP:	24:33OYs21RVc+u/r3OYsPwy96DGSSfT3OYN7cRVc+u/r3OYN7jwy96DGSSf7:HOL21RVc+u7OLPN0oDOCcRVc+u7OCjNn
MD5:	588C46A7C63BCD4C98B95D8D97BB95D6
SHA1:	4FBF0E425D2FD266D88072884983B003349575DB
SHA-256:	C71C144709E243473601E175ACAD7CD2D31BC7883D9DD7278CE6C5B74A06F9BF
SHA-512:	498F88BD12A462B4802B665D9A6CE1410CD73C9C76F108A40FD6B0A88CEC62E628070BD87CD14680E113AF7A00C9E1627480BF3265BB6B9C6F4E4E6343B3B275
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:400,700&subset=latin-ext"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 375, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	7.636232307899128
Encrypted:	false
SSDEEP:	24:UoSDxElA0opylIQ7OrDKN0XukvS1qhKixzfryWbfDbGxboD1:UomKa0opylr0DKaXC0ASrf/CxMD1
MD5:	7F53D7B4EF5EF79D5B90D9F0D4A10C75
SHA1:	017944C6803608E56C0A0FE98F656DD86247452D
SHA-256:	73BA5C1DCDAD0BA447307D9DA6C28459B38B35C643439C70ED1F82BD1C136F80
SHA-512:	66F2050FC78CF872EDC59A4E9C5C6308AD8E9A0617E7E13F55F2D1CD1F8B016F10ADF5A66B8DDE6629D0C33B4F155A73F1CCDA87542AAAC9FDC0BACC0C921CBF
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/left_divider.aspx
Preview:	.PNG........IHDR.......w.......,'....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..\.n.0..D..?..B.....B..i/;.1..c/.q.bc}..!D...e.,K.DT..b.@....#!Yh..mf!..........Z..M.i...y.........,.D-U...E..m.....D.J2C^.......^..i...Qc..-..#...03@4.-.F.....g.9.D..D..v...D...k..ha1....1...(.D)I...\|.s].T.5..@P0.7.Z...)...m..)...pw/D.Y.m>..[.1.n..3.y....#A......Yh{..w...s.....e...w&..1.Z..h..I-..<...4)6...f.....Z!3C.;..mvc..t\|.H.xq$.wR;..VG.E^..d....@...3.b).@+ .^....}...$.!.1...%..D].;.Q.B..;..&a.......y..P&4.F..."SZ.:C\..Z.a...H.....Np....k.A.0F..l-..zvw....F..O.z#....c..;+$...i.y.K......p...L.."sa .....l.E;..81..[;.WX...Dc..=.^N.Z..&...:s/......Vpd>B.Y*..).e0..U..%..V)...M...%.}...h#...L.-.u ...?.\..........."..s/.....je.N@..Z..hy.&..X....:rS.y7..B....}.4.A.......IEND.B`.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1143
Entropy (8bit):	7.6481183499590335
Encrypted:	false
SSDEEP:	24:ARKCJE8Qmi/R7cbU5fmS/txIH4oojkHFtBYa4xV8WGSJOMg64N:onQLZfeSszoAveayJn/q
MD5:	7AF468673780C76F84C2E5A08DB5DCE7
SHA1:	5B9812DAE619300CE093F98E12FB78E5B6AFF536
SHA-256:	98166B0EDF25E8C81855E42E4E5144E343CB8E705B0881DBF6594F63977E0881
SHA-512:	3DF85767EE849759DC1C78188674DA47D18126FEA4210A1D6C267B8E692E348EDE672980471FBFBAF708CFBB06FDE7959674B209164135D528EEC71F325F3C64
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.ih.g..w.g.hIU.^....`Q+..!.x..U+(V.....j-..... "j.../..QP<R/.......)%..P%m.L"E.......l..a....?.#..?3;......]466.mkkk.T.........H$&ZQ....loo....Y...V .r+EQ....}...Ia-.gy.a....~.=../............6.U....../Rs.`<.....\....)].e8....6e...s...0_.B.6.3..1e..W.....yt......ks=.....(D.......38.......h.........."PH......{.4..p=<...2.7UH..^.o..0.g....3.c..7.G.9....oJ...5@.....P..(D........h.B4@!....P..(.W....J..~..`.....Z..7.yp..`-cCT...........P(1...q..x].g.Cp..}=.g}.~....p....B.y._.X9<...>...Uii.x...H..G .u..&)~..M..w...2....8$5g(..c8...D.I..&;...3..........Zm..<.y.v.<.y...i.>..e.@.h..G^....D..X..l."W....!C....v.>.0<Qm.....K.0;.....n[j+CWG.F8...,\|..8...........X.ug8.7Nm..c.ix.=h..W../.$.a..`.A.`..5..+....vSf8.g.2'.....v;cpl.........-./..W....P..(D........h.B4@!....P..(D........h.B.*.u..N...`Q<...]w3d../...9.y..~#.......p.C..~..7.{6@.........@...\|P.S......1i..b..$.w...

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	682
Entropy (8bit):	4.580542254038192
Encrypted:	false
SSDEEP:	6:UpKHs2vXLML8vV0ExB1YL4P+TthndeFX+AFFhQAAMvD0KQJ2+TtipKQ8eFXkhKTa:Ux2jML8aExcEQattQAAEA7a6KT/mFZaC
MD5:	2F3659081E4AB84CDC6AB774B3FCF71C
SHA1:	4D935AB7A0669B6BBE3B314D9CFE3800C52C6C42
SHA-256:	2F3D5B4CC54E226A0D5C1C89C0A2A16CC11550439D8DA02E8F1392ED7D187CA9
SHA-512:	8135B4C78D78C320F8E593FDEAD84B16329FFD7FE80684EDF369CE1E2FC341002451DD12E944204E57D536663CACC22E4F67AE114123859F13570B5EE6D79A2D
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/cookiebot.css.xhtml?ln=css
Preview:	/.To change this license header, choose License Headers in Project Properties..To change this template file, choose Tools \| Templates.and open the template in the editor../..#CybotCookiebotDialog #CybotCookiebotDialogHeader { display: none; }.#CybotCookiebotDialogTabContent .CybotCookiebotDialogDetailBodyContentCookieContainerButton .CybotCookiebotDialogDetailBulkConsentCount, #CybotCookiebotDialog #CybotCookiebotDialogDetailBulkConsent .CybotCookiebotDialogDetailBulkConsentCount { display: none; }.#CybotCookiebotDialog.CybotEdge #CybotCookiebotDialogBodyEdgeMoreDetails a { outline-offset: 10px; }.#CybotCookiebotDialog #CybotCookiebotDialogDetailFooter { display: none; }.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	6.391315216640826
Encrypted:	false
SSDEEP:	48:pha4knA9WIrSBztyCT3+HKLS30nHdoiwzezcD:pnknmWIr+QNHKL3HdoigwQ
MD5:	526A9150937FBE4974358F6BEFF35C9A
SHA1:	CF59FEBD0CDCB6D0EBB9527DFC27454A4E83D4E1
SHA-256:	1FD217BB667A651305283289756BC1356FE2DF5ABCC9EBEB3755155176576C4E
SHA-512:	B4F6A937C3B75D3291B4F722A93941D25BB752C43AA8BA33C9191CDB385AC9A02591A04AADE2A641C4868B01C57025D4C4543FE35B1FABDB61A3A1EED2E14D03
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/c2/c2edb09a-2ff0-4492-9862-889c36c94b3a.png
Preview:	.PNG........IHDR.............;0......pHYs...#...#.x.?v...2iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 137.da4a7e5, 2022/11/27-09:35:03 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.1 (Windows)" xmp:CreateDate="2021-10-30T14:05:38+02:00" xmp:ModifyDate="2023-02-27T17:02:50+01:00" xmp:MetadataDate="2023-02-27T17:02:50+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:2c0ef833-3876-c849-b9a3-f40dab07a6c9" xmpMM:DocumentID="adobe:docid:photoshop:937a8a17-04ec-b14c-bbe3-ba257032b74a" xmpMM:OriginalDocumentID="xmp.did:ddeb9

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2017
Entropy (8bit):	7.828179860916644
Encrypted:	false
SSDEEP:	48:RNAOvl6GDawFI5KEI/8RE/m1QsldFmNam45k7zAwEO6:nfQAwuv/muiHeAo6
MD5:	15669440DD604063E343073EAA3F0B22
SHA1:	8D6D0E995E4C5505FB1C94F59227DD2F510567C9
SHA-256:	722D46AA2624626A2C58F535CEFBEDB2009B823CCB9DEC05B7122708D44CD550
SHA-512:	42C3E1C6E3936D0F7E4FD6B93F6BCD03DE4B12809D377A1ACF2F5E7981DC03352AE37F335418308A06B98BD4C2C454D8C8AC8F49EEF85FBB7BCEFFF335907D88
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d...vIDATx^.oSU.........2[...n.n.7 .L....(.:.7..B0A$..QT..`......P..T.*.G.u.1:1...a......9Wj....m.w;....{....8.K.Ba-...6].p..V)Bg.m8..\|Ccc.M2T.A.a./^,.IJQjnn.G....R(...B.P(,.....p..mt:.K.v..(......j....(..C ..x.QL.M:......d.p.%F..q./...9.K 8...W......I.g.9.0....a.E.....6G$......7....g..2..Y..\|,}S...h.Lv{..{_..@.5.k2..Y.`.)P~;n.e2....SXv....`.Lw{\...0..4$.....IE!...[ .....zER....'}S.<n..e......R7.!.....!....W.7..}5...w.t..:c.^..v..,.\.Q.....i...._(N...yGa_...@.j...Bd.MDz?..".v.N........WA/..X.8.J:...Y...x.Q.O.<...Xg.........=P..1?..........+Rm...vK?.f.........o.f..D2).B].Thk...?....G]......&.!....z.@].....V0..p..]'>wS.@^...K$.f..^......2....9h.p[...~{.%......_ ....$..b<.\....2@.......`w@...K.....q.G.W.8Aj...........q.$Ql.@6z>...:...5..$.;.Kp.1...Q..d..6..(.......ST....i...A2K.s.\S9.....p.1..`....;_$.S....S.o..../.b...7.......r'`..ji...:.......+....+..\|.k..I.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1398)
Category:	downloaded
Size (bytes):	5880
Entropy (8bit):	5.505644453433215
Encrypted:	false
SSDEEP:	96:mMnZjDtHiCfTRxaJ/ooYoniofvlkcbH44XXOIqZ06R7/rLbsT1YU3wJzCsUEI+H:mMXiQ2JwoYonioVfdFY1cjGLH
MD5:	C0CB00C1A15BA9D1ACE2E7209C7CC1DD
SHA1:	2E04DAEB47A09B496DDF990F54386B9BCB70A876
SHA-256:	97A89A067B3CE2B30375303C8D876DE173618FC8349DD5E883F4939511D5294E
SHA-512:	CF5AA4B411CF546209C386441C6E1ECAF7C7069C45744A821C2EA6BB748A7282005E18BA72A6131346430312ECC6C7DF446F27F34B22CD109D655C0FF8152604
Malicious:	false
Reputation:	low
URL:	https://w.usabilla.com/ce67dfba33a7.js?s1
Preview:	(function(){function l(){}window.console&&window.console.error&&(l=function(){arguments.unshift("Usabilla Feedback: ");window.console.error.apply(window.console,arguments)});.(function(a){function m(f){return"function"===typeof f}var g={},h={},c=[];a.v={window:a,document:document,pwin:a.parent,pdoc:a.parent.document,prod:h,rtc:g,isFunction:m,isArray:function(){return m(Array.isArray)?Array.isArray:function(f){return"[object Array]"===Object.prototype.toString.call(f)}},extend:function(f){for(var d=arguments[0]\|\|{},b=1,a=arguments.length;b<a;b++)for(var c in arguments[b])arguments[b].hasOwnProperty(c)&&(d[c]=arguments[b][c]);return d}};a.v.global=a.v;a.m=function(f,d){function b(){for(var a=.[],c=0;c<f.length;c++){var e=f[c],b=null;/\[\]$/.test(e)&&(e=e.substr(0,e.length-2),b=[]);/\{\}$/.test(e)&&(e=e.substr(0,e.length-2),b={});if(!(e in g))if(null!==b)g[e]=b;else return!1;a.push(g[e])}h.apply(d,a);return!0}if(m(f))return f.apply(d\|\|a);var g=a.v,h=f.pop();if(b()){for(var n=[],k=0,p=c.le

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 44, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1732
Entropy (8bit):	7.407515851731747
Encrypted:	false
SSDEEP:	48:WRl/LPPtOoLkOThG/Fu4zYzEsR1s4W+92U+hLm:WR1PPwIUu4zYgs1W+Etm
MD5:	C5D71B3F5260B7D42423CF6A1112DE4C
SHA1:	79E6595BA72555A97F6D5E5C281EEC925DFCC0BE
SHA-256:	490E57EC6C835FD6B96C15652A4ECAA500D9C61131A0C8C4306D3867414F16D3
SHA-512:	E9F9887DB901F626D36D576EBDCAC44E6B564D4C62EDB355EA05B78017B703AA6EECBBC9DB48C39B47B3F2921B1E24EE86B809FD66C89DE1611BD50E14F51A1C
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/logo-actalis.png.xhtml?ln=images
Preview:	.PNG........IHDR.......,.......Q....PLTE...qrqdkpqrqpv{qrqqrq......qrqqrqqrqqrqqrqqrqqrqqrq.Bh.Agqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrq...qrqqrq...qrqqrq....Bh....Bh.Bh....Bh.Bhqrq.Bhqrq.Bhqrq.Bh.Bhqrq.Bh.Bh.;d.Bh...Ml........@fqrqqrq.Bhqrq.Bh....Bh.Bh.......Bh......(Pq......f}..Bh.Ej....Bh....Bh.Bh.Bh.Bh.Bh.Bh.Bh.Bh.Bh>a\|6[y...........?a\|4Yx............................Bh.Bhqrq....:c....@f.=d.........tRNS.O.....O.......^G%......Y...`]U93...wC>.+...seL..}l#.............U/'$...........~K65...............tofA........}qa]YXWUI=7(.4.....CIDATX...gS.Q...7...t4!..I.$t....(..{.w.gm..w........Cvfsg.I.}3......f.<......kZ.._.{......t...+.m...g..._....=....q..X!~;.?......e..Z..w[4.r.Km.f.....-1.9,.Sb.i,....]8f..f.........i..@ ..%..+..&..$..> .L....I.K...6.b./..No........h.L.p...a0.. )RK.+.d...L..)I.....I.]..;......c.e..........X.HO$"*.>=..B.R\|...b......$.D..r...b........p.6<......4.H......:M.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39555)
Category:	downloaded
Size (bytes):	39675
Entropy (8bit):	5.1342759725862095
Encrypted:	false
SSDEEP:	768:ep/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:dorXfURXiUrmq5YW
MD5:	1230BA7F666A12444FFF6052A5AC6E10
SHA1:	5C65DEC48DA0A16AE9DF58D71D7EF444968DF897
SHA-256:	6DB0BB8F0B7A8E36D6D89ACF7BDDA9565FC0129414592BD8009F23098F6755F6
SHA-512:	40883A5CD0F6E8A6395BAFCCB8958EFCFD53CB77608ADEE1B805CCE1EB4A74C34BFE319E8EF656F1C33AD3DF2ABAF24D3FB91801227725280D52B50BEAEED5A0
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/95/9505a537-5daa-4599-ae7c-06d617f4b53c.js
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/).* Copyright 2011-2019 Twitter, Inc..* Licensed under the MIT license.*/if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.special.bsT

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 168 x 78, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	19530
Entropy (8bit):	7.979767998989139
Encrypted:	false
SSDEEP:	384:enFFP3c36Dwyu7t6CNNHWxvA3XI0yntRVhaDtO9xwf7Sh66waRJsIKFlUf:ePPsqDwyu5dLUIHst5aD+lYaRVKFSf
MD5:	48E5E2AF6AD58498F04AA34D0742FA43
SHA1:	24BAA0EA542706DE02B1198B9BC8BF05D9DFA1D2
SHA-256:	16EA4E843AAB020D7578505EEF9FED7A3D5C19201C5207EE3335BAAA798E4DEB
SHA-512:	C22FF30002FABEB043B4A4343E627AE37A72550BAC0D7C8CBB7955840C70527B29BD7F400CC1990B90251E097292A5484025A5D583E7D19EC9FE8CE4279D0D02
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/content/chi-siamo/bureau_veritas_45001.aspx
Preview:	.PNG........IHDR.......N......Qm.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:4AE819F6FBBC11DA85688BC2AEC50348" xmpMM:DocumentID="xmp.did:ACBAE13140B111ECB36F89C71F68C6C4" xmpMM:InstanceID="xmp.iid:ACBAE13040B111ECB36F89C71F68C6C4" xmp:CreatorTool="Adobe Illustrator 24.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="uuid:3f1da139-7a14-4793-be0d-8aca5b1f70bb" stRef:documentID="adobe:docid:illustrator:dd12bed0-4079-11ec-8655-8b19750c69ee"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default"

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1128
Entropy (8bit):	6.475934272673602
Encrypted:	false
SSDEEP:	24:e1h4SHWwjx82lY2T3/Vq5aWDaoyJ3VwabuapGeKa7Jfvuc6+:kKS2Nn2DooJ3RaiJl
MD5:	4516813F55D3709D5A28F584CF61B58C
SHA1:	A0AF1499BEC3741F0C96CEAB2E36A4119DAA18DB
SHA-256:	9E61AEFA5BA1C443F01F6617E1B4381EAF539BDFBA6365899D7CECC2A32C7DEA
SHA-512:	87A770F3E84EFCB08EEACB6FD9CCCF022DAAC961CD82E96D5DBB2D69896E48AE5534A69E0EFFFADAD26B96129334FEB8BF1229B53613A6EAABDC385E727B4C40
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:55C7FE9F96A611EBBE8BA71D2AF53714" xmpMM:DocumentID="xmp.did:55C7FEA096A611EBBE8BA71D2AF53714"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55C7FE9D96A611EBBE8BA71D2AF53714" stRef:documentID="xmp.did:55C7FE9E96A611EBBE8BA71D2AF53714"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.6}.....IDATx.b...?.@.&......ZL;..N.......I2....-^.....^C...B-+.......x...4.....ZX\|.jx.........'....HpiPu'(.....@..Jd

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1400), with no line terminators
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	5.033465022432627
Encrypted:	false
SSDEEP:	24:Uj8qfxguGtkEX6OtG8vfJKSWa9PtjMvaytTkoGhw7nLAvn:Afx3Of3J0a9PtAZ6mLU
MD5:	07A7836BD0D4DF59762AEDFBDAD80EC2
SHA1:	56ACABBFD8341B03B5DB62249A390DBA518F6F02
SHA-256:	7B7E8FCD402A23C2ECCAA3AE53EC80419A6BAA580BDF780EFBF1E1B2213C1BE9
SHA-512:	CFFBAC80F219DF0C9D32B351E73115F8C6DBEC96FA544DA7E02320A8D1B5233FC66D6575D4675F8B6B650BAB7C6F1E6D0F8ACDC7D9A5434B9443FD333404C35B
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/1a/1acdceb7-8dab-4494-aba5-85e359cde5f1.js
Preview:	!function(e){e.fn.menuAim=function(t){return this.each(function(){(function(t){var n=e(this),o=null,i=[],u=null,r=null,c=e.extend({rowSelector:"> li",submenuSelector:"*",submenuDirection:"right",tolerance:75,enter:e.noop,exit:e.noop,activate:e.noop,deactivate:e.noop,exitMenu:e.noop},t),l=function(e){e!=o&&(o&&c.deactivate(o),c.activate(e),o=e)},f=function(e){var t=a();t?r=setTimeout(function(){f(e)},t):l(e)},a=function(){if(!o\|\|!e(o).is(c.submenuSelector))return 0;var t=n.offset(),r={x:t.left,y:t.top-c.tolerance},l={x:t.left+n.outerWidth(),y:r.y},f={x:t.left,y:t.top+n.outerHeight()+c.tolerance},a={x:t.left+n.outerWidth(),y:f.y},s=i[i.length-1],h=i[0];if(!s)return 0;if(h\|\|(h=s),h.x<t.left\|\|h.x>a.x\|\|h.y<t.top\|\|h.y>a.y)return 0;if(u&&s.x==u.x&&s.y==u.y)return 0;function m(e,t){return(t.y-e.y)/(t.x-e.x)}var x=l,y=a;"left"==c.submenuDirection?(x=f,y=r):"below"==c.submenuDirection?(x=a,y=f):"above"==c.submenuDirection&&(x=r,y=l);var v=m(s,x),p=m(s,y),b=m(h,x),d=m(h,y);return v<b&&p>d?(u=s,30

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2487
Entropy (8bit):	7.019952120458044
Encrypted:	false
SSDEEP:	48:x/6N7D4knA9WI0vtcyUsA4+3KH7y3rHIWZg6Xt3DKwgjSt+rg0KU0:xSh8knmWI0vOyYGH7eHISg4Uwv8g0p0
MD5:	3EB7E751733C89A7D65A7E3E4C88EC2C
SHA1:	0050424B7C808C0B63DBF7B8654C525969BC0247
SHA-256:	9D621A6C51F94E245AF55B94B920C9B6C5D51EFF84EB9315E8E3D80BBDC940B0
SHA-512:	A5C9370E448999B71DFB2398AD7BBA56750D7500E4532FB86B04B9BFC5F11FC8687A84ED5A91EB46156FC7E6879FDECA4F9B442E6186AD86E1AAAFFAB01B4161
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/b7/b702ef6e-83da-42ed-990b-c406828a18c8.png
Preview:	.PNG........IHDR..............w=.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Windows)" xmp:CreateDate="2022-10-04T15:32:09+02:00" xmp:ModifyDate="2022-10-04T15:46:59+02:00" xmp:MetadataDate="2022-10-04T15:46:59+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:a01d615e-e758-8b44-83fe-089ba1a221f1" xmpMM:DocumentID="adobe:docid:photoshop:24d09671-cd38-444c-8941-a1e3cec18227" xmpMM:OriginalDocumentID="xmp.did:e7b17b

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 44, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4570
Entropy (8bit):	7.913453778959953
Encrypted:	false
SSDEEP:	96:7HAQU87SGhFzuzXK5XrcOEbGvZu9eEmszKFSKt3MpLpRQ:7HPRSGho7KVfvZu9eEmsz43MpNRQ
MD5:	23C7EBA60E4607E0FD4A0AA87F863B46
SHA1:	870A66E2059CC7DDB6DF0C214924C2AD3B454C22
SHA-256:	87132EED1FC1EB394C5BE278B23F5A3D164B89F63DDEC689C9B37DCD71D22EBE
SHA-512:	19DE9BB384216F77E5CF671DD94FB178C74322209853E15E04DA13A08958B3FBBFD50FFCE6738C88581209D617D9F3A54332AFCC5A292EA57DF930DD5EDE248D
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/logo-aruba-pec.png.xhtml?ln=images
Preview:	.PNG........IHDR.......,.............PLTE.............ts.........zzz.rqzyyzyy...zyy......{zz\|{{zxx{zz...xww......}{{\|\|\|.........~~~..................zyy...}\|\|...{zz.........xxx......\|\|\|............{zz...~}}zyy...{zz{zz{zz............yxx{{{.........{yy............zyyyxx}\|\|.!....yxxyxx~}}{zz............yxx.5-..................}\|\|{yyzxx.!....s...$.~}}.0(i..g...)"P.....p.....ywwywwm...'.o...4...k.....t..u..p...%.............r..\|{{.........{yy.+".;3.'...&m..n...-".........{zz\|zzxvv.5-................' .( .&................................TJ.OE.......RH.......'..H?....KA....F>.6-.+!....A9.91.YO.QG.ND.>6.KB.#.......]S.B:.A8.( ....G>.C<.;3..'.......kb.^W.E<.4-.............cY.......ia.>6.>5.-&.&.."........JF.4,.0&."...........#.....SM.70.5-...z......UK..'.&........+$.(".%.....PF./+..........84......m....tRNS.....$.....Y....l#.]*..ge......G....;0.vl62+.....tpVOB<.....yr^O.....}..xcHA7..c.......S......v5........_J"....?,%.............lQ92......zjU=....a.V.....IDATh..ILSA..BA.C/.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4036), with no line terminators
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	5.322915920941288
Encrypted:	false
SSDEEP:	96:yx36hx5DiEcXrasmw2Iw2JYwut4D8OGKQa6dC:NmrNmw2Iw2JjWC8O7eC
MD5:	78B3A4445C5C913A617366319A3EA25B
SHA1:	E59BF900F39DED98D067E541F5F6387A37402B53
SHA-256:	A18EBD731B20D7404E2EED45AD15A0E9068EC7C4EB6D95DA6727C086E366227D
SHA-512:	BC7B52645656A97B56D628AEAFB2B446ABB74D23F0219192CF0EB6F3DB9BC6818CB9D7703CC85155DAD2F1F328E67BBBBF7DC2B6FE546EF4B8CB6DECCA3FB66A
Malicious:	false
Reputation:	low
URL:	https://tags.creativecdn.com/02DMJn6RqhevYZYcV7wq.js
Preview:	(async function(){const a="rtbhEvents",b="__rtbh.",c=["uid","sid","aid","eid","lid"],d=31536000000,e=[];if(Array.isArray(window.rtbhEvents)\|\|(window.rtbhEvents=[]),window.rtbhEvents.length&&!window.rtbhEvents.push.prototype)try{function f(a,b="ams"){const d=document.referrer?document.referrer:"";return null===a?void 0:function(e,f,h=null){try{const i=f.filter(a=>!c.includes(a.eventType)&&"init"!==a.eventType);return g(`https://${b}.creativecdn.com/tags/v2?type=json`,{method:"POST",mode:"cors",credentials:"include",referrerPolicy:"no-referrer-when-downgrade",headers:{"Content-Type":"application/json"},redirect:"follow",body:JSON.stringify({v:"v0.1.5",sr:d,su:location.href,th:h?h:a,tags:[...i,...r]})},e)}catch(a){}}}async function g(a,b,c,d){try{const e="function"==typeof c?c:()=>{},f=await fetch(a,b),g=f.status;if(200<=g&&300>g)return e(d?await f.json():await f.text(),f)}catch(a){}}function h(a){try{return JSON.parse(a)}catch(a){return null}}function i(){const b=window[a].filter(a=>a.ev

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	4.769994180290892
Encrypted:	false
SSDEEP:	48:izuPGDwdhQBNt+MifFHxpG2mveMtMoQgfPneG9A/R84jH2EZ7fPzP4D4lJEm4b/6:iNNt+MiZxpx0vfPP9eZ2dD4/Em0CDnx
MD5:	964FAE3A6F3ED5073C3AACD044FEBA10
SHA1:	A971FF26D63244DFF17B175DA96444E1621EEF06
SHA-256:	8F8B484C443F9BB7B586F04AFEF77CE9F4A1BF6976E09193FC320C46AF40E042
SHA-512:	9E55CFFB85197C4CC956B2338D4A0DDB71ED832771083102FA1F106D3866B5B66119009395ACB3D940A57952D8E88822CBFE9D0B0D9F179C4C28DF3E606F20AF
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/d1/d192b3cf-9715-4429-8907-ea7356836312.css
Preview:	@charset "UTF-8";[class*=" pec-"]:before,[class^=pec-]:before,[data-icon]:before{font-family:pec!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@font-face{font-family:pec;src:url(/MediaCDNRepository/files/8e/8edfce0b-fcfe-4573-9aa2-559e4939c0c9.eot);src:url(/MediaCDNRepository/files/8e/8edfce0b-fcfe-4573-9aa2-559e4939c0c9.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/11/11276767-167d-440b-96e9-342596c727b5.woff) format("woff"),url(/MediaCDNRepository/files/9b/9bf90db9-8dcf-4630-803e-7e85b1cae9c5.ttf) format("truetype"),url(/MediaCDNRepository/files/f3/f300d965-4184-40d9-8480-a00623df71f1.svg#pec-svg) format("svg");font-weight:400;font-style:normal}[data-icon]:before{content:attr(data-icon)}.pec-aruba-key:before{content:"\62"}.pec-sim-card:before{content:"\47"}.pec-smart-card:before{content:"\49

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	5.143049113812332
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3ezJLM4KCezocKqD:J0+oxBeRmR9etdzRxy17ez1T
MD5:	18FFB59B61525F781CF9251045BE575D
SHA1:	BD7318B00B15B7A1C8A48524419FA2E5C27A5B6D
SHA-256:	B6682CAB65D3243B5B75EFB7279DBF49491957484780F2BA0A87632CC0E25642
SHA-512:	A032F853ABD9492232E1183D1CB1D14110B623F2E9DEC56B7B64DD576A0317DDA8D51125763E11D6642433C5364B2BD10A994EE4F1514629A4950BBAB3ABA499
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /favicon.ico was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2487
Entropy (8bit):	7.019952120458044
Encrypted:	false
SSDEEP:	48:x/6N7D4knA9WI0vtcyUsA4+3KH7y3rHIWZg6Xt3DKwgjSt+rg0KU0:xSh8knmWI0vOyYGH7eHISg4Uwv8g0p0
MD5:	3EB7E751733C89A7D65A7E3E4C88EC2C
SHA1:	0050424B7C808C0B63DBF7B8654C525969BC0247
SHA-256:	9D621A6C51F94E245AF55B94B920C9B6C5D51EFF84EB9315E8E3D80BBDC940B0
SHA-512:	A5C9370E448999B71DFB2398AD7BBA56750D7500E4532FB86B04B9BFC5F11FC8687A84ED5A91EB46156FC7E6879FDECA4F9B442E6186AD86E1AAAFFAB01B4161
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Windows)" xmp:CreateDate="2022-10-04T15:32:09+02:00" xmp:ModifyDate="2022-10-04T15:46:59+02:00" xmp:MetadataDate="2022-10-04T15:46:59+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:a01d615e-e758-8b44-83fe-089ba1a221f1" xmpMM:DocumentID="adobe:docid:photoshop:24d09671-cd38-444c-8941-a1e3cec18227" xmpMM:OriginalDocumentID="xmp.did:e7b17b

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (42028), with no line terminators
Category:	downloaded
Size (bytes):	42028
Entropy (8bit):	5.21461412847137
Encrypted:	false
SSDEEP:	768:6NoxKhiT+cEUtMNBQBpxujOwrk+6xbyUlbyUMEMMl2oaQV0bkIkGnwhNrHaRtMIa:ZcJUtMNBQ9uiwrl6xbyUlbyUMEMMl9ac
MD5:	A740D91410782F4D0707B7DBCDBAC4FA
SHA1:	2FD650711E0A32698F6BB35A1D3785A55B99D39C
SHA-256:	B9A50C7708B787F2EC6D728CDC1055066D5EE7CD83EDEC6DD84626D07AED6EDF
SHA-512:	8A5A0BD835DFB05270B95BC1708D00E4C3243593BB04C4088B5D20E8BB0A914FEECACCC9E84481EF3FDEC46F7E471D3F10FA1E165EAD0C6B29C1B7C697CAD02A
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jsf.js.xhtml?ln=javax.faces
Preview:	if(typeof OpenAjax!=="undefined"&&typeof OpenAjax.hub.registerLibrary!=="undefined"){OpenAjax.hub.registerLibrary("jsf","www.sun.com","2.2",null)}if(!((jsf&&jsf.specversion&&jsf.specversion>=20000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined"){return isIECache}isIECache=document.all&&window.ActiveXObject&&navigator.userAgent.toLowerCase().indexOf("msie")>-1&&navigator.userAgent.toLowerCase().indexOf("opera")==-1;return isIECache};var isIECache;var getIEVersion=function getIEVersion(){if(typeof IEVersionCache!=="undefined"){return IEVersionCache}if(/MSIE ([0-9]+)/.test(navigator.userAgent)){IEVersionCache=parseInt(RegExp.$1)}else{IEVersionCache=-1}return IEVersionCache};var IEVersionCache;var isAutoExec=function isAutoExec(){try{if(typeof isAutoExecCache!=="undefined"){return isAutoExecCache}var autoExecTestString="<script>var mojarra =

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.978204962252687
Encrypted:	false
SSDEEP:	3:yionv//thPlt2tq9/61pxe/lVFIgNtfPI1ANIN+GJIzzYoGe3lxxhyNI/qvZnh38:6v/lhPOtq9Oe/6ServUzY2PByvxqfp
MD5:	262D2B1CCDCCB4C250FD54174DC32ABF
SHA1:	B125CD1816393FEA43EA96B334792A2EC5150D5A
SHA-256:	60CB61062C85D82879DDCF9B4C354676C512020A39B520AAAEBE287F4AE39310
SHA-512:	7FF9D074FEDF2167EB753AD12B7139CD969CB6B9541C7B0C7F307EABD349C22E34E90E5F2316B0A40D22ACD15DD2B0C6847415DACBAE39493C58EAE63807E104
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .......Y+...EPLTErrr...ppp(((...ccc@@@888333***%%% .........llliii\\\VVVQQQLLLGGG...S.{....9IDAT...... ....-.....H~..".~...05.#..<w.8.O..J.x.....J..{(.c.....IEND.B`.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 82, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2925
Entropy (8bit):	7.772797541212802
Encrypted:	false
SSDEEP:	48:uMr3QByqTmYzZBCw+R+c7jdifn7f5yYEz7NvWNVm4LG7sI3UF8imqG:HrABy/SZ0VRB7g7f5yDz8V/LG7s16lqG
MD5:	5F46F15E9DB81D1B15F194F185D664A0
SHA1:	1B58C8C8836197D8034C615728BA6C5325D6058D
SHA-256:	04BC894482C478881A9457DC7278AF163FE3D37AEA65AD87A2ABBC8E029F8504
SHA-512:	A6AF2FC7C163BE73AA06B6AC37493E83124683A33F7C8A5A83ABDAE2693F87CF53FA942F779E396E489DCF8932616E49C3B80F638853D501E06FCC7061FDBFA6
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/content/home/logo-eidas.aspx
Preview:	.PNG........IHDR...t...R........>....sRGB...,.....PLTE....:u.<v.Bz.?x.L..P..H~............Lv..8t'X...........5t2_........>x/_.....w..\...C{....#U..7w.2t\|.....8e..@}.=\|.2r6b..G.+]..C{.4q.;z.=z.0nEp.............Tz....f..@k.=h.Jr.................Tv.Bm..>x......c.....,Y.... Q.4\.....)i.:yu.. R.Z\|.k........I~.H.p.................n..5g.....,u.5..B{.-.Pea...s.J....1}erW...Wl[..M........8....7...0....:.....;t......>~..+.....P....D{..#...4Rp.."K....+S...Z..1.....tRNS.................................................................................................................................................IDATx.._.X....&\/..<..0..".. . ...Uh...8..}.X....{......n?........K.7.{.9....u.{..^?B.]E...H.T..(.w.JXJ...t....@i...A...Th4..:d.N..{....22:66:b.#.jm..ts....^...pB...t..... $...J.....l......@'..'+.sz..oC)..=.....3.@9.n..'..6..u.T.8.o..`9.1.M(..BSfF......c..M.S!<+...!d...Q}...../b.G\|.c.9S.(EI....q3c....<....P4..b.b....^.Z.A5...Kq\|.x...{?(..t...........Q.L-

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7976)
Category:	downloaded
Size (bytes):	8028
Entropy (8bit):	4.975385217498056
Encrypted:	false
SSDEEP:	96:5v0dlJ1mJecV0VcpVIgw+2p7EYilNpwUADq9xJ0Ea2Qrt0KlUdhf:OlJQd2+W7EYi/ADQ7ko
MD5:	F174DEA6B07BFD481767160F4E58A8D8
SHA1:	89A2E40B59E67FE8A9F7BD5128BCF3E9E5EE749F
SHA-256:	596536B7006CA46F714E1D4605D07EFF49363732E6202203849BAD6845AF9F77
SHA-512:	F33F7310F118571097EE174CFBA840D113125B8D95F97B6AB325D26CD92E8D761C945AA1455F09E3E31AB08A6E619383A0726E420C468DC44A9BFFEC584426EB
Malicious:	false
Reputation:	low
URL:	https://blueimp.github.io/Gallery/css/blueimp-gallery.min.css
Preview:	@charset "UTF-8";.blueimp-gallery,.blueimp-gallery>.slides>.slide>.slide-content,.blueimp-gallery>.slides>.slide>.slide-content>img{position:absolute;top:0;right:0;bottom:0;left:0;-webkit-transition:opacity .2s linear;-moz-transition:opacity .2s linear;-ms-transition:opacity .2s linear;-o-transition:opacity .2s linear;transition:opacity .2s linear;backface-visibility:hidden;-moz-backface-visibility:hidden}.blueimp-gallery>.slides>.slide>.slide-content,.blueimp-gallery>.slides>.slide>.slide-content>img{margin:auto;width:auto;height:auto;max-width:100%;max-height:100%;opacity:1}.blueimp-gallery{position:fixed;z-index:999999;overflow:hidden;background:#000;opacity:0;display:none;direction:ltr;-ms-touch-action:pinch-zoom;touch-action:pinch-zoom}.blueimp-gallery-carousel{position:relative;z-index:auto;margin:1em auto;padding-bottom:56.25%;box-shadow:0 0 4px rgba(0,0,0,.1);-ms-touch-action:pan-y pinch-zoom;touch-action:pan-y pinch-zoom;display:block}.blueimp-gallery-display{display:block;opa

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
Category:	downloaded
Size (bytes):	11782
Entropy (8bit):	4.506814902382955
Encrypted:	false
SSDEEP:	192:zIzngx4bZWCN1ZR9lSI3OSxdhpd0wpFCe/KMFrpjJov:kzngCbcCN1ZR9YI3OSxdhv0wpFCOKsrK
MD5:	0AD1CFEEF41261285351634065123C05
SHA1:	A322BB24392C4942C2064C8AD6E52EAB81601931
SHA-256:	C07F2807DB2AE27EF113B0B889F0E3B975EE0D6BA7D731FBE030AF2D936D21D3
SHA-512:	D0707C6B6619F93BC5F7CF35675B88BEDF60B185A7A08FDB196586160502A8FDF7024A3A6788ABE193327AD67804FF803D6525C99C212E730880E397234B8236
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/login.xhtml
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE html>.<body></body><html xmlns="http://www.w3.org/1999/xhtml"><head id="j_idt7">. . <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta http-equiv="content-language" content="it" />. <title>Aruba Selfcare - Firma digitale</title>. <link href="https://fonts.googleapis.com/css?family=Lato:400,700&subset=latin-ext" rel="stylesheet" /><script type="text/javascript" src="/asmonitor/javax.faces.resource/jquery.min.js.xhtml?ln=js"></script><script type="text/javascript" src="/asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js"></script><script type="text/javascript" src="/asmonitor/javax.faces.resource/jquery.blockUI.js.xhtml?ln=js"></script><script type="text/javascript" src="/asmonitor/javax.faces.resource/p

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5325), with no line terminators
Category:	downloaded
Size (bytes):	5325
Entropy (8bit):	4.872323860450876
Encrypted:	false
SSDEEP:	48:zLIt9xdKPGD8wPGDupF7Mtl9GAX5w05MmrtbtNDrs+HDa1YK9U0/a1fbIds5bdkx:/ItPCz3HaLg14w1eAr4ISJhuE/Ao
MD5:	F56C5ABE2E02BAA5A6CFCCE71A60B5DB
SHA1:	6A200BE5EF1A68FCD4343702933951FDABE19ABB
SHA-256:	F9D4B8B8D838C14F7B37F8E216B3010A583E30DF696BC7F940EA4577F062077A
SHA-512:	F2F11F08AD5DDF2ECE0B229BED30343D6F48E717760CECA60D701A4AF74CAA4E59402793142EB1467660B47E5639873190D21BB05193C2D2E8C0A24377959946
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/3b/3b6c3a12-b9d7-4c65-af3b-973609c95752.css
Preview:	@charset "UTF-8";@font-face{font-family:hosting;src:url(/MediaCDNRepository/files/de/de5f3b7e-3d08-42a2-9745-62c64927dd3f.eot);src:url(/MediaCDNRepository/files/de/de5f3b7e-3d08-42a2-9745-62c64927dd3f.eot?#iefix) format("embedded-opentype"),url(/MediaCDNRepository/files/65/65da9774-ec0f-4fe0-ba47-35abd0c820c3.woff) format("woff"),url(/MediaCDNRepository/files/b0/b026638f-5c83-4a62-9fc0-6e15431ded45.ttf) format("truetype"),url(/MediaCDNRepository/files/84/84064edb-f54c-4c17-8c1c-b0fdf28cedf6.svg#hosting) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:hosting!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=hos-]:before,[class*=" hos-"]:before{font-family:hosting!important;font-style:normal!important;font-weight:400!important;font-variant:normal!important;tex

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
Category:	downloaded
Size (bytes):	10333
Entropy (8bit):	4.510015164211455
Encrypted:	false
SSDEEP:	96:I4MaPLIznghL4b2kWCeg5bdVLZbwibRFTbSr5+QagArt3OShZpyJTmPuoQC:IeIzngx4bZWCN1ZR9lb3OShZpy1ov
MD5:	FE156658C1F72934440279D2A7E9852A
SHA1:	A28128035A8948D813E7DCD973D5C296821BCDE1
SHA-256:	400C8086A036E6E9B62BB522E4BB8748D4B5AC9B4A7B150F84CF4804B87A0F76
SHA-512:	0573FB67B9699C3E5AC38C4C67EEF67BA4395D9986D43A7C19B870D7D0320EC7D2FF565363BE78823A36EF19311C0325548E6706019A4F2930227DF8E3B00F9A
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE html>.<head id="j_idt1">. <title>Username recovery</title>. <script async="true" defer="true" src="//www.google.com/recaptcha/api.js?onload=renderReCaptchaCallback&render=explicit&hl=en_US"></script>. <script type="text/javascript">. var renderReCaptchaCallback = function () {. document.getElementById('recaptcha').innerHTML = "";. grecaptcha.render('recaptcha', {. 'sitekey': '6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO'. });. };. </script><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/bootstrap.min.css.xhtml?ln=css" /><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css" /><link type="text/css" rel="stylesheet" href="/asmonitor/javax.faces.resource/jquery-ui.css.xhtml?ln=css" /><link type="text/cs

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2892
Entropy (8bit):	5.328665207082969
Encrypted:	false
SSDEEP:	48:HOW0RVc+u7OWbN0oDOL21RVc+u7OLPN0oDOCcRVc+u7OCjN0oDOMORVc+u7OMNNn:HOWwVc+u7OWbNHOL2PVc+u7OLPNHOCYI
MD5:	70B7F222FEE672DE5CE59AD2A9BDA393
SHA1:	1F486E0062EB7D455F2999A77D270C0E9D44A076
SHA-256:	BC958A63E17FC254B74B0787F22BD0F5889A057109908050C5148A148B75DB91
SHA-512:	33D63298819E7568EE2F8C597EC090C0E63B90FF7AFB4752E4D45D05D396C0519EFCF206B0599F6403E242181941C9EBFDB6EF3E6C54FD8BCECF6E44931517DE
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:300,400,700,900"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020,

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3552
Entropy (8bit):	7.224486584984091
Encrypted:	false
SSDEEP:	96:CSMwknmWpj+k5hkbHDH+NG0Zn3GpI2epGAIwgMC5K:CShknrijedpdIw9b
MD5:	B7EFB4EAA1D028685FC3802EA5507E6A
SHA1:	65784CC063B7BD92DDD468F5A468B3C05A214219
SHA-256:	3DCED64F46A08F8F2C3BA33FD0BA28E70D150D8CD05E4811C17E05D9B9E74ADA
SHA-512:	A9CDE394766CA71E465E02EDC2F1625AECFC68B2D819A12C655834740FA95A23A75F2C54AB65030E0788E33328ED0225ABC90CBC5ED729336D2FEB29B06A1BE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...8.....@..5....pHYs................;iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2021-03-05T20:13:05+01:00" xmp:ModifyDate="2022-07-29T11:27:49+02:00" xmp:MetadataDate="2022-07-29T11:27:49+02:00" xmpMM:InstanceID="xmp.iid:440490a5-6d2f-6848-9d96-c1af4d32525c" xmpMM:DocumentID="adobe:docid:photoshop:128f92bd-42da-664f-868a-54b58b9c46da" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1864x70, components 3
Category:	dropped
Size (bytes):	27530
Entropy (8bit):	7.690280004496858
Encrypted:	false
SSDEEP:	384:2x4O3/QcJ0JqFBDHnYp8jbi6tLVVPycOFhhe15fPGIq/9KDzoZELE9qEZYgPEOGQ:8vOaLtLVNy5u5H20mKV631eB9WC3UFd
MD5:	E658A2475CE1E59EEEF520DB6CA579DE
SHA1:	02EE5831D2BF6D84E5952442C5E9EC212E419C85
SHA-256:	9731E2C5F9F2FE70295DDCFA17524F2B3E3DB99CDD3A71009235B363DBE38FB0
SHA-512:	0D65C65D831745CD604C556A468FFF77A5077E15A71CF24CC30F5D8E7BAFD096AC9F1D29E5ED0042DEDC3EFBA62A0D7D4FC5ED43066D58719AACD8928CEAF118
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9a45713f-b8ca-4d4f-9edc-d3b3304a6e96" xmpMM:DocumentID="xmp.did:1464AE37AFA911EE99F7D28E8E5B4851" xmpMM:InstanceID="xmp.iid:1464AE36AFA911EE99F7D28E8E5B4851" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30b4f7e3-6533-874f-a856-7db975e8e627" stRef:documentID="adobe:docid:photoshop:252e0955-ab0a-6d46-8f77-2427016c159a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2596
Entropy (8bit):	5.0292080988918055
Encrypted:	false
SSDEEP:	48:YbdFThc8EO32bsLoLg3ojYV4O2wOSdpiRD0DaKJcLmpw/dPpuKfvLas/IB38PpBx:4dFdcI32ALo4ojBwrpiRD0DfcsWpr6Gx
MD5:	A9BE7895B4C1A636F8C9CCCBF7B09B60
SHA1:	7F004AECA083C2AADC224181913A8E7EF16F2118
SHA-256:	DD12582CB4C2FD2DEB72DE3732A12765D49C5E0B62C57F0359E373C78DC3D1EB
SHA-512:	1EDB9AA81E82520E45B362DEECD17E804EC06693340F7D9CEE384F1AA37A424D29C0E7F314A871C4D51996DFD74EB3846F29663FA88186ACC56D0377D2CEEE74
Malicious:	false
Reputation:	low
Preview:	{"botId":"yeJDiVixfHo5yMe4ufHx","teamId":"dLbpMCFxf0DU53JB0aBU","botName":"Aruba AI","description":"Assistente Virtuale Aruba","allowedDomains":["guide.dev.aruba.it","guide.dev.hosting.aruba.it","guide.dev.serverdedicati.aruba.it","guide.dev.pec.it","kb.dev.cloud.it","guide.aruba.it","guide.hosting.aruba.it","guide.pec.it","guide.serverdedicati.aruba.it","kb.cloud.it","dev.assistenza.aruba.it","staging.assistenza.aruba.it","assistenza.aruba.it","glitch.me","grape-night-virgo.glitch.me"],"color":"#1474bd","icon":"https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media","alignment":"right","botIcon":"https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F442d267a-4f9d-4dcf-9467-53a30cc213b9.png?alt=media","branding":false,"supportLink":false,"showButtonLabel":true,"labels":{"poweredBy":"Fornito da","inputPlaceholder":"Invia un messaggio...","firstMessage":"Gentile

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.809899741303721
Encrypted:	false
SSDEEP:	3:0JErCE82hYWULFSKPjIEXCMA4vFv1aMdsJ8993Ymo2VJErEMR9LRre/TaoHJAuDF:0JErCE8dRjI0vFdaMdsy9emvVJErEMr6
MD5:	61D71689F732CE597E5D04A2585C034C
SHA1:	16158A99ACF24E4C3AFAE8521C0D2BE5518E64DE
SHA-256:	2E210F7B8B01F09DEEB84728B33BBB498642642E287C6AFB5E720C9C850DCFCF
SHA-512:	AD0B9058D33EEB31700B1133E3C9E7B0CBA6C95E6BDD17764EC2CDDB86C415BBF50C85572F80335D0F581F44A84A9A85450AC59C356D4391E6BACFF134C443CF
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=usabilla-stars-css
Preview:	#usabilla-stars{padding:15px;background-color:#fff;margin:15px 0 0 0;border:1px solid #b8b8b8;border-radius:8px}#usabilla-stars-titolo{font-size:16px;padding-bottom:14px;font-weight:bold}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	459
Entropy (8bit):	7.2178604004222064
Encrypted:	false
SSDEEP:	12:6v/75/6Ts/vQFN0I44gsHoFumMTp4RTLJAWdfsezsEX9:I/6hgsIEN4xJAa3Jt
MD5:	10B1D7E81719234AC5909AFCFC97481A
SHA1:	5B3F95346F0859CE1038EE5B7475C4C7F9D4DFCB
SHA-256:	70E61D9C81CE624161859DCF32291B2D6EAC3CC05CDE2A6CB275888A7477224F
SHA-512:	DEDBB5CC08FFBD1272071F0F9953C9EAEC49C57AAFBFC1374BCC086EF6B3B500B78867A70167DFB32F59FE723226FD58CD617F186CA2F9D04E994510B937B271
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....pHYs.................sRGB.........gAMA......a....`IDATx..U.q.0..s........A.A... l.....A........"....M....[.K...$...=>I.....a\E.........HF.a...-Fk`.~....>...S.<K......ma..../M..$....,`{..D.g....Z..[...W..........[j.....-..#.../h.K..91...}...KtZ>u..I.w g{....}?".;.'.....p&C.I.Z....7.)...WK.y8...[oi.gGic4....7....KP{...@{.{........y~...!p....~...k'....u0.4.=....F.....A...wxt.I...g>.F..n[..P4l.....IEND.B`.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	36111
Entropy (8bit):	5.244226282770631
Encrypted:	false
SSDEEP:	384:EYpynycgkF2W1eKW2F5fy2i9+DS2jaTaj:E4yyXwdWZ+DS25
MD5:	77BA7BC80C0B5690A52A98879C4C62AD
SHA1:	A348CEDC78DB65A2EA6C0A11A7CC51A08AA3AEEA
SHA-256:	933AD1D47CD4DE724D7A0805CB2AB390827D9EBCF4C49AC9E7A1181408DD25DD
SHA-512:	57D282ED16B89D9E3CFD6B86DCA7FCCF473162C5BF480CAF9BD4E3BF15095704F757BF8DA2A3469EF9CC00D60823946EAE351046A59B9B6BE577D7551A16BA24
Malicious:	false
Reputation:	low
URL:	https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery-ui.css.xhtml?ln=css
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=9

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x100, components 3
Category:	dropped
Size (bytes):	15992
Entropy (8bit):	7.951597078789241
Encrypted:	false
SSDEEP:	384:QjRCEsyjwo9ZFAhqAWw2Ia+ArpiO/D25/0:QjRCEs69ZChqzIa+YD25/0
MD5:	F4B8DDE38AEC505B9D5E50164C83A1DF
SHA1:	4059DFEFE80762062869B8B5F6DE21121F57620F
SHA-256:	AD4E438A7539EAE072CC22B2B865768751FD0B28531619601B2EDF9633E9E448
SHA-512:	1D0DD7AABFA2A8F2E44677C58976F84884C41C9740183B658D49B6B0C80073D8F20CF87B9F6528C1729B156E79CA454F675283F947156D97EEA36617E020E04F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:457e9153-7a87-e848-95ae-c0ffd552780f" xmpMM:DocumentID="xmp.did:F1D71A16DB7011EC84BFF052AABEF6A4" xmpMM:InstanceID="xmp.iid:F1D71A15DB7011EC84BFF052AABEF6A4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:457e9153-7a87-e848-95ae-c0ffd552780f" stRef:documentID="xmp.did:457e9153-7a87-e848-95ae-c0ffd552780f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8931
Entropy (8bit):	7.955010225116947
Encrypted:	false
SSDEEP:	192:5IIHUCD4wa3S/EXw/Kcqyn+UjXeIQFNkTzw/:/0wD/zKcPhK4w/
MD5:	2589A0C12B3B70014C32143D4D357011
SHA1:	DB9FCD73D6101D19435C4B9788CC49493364F0EC
SHA-256:	46070E40E45EBC8CF2DCE5084018BD8EAD9AF4D77C03EEE0189DB98F4B9B3D50
SHA-512:	BB5A5DCFBB2E4D2CFBF5AFF432EE92563AD7E709D766C0A8FC85D30B6DCBE439277DD3F86EFE59B51621E506A844517F06AFC27CA5A340786B288EE747EDBB8F
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/layout/footer/social.aspx
Preview:	.PNG........IHDR.......Z.......\|.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32207)
Category:	downloaded
Size (bytes):	32249
Entropy (8bit):	5.142635105824128
Encrypted:	false
SSDEEP:	384:fHg4/pA6enVt8bfzuEj4x35F9R1zO0R0TziT9G5DpgrovWDqRI0KjgA:fg4/pATt8X4x39fzOs2mGjg4tojgA
MD5:	B1F1CCCCCF3938858D7C39A323DB038E
SHA1:	CD588AFB9652C85F9284BF0BE60B9FF987587336
SHA-256:	5B1A5EA21EF44E3130E8697DEDFC73B616AA94AA303F1CC1B5E4A264C44C61BF
SHA-512:	6F9FD84CB90FFD92DD2DEE8EC21800FDC3CA137A17215D93216AA2D74918298777417A2FB6A8FF0D14F8FE5A95E4C22005329BE20E47C9A22EA7C9AEE6E90E49
Malicious:	false
Reputation:	low
URL:	https://d6tizftlrpuof.cloudfront.net/live/campaign/js/b1f1cccccf.in-page-form.js
Preview:	!function(n){function e(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return n[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,o){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,get:o})},e.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return e.d(t,"a",t),t},e.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},e.p="scripts/",e(e.s=220)}({107:function(n,e,t){angular.module("inPage",["baseForm"]).value("inPageWidget",{}).directive("script",t(108)).factory("utils",t(109)).factory("payloadHandler",t(110)).factory("inPageFormHandler",t(111)).directive("inPageForm",t(112)),angular.module("inPageIframe",[]).run(t(113)).directive("img",t(114)).directive("inPageFormContainer",t(115)),angular.module("ubWidget",["inPageIframe","inPage"]),t(116)},108:function(n,e){function t(n,e){return{restrict:"E",compile:function(t,o){if("campaign/form"===o.type)try{var r=e(t[0].tex

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29961)
Category:	downloaded
Size (bytes):	29962
Entropy (8bit):	5.321726947280833
Encrypted:	false
SSDEEP:	768:Oyu5b4MaCaVatczcTnknp5Gq5Gh5GI5GD0hPp5vtOl1IBizsuX4HqABCEXMy1mAy:NNijUH
MD5:	6CAC8584191CE485EB6E11121E5B2BB3
SHA1:	039AB34D740AB7117D4EEFF57CFCA88FBD277EED
SHA-256:	82A89E7FAB42519DD9575FA93DB1A31E9D8D6E800D7D5CF6BCE59E5AC0644EE5
SHA-512:	D46C0EA01911BF09768795727F8EBDC764D6A577B4B2F5507E6BD5F76CBB120C9A620485AAEB4FC148295126A7B8E87C98C99518D2070CBF63FE332707FE14BF
Malicious:	false
Reputation:	low
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css
Preview:	/! sanitize.css v5.0.0 \| CC0 License \| github.com/jonathantneal/sanitize.css /@import url("https://fonts.googleapis.com/css?family=Lato");*,::before,::after{background-repeat:no-repeat;box-sizing:inherit}::before,::after{text-decoration:inherit;vertical-align:inherit}html{box-sizing:border-box;cursor:default;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,footer,header,nav,section{display:block}body{margin:0}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}nav ol,nav ul{list-style:none}pre{font-family:monospace, monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace, monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ffff00;color:#0000

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40329
Entropy (8bit):	5.24641079736423
Encrypted:	false
SSDEEP:	384:ovrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:oTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	AECA88483779AC14B47F14389139050F
SHA1:	B2D6ADDFD778216B8577A9788144F6313900B05E
SHA-256:	38DEAF33D1C84196E4C4F3C76C67587090CF261D423B9BEF9BADF535BC146A2F
SHA-512:	31E647B1ED341AD8D5DB4E991008F3A79169CCC0DC68E63DA0F0533E1F9875B871336B5B5C953B267AE4788F0ADFCE6F54E3492C4FEB8E087021AB84258F16BE
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OBkLIP3yLsgaeq0969ileglYbtIrz5sMRykCVXTq6GAJ9WzMlHfEo78kO-Ve-4RiTWQm755lKKI3DIQXd7N62Otkts64KKOqUAK8k67jBmzfWQEPw7qlbAc-6cCUrXr0pmrRUh01&t=74258c30
Preview:	.//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	83472
Entropy (8bit):	7.962891454897581
Encrypted:	false
SSDEEP:	1536:xPGaMN68lY7FB/z/qBGDQ1iKPjpvj7zzY+8+ZmMtJyVUBjjWDKZR/r:5Gj5e7FB/z/qBGDQ1iKL5PYcm8JyVmjd
MD5:	B1DD401FFD94DD20E896B23A2601C772
SHA1:	F04BE83659EF212512090CEE8267A3BF53F94E88
SHA-256:	8A65AE2C5098394A8C99CCF053ECB95196FB563A6C4103E54BF78370FD5F47F8
SHA-512:	75E3E18CEE7175F6642BCAB240E6ADA25306A3AC6A559233F22D6BCCEEDE8BB780DCB49AF3C82F0E87A38A01D71786CE296CF69AD820AB116509DDCA174A5A23
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............N.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-18T16:07:14+02:00" xmp:MetadataDate="2023-04-18T16:07:14+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:6eaf70e0-02ba-5c4f-bee5-68a007d3ef70" xmpMM:DocumentID="adobe:docid:photoshop:969437b0-cfa7-2d42-9a9d-e1707fd46ada" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	372238
Entropy (8bit):	5.47856042838692
Encrypted:	false
SSDEEP:	6144:DFk2s5SuQx4PVlFyITI7+QFIruk02OCACPBDNBOFpmy+pftESzSpS2e:RkznyITI7+QFz2OCL2e
MD5:	C131C47022D1736FA31023C938EC9A23
SHA1:	FFCCC5E408F680752620D8A57271F3D875AF8A24
SHA-256:	3ED19DA512A92CFC70ED7C3741E889FA95539B4D94CEA1E2F632A46FCB4B5387
SHA-512:	C14086C51309D5D7C73363E32034815C9F30D4A085A276D7100D9FDE5759F5C2DF0A49C1DA49189D5F0AF2EAF175D4F27D7888B1464716FD4CBC6DB0BC21301C
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.eu/171bc42f-3eec-4afe-be43-f3c81c141fa7/cc.js?renew=false&referer=www.pec.it&dnt=false&init=false&culture=it
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#CybotCookiebotDialog .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner *{background:transparent;box-sizing:border-box;color:inherit;font-family:inherit;font-size:15px;margin:0;outline:0;padding:0;vertical-align:baseline}#CybotCookiebotDialog .CybotCookiebotDialogPromotionBannerWrapper,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner{display:none}#CybotCookiebotDialogWrapper.CybotCookiebotDialogActive+#CybotCookiebotDialogBodyUnderlay{opacity:.75;pointer-events:auto}@media screen and (min-width:1280px){#CybotCookiebotDialogWrapper{opacity:0;transition:opacity .5s ease}#CybotCookiebotDialogWrapper.CybotCookiebo

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2596
Entropy (8bit):	5.0292080988918055
Encrypted:	false
SSDEEP:	48:YbdFThc8EO32bsLoLg3ojYV4O2wOSdpiRD0DaKJcLmpw/dPpuKfvLas/IB38PpBx:4dFdcI32ALo4ojBwrpiRD0DfcsWpr6Gx
MD5:	A9BE7895B4C1A636F8C9CCCBF7B09B60
SHA1:	7F004AECA083C2AADC224181913A8E7EF16F2118
SHA-256:	DD12582CB4C2FD2DEB72DE3732A12765D49C5E0B62C57F0359E373C78DC3D1EB
SHA-512:	1EDB9AA81E82520E45B362DEECD17E804EC06693340F7D9CEE384F1AA37A424D29C0E7F314A871C4D51996DFD74EB3846F29663FA88186ACC56D0377D2CEEE74
Malicious:	false
Reputation:	low
URL:	https://docsbot.ai/api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx
Preview:	{"botId":"yeJDiVixfHo5yMe4ufHx","teamId":"dLbpMCFxf0DU53JB0aBU","botName":"Aruba AI","description":"Assistente Virtuale Aruba","allowedDomains":["guide.dev.aruba.it","guide.dev.hosting.aruba.it","guide.dev.serverdedicati.aruba.it","guide.dev.pec.it","kb.dev.cloud.it","guide.aruba.it","guide.hosting.aruba.it","guide.pec.it","guide.serverdedicati.aruba.it","kb.cloud.it","dev.assistenza.aruba.it","staging.assistenza.aruba.it","assistenza.aruba.it","glitch.me","grape-night-virgo.glitch.me"],"color":"#1474bd","icon":"https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media","alignment":"right","botIcon":"https://cdn.docsbot.ai/teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F442d267a-4f9d-4dcf-9467-53a30cc213b9.png?alt=media","branding":false,"supportLink":false,"showButtonLabel":true,"labels":{"poweredBy":"Fornito da","inputPlaceholder":"Invia un messaggio...","firstMessage":"Gentile

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	68831
Entropy (8bit):	7.953623294001741
Encrypted:	false
SSDEEP:	1536:xXaZt0Hop/ixdwD9uzpJCQRtDb9IHPJdK56nuy2Fs8PFjtJRnFO/X9fklqbN:hAOIp/ixdI9uFRl2PyYnuy2lFY9cYN
MD5:	7D204335699ED2BBA60EE73560CBF864
SHA1:	DB116F85A336001253E9D021714F6D5454C20946
SHA-256:	C09227A16A0E60B769798378EA491791D887B322B5C4E59E62256BBF8190264E
SHA-512:	00BE01E64DED02A8E8C2201D1C4D2935E0973517570F9AA19CEE62A12F3AFAFEF21F9D3511A93D25914727608251E8DEB38A9CD46ECBBCC53690E9C939655D0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............N.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-18T16:35:12+02:00" xmp:MetadataDate="2023-04-18T16:35:12+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:f16dc663-5dda-5b4b-815d-cc3c773244cf" xmpMM:DocumentID="adobe:docid:photoshop:05b2bfe0-edbb-0348-9106-1aebac134c0a" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3164
Entropy (8bit):	7.901920569815009
Encrypted:	false
SSDEEP:	96:Bv0O1YPi3TO78z0Vwc7J/X5phy/YRwW9+dIFwo:Bv0OG6iYz0Vtt/Xl1Rneo
MD5:	C956D501DA5ED4018B3664B89A365C87
SHA1:	C290D34ECA374BEB965257B8BB244384A0C8D5AA
SHA-256:	3A3A44FFE978E0FCBAC8A7FBD301C5CD2BEB4D8538ED4A9B1C346A0E00A1D7F2
SHA-512:	24AFA71065AE0DFB09FEE5DF4119E693B3B790C2CDE9120BB565779D6927103BD24E960D6B0A4342D8A24BC55D2F5BD05F021508AB40EECE5F2E3988711ECBE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...L.......0M....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.y..U............L_..D...@bY..AK.J..J(5%"$.b"..........+.& .......=r'......r......gg...\|.>5.o.u....wLMUU...n.zFWW..].vU).>m...uym.i..{.o..J.:;;..yd]^;w..!.G.$V).>..............T..Q.-..'.-f.IbH.f.... ....!...~.#b.x@.......0..Y.)}G..~&v..d..O......h..>a.U..;..7...BA.........<.q.:.Gt..6p..^n....l.s"...ST.,...c....T5..f.c...j`......0.i..-HS6.P.a...Am Q>7G....^.at.xQ...'...w..H..2....G.<.>.WO4..........7.4.baF".c.$.F..g.......V....c.\k......uW..@J........5c.. qI.u.f... 1-...2.M...nN.!k.:W.l_7q...&.z.....Z.O....1l..............%...=..[..E.[]..t.e...I..8^F...%[..:..d....d.f%Z$.....D)....TM....>..w.......z}...!.e.ncG..E./.!a..8QJ)...4H`(.q]...b0.h#..2/.c.....>.)q3Z.%K..Q..Z\|o.>g......ZJ,..n..s..~y..<....1L.,_c..!.:.i.....3.....Y..p.S.p....c[.n.\|..Uj7..nB....70.....2.e........M.iI&.(.2U..b.Jf{.J.j.H.Mi._.......g....5..0...z.s2...~x.....^5..go...w.R

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 349 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10559
Entropy (8bit):	7.96271268296138
Encrypted:	false
SSDEEP:	192:TSD6Stdfy8fbvet1uAbcRgY3m7idCEJuMViBFFM2zq78CUFGmawAU:GdqPY9m7QCEJB0fh+8CNwT
MD5:	D938D8A468D6A66E7E04656A6A8B3FBA
SHA1:	A3033AF6173B1164C738824055F2F8B8BECDE6C3
SHA-256:	C28B88BD019974E12A7C74771D87EF177F23B5BFA99936DBCD06248ED7083E39
SHA-512:	5FC6A0942C063BBF2D35286988F4C114DE8165E6A75658510A3B6745DBF2003768B5C84FDBA20D32B60F745336F5E7A1E9223D7DD82C0FFF5B00142AC89D34D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...]...\......f.....pHYs...............(.IDATx..{..W}.?.;=..dk<R._...,N...H......B6...1....}...!9{H.G....H`..'.N......H....2...A.{y,f..caca..$.4..w...N.]..=..3.S.s.tw.{oUW}.W......c(.>....B[B)U.Zo...X...D...""3...M..@..y!.(...d...}......w..H.....N..5$........11V...0.\|.6.L..tF...T.{2.S.vk!...^X)..R.d.........&8..e.....B..t.K.S...m..X....c......y(H..\I7.H..K....%.H..l.I.c1.k.c..>.&I......=9{.. ..P.n.a).nH..3.L.V...^.=.z.XH..#.z.......<.r..j+>..$.zHz......p[`-WD.R.r5..m3,....N.H,...:.2......<.y......a..:c]3.f/..s...._...$y....'..w.....b...t... ..).......T...T..0.=..NG.....+[7.R...2KdDG.;...QK.4Y..o........R..Ed..3...R._Z..t...&]..!.njK....TCG..!C.O.<a...b!&. \|-S.......11......uY.q.Hy...\..B.....t...!.`..7c7i.Q.X9$.........GH.9.t,.AB.Y.A.>...1d;;........x....fh.tEdM....j'...*:MB.37.K...@>"}...........1.."...u.%...w.....n....f.#...].u.v7...`v...sc.`L..E\..@.4..Q.kk..e..:.....>..[.E..[..\.n...n.T......).r.....T..b/...p.fE..!...xa.'a?

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 57844, version 1.0
Category:	downloaded
Size (bytes):	57844
Entropy (8bit):	7.994676792376337
Encrypted:	true
SSDEEP:	1536:nvpZN9cuWSVTFEg0xm58gTKRfolquq2ALoFvzuJ3:tWITFEg0ou/Rf6t4sFv43
MD5:	F00C99569EBD382F5D8E12139D93F599
SHA1:	E31804EA40B36121B5D922654A12C82B20BF511D
SHA-256:	6EDFA4ABB4D4D726737809E279E7D9D217D890065B33F200D6243ED3810EB5C5
SHA-512:	F96DB5D5875199B1986952555E5D4A0D383A6AD3ED39485E6339D757CFCDAD1F5CA111C9FC36B1F8A47C5954F6628224978F00363C1552759A87F637E5C83D12
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/da/da3764f8-0911-43ad-aa9f-820b294dfb1b.woff
Preview:	wOFFOTTO..........?.........................CFF .......e..6.....FFTM................GDEF.............'..OS/2...`...M...`Q.N.cmap...............mhead......./...6....hhea...8... ...$.E..hmtx...8...........1maxp...X..........P.name............\.LTpost........... ....x.c`d``.b..k..m.2p31.....V......L.L ....4.;..K.x.c`d``b...A......o...."(......0..P.....x.c`fb`...............2H2.0001.r2..........080(>(e\|........;H.H..........].Z...x....n.0..?.?..1V.K....x....b..`E.B.9...0<./..../.....\|?.}w>.K\.0.E~..............,.#.b..T...5..+l.#\|.S8..&.....).*...j....o...8.u_.Ch}...r..(..C}".(o.>.@...E....7.Q..L..w....C....k.imF3..'7/..,T.....p..\|.w.yv./6.K.x....W.q..?......Hww)` .`..`.X....N....0...c.?.=~}...3g..3....1..H"#......./Q5...nPN...:.i.:T..^.\J..TPI...PK..4.H.....9.()..".)..V.h..N..&. ..!..t.#.p.1 ....&.C.....L1#.n...K...Xd.....qC.w.L......o\|..l..G..........,...9.B.......E,..G.YF..$....."+.D.}.3.JV..j......4.Y..6..M\%.klf...d+....v....a/7.. .......A..C..9.Q.q.<ns....$.8

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34379)
Category:	downloaded
Size (bytes):	34434
Entropy (8bit):	5.042170282536322
Encrypted:	false
SSDEEP:	768:CbBYbw/Uu/mbT3X5KRTjpQj1w2e+zcVhd5+XQg8pYFjR:sKw/UymP3X5ajpQj11eiAd0Ag8p8R
MD5:	B6D7511352EAE166AD3EA3BFA494FBEA
SHA1:	9FCDF67D20B000272505CBCE3301BD222700A94D
SHA-256:	ABDCFFE13A9F9102D8C650864DFA5BC748322CB40AB080BA629A221E6075717C
SHA-512:	3D518C3BB5200A5E8A9A874B8DAA245E8E4D065EE196FA2742B9DA290E089A7D509DF5A24550F55563B9B8223BBC992DC742CA93B70C9F0D72CC2D2B7B2EE433
Malicious:	false
Reputation:	low
URL:	https://blueimp.github.io/Gallery/js/jquery.blueimp-gallery.min.js
Preview:	!function(t){"use strict";"function"==typeof define&&define.amd?define(["./blueimp-helper"],t):(window.blueimp=window.blueimp\|\|{},window.blueimp.Gallery=t(window.blueimp.helper\|\|window.jQuery))}(function(y){"use strict";function i(t,e){return document.body.style.maxHeight===undefined?null:this&&this.options===i.prototype.options?void(t&&t.length?(this.list=t,this.num=t.length,this.initOptions(e),this.initialize()):this.console.log("blueimp Gallery: No or empty list provided as first argument.",t)):new i(t,e)}return y.extend(i.prototype,{options:{container:"#blueimp-gallery",slidesContainer:"div",titleElement:"h3",displayClass:"blueimp-gallery-display",controlsClass:"blueimp-gallery-controls",singleClass:"blueimp-gallery-single",leftEdgeClass:"blueimp-gallery-left",rightEdgeClass:"blueimp-gallery-right",playingClass:"blueimp-gallery-playing",svgasimgClass:"blueimp-gallery-svgasimg",smilClass:"blueimp-gallery-smil",slideClass:"slide",slideActiveClass:"slide-active",slidePrevClass:"slide-

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	373477
Entropy (8bit):	5.475327242453802
Encrypted:	false
SSDEEP:	6144:DFk2s5SuQx4PVlFyITI7+QFIruk02OCACPBDNBOFpmy+pftESzSpSJu:RkznyITI7+QFz2OCLJu
MD5:	420E6E8F5B41BCB5151EB4A9FF6D60CE
SHA1:	363CDB4A160D101CBB31E31A7AFC85C57053CF51
SHA-256:	D0120CACAAD162CC501574FDB9765144F28A7B70E4EC4C8A7828D3D351435F26
SHA-512:	6D59F4B7B5CAF17FE0E69E6FB245D15D2945B30AE5098B4597226B73A71FD494669BBD541696AFAE59D59B8C38543A4764D737527240893DF76D2554143CFC3A
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/171bc42f-3eec-4afe-be43-f3c81c141fa7/cc.js?renew=false&referer=guide.pec.it&dnt=false&init=false&culture=it
Preview:	// 2.69.0 - 2024-06-27T09:21:05.949Z.!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#CybotCookiebotDialog .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner *{background:transparent;box-sizing:border-box;color:inherit;font-family:inherit;font-size:15px;margin:0;outline:0;padding:0;vertical-align:baseline}#CybotCookiebotDialog .CybotCookiebotDialogPromotionBannerWrapper,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner{display:none}#CybotCookiebotDialogWrapper.CybotCookiebotDialogActive+#CybotCookiebotDialogBodyUnderlay{opacity:.75;pointer-events:auto}@media screen and (min-width:1280px){#CybotCookiebotDialogWrapper{opacity:0;transition:opacity .5s ease}#CybotCookiebotDialogWrapper.CybotCookiebo

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZIn2Q5yVm40vQfNiRSlXOLONGx9O8rUMt_K8Zu0JjQTAd4IymQ2&t=638459860569584809
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	5.168490899475983
Encrypted:	false
SSDEEP:	12:qTj2v571pt+cYoq7c4CD/EPEo8ecVHNnUEcwaxMELIx83rR+b/II:0j291pt+cYo+c4C7E8oOdcHLIxMrcb/t
MD5:	3D08665FA4C7BCF9FA2DCBBC7EFE1D0F
SHA1:	BA57ECEE011A4B99D4BB56707325C8E4D0FB8A2B
SHA-256:	738E5435F2D18427D291A0D6289EEE0EBBC87B596D6003919F255760AC293104
SHA-512:	E86FC61D20680F6F486C61E3730ACA4CDEBEE3AD0670C69EC177691AE979F81951DBD409F8CDA648AB2EBED13C5A2BFB57174FB5167EECB15300B807FC7BBF3E
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
Preview:	<!doctype html><html><body><script>(function(){var n="CookieConsentBulkSetting-";this.handleRequest=function(t){function f(n){t.source.postMessage(n,t.origin)}var i,e,o,r,u;try{if(i=t.data,e=typeof i=="string",e&&(i=JSON.parse(i)),o=i.value&&i.value.expireMonths&&i.value.expireMonths===0,!i.serial\|\|o){f("bcEmpty");return}r=n+i.serial;switch(i.action){case"get":u=JSON.parse(localStorage.getItem(r));u?f(u):f("bcEmpty");break;case"set":localStorage.setItem(r,JSON.stringify(i.value));break;case"remove":localStorage.removeItem(r)}}catch(s){}};window.addEventListener("message",this.handleRequest,!1)})()</script></body></html>

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1864x70, components 3
Category:	downloaded
Size (bytes):	27530
Entropy (8bit):	7.690280004496858
Encrypted:	false
SSDEEP:	384:2x4O3/QcJ0JqFBDHnYp8jbi6tLVVPycOFhhe15fPGIq/9KDzoZELE9qEZYgPEOGQ:8vOaLtLVNy5u5H20mKV631eB9WC3UFd
MD5:	E658A2475CE1E59EEEF520DB6CA579DE
SHA1:	02EE5831D2BF6D84E5952442C5E9EC212E419C85
SHA-256:	9731E2C5F9F2FE70295DDCFA17524F2B3E3DB99CDD3A71009235B363DBE38FB0
SHA-512:	0D65C65D831745CD604C556A468FFF77A5077E15A71CF24CC30F5D8E7BAFD096AC9F1D29E5ED0042DEDC3EFBA62A0D7D4FC5ED43066D58719AACD8928CEAF118
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/e6/e6e72a67-33c9-462f-8e7b-0fc05b2c6e9f.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9a45713f-b8ca-4d4f-9edc-d3b3304a6e96" xmpMM:DocumentID="xmp.did:1464AE37AFA911EE99F7D28E8E5B4851" xmpMM:InstanceID="xmp.iid:1464AE36AFA911EE99F7D28E8E5B4851" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30b4f7e3-6533-874f-a856-7db975e8e627" stRef:documentID="adobe:docid:photoshop:252e0955-ab0a-6d46-8f77-2427016c159a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3427
Entropy (8bit):	7.923649591356064
Encrypted:	false
SSDEEP:	48:Vu4BoBiHFOm1BOZq4mdaY6g5wz+oWpGuFLTXEnbkbbh9qk6L51dAdhc:32iHFOmF4xgiz+oelFnX0Cd6ndA7c
MD5:	06FA13A6BDFCB7E0A20206EDFED0D16E
SHA1:	B71CA2AAD27EFBA89C03730D31CFA959A7C6E6AA
SHA-256:	6993376D27F42B3C89A3CF68C7237AD7B0041BCBF69AD58F482D5AFC7FCC0DF9
SHA-512:	38C5E8DC522484C3AB56BFF96CD99A19EC3A36EDE54B8C6C38DAA88501792A8D568D66FF870E8380CA7EA8CB2E3F64FA89BEC5E2E201DB93F8636FA395B97CC5
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images/fatturazioneelettronica/icone/03.aspx?width=80&height=80
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...T....m...0;.y..%Fc4..-'...%&&.D...1G,..1..Q!"......;x.E.... ...v....9w..w.L.qvy.s~g..{.W.7......~..a;v.X..!.6l.v...k...3U.....sg/=)$..^{...X.3U.P.B...T.P.B...E+-~+.....C.....$.(6..X ...:Z\|$x.D...(../...\.o_.T'.....<."TN.....E...8Q.'....O...p.t..(?.'.n.J..r..P9.<0...(....Y\(..w...r...{.=N{.F.~...:_.+X.0ds...FdZ.zFmE.7...`...7...[../.6.o.Es.(wl.(\|\`DF.i.V1OL..U...Po.-...N.F.G:.K.e.s.x...........v:(w?b.?/..a..h.b.r.x.....3..;...\.Y..{Uvqy:;5m.2.s..^.]R.~kp........Pq.8E...>qd...t..".Yp..:.c.....2....^..U....{.e.....Wx;WVf...b..b.h\|@...y.U..g....@....^..{...B5..J.J.OXSU.....6Rc...Y.f.<..!..E.T\|.........C.!.M.LT..x..\...h.0..C.1....+.p3....9[.0V..W...v....'e....N.X2.....A:]p.f......e...M.H(b.b..X'..j......KLq....1..\8..=b]MEvp~..b.H..m...p.....Lz.Lz..E9'...:k.78.R.T+0........JP(...c.H...CWTx......G.N..P..4.....v....`......

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3106), with no line terminators
Category:	downloaded
Size (bytes):	3106
Entropy (8bit):	4.9455132968092395
Encrypted:	false
SSDEEP:	96:a76KazSh8tkN9pNmHFwBb3JYlRGR7h7pmB/QrAm7IGgWe8hs9pN4NWKKKS:DOhg
MD5:	9AB066D5845AF34C82C3BF7CE4D17282
SHA1:	AB811AEA7735EBE19418D02C6BB38668835E96BF
SHA-256:	C9CD72CBA2C27BCF83FB9DA1A27529B9E9FCFFD52F03AD67C5B2875A7D75BCA4
SHA-512:	21A38E48935267B0BA3958839B9D9150B1C7FFC501257613804CB6A0DD69DB7CD2B4303823811BE77CDAD5173CB56B359F4B5C14F82E5DB825E4D80FC29D6432
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/CMSPages/GetCSS.aspx?stylesheetname=zona-footer
Preview:	#Zona-Footer a.concilia{color:#1371b9;text-decoration:underline}#Zona-Footer a.concilia:hover{color:#666;text-decoration:none}#Zona-Footer .lista-uno{padding-top:15px}#Zona-Footer{font-size:14px;font-weight:400;color:#666}#Zona-Footer h3,#Zona-Footer h3 a{font-size:14px;font-weight:700;margin-top:0;color:#222}#Zona-Footer h3 a:hover{text-decoration:underline;color:#222}#Zona-Footer ul{list-style-type:none;padding-left:0}#Zona-Footer ul li{padding-bottom:8px}#Zona-Footer ul li a,#Zona-Footer a,#Zona-Footer ul li a:hover,#Zona-Footer a:hover{font-size:14px;color:#666}#Zona-Footer .ToTheTop{width:150px;text-transform:uppercase;float:right;background-color:#ddd;padding:0}#Zona-Footer .ToTheTop a{text-decoration:none;display:block;line-height:26px;background:url(/images/arrow-up.aspx) no-repeat center left;padding-left:20px}#Zona-Footer .listaorizzontale a{margin-right:10px;padding-right:10px;border-right:1px solid #dde1e6}#Zona-Footer .listaorizzontale a.listaorizzontaleultimo{margin-right

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12754
Entropy (8bit):	6.999588862217044
Encrypted:	false
SSDEEP:	192:5SQ7FSknEq8ZbY4JVKT0P+XIRe70RCO8nKd+gKwbiX2Ioy2d0v:gQvnELbY4JVKTe+XI5ngJgNpd0v
MD5:	9A40970AE5BDF0C0D44B5A91737F9FC1
SHA1:	CEBC58CD281A303E9FFCB4DFB7B0978B81672998
SHA-256:	E1A0C88B504DE2E0274C7242DD6F3A8693C2B6B903139B88E7B76082FBF2F173
SHA-512:	36795A3BEAECBBC94D6D8BD3375279B72DBAC68D02AE92351C84A8B7C94695310ABF86F1523BA38F78B8757A46ED5E4357CCE073AD84EF680D865254156F347D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)" xmp:CreateDate="2016-07-07T12:25:27+02:00" xmp:ModifyDate="2018-07-27T12:54:18+02:00" xmp:MetadataDate="2018-07-27T12:54:18+02:00" xmpMM:InstanceID="xmp.iid:8c1e9a49-0025-e24f-b3cd-8f82d576ccac" xmpMM:Documen

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7023), with no line terminators
Category:	downloaded
Size (bytes):	7023
Entropy (8bit):	5.1612739857748995
Encrypted:	false
SSDEEP:	192:DFrnM6f2eiGPObZYEcKQn/pxN+mQQNSLCDpc3wwYIpDHas0:DFbM6uAWbZYE3Qn//Q2FkuIta3
MD5:	5A0EA4FF0DAFC747017B0D9BCEFCE3C0
SHA1:	614876549A94D13F1EDBEB6E2116E003CF1C19E0
SHA-256:	D7E636B0A34BDD162094511922F3DE8807A9CF40A25501F7BDB682CF4A01518C
SHA-512:	693AC4688888EA8BD7D383A6E5EDED3B5B1BB4830F501B41F149EC4EB610E20357857B04AF56021ADD2EE987B38A76611325336BDC1FD82E35589A3EF236170B
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fCustom%2fpec.js
Preview:	function resizeHandler(){$(".compare-table").each(function(n,t){var i=[];$(t).find("table").each(function(n,t){$(t).find("tr").css("height","").each(function(n,t){i[n]=i[n]?Math.max(i[n],$(t).height()):$(t).height()})});$(t).find("table").each(function(n,t){$(t).find("tr").each(function(n,t){$(t).css("height",i[n])})})})}function resizeDiv(){$(".js-height").each(function(n,t){var i="";$(t).find(".same-height").css("height","").each(function(){i=i!=""?Math.max(i,$(this).height()):$(this).height()});$(t).find(".same-height").each(function(){$(this).css("height",i)})})}function getParameter(n){url=window.location.href;n=n.replace(/[\[\]]/g,"\\$&");var i=new RegExp("[?&]"+n+"(=([^&#]*)\|&\|#\|$)"),t=i.exec(url);return t?t[2]?decodeURIComponent(t[2].replace(/\+/g," ")):"":null}var getLinkScope;(function(n){"use strict";n(function(){function t(){n(".top-toggle-bar").each(function(){if(n(this).css("display")=="block"){n(this).slideToggle();var t="#"+n(this).attr("id").replace("-bar","-toggle");n

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61602
Entropy (8bit):	7.951129667501272
Encrypted:	false
SSDEEP:	1536:6H4gb5/MrbqDZVlFOTj6klsAW6NxnNdcrWtikA3oKAg:Yl/wqDHlFOT2klvlNdNFtikOoY
MD5:	4F2F08A03EA6C5D8F1D36ABA6164945D
SHA1:	C5FAD5CD2FA9168F0FD4BFB6F270FFCF333AEEAA
SHA-256:	3DE486761DFB010E04A85783301CD27E4A1C9D3F3B3E16473FE542B20B7A88C2
SHA-512:	780ED042ABC694A04019C96B6B28E7799E64D876A0272DD67E1132F975D9A55A007415096BC392CD372E0BFB8C72719A4B86ABD7B95571AABAE12108BA416E31
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/soluzioni-firma-digitale/firma-remota/firma-app-aruba-otp/riconfigurazione-per-problemi-o-cambio-telefono/images/attiva_firma11.aspx
Preview:	.PNG........IHDR.............,.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.3 (Windows)" xmp:CreateDate="2023-04-18T11:05:34+02:00" xmp:ModifyDate="2023-04-19T15:10:14+02:00" xmp:MetadataDate="2023-04-19T15:10:14+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:8ace8d7d-582e-b342-a575-46466da89775" xmpMM:DocumentID="adobe:docid:photoshop:78401544-f1f0-7a45-b479-ea6cdc4add4c" xmpMM:OriginalDocumentID="xmp.did:4ac206

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 369 x 99, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6809
Entropy (8bit):	7.965386915896602
Encrypted:	false
SSDEEP:	192:TFvWJtM4qTHACxqq+g765iGK773AbWiV1KOZhNzsjZ2iP:5uXM4qTrxqZH5yQbWiVFY5
MD5:	45069ECD80D799CA1E88CF51314A4034
SHA1:	2AC4793095C5A1FFA17F3677632657C9F9BA90E2
SHA-256:	2970C34C34B40E1276068B6744953BA34C1707F24222C8C440834C709C338F85
SHA-512:	4B249EE2752A0E66D9CF3E8E538A9185F7C7D5D29A588C6F08D31B9DAD765E2A3B4CF50C7FCF1CA0BFBC40C0C9BEAB6B910B0BCBFA0381848C97E5393A067BFF
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/images/menu/banner/20180705-fatturazione.aspx
Preview:	.PNG........IHDR...q...c.....Z0......PLTE........................(((555...ppp............~~~...EEE......SSS......bbb............."""......yyy...jjj...<<<...uuuKKK........[[[...5....IDATx..Z... .l........H..Guwo=+z.OZ...0.!..."...Z..D^..w.u.U........r....+..8B3{. ...G..\.p....z\|..g...S...vv....s8 ...uq4..A...4......m@e,...../..Z#....c.ah..i.........Dxw.......C...:...&..xw%.B..8.Jr.h...;.......*., z...!..#....V.X.s...JH..0......@i:...F.V.Q.6.".o.R....Rf..2.a.i../.=.V.."..6....!f..m..............1............'.C....O..1.VB.....NL.6Y`...Y..Lv\BK.&.q.f...^.gc.....Ua?.Q..{.....s.fn..._.)..d.u+L&.h.{....(.).u=j\DU...~.t^.'&AR..]..k...h.A......M.tq4.v..>`[<...j..MN..K`pM\|.b...zaZ.v.P......r/....r....Z...j.&.XB.....(..\|......vf....KU..>.........qZG.._.g.>N..R.w4N.....v._.[.i..!byL.!.^#.;..1..TCv.....\|........t..........KK..".}.._.XL.@...K}...q-{Z.n...c.re;..&........e..bZ...7u-....b..-..9.T...G..6.qg}..DI$6i...`.Lk.B&...\.W\|@.r..d........:....'..K

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	6.391315216640826
Encrypted:	false
SSDEEP:	48:pha4knA9WIrSBztyCT3+HKLS30nHdoiwzezcD:pnknmWIr+QNHKL3HdoigwQ
MD5:	526A9150937FBE4974358F6BEFF35C9A
SHA1:	CF59FEBD0CDCB6D0EBB9527DFC27454A4E83D4E1
SHA-256:	1FD217BB667A651305283289756BC1356FE2DF5ABCC9EBEB3755155176576C4E
SHA-512:	B4F6A937C3B75D3291B4F722A93941D25BB752C43AA8BA33C9191CDB385AC9A02591A04AADE2A641C4868B01C57025D4C4543FE35B1FABDB61A3A1EED2E14D03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs...#...#.x.?v...2iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 137.da4a7e5, 2022/11/27-09:35:03 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.1 (Windows)" xmp:CreateDate="2021-10-30T14:05:38+02:00" xmp:ModifyDate="2023-02-27T17:02:50+01:00" xmp:MetadataDate="2023-02-27T17:02:50+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:2c0ef833-3876-c849-b9a3-f40dab07a6c9" xmpMM:DocumentID="adobe:docid:photoshop:937a8a17-04ec-b14c-bbe3-ba257032b74a" xmpMM:OriginalDocumentID="xmp.did:ddeb9

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 83 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2021
Entropy (8bit):	7.84848730258957
Encrypted:	false
SSDEEP:	48:50i5f7/uIRKyf0TwmtWZ2XlIMFBMp2Q/sS48kmRcDQrg0DUqgiONhX1uV:5N5D/usKyMrtPpJMNfkmScU02iT
MD5:	EC0A524136F4F6E6D04C71C4FD563278
SHA1:	FAEC092CFFE543EFC133E982F340E68073006E90
SHA-256:	6C7DE0B208D3A32C177B4A80C41E7E2164E080591DC1729747D426E18C7F44F9
SHA-512:	C79A94C3E902BFF2D2CA975FA517B60FFADFF1D5B2454207C34C5965170C0C76176EC76C311022A60BF7C8493A736C4010E52BA193B247EE131D92C4063B0833
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...S...P.....e&I.....sRGB.........gAMA......a.....pHYs..........o.d...zIDATx^.{l.E..+j\|$.5i........Q.T.D......(..M...QPAAC..1...#.1.J..%j..>.z.......J!.".....N.q..m{-s.7.......vv.7..I..9:#TSS3...9..........w....5.........g........9r..#G..9Jt......3........+@.....D..J0...V....H,.q.......7].....4...S68..Ew........)..`...D.....q.. .b. Q4...z..h1..P+...E.At...#.7@..6...\|)S......@.4.....B.=.....!..I .\|.. .....]...{.X.-a....J....v.3m..;R".7.....g.....=.,..;../.m.....1(..Q+.....<..iL.pc6L..P..t\.`9>.q....1......A"RyC.4fe{S/W.,U.u%.L...<D.6`.....73h.....Dp{..vR....3-.T....=..Z.}=..f....~..[.#l............._.3U.;.......-.#..f...Pvj..%..UH~,$.Pa...L.<...r.....4....y-z....6..].ifX.q...{.....XE)TP......ifH....>^h..P.(...63......gf.c.!..B:..u DzX....._..>.=...uA.G.g.'....<./.#q..9.].v2.......?+.?.n;....0..xk.d.P..!....F..,.......Qr^$Y.P..^4.0......";q,...;......&..:M..3.........!i7....G..Qk....O.#..;%..D...V.:..!.x`.b..cVVyE.).R.Ud.[0..

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 686 x 702, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	108185
Entropy (8bit):	7.969102521397079
Encrypted:	false
SSDEEP:	3072:meoeIC8D2Vch25mzNWxPWk3UxTFkxJQpc9X:n8D5UsBmWboJQpIX
MD5:	0F52E85CC66D4FFAC9F9C5DCFA6BC7B2
SHA1:	7AB84D49040D10A9D15F3DDA599BA241DEDF0F3F
SHA-256:	BBB38FEED2A12B6B2CC1F440166A96B1FA4C108410E0D617637FF4AB560BC78A
SHA-512:	D1E17AAEB46A6D6AEA6472402127072A543E51478A4233FB220C0C9AB78836A030EE413B4490F9639F355C5227D51B26D0DFB75B3F2EC859CEAD2B9B9E2DCB30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............c)......pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)" xmp:CreateDate="2018-02-15T12:34:27+01:00" xmp:ModifyDate="2023-04-12T11:58:53+02:00" xmp:MetadataDate="2023-04-12T11:58:53+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:284e

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	26618
Entropy (8bit):	4.130291381901976
Encrypted:	false
SSDEEP:	384:+Q6YiFIVMD4MPRjc1zZ7XkUZ2S5n5HOLb7Miafb1iG:X6Y+jc1zZ7XkUZNF5HOLvMiafb8G
MD5:	D4615D756C37EA02129C8C494A20325B
SHA1:	00F10A8303A19232BC56F5CC97519B10AC436478
SHA-256:	3A87EF61183DB46C00C8890B917B5DC5B4B20D4B73CB4FB36637B277C1029BA1
SHA-512:	EEC4285F1E6AA57A3F43C5B3C24A521796D164BE0064ACE736DBABB961C87CEB56EA21C7F6AD9BC2984F80DC120583735E2D839637ADB12BAACAC34CEF1A86E7
Malicious:	false
Reputation:	low
URL:	https://www.pec.it/CMSScripts/Custom/arubaEEC.js
Preview:	(function () {.. "use strict".. window.arubaEEC = function () {.. let defaults = {. debug: false,. visualDebug: false,. visualDebugColors: {. viewItemList: 'orange',. selectItem: 'lightblue',. viewItem: 'green',. addToCart: 'violet',. generalItem: 'pink',. },. selectors: {. viewItemList: '[data-eec-view-item-list]',. selectItem: '[data-eec-select-item]',. viewItem: '[data-eec-view-item]',. addToCart: '[data-eec-add-to-cart]',. generalItem: '[data-eec-general-item]',. marcheTemporali: '#mtBuy', //CTA ID. viewItemListButton: "#tabProdotti .nav-link". },. pushEvents: { // all types. viewItemList: 'view_item_list',. selectItem: 'select_item',. viewItem: 'view_item',.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2314
Entropy (8bit):	6.693204169773155
Encrypted:	false
SSDEEP:	48:kq7D4knA9WI08tbTFl3aH7LS3YHIS/TjYTXpXH7l8g+smrul:kW8knmWI08RmH7LFHISbjYTXpXbl8Nst
MD5:	AB963F5E1138D6F1E00EC5DDF5DDA000
SHA1:	F71F2AC30C4E5918621D56B23B4CD78896DF6E75
SHA-256:	7DE779FCC1E6FA39B4E75ADCCCD05B839E6795DBBE9C48EFAD100F03A784C9C9
SHA-512:	5188A04F1AFDA465971AD7EFDD999F76C0043FE34B77D7D2D31F977B206146C96AA11EB2CC01904910E8D70BBECAEDBAE5BFB2B316A3D3578B168FB806952BDE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....pHYs...#...#.x.?v...1iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Windows)" xmp:CreateDate="2022-10-06T08:20:36+02:00" xmp:ModifyDate="2022-10-06T08:25:05+02:00" xmp:MetadataDate="2022-10-06T08:25:05+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:c99740a8-942c-fa44-8a72-48d4415e79ee" xmpMM:DocumentID="adobe:docid:photoshop:ae49b895-724e-7a45-b464-a93a89a27bdc" xmpMM:OriginalDocumentID="xmp.did:2e331c

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4744
Entropy (8bit):	7.937443330283719
Encrypted:	false
SSDEEP:	96:FksPD2It9v/Xrnt6wWDyafDqlW+CVOcGFKzLTqMe46iaXD:vRt9v/XztMXs+dRLToJiw
MD5:	2D996934570CFC85694B757AED1A67EE
SHA1:	0D33BFBC2F9343CB2ADE1D9AEE3E90F259CFD986
SHA-256:	17EB47DB4EFB4DCEF6AD594BC8E16CC3BDCFDA72FCE84D6D225DD0E6F53590E5
SHA-512:	AD9E60BCD476E5B1A4A60533D16209278813BF845F592D02B440BF1DF0AE9296CDB8A46FBFCB354BED118CD0B087C2600FB9897831244635116F867660A72B1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..xS..i....m..]o....].7l.`......qH...411...d..N.@.4.R.<......I(.0..$S ...9...B..#.$r....O.WOW..............9s&........o...=..M.>pA...F....i..]B.y.T>\|.......(..F8.j....X. ......pevvn.-vf.^..B._.eW"e....2$._...}...T..........F..Od.5...Jqut.xL.#.j4..Z......c...4.e..Y0..MtT...r.....j....o...}aa..BBD10Pt.......4..7W.$..{+*Lx.....O..........S.V{a.J-....[##.....(.........'.z.....F..:......x~Cbb...I.....(a....e4.f.&Z....R).....h.......w.A..._....@C...J%........e.......8.in.0.VX...cc..wU...t..j..`...8,..........`m...7J.k..s..d..t..........!x.k.(vO.7..L...a...S..8....J...../"B.Z.]......A.!.u`.[...W.c.....X~..........(((H.C]..i.d.i.}C..W#Xv..#.,.+..d.f.c..BEW.^.....Z.zxd.;.w..k?...C5........e..Y..Z..^.a.(.{....N...?0.y*O.vMQ(.5 /NB.w.........xl.0..V......Rn........x. .......@.X^....S4.k.`Y.....8v9....w..$..`.e.s.3H..Z..8..OBR.......23...\|^ZZ.....T:......h-.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-CBSMR1FX8C&gacid=1713985919.1720010249&gtm=45je4710v880708810z8867718176za200zb867718176&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=103516950
Preview:	<html></html>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3164
Entropy (8bit):	7.901920569815009
Encrypted:	false
SSDEEP:	96:Bv0O1YPi3TO78z0Vwc7J/X5phy/YRwW9+dIFwo:Bv0OG6iYz0Vtt/Xl1Rneo
MD5:	C956D501DA5ED4018B3664B89A365C87
SHA1:	C290D34ECA374BEB965257B8BB244384A0C8D5AA
SHA-256:	3A3A44FFE978E0FCBAC8A7FBD301C5CD2BEB4D8538ED4A9B1C346A0E00A1D7F2
SHA-512:	24AFA71065AE0DFB09FEE5DF4119E693B3B790C2CDE9120BB565779D6927103BD24E960D6B0A4342D8A24BC55D2F5BD05F021508AB40EECE5F2E3988711ECBE8
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/images-firma-remota/acquisto-rinnovo/39.aspx?width=80&height=76
Preview:	.PNG........IHDR...P...L.......0M....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.y..U............L_..D...@bY..AK.J..J(5%"$.b"..........+.& .......=r'......r......gg...\|.>5.o.u....wLMUU...n.zFWW..].vU).>m...uym.i..{.o..J.:;;..yd]^;w..!.G.$V).>..............T..Q.-..'.-f.IbH.f.... ....!...~.#b.x@.......0..Y.)}G..~&v..d..O......h..>a.U..;..7...BA.........<.q.:.Gt..6p..^n....l.s"...ST.,...c....T5..f.c...j`......0.i..-HS6.P.a...Am Q>7G....^.at.xQ...'...w..H..2....G.<.>.WO4..........7.4.baF".c.$.F..g.......V....c.\k......uW..@J........5c.. qI.u.f... 1-...2.M...nN.!k.:W.l_7q...&.z.....Z.O....1l..............%...=..[..E.[]..t.e...I..8^F...%[..:..d....d.f%Z$.....D)....TM....>..w.......z}...!.e.ncG..E./.!a..8QJ)...4H`(.q]...b0.h#..2/.c.....>.)q3Z.%K..Q..Z\|o.>g......ZJ,..n..s..~y..<....1L.,_c..!.:.i.....3.....Y..p.S.p....c[.n.\|..Uj7..nB....70.....2.e........M.iI&.(.2U..b.Jf{.J.j.H.Mi._.......g....5..0...z.s2...~x.....^5..go...w.R

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12754
Entropy (8bit):	6.999588862217044
Encrypted:	false
SSDEEP:	192:5SQ7FSknEq8ZbY4JVKT0P+XIRe70RCO8nKd+gKwbiX2Ioy2d0v:gQvnELbY4JVKTe+XI5ngJgNpd0v
MD5:	9A40970AE5BDF0C0D44B5A91737F9FC1
SHA1:	CEBC58CD281A303E9FFCB4DFB7B0978B81672998
SHA-256:	E1A0C88B504DE2E0274C7242DD6F3A8693C2B6B903139B88E7B76082FBF2F173
SHA-512:	36795A3BEAECBBC94D6D8BD3375279B72DBAC68D02AE92351C84A8B7C94695310ABF86F1523BA38F78B8757A46ED5E4357CCE073AD84EF680D865254156F347D
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/images-firma/images-firma-remota/acquisto-rinnovo/40.aspx
Preview:	.PNG........IHDR.............<.q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)" xmp:CreateDate="2016-07-07T12:25:27+02:00" xmp:ModifyDate="2018-07-27T12:54:18+02:00" xmp:MetadataDate="2018-07-27T12:54:18+02:00" xmpMM:InstanceID="xmp.iid:8c1e9a49-0025-e24f-b3cd-8f82d576ccac" xmpMM:Documen

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
Category:	downloaded
Size (bytes):	18028
Entropy (8bit):	7.988319422898098
Encrypted:	false
SSDEEP:	384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA
MD5:	448C34A56D699C29117ADC64C43AFFEB
SHA1:	CA35B697D99CAE4D1B60F2D60FCD37771987EB07
SHA-256:	FE185D11A49676890D47BB783312A0CDA5A44C4039214094E7957B4C040EF11C
SHA-512:	3811804F56EC3C82F0BEF35DE0A9250E546A1E357FB59E2784F610D638FEC355A27B480E3F796243C0E3D3743BE3EADDA8F9064C2B5B49577E16B7E40EFCDB83
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/59/5999d092-c03b-4eb4-a112-229f474fdd81.woff2
Preview:	wOF2......Fl.......\..F....M....................?FFTM.. .`..r.......$..e.6.$..t..0.. .."..Q?webf..e.5...@..?....... ..t............,3+.2q..F..YO...&>..b.m.5.Z..H$..Y....{.H.jd......%....y"......+.@..]..e..{...v..Nc.)..n...?~?.h...._.&i..........?.>..^K .v.-.c.1....2K..y..,'n....(.3Ewi.B....&.....T.lh.0M.....d.Y.r...nti.].yur........VXsj.....gMn...H.W..... r2.>iT`V7..R(.......+.o6.'c..B.....4..........T.]a[Qd<3wq8,...rTI..8....0>E.?.E...#..7'.....S...oc..._.7&#.+)....+4a..A6.c..y...f(b.F.....$;{ YA.1vP-tG........".....C.f- W.......uK.K..#.....*K.<... (.......Z.`...[.%.Y.T..{%..$....s{o.........vt"p..4`.....}o.`....'n.e.>..G.5s.z._N...PK.vmU...{z............."3`l.....W#..^.@+.,.c..ko..AO.p.nu...z.zJ).......1.}...O=.....x.R..`.J.`.q....Us/.+.k.v.1xl....j.l..El.\nD.....V.....jg.{Zd..z7...5..!.xm.5o.[....u..&..1.H.BkA...qr..R........(\gh....7...y.=.H.Z.UPh..$8.Rg.....z.g..N:...1u.$.....>R.]......."..f7....K.^.'...3.+E/..^.YU5].NB......8..+.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6774), with no line terminators
Category:	downloaded
Size (bytes):	6774
Entropy (8bit):	5.06648278504689
Encrypted:	false
SSDEEP:	96:bEBn/0O8icP8FQv0rZzPgPpMQvhXOQvpF860uka7WSqvcPt/zu+S:bS/CH10lPgPpTvBV7Nec1+
MD5:	98593ACD318668ABE5B2AD796ABEE0E7
SHA1:	5AE7B8FC0CBC9CA051F7F33761C8A32AAA61683B
SHA-256:	942B6D26CA563D85780ED24B4B50ADBEE54A00658A042FC576A6DEDB100F8984
SHA-512:	DA63227D6BB8403C6BEBF8CEB53469436DC0395DB1CDEE0047E7B1DAE290FC74250B43FE18E3988AFB1EDFAC2B1356E38B500498BF1F3FF30E0CD53276513AEA
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/cc/cc8e3a5b-3fe4-4c09-b8a2-3b13efeac641.css
Preview:	#DivNodalBlue,#DivNodalGreen,#DivNodalRelated,.alert.alert-info,.alert.alert-success{background-position-y:12px;background-repeat:no-repeat}#switchguidavideo div#imgguida a,#switchguidavideo div#imgvideo a,.repeater h2 a .h2videoguida{color:#222;text-decoration:none}.fade.in.active.plugvideo{display:block!important}.alert-danger .glyphicon,.alert-disclaimer .glyphicon,.alert-info .glyphicon,.alert-success .glyphicon,.alert-warning .glyphicon,.fade.plugvideo{display:none!important}#DivGuidaVideo ul{border-bottom:3px solid #ddd!important}#DivGuidaVideo ul li{text-align:center;margin-bottom:-3px!important;border:none;font-size:16px;width:220px}#DivGuidaVideo ul li a{font-weight:700;line-height:30px;color:#000}#DivGuidaVideo li.active a,#DivGuidaVideo li.active a:focus,#DivGuidaVideo li.active a:hover{margin-bottom:0!important;border-top:0 solid transparent!important;border-left:0 solid #ddd!important;border-right:0 solid #ddd!important;border-bottom:3px solid #1474bd!important;border-radi

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1909
Entropy (8bit):	6.4035411408206455
Encrypted:	false
SSDEEP:	48:K/6IYJVknA9Wp2Kp9xlotY3klHVy3pPZHGygtS:KS7knmWp20xWt7lHV2HGJS
MD5:	9B416F5C59BB76CF53AC7B4C0F552E61
SHA1:	E9EA4A430AC637C558CDCA3C2E03810741DC6B50
SHA-256:	4C669C1D9C1323964EC46EC123D237F08945B3C537A26C32D0A02B6B191DACA9
SHA-512:	F72F461A0AFB103A056DA361A71288BE3BC428CB5A97777734E6D42DCE63AC6ADFC151B854BB9ECCDAC0AC6B23BFFBE8C4C632D9CBD0EF626B8990D0AFDFC279
Malicious:	false
Reputation:	low
URL:	https://guide.pec.it/acquisto-registrazione-e-attivazione-spid/altre_immagini/images-(2)/piu.aspx
Preview:	.PNG........IHDR.............;mG.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 22.2 (Windows)" xmp:CreateDate="2023-02-14T14:46:42+01:00" xmp:MetadataDate="2023-02-14T14:46:42+01:00" xmp:ModifyDate="2023-02-14T14:46:42+01:00" xmpMM:InstanceID="xmp.iid:cd6c258c-b920-d149-bbb4-139aac73e739" xmpMM:DocumentID="adobe:docid:photoshop:5d10c394-671a-e34b-9cd0-e934b4f261ae" xmpMM:OriginalDocumentID="xmp.did:57a9e932-9c2c-334e-a177-5c12521fcb3f" dc:format="imag

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1241
Entropy (8bit):	6.710015299166655
Encrypted:	false
SSDEEP:	24:d1h4SHWwjx82lY2T3/VCRlUgv2yJ3VNat6bGOVisj4MvUgGguiBri4R:DKS2Nn2Dw1J3npXj4MMgwidi4R
MD5:	68FAAC36F798044F1FC6D9D2FA4B7956
SHA1:	9140B91E6FF97FF84BA885F1BB1A5FC2D67E2FC3
SHA-256:	02D49B62B3A2672680A18F2B4C9B17F4F7DE91647529BFCD370B2242E10BB346
SHA-512:	EB12ADB2967FCF8F9B3F00BC56C3583CB21781DC798C5EBA43DBCB63BFD14EBB396A583DD6A4965AAE0310D1D6F72B51E281B1768B4BAEAEC26B91A4BD4D73B0
Malicious:	false
Reputation:	low
URL:	https://mediacdn.aruba.it/MediaCDNRepository/files/c0/c04696cd-b99e-4461-b0b8-eef27b49d471.png
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:5925B3ADDB4D11EC9F288311D5EB4DE3" xmpMM:DocumentID="xmp.did:5925B3AEDB4D11EC9F288311D5EB4DE3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5925B3ABDB4D11EC9F288311D5EB4DE3" stRef:documentID="xmp.did:5925B3ACDB4D11EC9F288311D5EB4DE3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.<w....NIDATx..U1..P...\|.!..^@.. '....b#6.b.c...j.#X......A...+b.q.Y...S.y.>3.1.G.... `Q.AY.........4M.^.d...[.....dY^E

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6174
Entropy (8bit):	7.888089384832391
Encrypted:	false
SSDEEP:	96:8SK2m59lVQh3IFYh36zdRlNBMDStfuiIBZkl3IPCZPUQaSPZBKu:DOLg8uUlL0Wf7IZkl3HZHKu
MD5:	753357B69906A9085D1E8637ECAA16E1
SHA1:	133457B14AB8C2914928E91D184DCDB7D571F35A
SHA-256:	DDF4E3CEC692AB7433C73B9AEE912671DDD8B49C6F797EC54A5C9F57E3CA6942
SHA-512:	F82300DB7E846B0840533C84C6284EA4BBE7644D815EBBF2E200659256C4739C207B0C622AD08B7FA83D22AA7368AED3B4D7099EE950C6ABB73F810B92EEBC6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Z.......\|.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:DE41F44852A011EE9E4CA0B389953E92" xmpMM:DocumentID="xmp.did:DE41F44952A011EE9E4CA0B389953E92"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DE41F44652A011EE9E4CA0B389953E92" stRef:documentID="xmp.did:DE41F44752A011EE9E4CA0B389953E92"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?.......IDATx..].x.E.>......%,..A.........2...G.y"..*........">.Y$.0H.0l. .m. .......@...FH.N..Js...Vw.....W]}.....:u.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 14:35:54.565712929 CEST	49677	443	192.168.2.9	20.189.173.11
Jul 3, 2024 14:35:56.972043991 CEST	49677	443	192.168.2.9	20.189.173.11
Jul 3, 2024 14:35:58.300080061 CEST	49676	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:35:58.300214052 CEST	49675	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:35:58.471976042 CEST	49674	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:01.784463882 CEST	49677	443	192.168.2.9	20.189.173.11
Jul 3, 2024 14:36:03.050468922 CEST	49673	443	192.168.2.9	204.79.197.203
Jul 3, 2024 14:36:04.297065973 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297121048 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:04.297199965 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297441006 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297488928 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:04.297554970 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297663927 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297677040 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:04.297868967 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:04.297879934 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.193869114 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.196650028 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.196667910 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.197843075 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.197920084 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.198934078 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.199021101 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.199151993 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.199163914 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.206870079 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.208475113 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.208508968 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.209563971 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.209633112 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.218727112 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.218920946 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.229474068 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.229523897 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.229598999 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.243423939 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.244005919 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.244029045 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.274544001 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.274559021 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.327085972 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.411103964 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.411202908 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.411272049 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.412789106 CEST	49712	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.412815094 CEST	443	49712	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.416472912 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.460510015 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.626949072 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.627157927 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.627249956 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.627860069 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.627883911 CEST	443	49711	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.627895117 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.627933979 CEST	49711	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.629802942 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.629852057 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.629937887 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.630156994 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:05.630172014 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:05.884872913 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.885256052 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.885291100 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.886617899 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.886776924 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.887856960 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.887958050 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.929465055 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:05.929481030 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:05.976769924 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:06.553045034 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.553404093 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:06.553432941 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.554080963 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.554774046 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:06.554897070 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.557694912 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:06.600502968 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.776299953 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.776384115 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:06.776436090 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:06.780738115 CEST	49716	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:06.780759096 CEST	443	49716	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.004781961 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.004812002 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.004878044 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.005306959 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.005319118 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.005377054 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.009716988 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.009728909 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.010282993 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.010291100 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.570135117 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:07.570173025 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:07.570281029 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:07.572371006 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:07.572386026 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:07.907413006 CEST	49676	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:07.907423973 CEST	49675	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:07.922065020 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.925398111 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.925417900 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.925853968 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.926994085 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.927084923 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.927598000 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.931063890 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.931083918 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.931211948 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.931510925 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.933209896 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.933310986 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.933676958 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:07.976516962 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:07.980504990 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.083477974 CEST	49674	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:08.146070004 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.146164894 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.146413088 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.147269011 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.147301912 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.147362947 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.147377014 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.147423029 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.147566080 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.147629976 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.148405075 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.148488045 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.148495913 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.148525000 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.148578882 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.180039883 CEST	49718	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.180062056 CEST	443	49718	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.221920967 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.222086906 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.223262072 CEST	49717	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.223282099 CEST	443	49717	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.239170074 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.239212036 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.239362001 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.239593983 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.239620924 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.239727974 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240117073 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240125895 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.240181923 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240438938 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240448952 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.240556002 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240808010 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.240817070 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.241080046 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241139889 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241147995 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.241194010 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241374969 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241389036 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.241556883 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241570950 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.241681099 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241691113 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.241856098 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.241868973 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.242156029 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.242167950 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.242567062 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:08.242579937 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:08.280335903 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.280359983 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.280693054 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.327883959 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.467447042 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.512494087 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.654505968 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.654581070 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.654628038 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.655093908 CEST	49719	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.655107021 CEST	443	49719	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.753245115 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.753305912 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:08.753391981 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.760677099 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:08.760700941 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.128650904 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.129753113 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.129765987 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.130865097 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.130930901 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.132508039 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.132580042 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.132966042 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.133126974 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.133135080 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.133596897 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.133606911 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.134686947 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.134742975 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.135225058 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.135288000 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.135684967 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.135691881 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.136406898 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.136409044 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.136964083 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.136970997 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.137270927 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.137398958 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.137408972 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.137785912 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.137989044 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.138046980 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.138694048 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.138757944 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.139112949 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.139413118 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.147598028 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.147914886 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.147926092 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.149243116 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.149329901 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.150286913 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.150350094 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.150486946 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.155301094 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.155616999 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.155627966 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.156688929 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.156743050 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.157551050 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.157610893 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.158107042 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.158118010 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.174320936 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.177061081 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.184497118 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.184503078 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.194360971 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.194372892 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.209343910 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.241328955 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.346317053 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346342087 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346395016 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346415043 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.346434116 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346448898 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346468925 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.346487045 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.346493959 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346529007 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.346573114 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.352401972 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.352492094 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.352580070 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.354212999 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.354237080 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.354300976 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.354310036 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.354388952 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.354432106 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.354485989 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.355262995 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.355324030 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.357129097 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.357156038 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.357209921 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.357218027 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.357364893 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.357687950 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.357750893 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.358232021 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.358284950 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.363506079 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.363531113 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.363590956 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.363600969 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.363760948 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.363769054 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.363775015 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.363840103 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.364295006 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.364362001 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.364368916 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.364418030 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.375493050 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.375519037 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.375575066 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.375583887 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.375622988 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.375895023 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.375942945 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.376552105 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.376600981 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.406987906 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.407052994 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.408478022 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.408497095 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.408761024 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.410114050 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.456501007 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.472877979 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.472948074 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.472974062 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.472996950 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473006964 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473066092 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473099947 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473161936 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473242044 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473320007 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473560095 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473619938 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473665953 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473718882 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.473782063 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.473866940 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.474320889 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.474387884 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.474513054 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.474562883 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.475202084 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475333929 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.475442886 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475497961 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.475519896 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475543976 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475589991 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.475625038 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475661039 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475673914 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.475683928 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.475702047 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.476181984 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.476227045 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.476264000 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.476272106 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.476321936 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.476321936 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.476959944 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.477011919 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.477406025 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.477453947 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.477463007 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.477468967 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.477515936 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.478286982 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.478360891 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.478369951 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.478423119 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.479314089 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.479379892 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.486852884 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.486918926 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.487067938 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.487119913 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.487962008 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.488013029 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.488035917 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.488076925 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.488933086 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.488976955 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.489984035 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.490035057 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.490128994 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.490178108 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.529351950 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.577431917 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.577442884 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.577497959 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.577615023 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.577620983 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.577682972 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.577883005 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.577944994 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.578012943 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.578109980 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.578655005 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.578758955 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.578991890 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.579045057 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.579590082 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.579667091 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.579792976 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.579823971 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.579869986 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.579879999 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.579898119 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.580730915 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.580761909 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.580807924 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.580816984 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.580946922 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.581496000 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.581551075 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.581558943 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.581593990 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.581599951 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.581610918 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.581653118 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.587039948 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.587105989 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.587116957 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.587126017 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.587152958 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.587172985 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.587421894 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.587491035 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.587539911 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.587687969 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.588355064 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.588449001 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.588459015 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.588531017 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.589159012 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.589230061 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.589360952 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.589427948 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.590060949 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.590164900 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.590209007 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.590235949 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.590270042 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.590276957 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.590311050 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.591201067 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.591249943 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.591279030 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.591289997 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.591303110 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.591329098 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.591401100 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.598340034 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.598421097 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.598467112 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.598530054 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.598604918 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.598664999 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.598706961 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.598762989 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.599487066 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.599548101 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.599625111 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.599703074 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.600337982 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.600399971 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.600496054 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.600558043 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.601229906 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.601300001 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.601351023 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.601389885 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.602189064 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.602257967 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.602323055 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.602379084 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.603174925 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.603209972 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.603228092 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.603245974 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.603265047 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.603293896 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.622917891 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.654644012 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.666841984 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.666941881 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.668402910 CEST	49721	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.668421984 CEST	443	49721	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.668874025 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.668915033 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.669086933 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.670166016 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.671118021 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.671133041 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.676716089 CEST	49725	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.676732063 CEST	443	49725	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.678225994 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.678237915 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.678446054 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.678827047 CEST	49720	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.678833961 CEST	443	49720	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.679326057 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.679373026 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.679451942 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.680566072 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.685231924 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.685244083 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.685758114 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.685770988 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.686273098 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.686325073 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.686400890 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.691150904 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691224098 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691332102 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691359997 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691379070 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691385984 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691437006 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691468954 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691560984 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691622972 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691838026 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691886902 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691904068 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.691910028 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.691927910 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692050934 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692092896 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692102909 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692107916 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692152023 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692701101 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692769051 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692775965 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692850113 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692893028 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692944050 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692945004 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.692954063 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.692990065 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693408966 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693495035 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693680048 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693722010 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693747044 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693785906 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693785906 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693794966 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693829060 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693835020 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693870068 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.693881035 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.693917036 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.694612026 CEST	49724	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.694626093 CEST	443	49724	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.694976091 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.694987059 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.695087910 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.700783968 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.700798035 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.701720953 CEST	49722	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.701735020 CEST	443	49722	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.709855080 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.709918976 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710026026 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710067987 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710114002 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710151911 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710366011 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710417032 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710427999 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710455894 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710470915 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710824013 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.710882902 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.710896015 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711009979 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711019993 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711064100 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711066008 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711081982 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711112022 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711126089 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711412907 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711464882 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711575985 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711636066 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711833000 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.711874008 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.711914062 CEST	443	49704	23.206.229.209	192.168.2.9
Jul 3, 2024 14:36:09.712100983 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.712110043 CEST	49704	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:09.712148905 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.712265968 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.712311983 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.712476969 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.712515116 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.712522030 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.712533951 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.712548971 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.713226080 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.713295937 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.713310003 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.713368893 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.713687897 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.713726997 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.713768005 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.713778019 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.713805914 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.713886023 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.714075089 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.714127064 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.714164019 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.714212894 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.714221954 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.714263916 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.714409113 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.714458942 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.715017080 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.715073109 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.715198994 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.715240002 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.715331078 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.715384007 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.787431002 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.787472963 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.787532091 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.800636053 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.800694942 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.800726891 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.800772905 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.800848007 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.800889969 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.801048040 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.801091909 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.821388006 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821430922 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821458101 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.821497917 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821515083 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.821568012 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821610928 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.821619987 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821824074 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821858883 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821866035 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.821873903 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.821901083 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822182894 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822232008 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822240114 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822344065 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822388887 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822438002 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822449923 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822455883 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822479963 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822590113 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822750092 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822792053 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822798967 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822813988 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822839022 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822849035 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822853088 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.822890043 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.822896004 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.823028088 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.827795982 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.840888977 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.840912104 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.882828951 CEST	49723	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.882869005 CEST	443	49723	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.887121916 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.887166977 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.887270927 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.888143063 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:09.888155937 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:09.938570976 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.938596964 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:09.938637018 CEST	49727	443	192.168.2.9	184.28.90.27
Jul 3, 2024 14:36:09.938652039 CEST	443	49727	184.28.90.27	192.168.2.9
Jul 3, 2024 14:36:10.576689005 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.577187061 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.577207088 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.577567101 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.578885078 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.578948021 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.579479933 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.593610048 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.594129086 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.594151974 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.594202995 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.594432116 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.594465017 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.594530106 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.595347881 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.595412016 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.595558882 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.595558882 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.595618963 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.596609116 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.596684933 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.596755981 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.604667902 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.604964018 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.604970932 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.606121063 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.606220007 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.607259035 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.607367039 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.607733011 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.607741117 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.620511055 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.640501976 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.644510984 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.646867037 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.646891117 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.661915064 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.693659067 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.739940882 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.741090059 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.741112947 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.742218971 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.742280960 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.742736101 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.742803097 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.743237019 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.743244886 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.771073103 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.771583080 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.771598101 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.772701025 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.772784948 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.773818970 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.773818970 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.773829937 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.773895979 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.788528919 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.791148901 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.791173935 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.791368961 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.791378975 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.791543961 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.791687965 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.791817904 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.792517900 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.792592049 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.815417051 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815444946 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815534115 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.815571070 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815614939 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.815766096 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815792084 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815865040 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815862894 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.815886021 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.815924883 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.815996885 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.816054106 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.816056013 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.816066980 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.816117048 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.816119909 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.816245079 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.816251993 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.816289902 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.818805933 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.818816900 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829452038 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829473019 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829520941 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829538107 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.829540014 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829564095 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829565048 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.829596996 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.829612017 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.829649925 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.829649925 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.865056992 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.902896881 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.902981997 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.903137922 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.903187037 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.903196096 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.903238058 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.903340101 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.919282913 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.919334888 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.919373035 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.919389009 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.919400930 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.919433117 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.919625044 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.919703007 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.919848919 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.920212030 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.920227051 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.920301914 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.920325041 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.920355082 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.920367956 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.920433998 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.921060085 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.921108007 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.921149969 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.921189070 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.921994925 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.922034979 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.922909021 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.922955036 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.923083067 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.923083067 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.923103094 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.955863953 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.956094027 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.956151009 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.956181049 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.956197977 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.956228018 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.956248999 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.974005938 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.988967896 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.989018917 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.989327908 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:10.989331961 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:10.989408970 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.032226086 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032237053 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032310009 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.032327890 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032340050 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032366037 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.032385111 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.032449961 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032500982 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.032613993 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.032656908 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.033266068 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.033318043 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.033329964 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.033360958 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.033406019 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.143338919 CEST	49729	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.143357992 CEST	443	49729	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.155299902 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.155328035 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.155395031 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.156250000 CEST	49732	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.156259060 CEST	443	49732	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.156507969 CEST	49734	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.156550884 CEST	443	49734	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.156764030 CEST	49735	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.156770945 CEST	443	49735	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.157341003 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.157358885 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.159600019 CEST	49730	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.159605980 CEST	443	49730	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.165391922 CEST	49731	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.165419102 CEST	443	49731	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.278296947 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.278354883 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.278430939 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.278661966 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.278670073 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.278717995 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.278896093 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.278929949 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.278992891 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.280831099 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.280850887 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.281663895 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.281682968 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.281879902 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:11.281888962 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:11.394026041 CEST	49677	443	192.168.2.9	20.189.173.11
Jul 3, 2024 14:36:12.047972918 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.078418016 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.078448057 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.078941107 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.079798937 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.079875946 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.086016893 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.132497072 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.163450956 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.163850069 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.163876057 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.164793968 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.164895058 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.165282011 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.165342093 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.165519953 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.165527105 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.192198992 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.192504883 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.192517042 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.193398952 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.193470955 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.193808079 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.193959951 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.197370052 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.197801113 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.197830915 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.197856903 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.198961020 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.199028969 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.199441910 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.199506998 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.199673891 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.199682951 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.210036993 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.240716934 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.240729094 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.240777969 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.288275003 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.299731016 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.299832106 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.300134897 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.302321911 CEST	49736	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.302339077 CEST	443	49736	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.309339046 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.309386015 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.309432983 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.309688091 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.309703112 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.374947071 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.374984026 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.375040054 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.375049114 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.375232935 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.375986099 CEST	49737	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.376002073 CEST	443	49737	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413325071 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413378000 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413424969 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.413460016 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413533926 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.413541079 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413594007 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.413633108 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416433096 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416469097 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416536093 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416557074 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416600943 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416629076 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416680098 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416745901 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416793108 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416804075 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416838884 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.416850090 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.416886091 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.422405958 CEST	49738	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.422421932 CEST	443	49738	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:12.422952890 CEST	49739	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:12.422966957 CEST	443	49739	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.225363970 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.230536938 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:13.230585098 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.230926037 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.231976986 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:13.232052088 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.232274055 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:13.272514105 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.449999094 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.450191021 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:13.450244904 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:13.452581882 CEST	49743	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:13.452608109 CEST	443	49743	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:15.802405119 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:15.802481890 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:15.802540064 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:16.623471975 CEST	49714	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:36:16.623498917 CEST	443	49714	216.58.206.36	192.168.2.9
Jul 3, 2024 14:36:16.624332905 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.624358892 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:16.624420881 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.625163078 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.625236988 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:16.625299931 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.630038977 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.630064964 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:16.630451918 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:16.630460978 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.511435986 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.512001991 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.512036085 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.512511015 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.512864113 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.512942076 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.513171911 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.515728951 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.516064882 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.516084909 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.516446114 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.517401934 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.517467022 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.560513020 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.567523003 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.725569010 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.725671053 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:17.725722075 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.730447054 CEST	49747	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:17.730467081 CEST	443	49747	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.252214909 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.252264023 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.252396107 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.253381968 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.253396034 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.253674984 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.300503969 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469063997 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469101906 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469188929 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.469206095 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469219923 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469240904 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.469249964 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469265938 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.469300985 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469340086 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.469347954 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469383001 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.469419003 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.659121990 CEST	49746	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:19.659157991 CEST	443	49746	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:19.697299957 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:19.697340965 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:19.697571039 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:19.727727890 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:19.727746964 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.146956921 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.187813044 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.273894072 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.273910999 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.274533987 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.277223110 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.277298927 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.277447939 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.320513964 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.367202997 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.367547989 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.367577076 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.368645906 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.368706942 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.369522095 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.369590998 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.374401093 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.374411106 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.426940918 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.501918077 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.501945019 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.501991987 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.502002001 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.502012014 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.502048969 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.502487898 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.502540112 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.613537073 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.613593102 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.613629103 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.613629103 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.613641977 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.613903046 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.614692926 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.614746094 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.614861012 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.614907980 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.615106106 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.615164995 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.615962029 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.616122007 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.616173983 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.616339922 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.617167950 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.617259979 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.617286921 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.617338896 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.620412111 CEST	49752	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:20.620429039 CEST	443	49752	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:20.653506041 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.653552055 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.653652906 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:20.653692007 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.653723955 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.674124002 CEST	49754	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:20.674148083 CEST	443	49754	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:22.917062998 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:22.917088032 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:22.917139053 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:22.917331934 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:22.917344093 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.453248024 CEST	49704	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.453572035 CEST	49704	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.453880072 CEST	49759	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.453941107 CEST	443	49759	23.206.229.209	192.168.2.9
Jul 3, 2024 14:36:23.454009056 CEST	49759	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.454473972 CEST	49759	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.454487085 CEST	443	49759	23.206.229.209	192.168.2.9
Jul 3, 2024 14:36:23.458297968 CEST	443	49704	23.206.229.209	192.168.2.9
Jul 3, 2024 14:36:23.458564043 CEST	443	49704	23.206.229.209	192.168.2.9
Jul 3, 2024 14:36:23.559149027 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.560513973 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.560528040 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.562014103 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.562072992 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.563848972 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.563957930 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.564263105 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.564270020 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.586178064 CEST	49759	443	192.168.2.9	23.206.229.209
Jul 3, 2024 14:36:23.636440039 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.859884977 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.859967947 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.860009909 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.860019922 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.860034943 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.860073090 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.860085011 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.860090971 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.860130072 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.860133886 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.866137028 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.866200924 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.866208076 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.874093056 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.874140978 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.874170065 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.874176979 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.874304056 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.945331097 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.947997093 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.948235989 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.948242903 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.948591948 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.948643923 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.948649883 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.956578970 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.956706047 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.956711054 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.961894035 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.961950064 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.961999893 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.962006092 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.962047100 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.967448950 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.973572969 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.973624945 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.973627090 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.973643064 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.973689079 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.973692894 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.979943991 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.980129004 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.980134010 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.985838890 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.985896111 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.985901117 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.991905928 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.991966963 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:23.991972923 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:23.998298883 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.000551939 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.000557899 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.004956961 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.005701065 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.005707026 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034205914 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034259081 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034281015 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.034286976 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034339905 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.034346104 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034440041 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:24.034518957 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.035069942 CEST	49757	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:24.035079002 CEST	443	49757	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:25.473639011 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.473681927 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:25.473941088 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.474518061 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.474534035 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:25.509291887 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.509334087 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:25.510096073 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.510499001 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:25.510515928 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.116549015 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.116755962 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.116785049 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.117140055 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.117438078 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.117503881 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.117548943 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.152040005 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.152295113 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.152314901 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.152689934 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.153008938 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.153086901 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.153131962 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.164509058 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.200504065 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.240535975 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.406246901 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.408301115 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.408363104 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.408591986 CEST	49763	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.408612013 CEST	443	49763	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426595926 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426645041 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426676989 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426732063 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426733971 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.426750898 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.426764011 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.432333946 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.432384014 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.432406902 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.432426929 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.432465076 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.432471991 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.438688993 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.438735008 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.438746929 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.446151972 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.446197033 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.446209908 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.490209103 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.515712023 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.515882015 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.515925884 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.517122984 CEST	49764	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.517146111 CEST	443	49764	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.690084934 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.690138102 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:26.690309048 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.691270113 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:26.691282034 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.334100962 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.363188028 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.363208055 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.363787889 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.364146948 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.364233971 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.364324093 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.408510923 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621166945 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621211052 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621237993 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621252060 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.621268034 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621298075 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621320009 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621339083 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.621346951 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.621356964 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.627511978 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:27.627695084 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.629164934 CEST	49767	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:27.629184961 CEST	443	49767	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:29.153165102 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.153206110 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:29.153323889 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.153323889 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.153351068 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:29.153588057 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.154640913 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.154642105 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:29.154660940 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:29.154670954 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.038985968 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.039269924 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.039302111 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.039691925 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.040019989 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.040106058 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.040240049 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.063745975 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.064162970 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.064192057 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.065327883 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.065694094 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.065864086 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.080507994 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.107970953 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.252922058 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.252944946 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.253005028 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.253036976 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.253134966 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.253184080 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.253190994 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.254046917 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.254122019 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.254131079 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.254232883 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.254403114 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.254492044 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.254535913 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.292833090 CEST	49770	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:36:30.292875051 CEST	443	49770	217.61.8.139	192.168.2.9
Jul 3, 2024 14:36:30.482716084 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:30.482768059 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:30.482855082 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:30.483321905 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:30.483335018 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.149102926 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.149354935 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.149379015 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.150537968 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.150974989 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.151061058 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.151174068 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.196500063 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.443994045 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444048882 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444077015 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444098949 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.444104910 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444129944 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444148064 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.444224119 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.444259882 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.444267988 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.450294018 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.450591087 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.450608015 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.457726002 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.457779884 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.457829952 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.457842112 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.457882881 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.530215025 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.531351089 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.531421900 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.531438112 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.536537886 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.536658049 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.536673069 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.539299011 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.539381981 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.539391041 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.545603037 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.545639992 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.545691013 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.545702934 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.545741081 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.551785946 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.557801962 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.557852983 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.557873011 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.557885885 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.558006048 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.558012962 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.563724995 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.563780069 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.563788891 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.569482088 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.569535017 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.569545984 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.575368881 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.578469992 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.578480959 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.581301928 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.581381083 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.581389904 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.587122917 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.587192059 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.587201118 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617007971 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617068052 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617090940 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.617098093 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617115974 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617136955 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:31.617266893 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:31.617347002 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:32.107017994 CEST	49772	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:32.107047081 CEST	443	49772	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:32.492099047 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:32.492141962 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:32.492189884 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:32.492424965 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:32.492439032 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.124579906 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.140269041 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.140284061 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.140785933 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.143124104 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.143193960 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.143318892 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.184508085 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423525095 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423609972 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423643112 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423676968 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423702002 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.423708916 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423721075 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.423733950 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.423806906 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.426383018 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.426592112 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:33.428565025 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.433767080 CEST	49774	443	192.168.2.9	216.58.212.164
Jul 3, 2024 14:36:33.433799028 CEST	443	49774	216.58.212.164	192.168.2.9
Jul 3, 2024 14:36:36.748073101 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748095989 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:36.748161077 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748277903 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748306036 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:36.748356104 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748568058 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748584032 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:36.748789072 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:36.748807907 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.208880901 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.209078074 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.209095955 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.210310936 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.210364103 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.211702108 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.211781979 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.212173939 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.212189913 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.219329119 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.219527960 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.219547033 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.220623970 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.220675945 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.220963955 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.221029043 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.221348047 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.221359015 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.258294106 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.274559021 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.331295013 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331367970 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331399918 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331443071 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331451893 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.331479073 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331491947 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.331511021 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.331609011 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.331615925 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.332496881 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.332545996 CEST	443	49790	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.332603931 CEST	49790	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346199036 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346255064 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346287966 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346304893 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346324921 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346362114 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346395016 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346400976 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346409082 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346432924 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346467972 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346504927 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346513033 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346910954 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.346961021 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.346968889 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.396416903 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.396440983 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436585903 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436619043 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436640978 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.436661959 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436702967 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.436711073 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436749935 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.436820030 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.436826944 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437012911 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437046051 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437062025 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.437068939 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437098980 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437125921 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.437133074 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437170029 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.437896013 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437949896 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437983036 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.437993050 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.437999964 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.438046932 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.438051939 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.438067913 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:37.438133001 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.438519955 CEST	49791	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:37.438536882 CEST	443	49791	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:38.762463093 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:38.762512922 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:38.762577057 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:38.763556957 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:38.763570070 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:38.774955988 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:38.774993896 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:38.775249958 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:38.775249958 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:38.775291920 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.219635010 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.219677925 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.219793081 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.222518921 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.222537994 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.254470110 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.254534960 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.257967949 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.257968903 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.258030891 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.656595945 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.657540083 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.657553911 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.658474922 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.658526897 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.660547972 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.660619020 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.661436081 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.661442995 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.693701029 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.693947077 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.693977118 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.695039034 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.695095062 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.696196079 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.696273088 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.696367025 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.696373940 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.712640047 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.741352081 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.866866112 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.878213882 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.878236055 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.878285885 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.878299952 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.878343105 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.911581993 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.964802027 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.965013981 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.965035915 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.965898037 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.965953112 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.967017889 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.967096090 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.967219114 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:39.967228889 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:39.973750114 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.973762989 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.973793030 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.973829031 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.973839045 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.973849058 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.983360052 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.983398914 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.983432055 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.983442068 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.983490944 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.988190889 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.988251925 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.988986969 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.989037037 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.989044905 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.989095926 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.989161015 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.989317894 CEST	49809	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:39.989331007 CEST	443	49809	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:39.997895002 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.997917891 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.997926950 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.997942924 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.997951031 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.997961044 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.997972965 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.998016119 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:39.998024940 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:39.998063087 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.007250071 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.028306007 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.028321028 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.028362989 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.028393030 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.028414011 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.028444052 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.028470993 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129661083 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129684925 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129723072 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129739046 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129760981 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129765034 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129784107 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129786015 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129797935 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129842997 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129875898 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.129883051 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.129920959 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.133512974 CEST	49807	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.133553028 CEST	443	49807	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.147447109 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.148678064 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.148705959 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.149797916 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.149846077 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.150527954 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.150604963 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.150746107 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.150763988 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.160891056 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.160921097 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.160985947 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.162770033 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.162782907 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.204082012 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.244124889 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.270086050 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.270100117 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.270111084 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.270159960 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.270180941 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.270239115 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.329377890 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329416037 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329457998 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.329488039 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329524040 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.329765081 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329827070 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.329833984 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329874039 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.329926014 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.332700968 CEST	49819	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:40.332732916 CEST	443	49819	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:40.352294922 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.352308035 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.352330923 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.352416992 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.352416992 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.352433920 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.352468967 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.372035980 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:40.372072935 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:40.372200966 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:40.374476910 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:40.374500036 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:40.392792940 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.392818928 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.392926931 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.392937899 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.394562960 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.424839020 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.424860954 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.424990892 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.424990892 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.425004959 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.425062895 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.451320887 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.451344967 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.451438904 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.451438904 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.451452971 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.451711893 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.475342989 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.475364923 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.475498915 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.475511074 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.475590944 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.495112896 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.495132923 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.495212078 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.495212078 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.495223999 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.495371103 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.517808914 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.517839909 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.517868996 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.517884016 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.517930984 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.517930984 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.534012079 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.534037113 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.534131050 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.534141064 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.534261942 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.544651985 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.544672012 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.544764042 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.544764042 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.544775963 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.544852018 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.557823896 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.557847023 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.557990074 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.558001041 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.558279037 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.566549063 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.566567898 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.566644907 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.566644907 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.566658020 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.566756010 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.577610970 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.577631950 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.577733040 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.577733040 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.577744007 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.578505039 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.587812901 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.587836981 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.587995052 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.588005066 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.588907957 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.602533102 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.602566004 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.602643967 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.602643967 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.602660894 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.602956057 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.615544081 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.615592957 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.615695000 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.615695000 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.615712881 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.616041899 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.624018908 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.624069929 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.624110937 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.624128103 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.624151945 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.624301910 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.631207943 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.631253958 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.631295919 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.631309032 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.631335020 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.631532907 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.648222923 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.648252964 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.648350000 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.648350000 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.648365021 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.648503065 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.655455112 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.655476093 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.655560017 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.655560017 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.655572891 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.656136990 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.664223909 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.664243937 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.664375067 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.664395094 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.666001081 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.674802065 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.674820900 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.675102949 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.675121069 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.675970078 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.690232038 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.690253019 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.690479040 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.690495014 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.691387892 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.699067116 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.699089050 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.699166059 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.699177980 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.699212074 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.699265957 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.705974102 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.705991983 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.706301928 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.706312895 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.706469059 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.719655991 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.719676971 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.719877005 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.719888926 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.720098972 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.736742020 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.736771107 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.736872911 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.736872911 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.736885071 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.737736940 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.744617939 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.744637012 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.744776011 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.744786024 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.745043039 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.752914906 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.752934933 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.753231049 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.753242016 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.753381968 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.763200045 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.763220072 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.763262987 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.763298035 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.763309002 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.763324022 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:40.763338089 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.763664961 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.763664961 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:40.858558893 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.858834982 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.858859062 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.859185934 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.859993935 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.859993935 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:40.860023022 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.860064983 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:40.900065899 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:41.069011927 CEST	49815	443	192.168.2.9	169.150.247.37
Jul 3, 2024 14:36:41.069031954 CEST	443	49815	169.150.247.37	192.168.2.9
Jul 3, 2024 14:36:41.104665041 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.106692076 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.106714010 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.107876062 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.108009100 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.118130922 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:41.118201971 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:41.120522976 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:41.140541077 CEST	49830	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:41.140563965 CEST	443	49830	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:41.159970045 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.159970045 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.160008907 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.160195112 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.202622890 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.202646017 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.256081104 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.799547911 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.801918030 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.801925898 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.801950932 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.801975012 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.802006960 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.802016973 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.803683996 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.803731918 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.861691952 CEST	49835	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.861716986 CEST	443	49835	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.871701002 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.871731043 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.871901989 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.872859001 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.872881889 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.873703003 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.873738050 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.873903036 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.874525070 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.874546051 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.874603987 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.876000881 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.876015902 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:41.876329899 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:41.876348019 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.601280928 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.601546049 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.601564884 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.601912975 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.602247953 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.602303982 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.602433920 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.617211103 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.617602110 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.617623091 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.617986917 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.618496895 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.618561983 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.618674040 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.623676062 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.623877048 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.623886108 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.624907017 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.624963045 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.625324011 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.625382900 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.625452042 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.644505024 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.646372080 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.660497904 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.668497086 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.677189112 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.677196980 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.725191116 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.898395061 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.906301975 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.908865929 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.908888102 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.908943892 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.908971071 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.909020901 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.916726112 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916735888 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916763067 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916774035 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916779041 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.916786909 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916800976 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916831017 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.916835070 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.916850090 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.960072994 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.991724014 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.991755009 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.991827965 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.991846085 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.991944075 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.998225927 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998239994 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998265028 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998272896 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998300076 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.998327017 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998343945 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.998344898 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.998362064 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.998389006 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.999221087 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.999243021 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.999278069 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.999301910 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:42.999321938 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.999453068 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.999541998 CEST	49852	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:42.999558926 CEST	443	49852	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020500898 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020526886 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020534992 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020570993 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020675898 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.020730019 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.020777941 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.025293112 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.025374889 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.025383949 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.068108082 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.080364943 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.080421925 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.080451965 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.080477953 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.080502987 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.081373930 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.081393003 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.081439018 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.081460953 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.081475973 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.084805965 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.084824085 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.084880114 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.084907055 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.088274956 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.088295937 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.088334084 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.088359118 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.088372946 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.104552031 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.104563951 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.104588032 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.104629993 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.104646921 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.104661942 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.104680061 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.104701042 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.104724884 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.105375051 CEST	49851	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.105390072 CEST	443	49851	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.132411003 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.170929909 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.170954943 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.171025991 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.171055079 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.171094894 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.171890020 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.171906948 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.171968937 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.171989918 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.172028065 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.172841072 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.172863960 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.172904968 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.172929049 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.172944069 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.173135996 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.173192024 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.173242092 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.173249960 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.173322916 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:43.173362970 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.175174952 CEST	49850	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:43.175200939 CEST	443	49850	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:44.298691988 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:44.298748970 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:44.299190044 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:44.299491882 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:44.299506903 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.031244993 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.032126904 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.032138109 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.032527924 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.033154011 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.033226013 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.033482075 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.076493025 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.454582930 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.454627037 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.454705954 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.454724073 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.454771996 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.454812050 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.457854033 CEST	49859	443	192.168.2.9	52.222.206.40
Jul 3, 2024 14:36:45.457865000 CEST	443	49859	52.222.206.40	192.168.2.9
Jul 3, 2024 14:36:45.580346107 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:45.580380917 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:45.580492020 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:45.581522942 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:45.581538916 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:45.600083113 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:45.600116014 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:45.600240946 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:45.600856066 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:45.600874901 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.057482004 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.059098959 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.059129953 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.060354948 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.060412884 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.061738968 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.061811924 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.061961889 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.061970949 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.102550983 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.216646910 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.216696024 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.216852903 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.216914892 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.217848063 CEST	49861	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.217869043 CEST	443	49861	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.297101974 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.297373056 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.297389984 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.298451900 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.298528910 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.298939943 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.299017906 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.299120903 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.340518951 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.342539072 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.342551947 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.390528917 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.559803009 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.560878038 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.560898066 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.560914040 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.560947895 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.560966969 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.560995102 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.565736055 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.565817118 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.607225895 CEST	49862	443	192.168.2.9	18.239.15.219
Jul 3, 2024 14:36:46.607244968 CEST	443	49862	18.239.15.219	192.168.2.9
Jul 3, 2024 14:36:46.614880085 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:46.614912033 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:46.615056992 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:46.621217966 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:46.621234894 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:46.696470976 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.696515083 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:46.696738958 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.698549986 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:46.698564053 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.164437056 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.164793015 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.164807081 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.165817022 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.165882111 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.166790009 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.166851997 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.167040110 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.167047024 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.221527100 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.327178955 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.327219009 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.327297926 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.327316046 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.327337980 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.327379942 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.360466003 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:47.400175095 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:47.400190115 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:47.401424885 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:47.401490927 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:47.422435999 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:47.422590971 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:47.423154116 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:47.423163891 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:47.465022087 CEST	49865	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:47.465050936 CEST	443	49865	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:47.477539062 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:47.623416901 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:47.623466015 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:47.623605013 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:47.629283905 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:47.629298925 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:48.081666946 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:48.082096100 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:48.082115889 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:48.082473993 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:48.083120108 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:48.083189964 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:36:48.131587982 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:36:48.720890045 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:48.720995903 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:48.721048117 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:49.368498087 CEST	49864	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:49.368509054 CEST	443	49864	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:49.369513035 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:49.369545937 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:49.369776011 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:49.369945049 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:49.369959116 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.044078112 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.088958025 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.222451925 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.222462893 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.222892046 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.231503963 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.231585979 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.279969931 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.369132042 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.412548065 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.574723959 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.575186014 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:50.575261116 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.739875078 CEST	49880	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:50.739902020 CEST	443	49880	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:51.827430010 CEST	49705	80	192.168.2.9	199.232.210.172
Jul 3, 2024 14:36:51.834738016 CEST	80	49705	199.232.210.172	192.168.2.9
Jul 3, 2024 14:36:51.834794044 CEST	49705	80	192.168.2.9	199.232.210.172
Jul 3, 2024 14:36:52.011857986 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:52.011890888 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:52.011951923 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:52.014522076 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:52.014533997 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:52.128009081 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.128048897 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:52.128118992 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.128381014 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.128395081 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:52.552354097 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.552397013 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:52.552462101 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.553860903 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:52.553878069 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:52.756095886 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:52.773857117 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:52.846870899 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:52.846949100 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.176434994 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.279917002 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.279943943 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.280385971 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.281718016 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:53.281745911 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.282653093 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.282685995 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.283212900 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.283358097 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.283384085 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.283412933 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:53.284418106 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.284539938 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.285430908 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.285543919 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.286000967 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:53.286123037 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.286318064 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.286525965 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.286571980 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:53.286585093 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.332499981 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.332501888 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.342511892 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:53.464394093 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.464498997 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.464555025 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.467741013 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.467818022 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.467860937 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.469605923 CEST	49901	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.469619989 CEST	443	49901	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.472289085 CEST	49898	443	192.168.2.9	52.50.116.41
Jul 3, 2024 14:36:53.472311020 CEST	443	49898	52.50.116.41	192.168.2.9
Jul 3, 2024 14:36:53.476924896 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:53.476974010 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:53.477031946 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:53.477936983 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:53.477957010 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:53.852240086 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.852372885 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:53.852430105 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:54.158674955 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.163360119 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:54.163371086 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.163816929 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.164393902 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:54.164468050 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.165566921 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:54.165581942 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.202512026 CEST	49892	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:54.202541113 CEST	443	49892	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:54.414839983 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.414975882 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.415254116 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:54.415282011 CEST	443	49905	62.149.188.146	192.168.2.9
Jul 3, 2024 14:36:54.415292978 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:54.415330887 CEST	49905	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:36:56.073976994 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.074014902 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.074215889 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.074717999 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.074728966 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.562036991 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.569118023 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.569139957 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.569737911 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.570148945 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.570230961 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.570624113 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.612504959 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.721791029 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.721869946 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.721920967 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.722197056 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.722197056 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.722214937 CEST	443	49914	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.722459078 CEST	49914	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.733599901 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:56.733648062 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:56.733730078 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:56.734025002 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:56.734038115 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:56.743813992 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.743863106 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:56.743977070 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.744177103 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:56.744188070 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.247108936 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.247380972 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:57.247406006 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.247800112 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.248287916 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:57.248351097 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.248547077 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:57.292514086 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.404396057 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.404524088 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.404727936 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:57.405299902 CEST	49917	443	192.168.2.9	76.76.21.21
Jul 3, 2024 14:36:57.405319929 CEST	443	49917	76.76.21.21	192.168.2.9
Jul 3, 2024 14:36:57.461812973 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:57.462445974 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:57.462482929 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:57.462853909 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:57.463766098 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:57.463838100 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:57.464483023 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:57.504513025 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:58.105268955 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:58.105405092 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:58.105647087 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:58.106832981 CEST	49916	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:36:58.106852055 CEST	443	49916	169.150.247.38	192.168.2.9
Jul 3, 2024 14:36:58.128211975 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.128264904 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.128593922 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.128982067 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.128999949 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.875565052 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.875978947 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.875998020 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.876338005 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.876657009 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.876715899 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:58.876945019 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:58.924494982 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:59.518661976 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:59.518794060 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:36:59.518865108 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:59.526802063 CEST	49920	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:36:59.526829958 CEST	443	49920	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:05.270348072 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:05.270423889 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.270494938 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:05.270899057 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:05.270915031 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.910132885 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.948329926 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:05.948345900 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.948959112 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.949373960 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:05.949448109 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:05.998975039 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:12.084424973 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.084451914 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.084518909 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.085855961 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.085870981 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.826235056 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.826453924 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.826482058 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.827517986 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.827596903 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.828582048 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.828644991 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.828736067 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.872493982 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.880304098 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:12.880330086 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:12.929871082 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.150815964 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150842905 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150851011 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150876045 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150888920 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150888920 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.150899887 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150924921 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.150939941 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.150939941 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.150968075 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.231353045 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.231375933 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.231468916 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.231486082 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.231590986 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.263575077 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.263595104 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.263674021 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.263699055 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.263845921 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.269912958 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.305670977 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.305687904 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.305784941 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.305816889 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.327629089 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.327658892 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.327687979 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.327722073 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.327738047 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.352432013 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.352451086 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.352641106 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.352674961 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.366836071 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.366873026 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.366914988 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.366929054 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.366941929 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.366956949 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.366974115 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.374579906 CEST	49961	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.374597073 CEST	443	49961	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.610853910 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.610898018 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.611090899 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.611463070 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.611485004 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.623044968 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.623087883 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:13.623202085 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.623507023 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:13.623529911 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.347619057 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.347969055 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.347985983 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.349009991 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.349792957 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.349879980 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.350261927 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.386689901 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.389101028 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.389138937 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.390259027 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.390332937 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.391813040 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.391889095 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.392436981 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.392446995 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.392493963 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.445379019 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.679709911 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.679795027 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.680036068 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.689827919 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.689850092 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.689883947 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.689929962 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.689939976 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.689984083 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.708667994 CEST	49966	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.708687067 CEST	443	49966	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.774883032 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.774905920 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.775003910 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.775012970 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.776647091 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.805051088 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.805115938 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.805165052 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.805214882 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.837627888 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.837698936 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.837714911 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.859378099 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.859395027 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.859435081 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.859451056 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.859473944 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.883094072 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.883119106 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.883203983 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.883223057 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.902199984 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.902220011 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.902272940 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.902286053 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.902323961 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.924885035 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.924904108 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.924947023 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.924957037 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.924984932 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.942488909 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.942507029 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.942555904 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.942565918 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.942593098 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.958755016 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.958772898 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.958836079 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.958849907 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.971405029 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.971425056 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.971467018 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.971476078 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.971515894 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.981682062 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.981702089 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.981754065 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.981762886 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.992707968 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.992727995 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.992767096 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:14.992777109 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:14.992806911 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.002671003 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.002691984 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.002729893 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.002737999 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.002769947 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.011754036 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.011773109 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.011822939 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.011837006 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.021289110 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.021334887 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.021378994 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.021387100 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.029557943 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.029582024 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.029627085 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.029637098 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.029665947 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.047532082 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.047550917 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.047586918 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.047600031 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.047627926 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.056399107 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.056416035 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.056472063 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.056500912 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.072516918 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.072537899 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.072598934 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.072609901 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.073673010 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:37:15.073681116 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:37:15.078100920 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.078115940 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.078176022 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.078185081 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.086395025 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.086414099 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.086477041 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.086483955 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098068953 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098083973 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098156929 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.098164082 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098205090 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.098404884 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098467112 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.098472118 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098484993 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.098525047 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.099173069 CEST	49965	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.099193096 CEST	443	49965	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.275949001 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.275995970 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.276057005 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.276242018 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:15.276256084 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:15.818114996 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:15.818186998 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:15.818253040 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:16.012487888 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.056761026 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.161308050 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.161340952 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.162516117 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.162585974 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.164110899 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.164180040 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.164478064 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.164504051 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.209845066 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.356215000 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.372705936 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:16.372950077 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.709141016 CEST	49967	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:16.709184885 CEST	443	49967	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:17.151669025 CEST	49922	443	192.168.2.9	216.58.206.36
Jul 3, 2024 14:37:17.151701927 CEST	443	49922	216.58.206.36	192.168.2.9
Jul 3, 2024 14:37:17.166912079 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.166951895 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.167005062 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.167589903 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.167607069 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.921067953 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.921521902 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.921544075 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.922595978 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.922663927 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.923470020 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.923538923 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.923892975 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:17.923902035 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:17.978280067 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:18.205354929 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:18.205476046 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:18.205621958 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:18.207034111 CEST	49970	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:18.207057953 CEST	443	49970	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:28.644254923 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:28.644289970 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:28.644360065 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:28.644731045 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:28.644747972 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.386275053 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.386598110 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:29.386611938 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.387809992 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.388191938 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:29.388359070 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.388438940 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:29.432492971 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.714849949 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.714904070 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.715131044 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:29.716533899 CEST	49971	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:29.716557980 CEST	443	49971	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:29.741276026 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:29.741305113 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:29.741612911 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:29.742433071 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:29.742449045 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:29.746548891 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:29.746578932 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:29.746697903 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:29.747103930 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:29.747116089 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:29.758604050 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:29.758622885 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:29.759629965 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:29.760618925 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:29.760631084 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:29.770397902 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:29.770446062 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:29.774774075 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:29.777044058 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:29.777076006 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:29.793634892 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:29.793672085 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:29.793776989 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:29.794610977 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:29.794625044 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:29.796866894 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:29.796957016 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:29.797250032 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:29.797250032 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:29.797285080 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.369975090 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.370266914 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.370282888 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.371263027 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.371432066 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.371936083 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.371936083 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.371952057 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.371997118 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.403791904 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.404050112 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.404077053 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.405095100 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.405292034 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.406362057 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.406362057 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.406388044 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.406434059 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.411494017 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.411742926 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.411756992 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.412678003 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.412983894 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.413888931 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.413888931 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.413944960 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.424341917 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.424346924 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.435906887 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.436300039 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.436316967 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.437380075 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.437510014 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.438476086 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:37:30.438568115 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:37:30.438741922 CEST	443	49769	217.61.8.139	192.168.2.9
Jul 3, 2024 14:37:30.438747883 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:37:30.438927889 CEST	49769	443	192.168.2.9	217.61.8.139
Jul 3, 2024 14:37:30.439584970 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.439584970 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.439599991 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.439651966 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.455679893 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.455697060 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.455759048 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.455769062 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.471494913 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.486493111 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.486514091 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.501796961 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.501820087 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.518862009 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.519104958 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.519119024 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.519515991 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.519587040 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.520246029 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.520301104 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.520423889 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.520648003 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.520664930 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.521290064 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.521353960 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.521522999 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.521532059 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.521749973 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.521811962 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.522116899 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.522185087 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.522263050 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.522273064 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.533157110 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.565330982 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.565365076 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.651546001 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.652842999 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.652901888 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.652964115 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.652981997 CEST	443	49972	142.250.186.36	192.168.2.9
Jul 3, 2024 14:37:30.652993917 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.653037071 CEST	49972	443	192.168.2.9	142.250.186.36
Jul 3, 2024 14:37:30.664946079 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:30.664993048 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:30.665091038 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:30.665283918 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:30.665297985 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:30.677588940 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.677615881 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.677678108 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.677704096 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.677719116 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.677757025 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.680141926 CEST	49976	443	192.168.2.9	195.181.175.15
Jul 3, 2024 14:37:30.680170059 CEST	443	49976	195.181.175.15	192.168.2.9
Jul 3, 2024 14:37:30.687525034 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.687593937 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.687602997 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.687613964 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.687674999 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.687694073 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.706998110 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:30.707036018 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:30.707159042 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:30.707514048 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:30.707526922 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:30.715352058 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.715490103 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.715687990 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.739362955 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.745347977 CEST	49978	443	192.168.2.9	142.250.185.98
Jul 3, 2024 14:37:30.745383024 CEST	443	49978	142.250.185.98	192.168.2.9
Jul 3, 2024 14:37:30.778155088 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778170109 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778207064 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778214931 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.778223991 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778242111 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778254032 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.778259993 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.778271914 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.778291941 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.796777010 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.796955109 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.797058105 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.797379017 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.797488928 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.797624111 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.797785044 CEST	49977	443	192.168.2.9	142.250.181.238
Jul 3, 2024 14:37:30.797800064 CEST	443	49977	142.250.181.238	192.168.2.9
Jul 3, 2024 14:37:30.800894976 CEST	49979	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:30.800911903 CEST	443	49979	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:30.809216976 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.809231043 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.809247971 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.809256077 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.809287071 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.809302092 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.809335947 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.844069004 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.844093084 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.844119072 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.844196081 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.844207048 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.844242096 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.877085924 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.877099991 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.877111912 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.877146006 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.877204895 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.877217054 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.877247095 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.883366108 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.886023998 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.886032104 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901591063 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901632071 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901648045 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901669979 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.901673079 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901683092 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.901729107 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.927514076 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.927527905 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.927563906 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.927597046 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.927603960 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.927653074 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.927670002 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.963148117 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.963167906 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.963263988 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.963273048 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.963316917 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.969404936 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.969439030 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.969500065 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.969506025 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.969554901 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.969983101 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.970043898 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.978410006 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.978451014 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.978521109 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.978528023 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.978554010 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.980757952 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.984585047 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.990618944 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.990653038 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.990690947 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.990700006 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:30.990720987 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.990741014 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:30.995445967 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.004992962 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.005043030 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.005095005 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.005109072 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.005162954 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.015571117 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.015599012 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.015641928 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.015655041 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.015687943 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.015713930 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.020124912 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.020291090 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.028541088 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.028595924 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.028619051 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.028625965 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.028662920 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.040308952 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.040344000 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.040381908 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.040393114 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.040419102 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.040493011 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.040625095 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.040649891 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.045598030 CEST	49974	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.045614004 CEST	443	49974	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.079773903 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.079823017 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.079895973 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.080104113 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.080115080 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.300205946 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.300498962 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.300515890 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.301522970 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.301579952 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.302638054 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.302711010 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.302906990 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.302917004 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.339035988 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.339327097 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.339351892 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.340315104 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.340374947 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.341655016 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.341711044 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.341968060 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.341974974 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.358148098 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.390153885 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.489151001 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:31.489178896 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:31.489273071 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:31.489602089 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:31.489622116 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:31.589020967 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.589086056 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.589127064 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.590116978 CEST	49982	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.590128899 CEST	443	49982	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.591516018 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.591550112 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.591756105 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.592592001 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:31.592603922 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:31.595227957 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.595264912 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.595324993 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.595818996 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:31.595834970 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:31.595897913 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:31.596155882 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:31.596168995 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:31.596302986 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:31.596313953 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:31.597893000 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.598402023 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.598587990 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.598727942 CEST	49981	443	192.168.2.9	142.250.185.194
Jul 3, 2024 14:37:31.598743916 CEST	443	49981	142.250.185.194	192.168.2.9
Jul 3, 2024 14:37:31.823249102 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.823530912 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.823561907 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.824664116 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.824732065 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.825045109 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.825104952 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.825176001 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.870071888 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:31.870085001 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:31.916207075 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:32.109673977 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:32.109761953 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:32.109821081 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:32.111195087 CEST	49985	443	192.168.2.9	169.150.247.38
Jul 3, 2024 14:37:32.111211061 CEST	443	49985	169.150.247.38	192.168.2.9
Jul 3, 2024 14:37:32.208682060 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.209178925 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.209206104 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.210221052 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.210278988 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.210773945 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.210830927 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.210997105 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.211004019 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.235815048 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.236073017 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.236082077 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.236418962 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.236804962 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.236865044 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.237109900 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.240837097 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.241050005 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.241061926 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.242146015 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.242209911 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.242621899 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.242687941 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.242738962 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.242747068 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.255116940 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.277357101 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.277625084 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.277652025 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.277975082 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.278388023 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.278454065 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.278532982 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.284502983 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.285778046 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.324496031 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.464663982 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.464760065 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.464824915 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.467178106 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.467211962 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.467282057 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.467340946 CEST	49991	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.467351913 CEST	443	49991	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.467675924 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:32.467689991 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:32.518474102 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.518655062 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.519175053 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.521790981 CEST	49986	443	192.168.2.9	169.150.247.39
Jul 3, 2024 14:37:32.521822929 CEST	443	49986	169.150.247.39	192.168.2.9
Jul 3, 2024 14:37:32.629718065 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.629803896 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.629854918 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.629936934 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.629961967 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.630120993 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.630122900 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.630153894 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.630208015 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.630215883 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.630381107 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.634044886 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.634114027 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.634172916 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.634371996 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.634371996 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.634390116 CEST	443	49993	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.634502888 CEST	49993	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.638070107 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.638187885 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.638199091 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.638365984 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.638840914 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.638848066 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.644045115 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.644079924 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.644149065 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.644157887 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.645322084 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.650446892 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.650578022 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.650593996 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.706289053 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.716689110 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.716794968 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.717839956 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.717924118 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.717964888 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.718385935 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.721124887 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.721273899 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.721282959 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.727447033 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.727498055 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.727523088 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.727535963 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.727600098 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.733601093 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.733733892 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.733736992 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.733743906 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.733849049 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.739860058 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.739919901 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.740366936 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.740376949 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.745918989 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.746025085 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.746125937 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.746134043 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.746639967 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.753086090 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.753202915 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.753212929 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.759030104 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.759131908 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.759131908 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.759143114 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.759270906 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.764622927 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.764668941 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.764858961 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.764887094 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.765034914 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.772743940 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.772806883 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.773140907 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.773150921 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.777163029 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.777246952 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.777276993 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.777297020 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.777617931 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.782419920 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.782495022 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.782567024 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.804960966 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.805001974 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.805061102 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.805068016 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.805150032 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.805623055 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.805691004 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.805701017 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.805773973 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.807125092 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.807177067 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.807558060 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.807569981 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.814223051 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.814259052 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.814461946 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.814479113 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.814604998 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.816037893 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.816332102 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.816345930 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.816392899 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.816958904 CEST	49992	443	192.168.2.9	157.240.252.13
Jul 3, 2024 14:37:32.816978931 CEST	443	49992	157.240.252.13	192.168.2.9
Jul 3, 2024 14:37:32.828680992 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:32.828731060 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:32.828985929 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:32.829123974 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:32.829138994 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:32.840313911 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.840339899 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.840590954 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.841236115 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:32.841248035 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:32.853529930 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:32.853564024 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:32.853729963 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:32.853878975 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:32.853889942 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.084656000 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.084927082 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.084956884 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.085314035 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.085524082 CEST	49867	443	192.168.2.9	185.199.109.153
Jul 3, 2024 14:37:33.085534096 CEST	443	49867	185.199.109.153	192.168.2.9
Jul 3, 2024 14:37:33.085835934 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.085901022 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.086054087 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.128510952 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.135235071 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.392389059 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.392472982 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.392532110 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.393230915 CEST	49997	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.393251896 CEST	443	49997	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.394550085 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.394612074 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.394859076 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.395138025 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:33.395153046 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:33.395524025 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.395587921 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.395721912 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.395922899 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.395950079 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.629925966 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.630407095 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.630423069 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.631469965 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.631527901 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.632492065 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.632550955 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.632659912 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.676511049 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.687303066 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.687315941 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.692655087 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:33.693387032 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:33.693399906 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:33.693780899 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:33.694655895 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:33.694740057 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:33.694999933 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:33.695059061 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.695278883 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.695306063 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.696332932 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.696410894 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.697391987 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.697459936 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.697588921 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.731738091 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.736504078 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:33.740510941 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.747191906 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.747261047 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:33.793091059 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:33.909229040 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.909307003 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.909569979 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:33.909584999 CEST	443	49998	173.194.76.154	192.168.2.9
Jul 3, 2024 14:37:33.909605980 CEST	49998	443	192.168.2.9	173.194.76.154
Jul 3, 2024 14:37:34.012167931 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.012249947 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.012703896 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.012727976 CEST	443	50001	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.012743950 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.012772083 CEST	50001	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.027446985 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.027484894 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.027666092 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.027777910 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.027789116 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.133037090 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:34.133130074 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:34.133207083 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:34.133539915 CEST	50000	443	192.168.2.9	62.149.188.146
Jul 3, 2024 14:37:34.133557081 CEST	443	50000	62.149.188.146	192.168.2.9
Jul 3, 2024 14:37:34.159919977 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.160229921 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.160245895 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.160598993 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.160923958 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.160995007 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.161168098 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.191195011 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.191485882 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.191499949 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.192579031 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.192646027 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.193017960 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.193070889 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.193341017 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.193347931 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.207787991 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.207799911 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.238599062 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.415256023 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.415329933 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.415888071 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.416501999 CEST	50004	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.416526079 CEST	443	50004	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.453305006 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453340054 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.453416109 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453464031 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.453543901 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453632116 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453742981 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453758001 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.453843117 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.453856945 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.455313921 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:34.455355883 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:34.455444098 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:34.455625057 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:34.455638885 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:34.460510015 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.460525036 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.461097956 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.461276054 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:34.461287975 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:34.580025911 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.580095053 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.580274105 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.580380917 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.580398083 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.580440044 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.580590010 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.581552982 CEST	50005	443	192.168.2.9	157.240.252.35
Jul 3, 2024 14:37:34.581578016 CEST	443	50005	157.240.252.35	192.168.2.9
Jul 3, 2024 14:37:34.587644100 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.587682009 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.587816954 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.588166952 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.588182926 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.657094955 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.659835100 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.659852982 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.661020041 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.661166906 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.661557913 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.661557913 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.661571980 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.661632061 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.718663931 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.718679905 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.761003017 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.928169966 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.928266048 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:34.928342104 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.929054022 CEST	50007	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:34.929073095 CEST	443	50007	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.070209980 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.070599079 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.070626974 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.071141005 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.071336985 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.071362972 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.071748972 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.071872950 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072352886 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072417021 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.072426081 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.072469950 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072732925 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072866917 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072866917 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.072880030 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.072941065 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.112530947 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.119837999 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.119841099 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.119856119 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.119859934 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.166570902 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.166975021 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.167011023 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.167056084 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.167064905 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.170931101 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.171055079 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.171447039 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.171447039 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.171619892 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.214124918 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.214145899 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.261842966 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.356157064 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.356712103 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.356740952 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.357798100 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.358113050 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.358308077 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.358309031 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.358323097 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.358371019 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.360112906 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.360358953 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.360372066 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.361443996 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.361535072 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.362550974 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.362550974 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.362565041 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.362612963 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.369956017 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.370027065 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.370739937 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.370910883 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.370985985 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.371063948 CEST	50009	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.371078968 CEST	443	50009	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.371085882 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.382172108 CEST	50008	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.382186890 CEST	443	50008	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.393219948 CEST	50014	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.393249989 CEST	443	50014	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.394684076 CEST	50014	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.394918919 CEST	50014	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.394927025 CEST	443	50014	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.399324894 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.399336100 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.414191008 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.414201975 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.441828966 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.441945076 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.442176104 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.442290068 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.442290068 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.442316055 CEST	443	50011	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:35.443674088 CEST	50011	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:35.445297956 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.460750103 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.577183008 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.577286005 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.577429056 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.578568935 CEST	50010	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.578610897 CEST	443	50010	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.579338074 CEST	50015	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.579366922 CEST	443	50015	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.579502106 CEST	50015	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.579719067 CEST	50015	443	192.168.2.9	37.252.171.52
Jul 3, 2024 14:37:35.579732895 CEST	443	50015	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:35.682672977 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.682773113 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.682826996 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.682832956 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.682856083 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.682944059 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.682995081 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.683059931 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.683146000 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.683721066 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.683744907 CEST	443	50013	157.240.0.35	192.168.2.9
Jul 3, 2024 14:37:35.683756113 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:35.683785915 CEST	50013	443	192.168.2.9	157.240.0.35
Jul 3, 2024 14:37:36.015583992 CEST	443	50014	185.184.8.90	192.168.2.9
Jul 3, 2024 14:37:36.069402933 CEST	50014	443	192.168.2.9	185.184.8.90
Jul 3, 2024 14:37:36.211590052 CEST	443	50015	37.252.171.52	192.168.2.9
Jul 3, 2024 14:37:36.256156921 CEST	50015	443	192.168.2.9	37.252.171.52

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 14:36:02.181597948 CEST	53	59706	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:02.960037947 CEST	53	61029	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:03.958059072 CEST	53	64595	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:04.235672951 CEST	62068	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:04.235816956 CEST	56459	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:04.289112091 CEST	53	56459	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:04.296454906 CEST	53	62068	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:05.216000080 CEST	50087	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:05.216204882 CEST	51659	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:05.227502108 CEST	53	50087	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:05.227530956 CEST	53	51659	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:08.249558926 CEST	53	49631	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:09.677263021 CEST	53	61098	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:11.216178894 CEST	53596	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:11.216820955 CEST	58978	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:11.261410952 CEST	53	58978	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:11.270653963 CEST	53	53596	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:11.428375959 CEST	53255	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:11.428759098 CEST	61586	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:11.434464931 CEST	53	63828	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:12.602205992 CEST	65058	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:12.602432013 CEST	63135	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:19.659966946 CEST	57129	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:19.660145044 CEST	54209	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:19.667026043 CEST	53	57129	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:19.678817987 CEST	53	54209	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:21.092134953 CEST	53	49857	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:21.176698923 CEST	53	51670	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:22.908540010 CEST	49464	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:22.908796072 CEST	62218	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:22.915930986 CEST	53	62218	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:22.916510105 CEST	53	49464	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:23.904217005 CEST	53	62814	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:25.515758991 CEST	53	50817	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:26.401437998 CEST	53	59631	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:35.143026114 CEST	54068	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:35.143167973 CEST	50648	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:35.170459986 CEST	53	50648	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:36.732237101 CEST	61393	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:36.732588053 CEST	52598	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:36.736004114 CEST	59911	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:36.736145020 CEST	62735	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:36.738034964 CEST	53	53007	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:36.740942001 CEST	53	52598	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:36.743458986 CEST	53	59911	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:36.747277021 CEST	53	62735	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:37.677459955 CEST	53	52404	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:38.703391075 CEST	60812	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:38.703622103 CEST	57441	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:38.710248947 CEST	53	64737	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:38.712071896 CEST	53	60812	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:38.712099075 CEST	53	57441	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:38.764520884 CEST	50779	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:38.766464949 CEST	61396	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:38.772319078 CEST	53	50779	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:38.774071932 CEST	53	61396	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:39.206475019 CEST	63511	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:39.206685066 CEST	64142	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:39.217129946 CEST	53	64142	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:39.217344046 CEST	53	63511	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:39.258162975 CEST	53	51185	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:39.644865990 CEST	65282	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:39.645266056 CEST	51117	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:39.668545961 CEST	53	51117	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:40.083828926 CEST	53	61494	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:40.362384081 CEST	54475	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:40.362540960 CEST	58344	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:40.369709015 CEST	53	54475	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:40.371507883 CEST	53	58344	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:40.463938951 CEST	51827	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:40.464391947 CEST	58609	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:40.491003990 CEST	53	58609	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:43.122749090 CEST	53	57004	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:44.130783081 CEST	53	62857	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:45.549012899 CEST	61286	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:45.549499035 CEST	54969	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:45.556449890 CEST	53	61286	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:45.558763981 CEST	53	54969	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:45.590914965 CEST	64899	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:45.591409922 CEST	51255	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:45.598696947 CEST	53	64899	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:45.599278927 CEST	53	51255	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:46.597155094 CEST	59994	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:46.598104000 CEST	60895	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:46.607939959 CEST	53	59994	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:46.611821890 CEST	53	60895	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:46.678323030 CEST	50935	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:46.678625107 CEST	57728	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:46.693304062 CEST	53	50935	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:46.694138050 CEST	53	57728	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:51.887187958 CEST	138	138	192.168.2.9	192.168.2.255
Jul 3, 2024 14:36:51.999619007 CEST	51618	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:51.999983072 CEST	49564	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:52.011219025 CEST	53	49564	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:52.011245966 CEST	53	51618	1.1.1.1	192.168.2.9
Jul 3, 2024 14:36:53.277822971 CEST	64982	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:53.278394938 CEST	53359	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:54.509248972 CEST	53120	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:54.525592089 CEST	50196	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:56.067397118 CEST	58065	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:56.067791939 CEST	51669	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:57.003684044 CEST	62863	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:36:57.003859043 CEST	64262	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:01.416229963 CEST	53	53926	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:02.490447044 CEST	53	51372	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:07.352123022 CEST	60274	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:07.352299929 CEST	65448	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:07.360317945 CEST	53	65448	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:10.437036991 CEST	50366	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:10.437195063 CEST	56442	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:10.445930958 CEST	53	56442	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:12.054610968 CEST	60185	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:12.054755926 CEST	64693	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:12.073374033 CEST	53	64693	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:12.083708048 CEST	53	60185	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:13.610260963 CEST	51442	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:13.610487938 CEST	64546	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:13.622149944 CEST	53	64546	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:13.622586012 CEST	53	51442	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:15.263144970 CEST	60120	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:15.263330936 CEST	55577	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:15.270843983 CEST	53	55577	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:15.274694920 CEST	53	60120	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:17.155873060 CEST	60065	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:17.156033993 CEST	53698	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:17.164318085 CEST	53	53698	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:17.165918112 CEST	53	60065	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.728672981 CEST	57530	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.729108095 CEST	61130	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.733827114 CEST	49974	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.733827114 CEST	64040	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.736625910 CEST	53017	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.736625910 CEST	60080	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.737417936 CEST	53	61130	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.737572908 CEST	53	57530	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.741280079 CEST	64718	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.741520882 CEST	60804	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.742072105 CEST	61477	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.742072105 CEST	62522	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.745371103 CEST	53	53017	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.746098995 CEST	53	60080	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.749223948 CEST	53	64718	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.749921083 CEST	53	60804	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.750693083 CEST	57056	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.750797987 CEST	53	61477	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.751209021 CEST	53	62522	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.759558916 CEST	57238	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.759598017 CEST	53	57056	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.759864092 CEST	64949	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.766688108 CEST	53	57238	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.767710924 CEST	53	64949	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.781135082 CEST	58346	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.781452894 CEST	65088	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.785792112 CEST	51021	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.785792112 CEST	59821	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:29.789501905 CEST	53	65088	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.791511059 CEST	53	58346	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.793351889 CEST	53	59821	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:29.796303988 CEST	53	51021	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.446163893 CEST	53	63444	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.653896093 CEST	64390	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.654088020 CEST	56484	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.661463022 CEST	53	64390	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.664345980 CEST	53	56484	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.698224068 CEST	51882	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.698458910 CEST	63038	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.706356049 CEST	53	63038	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.706517935 CEST	53	51882	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:30.785022974 CEST	60817	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.785451889 CEST	50680	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:30.793695927 CEST	53	50680	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:31.070822001 CEST	60403	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:31.071141958 CEST	55380	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:31.078857899 CEST	53	55380	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:31.079026937 CEST	53	60403	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:31.569788933 CEST	64449	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:31.570046902 CEST	64387	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:31.577558994 CEST	53	64387	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:31.593590975 CEST	53212	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:31.593871117 CEST	59296	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.817895889 CEST	56270	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.817895889 CEST	52933	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.826235056 CEST	53	52933	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:32.827959061 CEST	53	56270	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:32.845556974 CEST	57931	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.845946074 CEST	56323	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.847974062 CEST	57730	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.848251104 CEST	49258	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.852792025 CEST	53	57931	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:32.853014946 CEST	53	56323	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:32.922764063 CEST	56086	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.922764063 CEST	65114	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:32.930509090 CEST	53	56086	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.015501976 CEST	64965	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.015634060 CEST	64145	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.023026943 CEST	53	64965	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.027092934 CEST	53	64145	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.445420027 CEST	49576	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.445538998 CEST	58779	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.445878029 CEST	51487	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.445979118 CEST	52213	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.449853897 CEST	54667	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.450006008 CEST	57499	53	192.168.2.9	1.1.1.1
Jul 3, 2024 14:37:34.452868938 CEST	53	58779	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.452886105 CEST	53	49576	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.454911947 CEST	53	52213	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.457679033 CEST	53	54667	1.1.1.1	192.168.2.9
Jul 3, 2024 14:37:34.460230112 CEST	53	57499	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 14:36:40.491084099 CEST	192.168.2.9	1.1.1.1	c258	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 14:36:04.235672951 CEST	192.168.2.9	1.1.1.1	0x9469	Standard query (0)	selfcare.firma-remota.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:04.235816956 CEST	192.168.2.9	1.1.1.1	0x4e0c	Standard query (0)	selfcare.firma-remota.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:05.216000080 CEST	192.168.2.9	1.1.1.1	0xf742	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:05.216204882 CEST	192.168.2.9	1.1.1.1	0xaa40	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:11.216178894 CEST	192.168.2.9	1.1.1.1	0x28f5	Standard query (0)	selfcare.firma-remota.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:11.216820955 CEST	192.168.2.9	1.1.1.1	0xaf58	Standard query (0)	selfcare.firma-remota.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:11.428375959 CEST	192.168.2.9	1.1.1.1	0x4d8c	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:11.428759098 CEST	192.168.2.9	1.1.1.1	0x5558	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:12.602205992 CEST	192.168.2.9	1.1.1.1	0xa261	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:12.602432013 CEST	192.168.2.9	1.1.1.1	0x54fc	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:19.659966946 CEST	192.168.2.9	1.1.1.1	0x5f60	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:19.660145044 CEST	192.168.2.9	1.1.1.1	0x28fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:22.908540010 CEST	192.168.2.9	1.1.1.1	0xf758	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:22.908796072 CEST	192.168.2.9	1.1.1.1	0x1a88	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:35.143026114 CEST	192.168.2.9	1.1.1.1	0x3793	Standard query (0)	guide.pec.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:35.143167973 CEST	192.168.2.9	1.1.1.1	0xab2f	Standard query (0)	guide.pec.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:36.732237101 CEST	192.168.2.9	1.1.1.1	0xf0df	Standard query (0)	mediacdn.aruba.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:36.732588053 CEST	192.168.2.9	1.1.1.1	0x601b	Standard query (0)	mediacdn.aruba.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:36.736004114 CEST	192.168.2.9	1.1.1.1	0x7e16	Standard query (0)	blueimp.github.io	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:36.736145020 CEST	192.168.2.9	1.1.1.1	0x6bfa	Standard query (0)	blueimp.github.io	65	IN (0x0001)	false
Jul 3, 2024 14:36:38.703391075 CEST	192.168.2.9	1.1.1.1	0x54b7	Standard query (0)	wa.aruba.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.703622103 CEST	192.168.2.9	1.1.1.1	0x61cb	Standard query (0)	wa.aruba.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:38.764520884 CEST	192.168.2.9	1.1.1.1	0x6163	Standard query (0)	w.usabilla.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.766464949 CEST	192.168.2.9	1.1.1.1	0xa324	Standard query (0)	w.usabilla.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:39.206475019 CEST	192.168.2.9	1.1.1.1	0x6c6e	Standard query (0)	widget.docsbot.ai	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:39.206685066 CEST	192.168.2.9	1.1.1.1	0xdb5a	Standard query (0)	widget.docsbot.ai	65	IN (0x0001)	false
Jul 3, 2024 14:36:39.644865990 CEST	192.168.2.9	1.1.1.1	0x10b2	Standard query (0)	guide.pec.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:39.645266056 CEST	192.168.2.9	1.1.1.1	0x9f11	Standard query (0)	guide.pec.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:40.362384081 CEST	192.168.2.9	1.1.1.1	0x7f4f	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.362540960 CEST	192.168.2.9	1.1.1.1	0x43df	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Jul 3, 2024 14:36:40.463938951 CEST	192.168.2.9	1.1.1.1	0xe5d6	Standard query (0)	mediacdn.aruba.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.464391947 CEST	192.168.2.9	1.1.1.1	0x1747	Standard query (0)	mediacdn.aruba.it	65	IN (0x0001)	false
Jul 3, 2024 14:36:45.549012899 CEST	192.168.2.9	1.1.1.1	0xd7f7	Standard query (0)	docsbot.ai	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.549499035 CEST	192.168.2.9	1.1.1.1	0x12b	Standard query (0)	docsbot.ai	65	IN (0x0001)	false
Jul 3, 2024 14:36:45.590914965 CEST	192.168.2.9	1.1.1.1	0x8f30	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.591409922 CEST	192.168.2.9	1.1.1.1	0x5bd8	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Jul 3, 2024 14:36:46.597155094 CEST	192.168.2.9	1.1.1.1	0x3551	Standard query (0)	cdn.docsbot.ai	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:46.598104000 CEST	192.168.2.9	1.1.1.1	0xcb	Standard query (0)	cdn.docsbot.ai	65	IN (0x0001)	false
Jul 3, 2024 14:36:46.678323030 CEST	192.168.2.9	1.1.1.1	0xb445	Standard query (0)	docsbot.ai	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:46.678625107 CEST	192.168.2.9	1.1.1.1	0x8920	Standard query (0)	docsbot.ai	65	IN (0x0001)	false
Jul 3, 2024 14:36:51.999619007 CEST	192.168.2.9	1.1.1.1	0xd936	Standard query (0)	cdn.docsbot.ai	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:51.999983072 CEST	192.168.2.9	1.1.1.1	0x9b1d	Standard query (0)	cdn.docsbot.ai	65	IN (0x0001)	false
Jul 3, 2024 14:36:53.277822971 CEST	192.168.2.9	1.1.1.1	0xee8b	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:53.278394938 CEST	192.168.2.9	1.1.1.1	0xb0fd	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:54.509248972 CEST	192.168.2.9	1.1.1.1	0x672	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:54.525592089 CEST	192.168.2.9	1.1.1.1	0x6f6	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:56.067397118 CEST	192.168.2.9	1.1.1.1	0xcac8	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:56.067791939 CEST	192.168.2.9	1.1.1.1	0x69d2	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:36:57.003684044 CEST	192.168.2.9	1.1.1.1	0x3baf	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:57.003859043 CEST	192.168.2.9	1.1.1.1	0x80ef	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:07.352123022 CEST	192.168.2.9	1.1.1.1	0xe876	Standard query (0)	www.pec.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:07.352299929 CEST	192.168.2.9	1.1.1.1	0x56bf	Standard query (0)	www.pec.it	65	IN (0x0001)	false
Jul 3, 2024 14:37:10.437036991 CEST	192.168.2.9	1.1.1.1	0xf9cb	Standard query (0)	www.pec.it	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:10.437195063 CEST	192.168.2.9	1.1.1.1	0x4975	Standard query (0)	www.pec.it	65	IN (0x0001)	false
Jul 3, 2024 14:37:12.054610968 CEST	192.168.2.9	1.1.1.1	0x1902	Standard query (0)	consent.cookiebot.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:12.054755926 CEST	192.168.2.9	1.1.1.1	0xcfa8	Standard query (0)	consent.cookiebot.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:13.610260963 CEST	192.168.2.9	1.1.1.1	0x315b	Standard query (0)	consentcdn.cookiebot.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:13.610487938 CEST	192.168.2.9	1.1.1.1	0xa315	Standard query (0)	consentcdn.cookiebot.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:15.263144970 CEST	192.168.2.9	1.1.1.1	0x77b3	Standard query (0)	img.sct.eu1.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:15.263330936 CEST	192.168.2.9	1.1.1.1	0xfd51	Standard query (0)	img.sct.eu1.usercentrics.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:17.155873060 CEST	192.168.2.9	1.1.1.1	0x7750	Standard query (0)	img.sct.eu1.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:17.156033993 CEST	192.168.2.9	1.1.1.1	0xc0e4	Standard query (0)	img.sct.eu1.usercentrics.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.728672981 CEST	192.168.2.9	1.1.1.1	0x3404	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.729108095 CEST	192.168.2.9	1.1.1.1	0x7f06	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.733827114 CEST	192.168.2.9	1.1.1.1	0x78c3	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.733827114 CEST	192.168.2.9	1.1.1.1	0x306	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.736625910 CEST	192.168.2.9	1.1.1.1	0x5399	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.736625910 CEST	192.168.2.9	1.1.1.1	0x2f17	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.741280079 CEST	192.168.2.9	1.1.1.1	0xf4b6	Standard query (0)	u360.d-bi.fr	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.741520882 CEST	192.168.2.9	1.1.1.1	0xf5b3	Standard query (0)	u360.d-bi.fr	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.742072105 CEST	192.168.2.9	1.1.1.1	0x7829	Standard query (0)	tags.creativecdn.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.742072105 CEST	192.168.2.9	1.1.1.1	0xec5c	Standard query (0)	tags.creativecdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.750693083 CEST	192.168.2.9	1.1.1.1	0x1b71	Standard query (0)	u360.d-bi.fr	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.759558916 CEST	192.168.2.9	1.1.1.1	0x52d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.759864092 CEST	192.168.2.9	1.1.1.1	0xce7f	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.781135082 CEST	192.168.2.9	1.1.1.1	0xda8d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.781452894 CEST	192.168.2.9	1.1.1.1	0x41fe	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.785792112 CEST	192.168.2.9	1.1.1.1	0x1ffe	Standard query (0)	consentcdn.cookiebot.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.785792112 CEST	192.168.2.9	1.1.1.1	0x5fef	Standard query (0)	consentcdn.cookiebot.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:30.653896093 CEST	192.168.2.9	1.1.1.1	0xca2f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.654088020 CEST	192.168.2.9	1.1.1.1	0x59ef	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 14:37:30.698224068 CEST	192.168.2.9	1.1.1.1	0x50a7	Standard query (0)	ams.creativecdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.698458910 CEST	192.168.2.9	1.1.1.1	0xc03	Standard query (0)	ams.creativecdn.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:30.785022974 CEST	192.168.2.9	1.1.1.1	0xf60d	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.785451889 CEST	192.168.2.9	1.1.1.1	0x8b5c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:31.070822001 CEST	192.168.2.9	1.1.1.1	0xfbe5	Standard query (0)	consentcdn.cookiebot.eu	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:31.071141958 CEST	192.168.2.9	1.1.1.1	0x6f1c	Standard query (0)	consentcdn.cookiebot.eu	65	IN (0x0001)	false
Jul 3, 2024 14:37:31.569788933 CEST	192.168.2.9	1.1.1.1	0xa88d	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:31.570046902 CEST	192.168.2.9	1.1.1.1	0x8ddb	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:31.593590975 CEST	192.168.2.9	1.1.1.1	0x7908	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:31.593871117 CEST	192.168.2.9	1.1.1.1	0xb2fe	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:32.817895889 CEST	192.168.2.9	1.1.1.1	0xbfc3	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.817895889 CEST	192.168.2.9	1.1.1.1	0x6571	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 14:37:32.845556974 CEST	192.168.2.9	1.1.1.1	0x84fa	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.845946074 CEST	192.168.2.9	1.1.1.1	0x20cc	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:32.847974062 CEST	192.168.2.9	1.1.1.1	0x6aba	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.848251104 CEST	192.168.2.9	1.1.1.1	0xb976	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:32.922764063 CEST	192.168.2.9	1.1.1.1	0x4031	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:32.922764063 CEST	192.168.2.9	1.1.1.1	0x45e1	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.015501976 CEST	192.168.2.9	1.1.1.1	0xe43f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.015634060 CEST	192.168.2.9	1.1.1.1	0xd7b7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:34.445420027 CEST	192.168.2.9	1.1.1.1	0x7b2	Standard query (0)	ams.creativecdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.445538998 CEST	192.168.2.9	1.1.1.1	0x345b	Standard query (0)	ams.creativecdn.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:34.445878029 CEST	192.168.2.9	1.1.1.1	0x9aea	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.445979118 CEST	192.168.2.9	1.1.1.1	0x123f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jul 3, 2024 14:37:34.449853897 CEST	192.168.2.9	1.1.1.1	0x20f5	Standard query (0)	ams.creativecdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.450006008 CEST	192.168.2.9	1.1.1.1	0xaf52	Standard query (0)	ams.creativecdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 14:36:04.296454906 CEST	1.1.1.1	192.168.2.9	0x9469	No error (0)	selfcare.firma-remota.it		217.61.8.139	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:05.227502108 CEST	1.1.1.1	192.168.2.9	0xf742	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:05.227530956 CEST	1.1.1.1	192.168.2.9	0xaa40	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:36:11.270653963 CEST	1.1.1.1	192.168.2.9	0x28f5	No error (0)	selfcare.firma-remota.it		217.61.8.139	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:11.436108112 CEST	1.1.1.1	192.168.2.9	0x5558	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:11.437002897 CEST	1.1.1.1	192.168.2.9	0x4d8c	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:12.615752935 CEST	1.1.1.1	192.168.2.9	0x54fc	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:12.618583918 CEST	1.1.1.1	192.168.2.9	0xa261	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:19.102188110 CEST	1.1.1.1	192.168.2.9	0x658c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:19.102188110 CEST	1.1.1.1	192.168.2.9	0x658c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:19.667026043 CEST	1.1.1.1	192.168.2.9	0x5f60	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:19.678817987 CEST	1.1.1.1	192.168.2.9	0x28fa	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:36:22.915930986 CEST	1.1.1.1	192.168.2.9	0x1a88	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:36:22.916510105 CEST	1.1.1.1	192.168.2.9	0xf758	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:32.880876064 CEST	1.1.1.1	192.168.2.9	0xb332	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:32.880876064 CEST	1.1.1.1	192.168.2.9	0xb332	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:35.170459986 CEST	1.1.1.1	192.168.2.9	0xab2f	No error (0)	guide.pec.it	guide.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:35.171423912 CEST	1.1.1.1	192.168.2.9	0x3793	No error (0)	guide.pec.it	guide.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:36.739996910 CEST	1.1.1.1	192.168.2.9	0xf0df	No error (0)	mediacdn.aruba.it	mediacdn.aruba.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:36.740942001 CEST	1.1.1.1	192.168.2.9	0x601b	No error (0)	mediacdn.aruba.it	mediacdn.aruba.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:36.743458986 CEST	1.1.1.1	192.168.2.9	0x7e16	No error (0)	blueimp.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:36.743458986 CEST	1.1.1.1	192.168.2.9	0x7e16	No error (0)	blueimp.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:36.743458986 CEST	1.1.1.1	192.168.2.9	0x7e16	No error (0)	blueimp.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:36.743458986 CEST	1.1.1.1	192.168.2.9	0x7e16	No error (0)	blueimp.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.712071896 CEST	1.1.1.1	192.168.2.9	0x54b7	No error (0)	wa.aruba.it		62.149.188.146	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		52.50.116.41	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		99.80.189.251	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		52.51.160.242	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		54.216.65.162	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		52.210.150.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:38.772319078 CEST	1.1.1.1	192.168.2.9	0x6163	No error (0)	w.usabilla.com		54.171.22.133	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:39.217129946 CEST	1.1.1.1	192.168.2.9	0xdb5a	No error (0)	widget.docsbot.ai	docsbot-widget.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:39.217344046 CEST	1.1.1.1	192.168.2.9	0x6c6e	No error (0)	widget.docsbot.ai	docsbot-widget.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:39.217344046 CEST	1.1.1.1	192.168.2.9	0x6c6e	No error (0)	docsbot-widget.b-cdn.net		169.150.247.37	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:39.668545961 CEST	1.1.1.1	192.168.2.9	0x9f11	No error (0)	guide.pec.it	guide.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:39.671128988 CEST	1.1.1.1	192.168.2.9	0x10b2	No error (0)	guide.pec.it	guide.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:40.369709015 CEST	1.1.1.1	192.168.2.9	0x7f4f	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.40	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.369709015 CEST	1.1.1.1	192.168.2.9	0x7f4f	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.77	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.369709015 CEST	1.1.1.1	192.168.2.9	0x7f4f	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.22	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.369709015 CEST	1.1.1.1	192.168.2.9	0x7f4f	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.19	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:40.471513987 CEST	1.1.1.1	192.168.2.9	0xe5d6	No error (0)	mediacdn.aruba.it	mediacdn.aruba.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:40.491003990 CEST	1.1.1.1	192.168.2.9	0x1747	No error (0)	mediacdn.aruba.it	mediacdn.aruba.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:45.556449890 CEST	1.1.1.1	192.168.2.9	0xd7f7	No error (0)	docsbot.ai		76.76.21.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.598696947 CEST	1.1.1.1	192.168.2.9	0x8f30	No error (0)	d6tizftlrpuof.cloudfront.net		18.239.15.219	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.598696947 CEST	1.1.1.1	192.168.2.9	0x8f30	No error (0)	d6tizftlrpuof.cloudfront.net		18.239.15.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.598696947 CEST	1.1.1.1	192.168.2.9	0x8f30	No error (0)	d6tizftlrpuof.cloudfront.net		18.239.15.158	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:45.598696947 CEST	1.1.1.1	192.168.2.9	0x8f30	No error (0)	d6tizftlrpuof.cloudfront.net		18.239.15.45	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:46.607939959 CEST	1.1.1.1	192.168.2.9	0x3551	No error (0)	cdn.docsbot.ai	docsbot.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:46.607939959 CEST	1.1.1.1	192.168.2.9	0x3551	No error (0)	docsbot.b-cdn.net		169.150.247.38	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:46.611821890 CEST	1.1.1.1	192.168.2.9	0xcb	No error (0)	cdn.docsbot.ai	docsbot.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:46.693304062 CEST	1.1.1.1	192.168.2.9	0xb445	No error (0)	docsbot.ai		76.76.21.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:52.011219025 CEST	1.1.1.1	192.168.2.9	0x9b1d	No error (0)	cdn.docsbot.ai	docsbot.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:52.011245966 CEST	1.1.1.1	192.168.2.9	0xd936	No error (0)	cdn.docsbot.ai	docsbot.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:52.011245966 CEST	1.1.1.1	192.168.2.9	0xd936	No error (0)	docsbot.b-cdn.net		169.150.247.39	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:53.286839962 CEST	1.1.1.1	192.168.2.9	0xee8b	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:53.287523031 CEST	1.1.1.1	192.168.2.9	0xb0fd	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:54.516061068 CEST	1.1.1.1	192.168.2.9	0x672	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:54.532972097 CEST	1.1.1.1	192.168.2.9	0x6f6	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:55.143759966 CEST	1.1.1.1	192.168.2.9	0xe7b0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:55.143759966 CEST	1.1.1.1	192.168.2.9	0xe7b0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:36:56.075057983 CEST	1.1.1.1	192.168.2.9	0x69d2	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:56.080504894 CEST	1.1.1.1	192.168.2.9	0xcac8	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:57.013122082 CEST	1.1.1.1	192.168.2.9	0x80ef	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:36:57.014086008 CEST	1.1.1.1	192.168.2.9	0x3baf	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:07.359638929 CEST	1.1.1.1	192.168.2.9	0xe876	No error (0)	www.pec.it	www.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:07.360317945 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	www.pec.it	www.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:10.445930958 CEST	1.1.1.1	192.168.2.9	0x4975	No error (0)	www.pec.it	www.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:10.453002930 CEST	1.1.1.1	192.168.2.9	0xf9cb	No error (0)	www.pec.it	www.pec.it.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:12.073374033 CEST	1.1.1.1	192.168.2.9	0xcfa8	No error (0)	consent.cookiebot.eu	prod-consenteu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:12.083708048 CEST	1.1.1.1	192.168.2.9	0x1902	No error (0)	consent.cookiebot.eu	prod-consenteu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:12.083708048 CEST	1.1.1.1	192.168.2.9	0x1902	No error (0)	prod-consenteu.b-cdn.net		169.150.247.38	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:13.622149944 CEST	1.1.1.1	192.168.2.9	0xa315	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:13.622586012 CEST	1.1.1.1	192.168.2.9	0x315b	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:13.622586012 CEST	1.1.1.1	192.168.2.9	0x315b	No error (0)	prod-consentcdneu.b-cdn.net		169.150.247.38	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:14.993284941 CEST	1.1.1.1	192.168.2.9	0xfccc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:14.993284941 CEST	1.1.1.1	192.168.2.9	0xfccc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:15.270843983 CEST	1.1.1.1	192.168.2.9	0xfd51	No error (0)	img.sct.eu1.usercentrics.eu	uc-img-sct.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:15.274694920 CEST	1.1.1.1	192.168.2.9	0x77b3	No error (0)	img.sct.eu1.usercentrics.eu	uc-img-sct.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:15.274694920 CEST	1.1.1.1	192.168.2.9	0x77b3	No error (0)	uc-img-sct.b-cdn.net		169.150.247.38	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:17.164318085 CEST	1.1.1.1	192.168.2.9	0xc0e4	No error (0)	img.sct.eu1.usercentrics.eu	uc-img-sct.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:17.165918112 CEST	1.1.1.1	192.168.2.9	0x7750	No error (0)	img.sct.eu1.usercentrics.eu	uc-img-sct.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:17.165918112 CEST	1.1.1.1	192.168.2.9	0x7750	No error (0)	uc-img-sct.b-cdn.net		169.150.247.39	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.737417936 CEST	1.1.1.1	192.168.2.9	0x7f06	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:37:29.737572908 CEST	1.1.1.1	192.168.2.9	0x3404	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.742688894 CEST	1.1.1.1	192.168.2.9	0x306	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.743282080 CEST	1.1.1.1	192.168.2.9	0x78c3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.745371103 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.745371103 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.746098995 CEST	1.1.1.1	192.168.2.9	0x2f17	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.749223948 CEST	1.1.1.1	192.168.2.9	0xf4b6	Name error (3)	u360.d-bi.fr	none	none	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.749921083 CEST	1.1.1.1	192.168.2.9	0xf5b3	Name error (3)	u360.d-bi.fr	none	none	65	IN (0x0001)	false
Jul 3, 2024 14:37:29.750797987 CEST	1.1.1.1	192.168.2.9	0x7829	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		212.102.56.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		156.146.33.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		156.146.33.137	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.751209021 CEST	1.1.1.1	192.168.2.9	0xec5c	No error (0)	1589314308.rsc.cdn77.org		156.146.33.141	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.759598017 CEST	1.1.1.1	192.168.2.9	0x1b71	Name error (3)	u360.d-bi.fr	none	none	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.766688108 CEST	1.1.1.1	192.168.2.9	0x52d	No error (0)	analytics.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.791511059 CEST	1.1.1.1	192.168.2.9	0xda8d	No error (0)	td.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:29.793351889 CEST	1.1.1.1	192.168.2.9	0x5fef	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.796303988 CEST	1.1.1.1	192.168.2.9	0x1ffe	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:29.796303988 CEST	1.1.1.1	192.168.2.9	0x1ffe	No error (0)	prod-consentcdneu.b-cdn.net		169.150.247.39	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.661463022 CEST	1.1.1.1	192.168.2.9	0xca2f	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.664345980 CEST	1.1.1.1	192.168.2.9	0x59ef	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 14:37:30.706517935 CEST	1.1.1.1	192.168.2.9	0x50a7	No error (0)	ams.creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:30.792521000 CEST	1.1.1.1	192.168.2.9	0xf60d	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:30.792521000 CEST	1.1.1.1	192.168.2.9	0xf60d	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:30.793695927 CEST	1.1.1.1	192.168.2.9	0x8b5c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:30.793695927 CEST	1.1.1.1	192.168.2.9	0x8b5c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.078857899 CEST	1.1.1.1	192.168.2.9	0x6f1c	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.079026937 CEST	1.1.1.1	192.168.2.9	0xfbe5	No error (0)	consentcdn.cookiebot.eu	prod-consentcdneu.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.079026937 CEST	1.1.1.1	192.168.2.9	0xfbe5	No error (0)	prod-consentcdneu.b-cdn.net		169.150.247.38	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:31.576812029 CEST	1.1.1.1	192.168.2.9	0xa88d	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.576812029 CEST	1.1.1.1	192.168.2.9	0xa88d	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.577558994 CEST	1.1.1.1	192.168.2.9	0x8ddb	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.577558994 CEST	1.1.1.1	192.168.2.9	0x8ddb	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.601651907 CEST	1.1.1.1	192.168.2.9	0x7908	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:31.605525017 CEST	1.1.1.1	192.168.2.9	0xb2fe	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.827959061 CEST	1.1.1.1	192.168.2.9	0xbfc3	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.827959061 CEST	1.1.1.1	192.168.2.9	0xbfc3	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.827959061 CEST	1.1.1.1	192.168.2.9	0xbfc3	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.827959061 CEST	1.1.1.1	192.168.2.9	0xbfc3	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.852792025 CEST	1.1.1.1	192.168.2.9	0x84fa	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.852792025 CEST	1.1.1.1	192.168.2.9	0x84fa	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:32.853014946 CEST	1.1.1.1	192.168.2.9	0x20cc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.855715036 CEST	1.1.1.1	192.168.2.9	0x6aba	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.859175920 CEST	1.1.1.1	192.168.2.9	0xb976	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.930509090 CEST	1.1.1.1	192.168.2.9	0x4031	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.930509090 CEST	1.1.1.1	192.168.2.9	0x4031	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.930636883 CEST	1.1.1.1	192.168.2.9	0x45e1	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:32.930636883 CEST	1.1.1.1	192.168.2.9	0x45e1	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:34.023026943 CEST	1.1.1.1	192.168.2.9	0xe43f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:34.023026943 CEST	1.1.1.1	192.168.2.9	0xe43f	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.027092934 CEST	1.1.1.1	192.168.2.9	0xd7b7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:34.452886105 CEST	1.1.1.1	192.168.2.9	0x7b2	No error (0)	ams.creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.454085112 CEST	1.1.1.1	192.168.2.9	0x9aea	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:37:34.457679033 CEST	1.1.1.1	192.168.2.9	0x20f5	No error (0)	ams.creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

selfcare.firma-remota.it

https:

www.google.com

blueimp.github.io

wa.aruba.it

w.usabilla.com

widget.docsbot.ai

d6tizftlrpuof.cloudfront.net

docsbot.ai

cdn.docsbot.ai

consent.cookiebot.eu

consentcdn.cookiebot.eu

img.sct.eu1.usercentrics.eu

tags.creativecdn.com

connect.facebook.net

td.doubleclick.net

analytics.google.com

googleads.g.doubleclick.net

ams.creativecdn.com

stats.g.doubleclick.net

www.facebook.com

ib.adnxs.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49712	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:05 UTC	688	OUT	GET /asmonitor/panel/login HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:05 UTC	731	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 12:36:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Location: https://selfcare.firma-remota.it Content-Length: 240 Connection: close Content-Type: text/html; charset=iso-8859-1 Set-Cookie: cookiesession1=678B29B0F2A6773CDE362153CC2E5288;Expires=Thu, 03 Jul 2025 12:36:05 GMT;Path=/;HttpOnly
2024-07-03 12:36:05 UTC	240	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 6c 66 63 61 72 65 2e 66 69 72 6d 61 2d 72 65 6d 6f 74 61 2e 69 74 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://selfcare.firma-remota.it">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49711	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:05 UTC	724	OUT	GET / HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:05 UTC	615	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 12:36:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Location: https://selfcare.firma-remota.it/asmonitor/ Content-Length: 227 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-07-03 12:36:05 UTC	227	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 6c 66 63 61 72 65 2e 66 69 72 6d 61 2d 72 65 6d 6f 74 61 2e 69 74 2f 61 73 6d 6f 6e 69 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://selfcare.firma-remota.it/asmonitor/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49716	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:06 UTC	734	OUT	GET /asmonitor/ HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:06 UTC	765	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:06 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Set-Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; Path=/asmonitor; Secure; HttpOnly Content-Length: 247 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/html;charset=UTF-8
2024-07-03 12:36:06 UTC	247	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 69 6e 64 65 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 55 52 4c 3d 6c 6f 67 69 6e 2e 78 68 74 6d 6c 22 20 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head id="j_idt2"> <title>index</title> <meta http-equiv="refresh" content="0;URL=login.xhtml" /></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49717	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:07 UTC	831	OUT	GET /asmonitor/login.xhtml HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://selfcare.firma-remota.it/asmonitor/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:08 UTC	675	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/html;charset=UTF-8 content-length: 11782
2024-07-03 12:36:08 UTC	3368	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 37 22 3e 0a 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html><body></body><html xmlns="http://www.w3.org/1999/xhtml"><head id="j_idt7"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="X-UA-
2024-07-03 12:36:08 UTC	4048	IN	Data Raw: 31 35 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 09 09 09 2e 6c 6f 67 6f 2d 73 6d 20 7b 0a 09 09 09 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 34 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 09 09 09 2e 6c 6f 67 6f 2d 73 6d 20 7b 0a 09 09 09 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 40 6d 65 64 69 61 20 73 63 Data Ascii: 15% !important;}}@media screen and (max-width: 1200px) {.logo-sm {margin-left: 14% !important;}}@media screen and (max-width: 992px) {.logo-sm {margin-left: 6% !important;}}@media sc
2024-07-03 12:36:08 UTC	4048	IN	Data Raw: 20 52 65 6d 6f 74 65 20 53 69 67 6e 61 74 75 72 65 20 70 75 72 63 68 61 73 65 64 20 74 68 72 6f 75 67 68 20 43 44 52 4c 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 79 6f 75 72 20 75 73 65 72 6e 61 6d 65 2c 20 73 70 65 63 69 66 79 20 74 68 65 20 44 6f 6d 61 69 6e 20 74 6f 20 77 68 69 63 68 20 69 74 20 62 65 6c 6f 6e 67 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 75 73 65 72 6e 61 6d 65 40 64 6f 6d 61 69 6e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Remote Signature purchased through CDRL, in addition to your username, specify the Domain to which it belongs in the form username@domain</p> </div> </div>
2024-07-03 12:36:08 UTC	318	IN	Data Raw: 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 63 2e 69 74 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2e 61 73 70 78 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 31 34 37 34 42 44 22 3e 20 3c 75 3e 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 3c 2f 75 3e 20 3c 2f 61 3e 2d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 43 6f 6f 6b 69 65 62 6f 74 2e 72 65 6e 65 77 28 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 31 34 37 34 42 44 22 3e 20 3c 75 3e 50 65 72 73 6f 6e 61 6c 69 7a 7a 61 20 43 6f 6f 6b 69 65 3c 2f 75 3e 3c 2f Data Ascii: </body> <br><a href="https://www.pec.it/cookie-policy.aspx" target="_blank" style="color: #1474BD"> <u>Cookie Policy</u> </a>- <a href="javascript: Cookiebot.renew()" style="color: #1474BD"> <u>Personalizza Cookie</u></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49718	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:07 UTC	671	OUT	GET /favicon.ico HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfcare.firma-remota.it/asmonitor/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:08 UTC	564	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 12:36:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Content-Length: 209 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-07-03 12:36:08 UTC	209	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /favicon.ico was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 12:36:08 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=99176 Date: Wed, 03 Jul 2024 12:36:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49722	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	731	OUT	GET /asmonitor/javax.faces.resource/bootstrap.min.css.xhtml?ln=css HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	779	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"155758-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/css content-length: 155758
2024-07-03 12:36:09 UTC	3265	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 72 65 Data Ascii: nt-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=re
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 32 2c Data Ascii: l-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12,
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 Data Ascii: -sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-posit
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6c 2d 78 6c 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 78 6c 2d 61 75 74 6f 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 Data Ascii: -lg-9{margin-left:75%}.offset-lg-10{margin-left:83.333333%}.offset-lg-11{margin-left:91.666667%}}@media (min-width:1200px){.col-xl{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-xl-auto{-ms-flex:0 0 auto;flex:0
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 64 64 65 35 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 64 64 65 35 7d 2e 74 61 62 6c 65 2d 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 2d 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 2d 77 61 72 6e 69 6e 67 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 65 65 62 61 7d 2e 74 61 62 6c 65 2d 77 61 72 6e 69 6e 67 20 74 62 6f 64 79 2b 74 62 6f 64 79 2c 2e 74 61 62 6c 65 2d 77 61 72 6e 69 6e 67 20 74 64 2c 2e 74 61 62 6c 65 2d 77 61 72 Data Ascii: hover{background-color:#abdde5}.table-hover .table-info:hover>td,.table-hover .table-info:hover>th{background-color:#abdde5}.table-warning,.table-warning>td,.table-warning>th{background-color:#ffeeba}.table-warning tbody+tbody,.table-warning td,.table-war
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6c 2d 66 69 6c 65 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 72 61 6e 67 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 63 61 6c 63 28 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 63 61 6c 63 28 2e 35 72 65 6d 20 2b 20 31 70 78 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 2e Data Ascii: l-file,.form-control-range{display:block;width:100%}.col-form-label{padding-top:calc(.375rem + 1px);padding-bottom:calc(.375rem + 1px);margin-bottom:0;font-size:inherit;line-height:1.5}.col-form-label-lg{padding-top:calc(.5rem + 1px);padding-bottom:calc(.
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 65 6c 65 63 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 69 6c 65 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 69 6c 65 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 69 6c 65 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 Data Ascii: elect:valid~.valid-feedback,.was-validated .custom-select:valid~.valid-tooltip{display:block}.form-control-file.is-valid~.valid-feedback,.form-control-file.is-valid~.valid-tooltip,.was-validated .form-control-file:valid~.valid-feedback,.was-validated .for
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 73 76 67 27 20 66 69 6c 6c 3d 27 25 32 33 64 63 33 35 34 35 27 20 76 69 65 77 42 6f 78 3d 27 2d 32 20 2d 32 20 37 20 37 27 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 3d 27 25 32 33 64 63 33 35 34 35 27 20 64 3d 27 4d 30 20 30 6c 33 20 33 6d 30 2d 33 4c 30 20 33 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 79 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 33 27 20 63 79 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 45 22 29 20 23 66 66 66 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 72 69 67 68 74 20 31 2e 37 35 72 65 6d 2f 63 61 6c Data Ascii: svg' fill='%23dc3545' viewBox='-2 -2 7 7'%3e%3cpath stroke='%23dc3545' d='M0 0l3 3m0-3L0 3'/%3e%3ccircle r='.5'/%3e%3ccircle cx='3' r='.5'/%3e%3ccircle cy='3' r='.5'/%3e%3ccircle cx='3' cy='3' r='.5'/%3e%3c/svg%3E") #fff no-repeat center right 1.75rem/cal
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6e 6c 69 6e 65 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 7d 2e 62 74 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b Data Ascii: nline .custom-control-label{margin-bottom:0}}.btn{display:inline-block;font-weight:400;color:#212529;text-align:center;vertical-align:middle;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;background-color:transparent;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49725	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	732	OUT	GET /asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	775	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"9404-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/css content-length: 9417
2024-07-03 12:36:09 UTC	3267	IN	Data Raw: 2f 2a 0a 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0a 23 23 20 41 52 55 42 41 20 53 45 4c 46 43 41 52 45 20 54 48 45 4d 45 20 23 23 0a 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0a 2a 2f 0a 0a 2f 2a 20 53 49 5a 49 4e 47 20 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 09 2e 77 2d 73 6d 2d 32 35 20 7b 20 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 35 30 20 7b 20 77 69 64 74 68 3a 20 35 30 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 37 35 20 7b 20 77 69 64 74 68 3a 20 38 32 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 31 30 30 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: /############################ ARUBA SELFCARE THEME ############################//* SIZING */@media (min-width: 576px) {.w-sm-25 { width: 25%; }.w-sm-50 { width: 50%; }.w-sm-75 { width: 82%; }.w-sm-100 { width: 100%; }}@media (min-width:
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2d 62 72 65 61 6b 2d 61 6c 6c 20 7b 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 61 6c 6c 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 2e 62 6f 72 64 65 72 2d 6c 67 2d 72 69 67 68 74 20 7b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 20 7d 0a 7d 0a 0a 2e 62 74 6e 2d 73 77 69 74 63 68 65 72 20 7b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 20 2e 32 73 3b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 31 30 70 78 20 32 70 78 20 32 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e Data Ascii: -break-all { word-break: break-all; }@media (min-width: 992px) {.border-lg-right { border-right: 1px solid #ddd; }}.btn-switcher { transition: ease-out .2s; border: none; background-color: #ddd; color: #666; padding: 2px 10px 2px 2px; display: inlin
2024-07-03 12:36:09 UTC	2102	IN	Data Raw: 62 6c 65 64 2c 20 2e 62 74 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 36 35 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6f 6c 6f 72 3a 20 6c 69 67 68 74 67 72 65 79 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 2e 61 63 74 69 76 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 6c 69 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 77 69 64 74 Data Ascii: bled, .btn:disabled { opacity: .65; background-color: #666;}#progressbar {margin-bottom: 30px;overflow: hidden;color: lightgrey}#progressbar .active {color: #000000}#progressbar li {list-style-type: none;font-size: 12px;widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49720	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	727	OUT	GET /asmonitor/javax.faces.resource/jquery-ui.css.xhtml?ln=css HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	777	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"36552-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/css content-length: 36111
2024-07-03 12:36:09 UTC	3266	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6e 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 32 2e 32 65 6d 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 7d 0a 2e 75 69 2d 6d 65 6e 75 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 6d 65 6e 75 20 7b 0a 09 Data Ascii: n-content {padding: 1em 2.2em;border-top: 0;overflow: auto;}.ui-autocomplete {position: absolute;top: 0;left: 0;cursor: default;}.ui-menu {list-style: none;padding: 0;margin: 0;display: block;outline: 0;}.ui-menu .ui-menu {
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 73 6f 6c 69 64 3b 0a 7d 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 64 69 73 61 62 6c 65 64 20 7b 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 7b 0a 09 77 69 64 74 68 3a 20 31 37 65 6d 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 65 6d 20 30 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 2c 0a 2e 75 69 2d Data Ascii: solid;}.ui-checkboxradio-disabled {pointer-events: none;}.ui-datepicker {width: 17em;padding: .2em .2em 0;display: none;}.ui-datepicker .ui-datepicker-header {position: relative;padding: .2em 0;}.ui-datepicker .ui-datepicker-prev,.ui-
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 35 65 6d 20 31 65 6d 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 70 61 6e 65 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 20 30 20 30 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 Data Ascii: ight: 20px;}.ui-dialog .ui-dialog-content {position: relative;border: 0;padding: .5em 1em;background: none;overflow: auto;}.ui-dialog .ui-dialog-buttonpane {text-align: left;border-width: 1px 0 0 0;background-image: none;margin-top:
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 41 41 6f 41 43 67 41 41 41 4b 58 6a 49 38 42 79 35 7a 66 34 6b 4f 78 54 56 72 58 4e 56 6c 76 31 58 30 64 38 49 47 5a 47 4b 4c 6e 4e 70 59 74 6d 38 4c 72 39 63 71 56 65 75 4f 53 76 66 4f 57 37 39 44 39 61 44 48 69 7a 4e 68 44 4a 69 64 46 5a 68 4e 79 64 45 61 68 4f 61 44 48 36 6e 6f 6d 74 4a 6a 70 31 74 75 74 4b 6f 4e 57 6b 76 41 36 4a 71 66 52 56 4c 48 55 2f 51 55 66 61 75 39 6c 32 78 37 47 35 34 64 31 66 6c 39 39 35 78 63 49 47 41 64 58 71 4d 66 42 4e 61 64 6f 59 72 68 48 2b 4d 67 32 4b 42 6c 70 56 70 62 6c 75 43 69 58 6d 4d 6e 5a 32 53 68 34 47 42 71 4a 2b 63 6b 49 4f 71 71 4a 36 4c 6d 4b 53 6c 6c 5a 6d 73 6f 71 36 77 70 51 41 41 41 68 2b 51 51 4a 41 51 41 42 41 43 77 41 41 41 41 41 4b 41 41 6f 41 41 41 43 6c 59 78 2f 6f 4c 76 6f 78 75 4a 44 6b 55 31 61 Data Ascii: AAoACgAAAKXjI8By5zf4kOxTVrXNVlv1X0d8IGZGKLnNpYtm8Lr9cqVeuOSvfOW79D9aDHizNhDJidFZhNydEahOaDH6nomtJjp1tutKoNWkvA6JqfRVLHU/QUfau9l2x7G54d1fl995xcIGAdXqMfBNadoYrhH+Mg2KBlpVpbluCiXmMnZ2Sh4GBqJ+ckIOqqJ6LmKSllZmsoq6wpQAAAh+QQJAQABACwAAAAAKAAoAAAClYx/oLvoxuJDkU1a
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 62 73 2d 61 6e 63 68 6f 72 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 35 65 6d 20 31 65 6d 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 0a 7d 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 20 2e 75 69 2d 74 61 62 73 2d 61 6e 63 68 6f 72 2c 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 Data Ascii: bs-anchor {float: left;padding: .5em 1em;text-decoration: none;}.ui-tabs .ui-tabs-nav li.ui-tabs-active {margin-bottom: -1px;padding-bottom: 1px;}.ui-tabs .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-state-disa
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 0a 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 63 64 30 61 30 61 3b 0a 7d 0a 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 2c 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 2c 0a 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 73 65 63 6f 6e 64 61 72 79 2c 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 Data Ascii: .ui-state-error-text,.ui-widget-header .ui-state-error-text {color: #cd0a0a;}.ui-priority-primary,.ui-widget-content .ui-priority-primary,.ui-widget-header .ui-priority-primary {font-weight: bold;}.ui-priority-secondary,.ui-widget-content .ui
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6f 77 74 68 69 63 6b 2d 31 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 39 36 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 6e 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 31 32 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 65 2d 73 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d Data Ascii: owthick-1-w { background-position: -96px -48px; }.ui-icon-arrowthick-1-nw { background-position: -112px -48px; }.ui-icon-arrowthick-2-n-s { background-position: -128px -48px; }.ui-icon-arrowthick-2-ne-sw { background-position: -144px -48px; }.ui-icon-
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2d 69 63 6f 6e 2d 6b 65 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 31 32 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 6c 69 67 68 74 62 75 6c 62 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 73 63 69 73 73 6f 72 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 6c 69 70 62 6f 61 72 64 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 30 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 6f 70 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f Data Ascii: -icon-key { background-position: -112px -128px; }.ui-icon-lightbulb { background-position: -128px -128px; }.ui-icon-scissors { background-position: -144px -128px; }.ui-icon-clipboard { background-position: -160px -128px; }.ui-icon-copy { background-po
2024-07-03 12:36:09 UTC	461	IN	Data Raw: 20 7b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 7d 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 6c 65 66 74 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6c 20 7b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 7d 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 72 69 67 68 74 2c 0a 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 72 20 7b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 7d 0a 0a 20 4f 76 65 72 6c 61 79 73 20 Data Ascii: {border-top-right-radius: 4px;}.ui-corner-all,.ui-corner-bottom,.ui-corner-left,.ui-corner-bl {border-bottom-left-radius: 4px;}.ui-corner-all,.ui-corner-bottom,.ui-corner-right,.ui-corner-br {border-bottom-right-radius: 4px;} Overlays

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49721	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	727	OUT	GET /asmonitor/javax.faces.resource/cookiebot.css.xhtml?ln=css HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	773	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"682-1704450954000" Content-Length: 682 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/css
2024-07-03 12:36:09 UTC	682	IN	Data Raw: 2f 2a 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 6c 69 63 65 6e 73 65 20 68 65 61 64 65 72 2c 20 63 68 6f 6f 73 65 20 4c 69 63 65 6e 73 65 20 48 65 61 64 65 72 73 20 69 6e 20 50 72 6f 6a 65 63 74 20 50 72 6f 70 65 72 74 69 65 73 2e 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 69 6c 65 2c 20 63 68 6f 6f 73 65 20 54 6f 6f 6c 73 20 7c 20 54 65 6d 70 6c 61 74 65 73 0a 61 6e 64 20 6f 70 65 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 20 69 6e 20 74 68 65 20 65 64 69 74 6f 72 2e 0a 2a 2f 0a 0a 23 43 79 62 6f 74 43 6f 6f 6b 69 65 62 6f 74 44 69 61 6c 6f 67 20 23 43 79 62 6f 74 43 6f 6f 6b 69 65 62 6f 74 44 69 61 6c 6f 67 48 65 61 64 65 72 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 23 43 79 62 6f 74 43 6f 6f 6b Data Ascii: /To change this license header, choose License Headers in Project Properties.To change this template file, choose Tools \| Templatesand open the template in the editor./#CybotCookiebotDialog #CybotCookiebotDialogHeader { display: none; }#CybotCook

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49724	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	712	OUT	GET /asmonitor/javax.faces.resource/jquery.min.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	791	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"89500-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 89500
2024-07-03 12:36:09 UTC	3252	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b Data Ascii: string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c Data Ascii: cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 Data Ascii: .createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 65 2e 61 74 74 72 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 21 3d 22 3d 3d 3d 72 3a 21 72 7c 7c 28 74 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 72 3f 74 3d 3d 3d 69 3a 22 21 3d 22 3d 3d 3d 72 3f 74 21 3d 3d 69 3a 22 5e 3d 22 3d 3d 3d 72 3f 69 26 26 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 2a 3d 22 3d 3d 3d 72 3f 69 26 26 2d 31 3c 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 24 3d 22 3d 3d 3d 72 3f 69 26 26 74 2e 73 6c 69 63 65 28 2d 69 2e 6c 65 6e 67 74 68 29 3d 3d 3d 69 3a 22 7e 3d 22 3d 3d 3d 72 3f 2d 31 3c 28 22 20 22 2b 74 2e 72 65 Data Ascii: e("class")\|\|"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r\|\|(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.re
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 31 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 5b 6b 2c 70 5d 3b 69 66 28 6e 29 7b 77 68 69 6c 65 28 65 3d 65 5b 75 5d 29 69 66 28 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 66 29 26 26 73 28 65 2c 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 65 3d 65 5b 75 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 66 29 69 66 28 69 3d 28 6f 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 29 5b 65 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 65 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6c 26 26 6c 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 65 3d 65 5b 75 5d 7c 7c 65 3b 65 6c 73 65 7b 69 66 28 28 72 3d 69 5b 63 5d 29 26 26 72 Data Ascii: 1}:function(e,t,n){var r,i,o,a=[k,p];if(n){while(e=e[u])if((1===e.nodeType\|\|f)&&s(e,t,n))return!0}else while(e=e[u])if(1===e.nodeType\|\|f)if(i=(o=e[S]\|\|(e[S]={}))[e.uniqueID]\|\|(o[e.uniqueID]={}),l&&l===e.nodeName.toLowerCase())e=e[u]\|\|e;else{if((r=i[c])&&r
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 31 3a 32 29 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 6e 70 75 74 2f 3e 22 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 22 22 29 2c 22 22 3d 3d 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7d 29 7c 7c 66 65 28 22 76 61 6c 75 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 6e 26 26 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 29 2c Data Ascii: .toLowerCase()?1:2)}),d.attributes&&ce(function(e){return e.innerHTML="<input/>",e.firstChild.setAttribute("value",""),""===e.firstChild.getAttribute("value")})\|\|fe("value",function(e,t,n){if(!n&&"input"===e.nodeName.toLowerCase())return e.defaultValue}),
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 72 65 74 75 72 6e 20 54 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 63 6f 6e 74 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 26 26 72 28 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 3f 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3a 28 41 28 65 2c 22 74 65 6d 70 6c 61 74 65 22 29 26 26 28 65 3d 65 2e 63 6f 6e 74 65 6e 74 7c 7c 65 29 2c 53 2e 6d 65 72 67 65 28 5b 5d 2c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 69 29 7b 53 2e 66 6e 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 6d 61 70 28 74 68 69 73 2c 69 2c 65 29 3b 72 65 74 75 72 6e 22 55 6e 74 69 6c 22 21 3d 3d 72 2e Data Ascii: return T(e.firstChild)},contents:function(e){return null!=e.contentDocument&&r(e.contentDocument)?e.contentDocument:(A(e,"template")&&(e=e.content\|\|e),S.merge([],e.childNodes))}},function(r,i){S.fn[r]=function(e,t){var n=S.map(this,i,e);return"Until"!==r.
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 43 2e 63 6f 6e 73 6f 6c 65 26 26 43 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 65 26 26 57 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 43 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 46 3d 53 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 45 2e 72 65 6d 6f 76 65 45 Data Ascii: Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeE
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 53 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 53 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f Data Ascii: ===n?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49723	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	715	OUT	GET /asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:09 UTC	793	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:09 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"255077-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 255077
2024-07-03 12:36:09 UTC	3251	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 31 20 2d 20 32 30 32 32 2d 30 32 2d 31 35 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 Data Ascii: /! jQuery UI - v1.13.1 - 2022-02-15 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/d
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 74 61 6e 63 65 22 29 3a 28 74 3d 65 5b 69 5d 2e 61 70 70 6c 79 28 65 2c 73 29 29 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 28 6e 3d 74 26 26 74 2e 6a 71 75 65 72 79 3f 6e 2e 70 75 73 68 53 74 61 63 6b 28 74 2e 67 65 74 28 29 29 3a 74 2c 21 31 29 3a 76 6f 69 64 20 30 3a 56 2e 65 72 72 6f 72 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 6f 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3b 20 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 27 22 2b 69 2b 22 27 22 29 7d 29 3a 6e 3d 76 6f 69 64 20 30 3a 28 73 2e 6c 65 6e 67 74 68 26 26 28 69 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 69 5d 2e 63 6f 6e 63 61 74 28 73 Data Ascii: tance"):(t=e[i].apply(e,s))!==e&&void 0!==t?(n=t&&t.jquery?n.pushStack(t.get()):t,!1):void 0:V.error("cannot call methods on "+o+" prior to initialization; attempted to call method '"+i+"'")}):n=void 0:(s.length&&(i=V.widget.extend.apply(null,[i].concat(s
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 74 2c 61 64 64 3a 73 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 73 3a 69 7d 3b 72 65 74 75 72 6e 20 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 69 29 2c 73 29 2c 74 68 69 73 7d 2c 5f 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 74 29 7b 76 61 72 20 61 2c 72 3d 74 68 69 73 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 28 74 3d 6f 2c 6f 3d 6e 2c 6e 3d 21 31 29 2c 74 3f 28 6f 3d 61 3d 56 28 6f 29 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 61 64 64 28 6f 29 29 3a 28 74 3d 6f 2c 6f 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 61 3d 74 68 69 73 2e 77 69 64 67 65 74 28 29 29 2c 56 2e 65 61 63 68 28 74 2c 66 75 6e 63 Data Ascii: t,add:s="boolean"==typeof s?s:i};return i.element.toggleClass(this._classes(i),s),this},_on:function(n,o,t){var a,r=this;"boolean"!=typeof n&&(t=o,o=n,n=!1),t?(o=a=V(o),this.bindings=this.bindings.add(o)):(t=o,o=this.element,a=this.widget()),V.each(t,func
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 3a 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 65 2e 6f 66 66 73 65 74 28 29 7d 3b 72 65 74 75 72 6e 20 5f 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 28 75 2e 61 74 3d 22 6c 65 66 74 20 74 6f 70 22 29 2c 70 3d 65 2e 77 69 64 74 68 2c 66 3d 65 2e 68 65 69 67 68 74 2c 6d 3d 56 2e 65 78 74 65 6e 64 28 7b 7d 2c 67 3d 65 2e 6f 66 66 73 65 74 29 2c 56 2e 65 61 63 68 28 5b 22 6d 79 22 2c 22 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 3d 28 75 5b 74 68 69 73 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 28 69 3d 31 3d 3d 3d 69 2e 6c 65 6e 67 74 68 3f 6f 2e 74 65 73 74 28 69 5b 30 5d 29 3f 69 2e 63 6f 6e 63 61 74 28 5b 22 63 65 6e 74 65 72 22 5d 29 3a 6c 2e 74 65 73 74 28 69 5b 30 5d Data Ascii: :e.outerHeight(),offset:e.offset()};return _[0].preventDefault&&(u.at="left top"),p=e.width,f=e.height,m=V.extend({},g=e.offset),V.each(["my","at"],function(){var t,e,i=(u[this]\|\|"").split(" ");(i=1===i.length?o.test(i[0])?i.concat(["center"]):l.test(i[0]
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 6c 65 53 65 6c 65 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 29 2c 65 6e 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 66 28 22 2e 75 69 2d 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 22 29 7d 7d 29 3b 56 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 2c 61 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 61 72 65 61 22 3d 3d 3d 61 3f 28 73 3d 28 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 6e 61 6d 65 2c 21 28 21 74 2e 68 72 65 66 7c 7c 21 73 7c 7c 22 6d 61 70 22 21 3d 3d 69 2e 6e 6f Data Ascii: leSelection",function(t){t.preventDefault()})}),enableSelection:function(){return this.off(".ui-disableSelection")}});V.ui.focusable=function(t,e){var i,s,n,o,a=t.nodeName.toLowerCase();return"area"===a?(s=(i=t.parentNode).name,!(!t.href\|\|!s\|\|"map"!==i.no
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 31 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 74 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 3d 74 3b 76 61 72 20 65 3d 74 68 69 73 2c 69 3d 31 3d 3d 3d 74 2e 77 68 69 63 68 2c 73 3d 21 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 61 6e 63 65 6c 7c 7c 21 74 2e 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 56 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 61 6e 63 65 6c 29 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 69 26 26 21 73 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 28 74 29 3f 28 74 68 69 73 2e 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 3d 21 Data Ascii: 1,this._mouseStarted&&this._mouseUp(t),this._mouseDownEvent=t;var e=this,i=1===t.which,s=!("string"!=typeof this.options.cancel\|\|!t.target.nodeName)&&V(t.target).closest(this.options.cancel).length;return i&&!s&&this._mouseCapture(t)?(this.mouseDelayMet=!
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 66 72 61 6d 65 42 6c 6f 63 6b 73 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 66 69 6e 64 28 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 56 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 56 28 22 3c 64 69 76 3e 22 29 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 2c 22 61 62 73 6f 6c 75 74 65 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 2e 70 61 72 65 6e 74 28 29 29 2e 6f 75 74 65 72 57 69 64 74 68 28 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 29 2e 6f 66 66 73 65 74 28 74 2e 6f 66 66 73 65 74 28 29 29 5b 30 5d 7d 29 7d 2c 5f 75 6e 62 6c 6f 63 6b 46 72 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: unction(t){this.iframeBlocks=this.document.find(t).map(function(){var t=V(this);return V("<div>").css("position","absolute").appendTo(t.parent()).outerWidth(t.outerWidth()).outerHeight(t.outerHeight()).offset(t.offset())[0]})},_unblockFrames:function(){th
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 4f 66 66 73 65 74 46 72 6f 6d 48 65 6c 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 22 6c 65 66 74 22 69 6e 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 7b 6c 65 66 74 3a 2b 74 5b 30 5d 2c 74 6f 70 3a 2b 74 5b 31 5d 7c 7c 30 7d 3a 74 29 26 26 28 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3d 74 2e 6c 65 66 74 2b 74 68 69 73 2e 6d 61 72 67 69 6e 73 2e 6c 65 66 74 29 2c 22 72 69 67 68 74 22 69 6e 20 74 26 26 28 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3d 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2d 74 2e 72 69 67 68 74 2b 74 68 69 73 2e 6d 61 Data Ascii: OffsetFromHelper:function(t){"string"==typeof t&&(t=t.split(" ")),"left"in(t=Array.isArray(t)?{left:+t[0],top:+t[1]\|\|0}:t)&&(this.offset.click.left=t.left+this.margins.left),"right"in t&&(this.offset.click.left=this.helperProportions.width-t.right+this.ma
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 74 61 69 6e 6d 65 6e 74 5b 31 5d 2b 69 2e 74 6f 70 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 32 5d 2b 69 2e 6c 65 66 74 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 33 5d 2b 69 2e 74 6f 70 5d 29 3a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 2c 74 2e 70 61 67 65 58 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3c 69 5b 30 5d 26 26 28 6f 3d 69 5b 30 5d 2b 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 29 2c 74 2e 70 61 67 65 59 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 3c 69 5b 31 5d 26 26 28 61 3d 69 5b 31 5d 2b 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 29 2c 74 2e 70 61 67 65 58 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 Data Ascii: tainment[1]+i.top,this.containment[2]+i.left,this.containment[3]+i.top]):this.containment,t.pageX-this.offset.click.left<i[0]&&(o=i[0]+this.offset.click.left),t.pageY-this.offset.click.top<i[1]&&(a=i[1]+this.offset.click.top),t.pageX-this.offset.click.lef
2024-07-03 12:36:09 UTC	4048	IN	Data Raw: 61 74 65 50 6f 73 69 74 69 6f 6e 28 69 2c 21 30 29 2c 6e 2e 5f 74 72 69 67 67 65 72 28 22 66 72 6f 6d 53 6f 72 74 61 62 6c 65 22 2c 69 29 2c 6e 2e 64 72 6f 70 70 65 64 3d 21 31 2c 56 2e 65 61 63 68 28 6e 2e 73 6f 72 74 61 62 6c 65 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 73 28 29 7d 29 29 7d 29 7d 7d 29 2c 56 2e 75 69 2e 70 6c 75 67 69 6e 2e 61 64 64 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 63 75 72 73 6f 72 22 2c 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 73 3d 56 28 22 62 6f 64 79 22 29 2c 69 3d 69 2e 6f 70 74 69 6f 6e 73 3b 73 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 26 26 28 69 2e 5f 63 75 72 73 6f 72 3d 73 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 29 2c Data Ascii: atePosition(i,!0),n._trigger("fromSortable",i),n.dropped=!1,V.each(n.sortables,function(){this.refreshPositions()}))})}}),V.ui.plugin.add("draggable","cursor",{start:function(t,e,i){var s=V("body"),i=i.options;s.css("cursor")&&(i._cursor=s.css("cursor")),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 12:36:09 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=99185 Date: Wed, 03 Jul 2024 12:36:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 12:36:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49729	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	716	OUT	GET /asmonitor/javax.faces.resource/jquery.blockUI.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	791	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"19975-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 19975
2024-07-03 12:36:10 UTC	3252	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 62 6c 6f 63 6b 55 49 20 70 6c 75 67 69 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 20 32 2e 37 30 2e 30 2d 32 30 31 34 2e 31 31 2e 32 33 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 37 20 6f 72 20 6c 61 74 65 72 0a 20 2a 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 62 6c 6f 63 6b 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 2d 32 30 31 33 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 Data Ascii: /! jQuery blockUI plugin * Version 2.70.0-2014.11.23 * Requires jQuery v1.7 or later * * Examples at: http://malsup.com/jquery/block/ * Copyright (c) 2007-2013 M. Alsup * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 5d 20 3d 3d 3d 20 77 69 6e 64 6f 77 20 29 20 7b 0a 09 09 09 09 24 2e 75 6e 62 6c 6f 63 6b 55 49 28 20 6f 70 74 73 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 72 65 6d 6f 76 65 28 74 68 69 73 2c 20 6f 70 74 73 29 3b 0a 09 09 09 7d 29 3b 0a 09 09 7d 3b 0a 0a 09 09 24 2e 62 6c 6f 63 6b 55 49 2e 76 65 72 73 69 6f 6e 20 3d 20 32 2e 37 30 3b 20 2f 2f 20 32 6e 64 20 67 65 6e 65 72 61 74 69 6f 6e 20 62 6c 6f 63 6b 69 6e 67 20 61 74 20 6e 6f 20 65 78 74 72 61 20 63 6f 73 74 21 0a 0a 09 09 2f 2f 20 6f 76 65 72 72 69 64 65 20 74 68 65 73 65 20 69 6e 20 79 6f 75 72 20 63 6f 64 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 Data Ascii: ] === window ) {$.unblockUI( opts );return this;}return this.each(function() {remove(this, opts);});};$.blockUI.version = 2.70; // 2nd generation blocking at no extra cost!// override these in your code to change the
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 70 6f 69 6e 74 65 72 2c 20 6f 74 68 65 72 77 69 73 65 20 63 75 72 73 6f 72 20 64 65 66 69 6e 65 64 20 69 6e 20 6f 76 65 72 6c 61 79 43 73 73 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 0a 09 09 09 6f 6e 4f 76 65 72 6c 61 79 43 6c 69 63 6b 3a 20 6e 75 6c 6c 2c 0a 0a 09 09 09 2f 2f 20 64 6f 6e 27 74 20 61 73 6b 3b 20 69 66 20 79 6f 75 20 72 65 61 6c 6c 79 20 6d 75 73 74 20 6b 6e 6f 77 3a 20 68 74 74 70 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 72 6f 75 70 2f 6a 71 75 65 72 79 2d 65 6e 2f 62 72 6f 77 73 65 5f 74 68 72 65 61 64 2f 74 68 72 65 61 64 2f 33 36 36 34 30 61 38 37 33 30 35 30 33 35 39 35 2f 32 66 36 61 37 39 61 37 37 61 37 38 65 34 39 33 23 32 66 36 61 37 39 61 37 37 61 37 38 65 34 39 33 0a 09 09 09 71 75 69 72 6b 73 6d 6f 64 Data Ascii: pointer, otherwise cursor defined in overlayCss will be used.onOverlayClick: null,// don't ask; if you really must know: http://groups.google.com/group/jquery-en/browse_thread/thread/36640a8730503595/2f6a79a77a78e493#2f6a79a77a78e493quirksmod
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 2b 31 30 29 2b 27 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 22 3e 3c 2f 64 69 76 3e 27 3b 0a 09 09 09 7d 0a 09 09 09 6c 79 72 33 20 3d 20 24 28 73 29 3b 0a 0a 09 09 09 2f 2f 20 69 66 20 77 65 20 68 61 76 65 20 61 20 6d 65 73 73 61 67 65 2c 20 73 74 79 6c 65 20 69 74 0a 09 09 09 69 66 20 28 6d 73 67 29 20 7b 0a 09 09 09 09 69 66 20 28 6f 70 74 73 2e 74 68 65 6d 65 29 20 7b 0a 09 09 09 09 09 6c 79 72 33 2e 63 73 73 28 74 68 65 6d 65 64 43 53 53 29 3b 0a 09 09 09 09 09 6c 79 72 33 2e 61 64 64 43 6c 61 73 73 28 27 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 65 6c 73 65 0a 09 09 09 09 09 6c 79 72 33 2e 63 73 73 28 63 73 73 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f Data Ascii: +10)+';display:none;position:absolute"></div>';}lyr3 = $(s);// if we have a message, style itif (msg) {if (opts.theme) {lyr3.css(themedCSS);lyr3.addClass('ui-widget-content');}elselyr3.css(css);}/
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 49 2e 74 69 6d 65 6f 75 74 27 2c 20 74 6f 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 20 72 65 6d 6f 76 65 20 74 68 65 20 62 6c 6f 63 6b 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 28 65 6c 2c 20 6f 70 74 73 29 20 7b 0a 09 09 09 76 61 72 20 63 6f 75 6e 74 3b 0a 09 09 09 76 61 72 20 66 75 6c 6c 20 3d 20 28 65 6c 20 3d 3d 20 77 69 6e 64 6f 77 29 3b 0a 09 09 09 76 61 72 20 24 65 6c 20 3d 20 24 28 65 6c 29 3b 0a 09 09 09 76 61 72 20 64 61 74 61 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 62 6c 6f 63 6b 55 49 2e 68 69 73 74 6f 72 79 27 29 3b 0a 09 09 09 76 61 72 20 74 6f 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 62 6c 6f 63 6b 55 49 2e 74 69 6d 65 6f 75 74 27 29 3b 0a 09 09 09 69 66 20 28 74 6f 29 20 7b 0a 09 09 09 09 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: I.timeout', to);}}// remove the blockfunction remove(el, opts) {var count;var full = (el == window);var $el = $(el);var data = $el.data('blockUI.history');var to = $el.data('blockUI.timeout');if (to) {clearTimeou
2024-07-03 12:36:10 UTC	531	IN	Data Raw: 72 28 65 6c 2c 20 78 2c 20 79 29 20 7b 0a 09 09 09 76 61 72 20 70 20 3d 20 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 20 73 20 3d 20 65 6c 2e 73 74 79 6c 65 3b 0a 09 09 09 76 61 72 20 6c 20 3d 20 28 28 70 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2d 20 65 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 29 2f 32 29 20 2d 20 73 7a 28 70 2c 27 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 27 29 3b 0a 09 09 09 76 61 72 20 74 20 3d 20 28 28 70 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2d 20 65 6c 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2f 32 29 20 2d 20 73 7a 28 70 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 29 3b 0a 09 09 09 69 66 20 28 78 29 20 73 2e 6c 65 66 74 20 3d 20 6c 20 3e 20 30 20 3f 20 28 6c 2b 27 70 78 27 29 20 3a 20 27 30 27 3b 0a 09 09 09 69 66 20 28 Data Ascii: r(el, x, y) {var p = el.parentNode, s = el.style;var l = ((p.offsetWidth - el.offsetWidth)/2) - sz(p,'borderLeftWidth');var t = ((p.offsetHeight - el.offsetHeight)/2) - sz(p,'borderTopWidth');if (x) s.left = l > 0 ? (l+'px') : '0';if (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49730	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	712	OUT	GET /asmonitor/javax.faces.resource/popper.min.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	791	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"20456-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 20456
2024-07-03 12:36:10 UTC	3252	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 38 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e Data Ascii: /* Copyright (C) Federico Zivolo 2018 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&defin
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 73 3d 67 28 65 29 2c 64 3d 67 28 6f 29 2c 61 3d 6e 28 65 29 2c 66 3d 74 28 6f 29 2c 6d 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 2c 31 30 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 2c 31 30 29 3b 69 26 26 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 64 2e 74 6f 70 3d 51 28 64 2e 74 6f 70 2c 30 29 2c 64 2e 6c 65 66 74 3d 51 28 64 2e 6c 65 66 74 2c 30 29 29 3b 76 61 72 20 75 3d 63 28 7b 74 6f 70 3a 73 2e 74 6f 70 2d 64 2e 74 6f 70 2d 6d 2c 6c 65 66 74 3a 73 2e 6c 65 66 74 2d 64 2e 6c 65 66 74 2d 68 2c 77 69 64 74 68 3a 73 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 73 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 75 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 Data Ascii: s=g(e),d=g(o),a=n(e),f=t(o),m=parseFloat(f.borderTopWidth,10),h=parseFloat(f.borderLeftWidth,10);i&&'HTML'===o.nodeName&&(d.top=Q(d.top,0),d.left=Q(d.left,0));var u=c({top:s.top-d.top-m,left:s.left-d.left-h,width:s.width,height:s.height});if(u.marginTop=0
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3f 27 66 69 78 65 64 27 3a 27 61 62 73 6f 6c 75 74 65 27 2c 65 3d 4e 28 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2c 65 29 2c 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 28 65 29 3a 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3d 21 30 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 72 65 61 74 65 28 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 2c 6e 3d 65 2e 65 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 20 6e 26 26 6f 3d 3d 3d 74 7d 29 7d 66 75 6e Data Ascii: =this.options.positionFixed?'fixed':'absolute',e=N(this.modifiers,e),this.state.isCreated?this.options.onUpdate(e):(this.state.isCreated=!0,this.options.onCreate(e))}}function P(e,t){return e.some(function(e){var o=e.name,n=e.enabled;return n&&o===t})}fun
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 27 62 6f 74 74 6f 6d 27 3d 3d 3d 64 26 26 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2b 3d 6f 5b 31 5d 29 2c 65 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 66 6f 72 28 76 61 72 20 58 3d 4d 61 74 68 2e 6d 69 6e 2c 4a 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 51 3d 4d 61 74 68 2e 6d 61 78 2c 5a 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2c 24 3d 5b 27 45 64 67 65 27 2c 27 54 72 69 64 65 6e 74 27 2c 27 46 69 72 65 66 6f 78 27 5d 2c 65 65 3d 30 2c 74 65 3d 30 3b 74 65 3c 24 2e 6c 65 6e 67 74 68 3b 74 65 2b 3d 31 29 69 66 28 5a 26 26 30 3c 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 24 5b 74 Data Ascii: 'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}for(var X=Math.min,J=Math.floor,Q=Math.max,Z='undefined'!=typeof window&&'undefined'!=typeof document,$=['Edge','Trident','Firefox'],ee=0,te=0;te<$.length;te+=1)if(Z&&0<=navigator.userAgent.indexOf($[t
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 69 74 68 52 65 66 65 72 65 6e 63 65 26 26 28 69 3d 58 28 70 5b 6f 5d 2c 6e 5b 65 5d 2d 28 27 72 69 67 68 74 27 3d 3d 3d 65 3f 70 2e 77 69 64 74 68 3a 70 2e 68 65 69 67 68 74 29 29 29 2c 73 65 28 7b 7d 2c 6f 2c 69 29 7d 7d 3b 72 65 74 75 72 6e 20 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2d 31 3d 3d 3d 5b 27 6c 65 66 74 27 2c 27 74 6f 70 27 5d 2e 69 6e 64 65 78 4f 66 28 65 29 3f 27 73 65 63 6f 6e 64 61 72 79 27 3a 27 70 72 69 6d 61 72 79 27 3b 70 3d 64 65 28 7b 7d 2c 70 2c 73 5b 74 5d 28 65 29 29 7d 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 2c 70 72 69 6f 72 69 74 79 3a 5b 27 6c 65 66 74 27 2c 27 72 69 67 68 74 27 2c 27 74 6f 70 27 2c 27 62 6f 74 74 6f 6d 27 5d 2c 70 61 64 64 69 6e 67 3a Data Ascii: ithReference&&(i=X(p[o],n[e]-('right'===e?p.width:p.height))),se({},o,i)}};return i.forEach(function(e){var t=-1===['left','top'].indexOf(e)?'secondary':'primary';p=de({},p,s[t](e))}),e.offsets.popper=p,e},priority:['left','right','top','bottom'],padding:
2024-07-03 12:36:10 UTC	1012	IN	Data Raw: 72 69 67 68 74 3a 4a 28 69 2e 72 69 67 68 74 29 7d 2c 63 3d 27 62 6f 74 74 6f 6d 27 3d 3d 3d 6f 3f 27 74 6f 70 27 3a 27 62 6f 74 74 6f 6d 27 2c 75 3d 27 72 69 67 68 74 27 3d 3d 3d 6e 3f 27 6c 65 66 74 27 3a 27 72 69 67 68 74 27 2c 62 3d 57 28 27 74 72 61 6e 73 66 6f 72 6d 27 29 3b 69 66 28 64 3d 27 62 6f 74 74 6f 6d 27 3d 3d 63 3f 2d 66 2e 68 65 69 67 68 74 2b 68 2e 62 6f 74 74 6f 6d 3a 68 2e 74 6f 70 2c 73 3d 27 72 69 67 68 74 27 3d 3d 75 3f 2d 66 2e 77 69 64 74 68 2b 68 2e 72 69 67 68 74 3a 68 2e 6c 65 66 74 2c 61 26 26 62 29 6d 5b 62 5d 3d 27 74 72 61 6e 73 6c 61 74 65 33 64 28 27 2b 73 2b 27 70 78 2c 20 27 2b 64 2b 27 70 78 2c 20 30 29 27 2c 6d 5b 63 5d 3d 30 2c 6d 5b 75 5d 3d 30 2c 6d 2e 77 69 6c 6c 43 68 61 6e 67 65 3d 27 74 72 61 6e 73 66 6f 72 6d Data Ascii: right:J(i.right)},c='bottom'===o?'top':'bottom',u='right'===n?'left':'right',b=W('transform');if(d='bottom'==c?-f.height+h.bottom:h.top,s='right'==u?-f.width+h.right:h.left,a&&b)m[b]='translate3d('+s+'px, '+d+'px, 0)',m[c]=0,m[u]=0,m.willChange='transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49731	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	715	OUT	GET /asmonitor/javax.faces.resource/bootstrap.min.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	791	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"58072-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 58072
2024-07-03 12:36:10 UTC	3252	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t,e){"
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 72 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5f 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: _getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._element,r),this._element=null},t._getRootElement=function(t){var e=_.getSelectorFromElement(t),n=!1;return e&&(n=document.
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 Data Ascii: dicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var t=r.prototype;r
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.que
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 3b 69 66 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 69 29 2c 21 69 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 74 26 26 28 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 67 28 74 29 2e 6e 6f 74 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 2c 22 68 69 64 65 22 29 2c 65 7c 7c 67 28 74 29 2e 64 61 74 61 28 68 74 2c 6e 75 6c 6c 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 70 74 29 2e 61 64 64 43 6c 61 73 73 28 76 74 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 6f 5d 3d 30 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 Data Ascii: ;if(g(this._element).trigger(i),!i.isDefaultPrevented()){t&&(a._jQueryInterface.call(g(t).not(this._selector),"hide"),e\|\|g(t).data(ht,null));var o=this._getDimension();g(this._element).removeClass(pt).addClass(vt),this._element.style[o]=0,this._triggerArr
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 6f 6d 2d 65 6e 64 22 2c 7a 74 3d 22 72 69 67 68 74 2d 73 74 61 72 74 22 2c 58 74 3d 22 6c 65 66 74 2d 73 74 61 72 74 22 2c 24 74 3d 7b 6f 66 66 73 65 74 3a 30 2c 66 6c 69 70 3a 21 30 2c 62 6f 75 6e 64 61 72 79 3a 22 73 63 72 6f 6c 6c 50 61 72 65 6e 74 22 2c 72 65 66 65 72 65 6e 63 65 3a 22 74 6f 67 67 6c 65 22 2c 64 69 73 70 6c 61 79 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 47 74 3d 7b 6f 66 66 73 65 74 3a 22 28 6e 75 6d 62 65 72 7c 73 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 66 6c 69 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 62 6f 75 6e 64 61 72 79 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 2c 72 65 66 65 72 65 6e 63 65 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 2c 64 69 73 70 6c 61 79 3a 22 73 74 72 69 6e 67 22 7d 2c 4a 74 3d Data Ascii: om-end",zt="right-start",Xt="left-start",$t={offset:0,flip:!0,boundary:"scrollParent",reference:"toggle",display:"dynamic"},Gt={offset:"(number\|string\|function)",flip:"boolean",boundary:"(string\|element)",reference:"(string\|element)",display:"string"},Jt=
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 65 74 50 61 72 65 6e 74 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 5b 6e 5d 29 2c 72 3d 67 28 65 5b 6e 5d 29 2e 64 61 74 61 28 44 74 29 2c 73 3d 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 65 5b 6e 5d 7d 3b 69 66 28 74 26 26 22 63 6c 69 63 6b 22 3d 3d 3d 74 2e 74 79 70 65 26 26 28 73 2e 63 6c 69 63 6b 45 76 65 6e 74 3d 74 29 2c 72 29 7b 76 61 72 20 61 3d 72 2e 5f 6d 65 6e 75 3b 69 66 28 67 28 6f 29 2e 68 61 73 43 6c 61 73 73 28 4c 74 29 26 26 21 28 74 26 26 28 22 63 6c 69 63 6b 22 3d 3d 3d 74 2e 74 79 70 65 26 26 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 74 2e 74 79 70 65 26 26 39 3d 3d 3d 74 2e 77 68 69 63 68 29 26 26 67 2e 63 6f 6e 74 61 69 6e Data Ascii: etParentFromElement(e[n]),r=g(e[n]).data(Dt),s={relatedTarget:e[n]};if(t&&"click"===t.type&&(s.clickEvent=t),r){var a=r._menu;if(g(o).hasClass(Lt)&&!(t&&("click"===t.type&&/input\|textarea/i.test(t.target.tagName)\|\|"keyup"===t.type&&9===t.which)&&g.contain
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 4f 43 55 53 49 4e 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 75 65 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 72 65 2e 43 4c 49 43 4b 5f 44 49 53 4d 49 53 53 29 2c 67 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 2e 6f 66 66 28 72 65 2e 4d 4f 55 53 45 44 4f 57 4e 5f 44 49 53 4d 49 53 53 29 2c 69 29 7b 76 61 72 20 6f 3d 5f 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 5f 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 68 69 64 65 4d 6f 64 61 6c 28 74 29 7d 29 Data Ascii: OCUSIN),g(this._element).removeClass(ue),g(this._element).off(re.CLICK_DISMISS),g(this._dialog).off(re.MOUSEDOWN_DISMISS),i){var o=_.getTransitionDurationFromElement(this._element);g(this._element).one(_.TRANSITION_END,function(t){return e._hideModal(t)})
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 72 57 69 64 74 68 2c 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 7d 2c 74 2e 5f 73 65 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 5f 69 73 42 6f 64 79 4f 76 65 72 66 6c 6f 77 69 6e 67 29 7b 76 61 72 20 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 6d 65 29 29 2c 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 70 65 29 29 3b 67 28 74 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 73 74 79 6c Data Ascii: rWidth,this._scrollbarWidth=this._getScrollbarWidth()},t._setScrollbar=function(){var o=this;if(this._isBodyOverflowing){var t=[].slice.call(document.querySelectorAll(me)),e=[].slice.call(document.querySelectorAll(pe));g(t).each(function(t,e){var n=e.styl
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 65 6e 74 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 74 72 69 67 67 65 72 3a 22 73 74 72 69 6e 67 22 2c 64 65 6c 61 79 3a 22 28 6e 75 6d 62 65 72 7c 6f 62 6a 65 63 74 29 22 2c 68 74 6d 6c 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 65 6c 65 63 74 6f 72 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 28 73 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 6f 66 66 73 65 74 3a 22 28 6e 75 6d 62 65 72 7c 73 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 63 6f 6e 74 61 69 6e 65 72 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 7c 62 6f 6f 6c 65 61 6e 29 22 2c 66 61 6c 6c 62 61 63 6b 50 6c 61 63 65 6d 65 6e 74 3a 22 28 73 74 72 69 6e 67 7c 61 72 72 61 79 29 22 2c 62 6f 75 6e 64 61 72 79 3a 22 28 73 74 72 69 6e 67 7c 65 6c Data Ascii: ent\|function)",trigger:"string",delay:"(number\|object)",html:"boolean",selector:"(string\|boolean)",placement:"(string\|function)",offset:"(number\|string\|function)",container:"(string\|element\|boolean)",fallbackPlacement:"(string\|array)",boundary:"(string\|el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49732	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	714	OUT	GET /asmonitor/javax.faces.resource/cookiepolicy.js.xhtml?ln=js HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	789	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"8752-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 8752
2024-07-03 12:36:10 UTC	3253	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3b 65 2e 63 6f 6f 6b 69 65 73 44 69 72 65 63 74 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 73 3d 65 2e 65 78 74 65 6e 64 28 7b 65 78 70 6c 69 63 69 74 43 6f 6e 73 65 6e 74 3a 21 31 2c 70 6f 73 69 74 69 6f 6e 3a 22 62 6f 74 74 6f 6d 22 2c 64 75 72 61 74 69 6f 6e 3a 30 2c 6c 69 6d 69 74 3a 30 2c 63 6f 6f 6b 69 65 53 63 72 69 70 74 73 3a 6e 75 6c 6c 2c 70 72 69 76 61 63 79 50 6f 6c 69 63 79 55 72 69 3a 7b 69 74 3a 22 70 72 69 76 61 63 79 2e 68 74 6d 6c 22 7d 2c 69 6e 6c 69 6e 65 41 63 74 69 6f 6e 3a 21 30 2c 6c 61 6e 67 3a 22 69 74 22 2c 73 63 72 69 70 74 57 72 61 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 22 68 65 6c 76 65 74 69 63 61 22 2c 66 Data Ascii: !function(e){var i;e.cookiesDirective=function(a){var s=e.extend({explicitConsent:!1,position:"bottom",duration:0,limit:0,cookieScripts:null,privacyPolicyUri:{it:"privacy.html"},inlineAction:!0,lang:"it",scriptWrapper:function(){},fontFamily:"helvetica",f
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 61 20 7a c3 ad 73 6b 61 c5 a5 20 c4 8f 61 6c c5 a1 69 65 20 69 6e 66 6f 72 6d c3 a1 63 69 65 20 6f 20 70 6f 75 c5 be c3 ad 76 61 6e c3 ad 20 73 c3 ba 62 6f 72 6f 76 20 63 6f 6f 6b 69 65 2c 20 61 6c 65 62 6f 20 61 6b 20 63 68 63 65 74 65 20 7a 72 75 c5 a1 69 c5 a5 20 73 76 6f 6a 20 73 c3 ba 68 6c 61 73 20 73 20 70 6f 75 c5 be 69 74 c3 ad 6d 20 73 c3 ba 62 6f 72 6f 76 20 63 6f 6f 6b 69 65 2c 20 6b 6c 69 6b 6e 69 74 65 2c 20 70 72 6f 73 c3 ad 6d 20 22 7d 2c 6d 65 73 73 61 67 65 32 3a 7b 69 74 3a 22 43 6c 69 63 63 61 6e 64 6f 20 73 75 20 22 2c 65 6e 3a 22 42 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 22 2c 65 73 3a 22 41 6c 20 68 61 63 65 72 20 63 6c 69 63 20 65 6e 20 22 2c 66 72 3a 22 45 6e 20 63 6c 69 71 75 61 6e 74 20 73 75 72 20 22 2c 70 6c 3a 22 4b 6c 69 Data Ascii: a zska alie informcie o pouvan sborov cookie, alebo ak chcete zrui svoj shlas s pouitm sborov cookie, kliknite, prosm "},message2:{it:"Cliccando su ",en:"By clicking on ",es:"Al hacer clic en ",fr:"En cliquant sur ",pl:"Kli
2024-07-03 12:36:10 UTC	1451	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 3b 22 3e 27 2c 6c 2b 3d 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 22 3e 27 2c 6c 2b 3d 61 2e 6d 65 73 73 61 67 65 5b 69 5d 2c 6c 2b 3d 27 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 27 2b 61 2e 6c 69 6e 6b 43 6f 6c 6f 72 2b 22 3b 22 2c 6c 2b 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2b 61 2e 66 6f 6e 74 46 61 6d 69 6c 79 2b 22 3b 66 6f 6e 74 2d 73 Data Ascii: ext-align:center;z-index:100000;">',l+='<div style="position:relative;height:auto;width:90%;padding:10px;margin-left:auto;margin-right:auto;">',l+=a.message[i],l+=' <a style="color:'+a.linkColor+";",l+="font-weight:bold;font-family:"+a.fontFamily+";font-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49734	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	781	OUT	GET /asmonitor/javax.faces.resource/logo-aruba-pec.png.xhtml?ln=images HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	776	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"4570-1704450954000" Content-Length: 4570 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:10 UTC	4048	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 2c 08 03 00 00 00 ec 04 f2 e7 00 00 02 f7 50 4c 54 45 00 00 00 8d 8d 8d 8f 8f 8f 91 91 91 7f 74 73 91 91 91 82 81 81 91 91 91 7a 7a 7a 80 72 71 7a 79 79 7a 79 79 84 84 84 7a 79 79 8e 8e 8e 92 92 92 7b 7a 7a 7c 7b 7b 7a 78 78 7b 7a 7a 91 91 91 78 77 77 94 94 94 94 94 94 7d 7b 7b 7c 7c 7c 91 91 91 95 95 95 94 94 94 7e 7e 7e 95 95 95 92 92 92 92 92 92 96 96 96 90 90 90 90 90 90 7a 79 79 95 95 95 7d 7c 7c 8f 8f 8f 7b 7a 7a 93 93 93 90 90 90 93 93 93 78 78 78 8f 8f 8f 8f 8f 8f 7c 7c 7c 91 91 91 91 91 91 96 96 96 92 92 92 7b 7a 7a 92 92 92 7e 7d 7d 7a 79 79 92 92 92 7b 7a 7a 7b 7a 7a 7b 7a 7a 90 90 90 de 1f 17 80 08 07 92 92 92 79 78 78 7b 7b 7b 94 94 94 94 94 94 92 92 92 7b 79 79 90 90 90 d4 Data Ascii: PNGIHDR,PLTEtszzzrqzyyzyyzyy{zz\|{{zxx{zzxww}{{\|\|\|~~~zyy}\|\|{zzxxx\|\|\|{zz~}}zyy{zz{zz{zzyxx{{{{yy
2024-07-03 12:36:10 UTC	522	IN	Data Raw: d1 88 6a 8c a2 6e c8 a0 24 34 eb 80 8d 01 82 91 28 48 78 c8 d0 f5 a2 13 b2 24 e9 16 87 9c 52 a5 65 9e 12 a6 0b 0e 0b 1c 5f 7b f7 73 75 ba 72 e3 e6 eb db 4f 1e 5c be fc e0 c9 ed eb 8f a6 75 dc bf 59 7b fa e1 f3 2e 58 07 e9 5c 3e 79 d0 70 b5 ac 64 02 f9 07 3b 58 b8 1d 10 92 d3 65 90 39 a0 73 16 39 9a a3 b7 18 86 ae 06 f2 b0 70 a9 89 b3 cc ee 09 02 dd a0 52 0b da ce fc fe c9 38 1f 41 a4 b4 75 a2 47 ae 95 6b c2 47 27 0a 4b 75 06 55 60 c0 00 95 51 01 f1 00 1a 61 18 27 1d d3 30 b2 8e ad cb 5e 26 ab 18 57 ba d6 d7 c3 86 7a d0 b5 4d 58 e4 e8 d5 77 1b bf de 9a ae 9c 3d 7b e9 de a3 47 f7 2e ad ac d4 61 7f 7f 6d e3 b7 7d 9b b7 2e 94 9d 9e 88 58 40 8d 2a 31 e2 8a a8 31 e6 24 52 40 23 a9 d6 03 cd 07 8f aa 55 6a 74 62 42 03 40 44 d8 98 b2 52 f1 b4 92 79 1d 46 dc 88 68 Data Ascii: jn$4(Hx$Re_{surO\uY{.X\>ypd;Xe9s9pR8AuGkG'KuU`Qa'0^&WzMXw={G.am}.X@*11$R@#UjtbB@DRyFh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49735	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:10 UTC	779	OUT	GET /asmonitor/javax.faces.resource/logo-actalis.png.xhtml?ln=images HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:10 UTC	776	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:10 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:10 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"1732-1704450954000" Content-Length: 1732 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:10 UTC	1732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 2c 08 03 00 00 00 9e cb 90 51 00 00 01 aa 50 4c 54 45 00 00 00 71 72 71 64 6b 70 71 72 71 70 76 7b 71 72 71 71 72 71 b3 b4 b3 85 93 9d 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 12 42 68 11 41 67 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 b3 b4 b3 71 72 71 71 72 71 b3 b4 b3 71 72 71 71 72 71 b3 b4 b3 13 42 68 b4 b4 b3 14 42 68 13 42 68 b3 b4 b3 13 42 68 13 42 68 71 72 71 13 42 68 71 72 71 13 Data Ascii: PNGIHDR,QPLTEqrqdkpqrqpv{qrqqrqqrqqrqqrqqrqqrqqrqqrqqrqBhAgqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqBhBhBhBhBhqrqBhqrq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49736	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:12 UTC	747	OUT	GET /asmonitor/images/04_sm_info.png HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfcare.firma-remota.it/asmonitor/login.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:12 UTC	758	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Accept-Ranges: bytes ETag: W/"1122-1704450954000" Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT Content-Length: 1122 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:12 UTC	1122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49737	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:12 UTC	513	OUT	GET /asmonitor/javax.faces.resource/logo-actalis.png.xhtml?ln=images HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:12 UTC	776	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:12 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"1732-1704450954000" Content-Length: 1732 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:12 UTC	1732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 2c 08 03 00 00 00 9e cb 90 51 00 00 01 aa 50 4c 54 45 00 00 00 71 72 71 64 6b 70 71 72 71 70 76 7b 71 72 71 71 72 71 b3 b4 b3 85 93 9d 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 12 42 68 11 41 67 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 71 72 71 b3 b4 b3 71 72 71 71 72 71 b3 b4 b3 71 72 71 71 72 71 b3 b4 b3 13 42 68 b4 b4 b3 14 42 68 13 42 68 b3 b4 b3 13 42 68 13 42 68 71 72 71 13 42 68 71 72 71 13 Data Ascii: PNGIHDR,QPLTEqrqdkpqrqpv{qrqqrqqrqqrqqrqqrqqrqqrqqrqqrqBhAgqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqqrqBhBhBhBhBhqrqBhqrq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49738	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:12 UTC	515	OUT	GET /asmonitor/javax.faces.resource/logo-aruba-pec.png.xhtml?ln=images HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:12 UTC	776	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:12 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"4570-1704450954000" Content-Length: 4570 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:12 UTC	4048	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 2c 08 03 00 00 00 ec 04 f2 e7 00 00 02 f7 50 4c 54 45 00 00 00 8d 8d 8d 8f 8f 8f 91 91 91 7f 74 73 91 91 91 82 81 81 91 91 91 7a 7a 7a 80 72 71 7a 79 79 7a 79 79 84 84 84 7a 79 79 8e 8e 8e 92 92 92 7b 7a 7a 7c 7b 7b 7a 78 78 7b 7a 7a 91 91 91 78 77 77 94 94 94 94 94 94 7d 7b 7b 7c 7c 7c 91 91 91 95 95 95 94 94 94 7e 7e 7e 95 95 95 92 92 92 92 92 92 96 96 96 90 90 90 90 90 90 7a 79 79 95 95 95 7d 7c 7c 8f 8f 8f 7b 7a 7a 93 93 93 90 90 90 93 93 93 78 78 78 8f 8f 8f 8f 8f 8f 7c 7c 7c 91 91 91 91 91 91 96 96 96 92 92 92 7b 7a 7a 92 92 92 7e 7d 7d 7a 79 79 92 92 92 7b 7a 7a 7b 7a 7a 7b 7a 7a 90 90 90 de 1f 17 80 08 07 92 92 92 79 78 78 7b 7b 7b 94 94 94 94 94 94 92 92 92 7b 79 79 90 90 90 d4 Data Ascii: PNGIHDR,PLTEtszzzrqzyyzyyzyy{zz\|{{zxx{zzxww}{{\|\|\|~~~zyy}\|\|{zzxxx\|\|\|{zz~}}zyy{zz{zz{zzyxx{{{{yy
2024-07-03 12:36:12 UTC	522	IN	Data Raw: d1 88 6a 8c a2 6e c8 a0 24 34 eb 80 8d 01 82 91 28 48 78 c8 d0 f5 a2 13 b2 24 e9 16 87 9c 52 a5 65 9e 12 a6 0b 0e 0b 1c 5f 7b f7 73 75 ba 72 e3 e6 eb db 4f 1e 5c be fc e0 c9 ed eb 8f a6 75 dc bf 59 7b fa e1 f3 2e 58 07 e9 5c 3e 79 d0 70 b5 ac 64 02 f9 07 3b 58 b8 1d 10 92 d3 65 90 39 a0 73 16 39 9a a3 b7 18 86 ae 06 f2 b0 70 a9 89 b3 cc ee 09 02 dd a0 52 0b da ce fc fe c9 38 1f 41 a4 b4 75 a2 47 ae 95 6b c2 47 27 0a 4b 75 06 55 60 c0 00 95 51 01 f1 00 1a 61 18 27 1d d3 30 b2 8e ad cb 5e 26 ab 18 57 ba d6 d7 c3 86 7a d0 b5 4d 58 e4 e8 d5 77 1b bf de 9a ae 9c 3d 7b e9 de a3 47 f7 2e ad ac d4 61 7f 7f 6d e3 b7 7d 9b b7 2e 94 9d 9e 88 58 40 8d 2a 31 e2 8a a8 31 e6 24 52 40 23 a9 d6 03 cd 07 8f aa 55 6a 74 62 42 03 40 44 d8 98 b2 52 f1 b4 92 79 1d 46 dc 88 68 Data Ascii: jn$4(Hx$Re_{surO\uY{.X\>ypd;Xe9s9pR8AuGkG'KuU`Qa'0^&WzMXw={G.am}.X@*11$R@#UjtbB@DRyFh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49739	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:12 UTC	512	OUT	GET /asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:12 UTC	775	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:12 GMT Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT ETag: W/"9404-1704450954000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/css content-length: 9417
2024-07-03 12:36:12 UTC	3267	IN	Data Raw: 2f 2a 0a 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0a 23 23 20 41 52 55 42 41 20 53 45 4c 46 43 41 52 45 20 54 48 45 4d 45 20 23 23 0a 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0a 2a 2f 0a 0a 2f 2a 20 53 49 5a 49 4e 47 20 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 09 2e 77 2d 73 6d 2d 32 35 20 7b 20 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 35 30 20 7b 20 77 69 64 74 68 3a 20 35 30 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 37 35 20 7b 20 77 69 64 74 68 3a 20 38 32 25 3b 20 7d 0a 09 2e 77 2d 73 6d 2d 31 30 30 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: /############################ ARUBA SELFCARE THEME ############################//* SIZING */@media (min-width: 576px) {.w-sm-25 { width: 25%; }.w-sm-50 { width: 50%; }.w-sm-75 { width: 82%; }.w-sm-100 { width: 100%; }}@media (min-width:
2024-07-03 12:36:12 UTC	4048	IN	Data Raw: 2d 62 72 65 61 6b 2d 61 6c 6c 20 7b 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 61 6c 6c 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 2e 62 6f 72 64 65 72 2d 6c 67 2d 72 69 67 68 74 20 7b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 20 7d 0a 7d 0a 0a 2e 62 74 6e 2d 73 77 69 74 63 68 65 72 20 7b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 20 2e 32 73 3b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 31 30 70 78 20 32 70 78 20 32 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e Data Ascii: -break-all { word-break: break-all; }@media (min-width: 992px) {.border-lg-right { border-right: 1px solid #ddd; }}.btn-switcher { transition: ease-out .2s; border: none; background-color: #ddd; color: #666; padding: 2px 10px 2px 2px; display: inlin
2024-07-03 12:36:12 UTC	2102	IN	Data Raw: 62 6c 65 64 2c 20 2e 62 74 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 36 35 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6f 6c 6f 72 3a 20 6c 69 67 68 74 67 72 65 79 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 2e 61 63 74 69 76 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 0a 7d 0a 0a 23 70 72 6f 67 72 65 73 73 62 61 72 20 6c 69 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 77 69 64 74 Data Ascii: bled, .btn:disabled { opacity: .65; background-color: #666;}#progressbar {margin-bottom: 30px;overflow: hidden;color: lightgrey}#progressbar .active {color: #000000}#progressbar li {list-style-type: none;font-size: 12px;widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49743	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:13 UTC	481	OUT	GET /asmonitor/images/04_sm_info.png HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:13 UTC	758	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:13 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Accept-Ranges: bytes ETag: W/"1122-1704450954000" Last-Modified: Fri, 05 Jan 2024 10:35:54 GMT Content-Length: 1122 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: image/png
2024-07-03 12:36:13 UTC	1122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49747	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:17 UTC	805	OUT	GET /asmonitor/informazioni-profilo.xhtml?faces-redirect=true HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:17 UTC	695	IN	HTTP/1.1 404 404 Date: Wed, 03 Jul 2024 12:36:17 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Content-Language: en Content-Length: 431 Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/html;charset=utf-8
2024-07-03 12:36:17 UTC	431	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49746	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:19 UTC	782	OUT	GET /asmonitor/recupero-username.xhtml HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:19 UTC	675	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:19 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/html;charset=UTF-8 content-length: 10333
2024-07-03 12:36:19 UTC	3368	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 55 73 65 72 6e 61 6d 65 20 72 65 63 6f 76 65 72 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 74 72 75 65 22 20 64 65 66 65 72 3d 22 74 72 75 65 22 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 72 65 6e 64 65 72 52 65 43 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 26 61 6d 70 3b 72 65 6e 64 65 72 3d 65 78 70 6c 69 63 69 74 26 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html><head id="j_idt1"> <title>Username recovery</title> <script async="true" defer="true" src="//www.google.com/recaptcha/api.js?onload=renderReCaptchaCallback&render=explicit&
2024-07-03 12:36:19 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 64 69 61 6c 6f 67 49 44 29 2e 64 69 61 6c 6f 67 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 77 69 64 74 68 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 68 65 69 67 68 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 4f 6e 45 73 63 61 70 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 2c 20 75 69 29 20 7b 0a 20 Data Ascii: $(dialogID).dialog({ modal: true, width: width, height: height, closeOnEscape: false, open: function (event, ui) {
2024-07-03 12:36:19 UTC	2917	IN	Data Raw: 22 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 70 78 2d 33 20 70 78 2d 73 6d 2d 35 20 70 79 2d 33 20 6d 62 2d 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 6d 74 2d 33 22 3e 55 73 65 72 6e 61 6d 65 20 72 65 63 6f 76 65 72 79 3c 2f 68 32 3e 0a 3c 66 6f 72 6d 20 69 64 3d 22 72 65 63 75 70 65 72 6f 55 73 65 72 6e 61 6d 65 46 6f 72 6d 22 20 6e 61 6d 65 3d 22 72 65 63 75 70 65 72 6f 55 73 65 72 6e 61 6d 65 46 6f 72 6d 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2f 61 73 6d 6f 6e 69 74 6f 72 2f 72 65 63 75 70 65 72 6f 2d 75 73 65 72 6e 61 6d 65 2e 78 68 74 6d 6c 22 20 65 6e 63 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e Data Ascii: "page-container px-3 px-sm-5 py-3 mb-5"> <h2 class="mt-3">Username recovery</h2><form id="recuperoUsernameForm" name="recuperoUsernameForm" method="post" action="/asmonitor/recupero-username.xhtml" enctype="application

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49752	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:20 UTC	726	OUT	GET /asmonitor/javax.faces.resource/jsf.js.xhtml?ln=javax.faces HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:20 UTC	791	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:20 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Expires: Wed, 10 Jul 2024 12:36:20 GMT Last-Modified: Thu, 24 Mar 2022 10:23:27 GMT ETag: W/"42071-1648117407000" Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: application/javascript content-length: 42028
2024-07-03 12:36:20 UTC	3252	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 4f 70 65 6e 41 6a 61 78 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 4f 70 65 6e 41 6a 61 78 2e 68 75 62 2e 72 65 67 69 73 74 65 72 4c 69 62 72 61 72 79 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 4f 70 65 6e 41 6a 61 78 2e 68 75 62 2e 72 65 67 69 73 74 65 72 4c 69 62 72 61 72 79 28 22 6a 73 66 22 2c 22 77 77 77 2e 73 75 6e 2e 63 6f 6d 22 2c 22 32 2e 32 22 2c 6e 75 6c 6c 29 7d 69 66 28 21 28 28 6a 73 66 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 3e 3d 32 30 30 30 30 29 26 26 28 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 3e 3d 33 29 29 29 7b 76 61 72 20 6a 73 66 3d 7b 7d 3b 6a 73 66 2e 61 Data Ascii: if(typeof OpenAjax!=="undefined"&&typeof OpenAjax.hub.registerLibrary!=="undefined"){OpenAjax.hub.registerLibrary("jsf","www.sun.com","2.2",null)}if(!((jsf&&jsf.specversion&&jsf.specversion>=20000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.a
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 74 68 3d 22 30 22 3b 74 68 69 73 2e 66 72 61 6d 65 2e 68 65 69 67 68 74 3d 22 30 22 3b 74 68 69 73 2e 66 72 61 6d 65 2e 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 30 22 3b 74 68 69 73 2e 66 72 61 6d 65 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 30 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 66 72 61 6d 65 29 3b 74 68 69 73 2e 66 72 61 6d 65 2e 6f 6e 6c 6f 61 64 3d 62 69 6e 64 28 74 68 69 73 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 29 7d 65 6c 73 65 7b 76 61 72 20 64 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 64 69 76 2e 69 64 3d 22 66 72 61 6d 65 44 69 76 22 3b 64 69 76 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 66 72 61 6d 65 20 69 64 3d 27 22 2b 74 68 Data Ascii: th="0";this.frame.height="0";this.frame.style="border:0";this.frame.frameBorder=0;document.body.appendChild(this.frame);this.frame.onload=bind(this,this.callback)}else{var div=document.createElement("div");div.id="frameDiv";div.innerHTML="<iframe id='"+th
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 72 69 70 74 73 3d 2f 3c 73 63 72 69 70 74 5b 5e 3e 5d 2a 3e 28 5b 5c 53 5c 73 5d 2a 3f 29 3c 5c 2f 73 63 72 69 70 74 3e 2f 69 67 6d 3b 76 61 72 20 66 69 6e 64 73 63 72 69 70 74 3d 2f 3c 73 63 72 69 70 74 28 5b 5e 3e 5d 2a 29 3e 28 5b 5c 53 5c 73 5d 2a 3f 29 3c 5c 2f 73 63 72 69 70 74 3e 2f 69 6d 3b 76 61 72 20 73 74 72 69 70 53 74 61 72 74 3d 2f 5e 5c 73 2a 28 3c 21 2d 2d 29 2a 5c 73 2a 28 5c 2f 5c 2f 29 2a 5c 73 2a 28 5c 2f 5c 2a 29 2a 5c 73 2a 5c 6e 2a 5c 2a 2a 5c 6e 2a 5c 73 2a 5c 2a 2e 2a 5c 6e 2a 5c 73 2a 5c 2a 5c 2f 28 3c 21 5c 5b 43 44 41 54 41 5c 5b 29 2a 2f 3b 76 61 72 20 66 69 6e 64 73 72 63 3d 2f 73 72 63 3d 22 28 5b 5c 53 5d 2a 3f 29 22 2f 69 6d 3b 76 61 72 20 66 69 6e 64 74 79 70 65 3d 2f 74 79 70 65 3d 22 28 5b 5c 53 5d 2a 3f 29 22 2f 69 6d Data Ascii: ripts=/<script[^>]>([\S\s]?)<\/script>/igm;var findscript=/<script([^>])>([\S\s]?)<\/script>/im;var stripStart=/^\s(...)\s(\/\/)\s(\/\)\s\n\\n\s\.\n\s\\/(<!\[CDATA\[)/;var findsrc=/src="([\S]?)"/im;var findtype=/type="([\S]*?)"/im
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 6d 65 6e 74 2e 69 6d 70 6f 72 74 4e 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 4e 6f 64 65 2c 62 43 68 69 6c 64 72 65 6e 29 7b 76 61 72 20 74 6d 70 3b 69 66 28 6f 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 22 23 74 65 78 74 22 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6f 4e 6f 64 65 2e 64 61 74 61 29 7d 65 6c 73 65 7b 69 66 28 6f 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 22 74 62 6f 64 79 22 7c 7c 6f 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 22 74 72 22 29 7b 74 6d 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 61 62 6c 65 22 29 7d 65 6c 73 65 7b 69 66 28 6f 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 22 74 64 22 29 7b 74 6d 70 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: ment.importNode=function(oNode,bChildren){var tmp;if(oNode.nodeName=="#text"){return document.createTextNode(oNode.data)}else{if(oNode.nodeName=="tbody"\|\|oNode.nodeName=="tr"){tmp=document.createElement("table")}else{if(oNode.nodeName=="td"){tmp=document.
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 65 73 28 73 6f 75 72 63 65 29 3b 76 61 72 20 74 61 72 67 65 74 41 74 74 72 69 62 75 74 65 44 65 74 65 63 74 6f 72 3d 64 65 74 65 63 74 41 74 74 72 69 62 75 74 65 73 28 74 61 72 67 65 74 29 3b 76 61 72 20 69 73 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3d 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 69 6e 70 75 74 22 3b 76 61 72 20 70 72 6f 70 65 72 74 79 4e 61 6d 65 73 3d 69 73 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3f 63 6f 72 65 45 6c 65 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 2e 63 6f 6e 63 61 74 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 29 3a 63 6f 72 65 45 6c 65 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3b 76 61 72 20 69 73 58 4d 4c 3d 21 73 6f 75 72 63 65 2e 6f 77 6e 65 72 44 Data Ascii: es(source);var targetAttributeDetector=detectAttributes(target);var isInputElement=target.nodeName.toLowerCase()==="input";var propertyNames=isInputElement?coreElementProperties.concat(inputElementProperties):coreElementProperties;var isXML=!source.ownerD
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 2c 6d 61 72 6b 75 70 2c 73 74 61 74 65 2c 77 69 6e 64 6f 77 49 64 3b 76 61 72 20 73 74 61 74 65 46 6f 72 6d 2c 77 69 6e 64 6f 77 49 64 46 6f 72 6d 3b 76 61 72 20 73 63 72 69 70 74 73 3d 5b 5d 3b 69 64 3d 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 76 61 72 20 76 69 65 77 53 74 61 74 65 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 56 69 65 77 53 74 61 74 65 22 2b 6a 73 66 2e 73 65 70 61 72 61 74 6f 72 63 68 61 72 2b 22 2e 2a 24 22 29 3b 76 61 72 20 77 69 6e 64 6f 77 49 64 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 2e 2a 22 2b 6a 73 66 2e 73 65 70 61 72 61 74 6f 72 63 68 61 72 2b 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 43 6c 69 65 6e 74 57 69 6e 64 6f 77 22 2b 6a Data Ascii: ,markup,state,windowId;var stateForm,windowIdForm;var scripts=[];id=element.getAttribute("id");var viewStateRegex=new RegExp("javax.faces.ViewState"+jsf.separatorchar+".$");var windowIdRegex=new RegExp("^."+jsf.separatorchar+"javax.faces.ClientWindow"+j
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 72 65 70 6c 61 63 65 43 68 69 6c 64 28 6e 65 77 45 6c 65 6d 65 6e 74 2c 64 29 3b 72 75 6e 53 63 72 69 70 74 73 28 73 63 72 69 70 74 73 29 7d 65 6c 73 65 7b 69 66 28 64 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 69 6e 70 75 74 22 29 7b 70 61 72 73 65 72 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 61 72 73 65 72 45 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 68 74 6d 6c 3b 6e 65 77 45 6c 65 6d 65 6e 74 3d 70 61 72 73 65 72 45 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 3b 63 6c 6f 6e 65 41 74 74 72 69 62 75 74 65 73 28 64 2c 6e 65 77 45 6c 65 6d 65 6e 74 29 3b 64 65 6c 65 74 65 4e 6f 64 65 28 70 61 72 73 65 72 45 6c 65 6d 65 6e 74 29 Data Ascii: replaceChild(newElement,d);runScripts(scripts)}else{if(d.nodeName.toLowerCase()==="input"){parserElement=document.createElement("div");parserElement.innerHTML=html;newElement=parserElement.firstChild;cloneAttributes(d,newElement);deleteNode(parserElement)
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 7b 69 66 28 72 65 71 2e 78 6d 6c 52 65 71 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 34 29 7b 72 65 71 2e 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 3b 72 65 71 2e 78 6d 6c 52 65 71 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 6f 6f 70 3b 72 65 71 2e 78 6d 6c 52 65 71 3d 6e 75 6c 6c 7d 7d 3b 72 65 71 2e 6f 6e 43 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 20 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7b 69 66 28 72 65 71 2e 78 6d 6c 52 65 71 2e 73 74 61 74 75 73 26 26 28 72 65 71 2e 78 6d 6c 52 65 71 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 72 65 71 2e 78 6d 6c 52 65 71 2e 73 74 61 74 75 73 3c 33 30 30 29 29 7b 73 65 6e 64 45 76 65 6e 74 28 72 65 71 2e 78 6d 6c 52 65 71 2c 72 65 71 2e 63 6f 6e 74 65 78 74 2c 22 63 6f 6d 70 6c 65 74 65 22 29 3b 6a Data Ascii: {if(req.xmlReq.readyState===4){req.onComplete();req.xmlReq.onreadystatechange=noop;req.xmlReq=null}};req.onComplete=function onComplete(){if(req.xmlReq.status&&(req.xmlReq.status>=200&&req.xmlReq.status<300)){sendEvent(req.xmlReq,req.context,"complete");j
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 73 74 2e 73 74 61 74 75 73 3b 64 61 74 61 2e 72 65 73 70 6f 6e 73 65 58 4d 4c 3d 72 65 71 75 65 73 74 2e 72 65 73 70 6f 6e 73 65 58 4d 4c 3b 64 61 74 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3d 72 65 71 75 65 73 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 69 66 28 63 6f 6e 74 65 78 74 2e 6f 6e 65 76 65 6e 74 29 7b 63 6f 6e 74 65 78 74 2e 6f 6e 65 76 65 6e 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 64 61 74 61 29 7d 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 29 7b 69 66 28 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 5b 69 5d 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 64 61 74 61 29 7d 7d 7d 3b 72 65 74 75 72 6e 7b 61 64 64 4f 6e 45 72 Data Ascii: st.status;data.responseXML=request.responseXML;data.responseText=request.responseText}if(context.onevent){context.onevent.call(null,data)}for(var i in eventListeners){if(eventListeners.hasOwnProperty(i)){eventListeners[i].call(null,data)}}};return{addOnEr
2024-07-03 12:36:20 UTC	4048	IN	Data Raw: 3d 66 6f 72 6d 2e 61 63 74 69 6f 6e 7d 65 6c 73 65 7b 61 72 67 73 2e 75 72 6c 3d 65 6e 63 6f 64 65 64 55 72 6c 46 69 65 6c 64 2e 76 61 6c 75 65 7d 76 61 72 20 73 65 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 6a 61 78 45 6e 67 69 6e 65 3d 6e 65 77 20 41 6a 61 78 45 6e 67 69 6e 65 28 63 6f 6e 74 65 78 74 29 3b 61 6a 61 78 45 6e 67 69 6e 65 2e 73 65 74 75 70 41 72 67 75 6d 65 6e 74 73 28 61 72 67 73 29 3b 61 6a 61 78 45 6e 67 69 6e 65 2e 71 75 65 72 79 53 74 72 69 6e 67 3d 76 69 65 77 53 74 61 74 65 3b 61 6a 61 78 45 6e 67 69 6e 65 2e 63 6f 6e 74 65 78 74 2e 6f 6e 65 76 65 6e 74 3d 6f 6e 65 76 65 6e 74 3b 61 6a 61 78 45 6e 67 69 6e 65 2e 63 6f 6e 74 65 78 74 2e 6f 6e 65 72 72 6f 72 3d 6f 6e 65 72 72 6f 72 3b 61 6a 61 78 45 Data Ascii: =form.action}else{args.url=encodedUrlField.value}var sendRequest=function(){var ajaxEngine=new AjaxEngine(context);ajaxEngine.setupArguments(args);ajaxEngine.queryString=viewState;ajaxEngine.context.onevent=onevent;ajaxEngine.context.onerror=onerror;ajaxE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49754	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:20 UTC	687	OUT	GET /recaptcha/api.js?onload=renderReCaptchaCallback&render=explicit&hl=en_US HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfcare.firma-remota.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:20 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 03 Jul 2024 12:36:20 GMT Date: Wed, 03 Jul 2024 12:36:20 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:20 UTC	862	IN	Data Raw: 35 64 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5de/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-07-03 12:36:20 UTC	647	IN	Data Raw: 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a Data Ascii: 21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https:
2024-07-03 12:36:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49757	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:23 UTC	960	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=a8xvudbfjpme HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://selfcare.firma-remota.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:23 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 12:36:23 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-mEnMjaXhkcsJNb488Mjw1w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:23 UTC	499	IN	Data Raw: 32 62 30 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b09<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 79 68 59 53 52 4d 37 44 68 48 43 76 4b 36 73 2d 65 4b 76 67 6a 5a 46 73 67 4a 76 45 79 33 6a 67 4c 5a 55 76 43 48 6a 71 68 66 30 70 6d 5f 4b 41 65 36 73 45 51 4f 31 36 39 4a 77 53 6c 62 54 76 46 4f 43 38 54 6d 5f 76 64 42 6b 2d 5f 57 43 4d 39 65 50 42 67 37 76 65 39 6a 7a 76 68 68 43 6d 6a 56 32 6c 32 4d 6a 4b 41 59 39 45 47 37 77 6c 45 30 5a 53 74 5f 61 68 46 4f 70 71 6c 79 50 49 43 53 42 70 6a 6e 2d 44 6c 4e 50 2d 75 68 62 54 4c 35 51 45 6d 38 63 4c 4a 51 69 56 63 45 75 2d 53 34 39 73 54 41 79 55 55 4d 54 4b 39 65 55 7a 69 4b 4b 51 44 6b 73 39 45 31 4b 53 6f 72 54 79 39 6b 4e 48 34 6b 70 59 56 35 6e 48 63 63 36 73 71 7a 38 31 33 37 41 68 4f 63 72 4b 2d 52 49 33 5a 74 71 57 52 69 39 4c 73 43 68 38 52 47 42 33 79 57 76 4f 79 55 4e 68 5f 68 51 51 69 67 73 Data Ascii: yhYSRM7DhHCvK6s-eKvgjZFsgJvEy3jgLZUvCHjqhf0pm_KAe6sEQO169JwSlbTvFOC8Tm_vdBk-_WCM9ePBg7ve9jzvhhCmjV2l2MjKAY9EG7wlE0ZSt_ahFOpqlyPICSBpjn-DlNP-uhbTL5QEm8cLJQiVcEu-S49sTAyUUMTK9eUziKKQDks9E1KSorTy9kNH4kpYV5nHcc6sqz8137AhOcrK-RI3ZtqWRi9LsCh8RGB3yWvOyUNh_hQQigs
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 54 63 4f 4e 7a 4e 49 61 59 4c 6f 6f 72 43 70 52 35 75 52 55 47 51 74 58 70 66 4f 5a 4e 37 34 6c 45 78 52 34 6a 69 6b 6e 6f 6d 57 59 76 41 70 42 32 6e 4e 41 38 7a 51 47 76 62 66 48 41 6b 6a 62 36 66 63 51 70 41 31 45 37 72 66 4d 6b 79 70 6e 48 79 77 59 58 4a 47 46 45 59 75 50 62 50 53 34 5a 6b 51 45 48 46 2d 61 53 6f 4f 46 4d 79 6c 43 35 31 32 4a 4e 6f 54 75 6e 5f 54 62 56 49 76 66 7a 30 65 57 38 71 75 56 68 45 42 4a 30 37 79 63 43 64 5f 4b 38 61 6b 34 35 48 6b 38 6f 36 68 4f 51 5a 73 49 2d 67 35 53 50 48 39 73 32 4e 65 57 38 53 2d 6d 41 30 4b 55 4f 57 67 33 30 66 50 67 6f 30 44 45 39 57 31 43 34 47 32 31 33 45 36 35 31 6d 4d 74 70 59 30 4e 4e 52 33 4b 37 6d 79 76 6f 53 47 30 6e 54 52 4f 5a 6d 43 78 54 32 74 5a 5f 4a 4d 6e 69 71 38 6c 4d 32 62 46 4f 2d 46 Data Ascii: TcONzNIaYLoorCpR5uRUGQtXpfOZN74lExR4jiknomWYvApB2nNA8zQGvbfHAkjb6fcQpA1E7rfMkypnHywYXJGFEYuPbPS4ZkQEHF-aSoOFMylC512JNoTun_TbVIvfz0eW8quVhEBJ07ycCd_K8ak45Hk8o6hOQZsI-g5SPH9s2NeW8S-mA0KUOWg30fPgo0DE9W1C4G213E651mMtpY0NNR3K7myvoSG0nTROZmCxT2tZ_JMniq8lM2bFO-F
2024-07-03 12:36:23 UTC	796	IN	Data Raw: 58 6c 53 54 31 5a 76 56 57 4a 4f 55 7a 4e 56 63 30 56 53 5a 57 68 4d 65 57 52 4b 64 30 4a 30 61 6d 64 6a 5a 6d 68 6c 56 6d 35 35 65 57 70 70 63 6e 41 33 54 46 41 7a 57 58 67 72 62 45 52 76 59 56 6f 76 53 56 42 5a 54 48 4e 43 65 54 68 5a 59 55 6f 34 52 33 4e 4f 65 6d 31 4c 59 33 42 4e 56 48 49 32 4e 47 68 45 61 57 52 44 5a 6b 56 35 62 53 39 57 57 6a 46 74 52 47 4e 54 56 33 46 6e 4d 56 4a 77 51 6e 70 32 53 53 39 47 5a 54 45 30 55 56 4e 31 55 55 56 6a 62 45 46 31 62 6e 4a 50 4f 43 39 59 4e 47 56 4e 56 48 42 6b 51 32 51 79 62 57 31 50 64 6b 74 5a 4d 57 74 44 61 6c 42 7a 64 54 4a 74 53 6b 67 32 4d 44 6b 33 51 55 52 4e 57 6d 4e 77 57 56 4e 31 63 47 6f 77 61 46 42 74 53 47 49 79 62 44 64 58 62 56 42 34 52 55 67 31 55 46 52 79 4e 47 56 4e 4d 32 52 70 55 30 4d 78 Data Ascii: XlST1ZvVWJOUzNVc0VSZWhMeWRKd0J0amdjZmhlVm55eWppcnA3TFAzWXgrbERvYVovSVBZTHNCeThZYUo4R3NOem1LY3BNVHI2NGhEaWRDZkV5bS9WWjFtRGNTV3FnMVJwQnp2SS9GZTE0UVN1UUVjbEF1bnJPOC9YNGVNVHBkQ2QybW1PdktZMWtDalBzdTJtSkg2MDk3QURNWmNwWVN1cGowaFBtSGIybDdXbVB4RUg1UFRyNGVNM2RpU0Mx
2024-07-03 12:36:23 UTC	1390	IN	Data Raw: 32 63 35 38 0d 0a 6d 51 7a 4a 79 63 45 31 72 56 32 4a 44 52 30 78 42 5a 46 56 4d 51 54 42 74 61 6d 31 43 51 7a 42 61 53 7a 4e 47 5a 6b 6c 32 61 32 56 36 4e 31 5a 48 4e 32 4e 6f 63 32 4e 61 54 30 56 4f 4e 47 45 34 63 54 6c 75 4f 55 64 5a 53 54 67 78 62 6e 52 73 62 44 5a 6e 54 56 64 33 53 32 64 33 52 55 4a 4d 61 7a 52 73 65 46 4a 59 64 69 74 4f 59 6b 35 33 56 32 4e 52 63 6d 73 33 57 46 6b 78 56 44 59 72 4f 56 5a 68 65 54 6c 4a 4d 6a 51 76 5a 47 39 34 57 45 5a 68 57 44 6c 71 52 53 73 72 63 31 64 76 64 48 56 4b 64 6d 39 4a 53 33 52 55 57 47 63 33 53 6b 56 50 61 32 56 47 63 55 5a 47 65 56 6c 78 4d 45 39 6e 63 6a 68 47 52 6e 42 46 4e 6e 52 30 54 30 6b 32 4f 44 4a 52 52 55 4a 56 4c 30 64 7a 4b 32 4e 71 4e 47 35 42 55 6d 51 77 57 57 30 30 4d 57 6c 48 4c 31 70 6f Data Ascii: 2c58mQzJycE1rV2JDR0xBZFVMQTBtam1CQzBaSzNGZkl2a2V6N1ZHN2Noc2NaT0VONGE4cTluOUdZSTgxbnRsbDZnTVd3S2d3RUJMazRseFJYditOYk53V2NRcms3WFkxVDYrOVZheTlJMjQvZG94WEZhWDlqRSsrc1dvdHVKdm9JS3RUWGc3SkVPa2VGcUZGeVlxME9ncjhGRnBFNnR0T0k2ODJRRUJVL0dzK2NqNG5BUmQwWW00MWlHL1po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49763	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:26 UTC	852	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=a8xvudbfjpme Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:26 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 03 Jul 2024 12:36:26 GMT Date: Wed, 03 Jul 2024 12:36:26 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:26 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');
2024-07-03 12:36:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49764	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:26 UTC	840	OUT	GET /js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=a8xvudbfjpme Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:26 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18294 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 05:22:55 GMT Expires: Thu, 03 Jul 2025 05:22:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 26011 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:36:26 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 54 29 7b 69 66 28 21 28 54 3d 28 74 3d 6e 75 6c 6c 2c 42 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 74 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 5a 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var Z=function(t){return t},Q=function(t,T){if(!(T=(t=null,B.trustedTypes),T)\|\|!T.createPolicy)return t;try{t=T.createPolicy("bg",{createHTML:Z,createScr
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 29 7b 66 6f 72 28 74 3d 5b 5d 3b 54 2d 2d 3b 29 74 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 74 7d 2c 58 2c 74 58 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 29 7b 69 66 28 28 74 3d 74 79 70 65 6f 66 20 54 2c 74 29 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 54 29 7b 69 66 28 54 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 54 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 74 3b 69 66 28 28 42 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 54 29 2c 42 29 3d Data Ascii: che-2.0','/','var F=function(T,t){for(t=[];T--;)t.push(Math.random()255\|0);return t},X,tX=function(T,t,B){if((t=typeof T,t)=="object")if(T){if(T instanceof Array)return"array";if(T instanceof Object)return t;if((B=Object.prototype.toString.call(T),B)=
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 42 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 51 29 7b 54 3d 51 7d 2c 42 7d 2c 73 38 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 69 66 28 54 2e 75 3d 3d 54 29 7b 69 66 28 54 2e 6a 29 7b 76 61 72 20 5a 3d 5b 51 41 2c 42 2c 74 2c 76 6f 69 64 20 30 2c 6d 2c 6c 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 51 3d 3d 32 29 76 61 72 20 45 3d 4c 28 66 61 6c 73 65 2c 54 2c 21 28 70 28 5a 2c 54 29 2c 31 29 29 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 29 7b 76 61 72 20 4a 3d 21 54 2e 54 2e 6c 65 6e 67 74 68 3b 28 70 28 5a 2c 54 29 2c 4a 29 26 26 4c 28 66 61 6c 73 65 2c 54 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 45 3d 45 38 28 5a 2c 54 29 3b 72 65 74 75 72 6e 20 Data Ascii: (){return T},B.concat=function(Q){T=Q},B},s8=function(T,t,B,Q,m,l){function w(){if(T.u==T){if(T.j){var Z=[QA,B,t,void 0,m,l,arguments];if(Q==2)var E=L(false,T,!(p(Z,T),1));else if(Q==1){var J=!T.T.length;(p(Z,T),J)&&L(false,T,false)}else E=E8(Z,T);return
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 42 2b 2b 29 74 5b 42 5d 2b 3d 54 5b 42 5d 3b 66 6f 72 28 42 3d 28 54 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 31 35 5d 2c 30 29 3b 42 3c 39 3b 42 2b 2b 29 74 5b 33 5d 28 74 2c 42 25 33 2c 54 5b 42 5d 29 7d 7d 2c 64 2c 69 4c 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 51 3d 28 54 3d 77 59 28 54 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 6c 26 26 28 74 26 26 6b 36 28 74 29 2c 6d 3d 77 2c 6c 28 29 2c 6c 3d 76 6f 69 64 20 30 29 7d 2c 21 28 6d 3d 76 6f 69 64 20 30 2c 21 74 29 29 2c 54 29 5b 30 5d 2c 54 5b 31 5d 29 2c 7b 69 6e 76 6f 6b 65 3a 66 75 6e 63 74 69 6f 6e 28 77 2c 5a 2c 45 2c 4a 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 6d 28 66 75 6e Data Ascii: B++)t[B]+=T[B];for(B=(T=[13,8,13,12,16,5,3,10,15],0);B<9;B++)t[3](t,B%3,T[B])}},d,iL=function(T,t,B,Q,m){function l(){}return B=(Q=(T=wY(T,function(w){l&&(t&&k6(t),m=w,l(),l=void 0)},!(m=void 0,!t)),T)[0],T[1]),{invoke:function(w,Z,E,J){function g(){m(fun
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 2c 74 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 77 28 6d 2e 46 29 7d 29 7d 7d 2c 24 36 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 29 7b 66 6f 72 28 28 74 3d 76 28 28 42 3d 54 5b 65 75 5d 7c 7c 7b 7d 2c 54 29 29 2c 42 2e 41 55 3d 76 28 54 29 2c 42 29 2e 49 3d 5b 5d 2c 6d 3d 54 2e 75 3d 3d 54 3f 28 41 28 54 29 7c 30 29 2d 31 3a 31 2c 51 3d 76 28 54 29 2c 6c 3d 30 3b 6c 3c 6d 3b 6c 2b 2b 29 42 2e 49 2e 70 75 73 68 28 76 28 54 29 29 3b 66 6f 72 28 42 2e 64 47 3d 75 28 74 2c 54 29 3b 6d 2d 2d 3b 29 42 2e 49 5b 6d 5d 3d 75 28 42 2e 49 5b 6d 5d 2c 54 29 3b 72 65 74 75 72 6e 20 42 2e 65 41 3d 75 28 51 2c 54 29 2c 42 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 2c 77 2c 5a 2c 45 2c 4a 2c 67 2c 66 2c 6b 2c 57 29 7b 69 66 Data Ascii: ,t(function(w){w(m.F)})}},$6=function(T,t,B,Q,m,l){for((t=v((B=T[eu]\|\|{},T)),B.AU=v(T),B).I=[],m=T.u==T?(A(T)\|0)-1:1,Q=v(T),l=0;l<m;l++)B.I.push(v(T));for(B.dG=u(t,T);m--;)B.I[m]=u(B.I[m],T);return B.eA=u(Q,T),B},V=function(T,t,B,Q,m,l,w,Z,E,J,g,f,k,W){if
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 74 28 74 68 69 73 2e 52 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 51 2c 6d 29 7b 74 68 69 73 2e 59 2b 3d 28 6d 3d 51 2d 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 59 29 2c 6d 29 2f 74 68 69 73 2e 6e 2c 74 68 69 73 2e 52 2b 3d 6d 2a 28 51 2d 74 68 69 73 2e 59 29 7d 29 2c 6e 65 77 20 42 29 2c 74 3d 6e 65 77 20 42 2c 66 75 6e 63 74 69 6f 6e 28 51 29 7b 72 65 74 75 72 6e 20 74 3d 28 51 3d 5b 54 2e 4b 6c 28 29 2c 74 2e 4b 6c 28 29 5d 2c 6e 65 77 20 42 29 2c 51 7d 29 5d 7d 2c 55 38 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 29 7b 72 65 74 75 72 6e 20 75 28 32 31 35 2c 28 78 28 28 28 51 3d 75 28 34 36 39 2c 42 29 2c 42 2e 69 26 26 51 3c 42 2e 58 3f 28 78 28 34 36 39 2c 42 2c 42 2e 58 29 2c 54 4d 28 74 2c 42 29 29 3a 78 28 34 36 39 2c 42 Data Ascii: t(this.R/this.n)},function(Q,m){this.Y+=(m=Q-(this.n++,this.Y),m)/this.n,this.R+=m*(Q-this.Y)}),new B),t=new B,function(Q){return t=(Q=[T.Kl(),t.Kl()],new B),Q})]},U8=function(T,t,B,Q){return u(215,(x(((Q=u(469,B),B.i&&Q<B.X?(x(469,B,B.X),TM(t,B)):x(469,B
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 5d 2c 30 29 2c 6d 2e 41 3d 6e 75 6c 6c 2c 6d 2e 55 67 3d 28 28 6d 2e 4f 3d 31 2c 6d 29 2e 57 3d 76 6f 69 64 20 30 2c 38 30 30 31 29 2c 6d 2e 6a 3d 5b 5d 2c 28 28 6d 2e 42 62 3d 28 6d 2e 6f 3d 30 2c 42 29 2c 6d 29 2e 67 47 3d 66 61 6c 73 65 2c 28 6d 2e 4a 3d 76 6f 69 64 20 30 2c 6d 2e 75 3d 6d 2c 6d 2e 6c 3d 66 61 6c 73 65 2c 6d 2e 6e 6c 3d 30 2c 6d 2e 52 65 3d 74 2c 6d 2e 62 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 74 68 69 73 2e 75 3d 5a 7d 2c 6d 2e 58 3d 28 6d 2e 74 55 3d 21 28 6d 2e 43 3d 66 61 6c 73 65 2c 31 29 2c 30 29 2c 6d 29 2e 4c 3d 28 6d 2e 76 3d 28 6d 2e 44 3d 28 6d 2e 72 47 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 30 29 2c 6d 2e 4b 3d 30 2c 66 61 6c 73 65 29 2c 6d 2e 4e 3d 5b 5d 2c 6d 2e 56 4b 3d 32 35 2c 6d 2e 42 3d 76 6f 69 64 20 30 Data Ascii: ],0),m.A=null,m.Ug=((m.O=1,m).W=void 0,8001),m.j=[],((m.Bb=(m.o=0,B),m).gG=false,(m.J=void 0,m.u=m,m.l=false,m.nl=0,m.Re=t,m.bU=function(Z){this.u=Z},m.X=(m.tU=!(m.C=false,1),0),m).L=(m.v=(m.D=(m.rG=void 0,void 0),0),m.K=0,false),m.N=[],m.VK=25,m.B=void 0
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 64 20 30 2c 45 3d 3d 32 26 26 28 5a 2e 44 3d 56 28 33 32 2c 5a 2c 66 61 6c 73 65 29 2c 5a 2e 55 3d 76 6f 69 64 20 30 29 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 66 44 28 5a 2c 34 29 7d 29 29 2c 46 28 34 29 29 29 2c 6d 29 2c 5b 5d 29 2c 6d 29 2c 46 28 34 29 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 78 28 28 45 3d 75 28 28 4a 3d 28 67 3d 28 4a 3d 28 45 3d 76 28 5a 29 2c 76 28 5a 29 29 2c 76 29 28 5a 29 2c 75 29 28 4a 2c 5a 29 2c 45 29 2c 5a 29 2c 67 29 2c 5a 2c 45 20 69 6e 20 4a 7c 30 29 7d 29 29 2c 34 35 29 2c 6d 2c 35 31 34 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 28 4a 3d 28 45 3d 28 4a 3d 76 28 28 67 3d 76 28 5a 29 2c 5a 29 29 2c 76 28 5a 29 29 2c 75 28 4a 2c 5a 29 29 2c 67 3d 75 28 67 2c 5a 29 Data Ascii: d 0,E==2&&(Z.D=V(32,Z,false),Z.U=void 0)))})),function(Z){fD(Z,4)})),F(4))),m),[]),m),F(4)),function(Z,E,J,g){x((E=u((J=(g=(J=(E=v(Z),v(Z)),v)(Z),u)(J,Z),E),Z),g),Z,E in J\|0)})),45),m,514),0),function(Z,E,J,g){(J=(E=(J=v((g=v(Z),Z)),v(Z)),u(J,Z)),g=u(g,Z)
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 37 2c 5a 29 2c 4a 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 67 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 75 4c 28 5a 29 7c 30 29 29 25 6b 2c 57 2b 3d 77 5b 4a 5b 66 5d 5d 3b 78 28 45 2c 5a 2c 57 29 7d 29 2c 6d 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 2c 5b 32 30 34 38 5d 29 29 2c 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 69 66 28 4a 3d 5a 2e 5a 2e 70 6f 70 28 29 29 7b 66 6f 72 28 67 3d 41 28 5a 29 3b 67 3e 30 3b 67 2d 2d 29 45 3d 76 28 5a 29 2c 4a 5b 45 5d 3d 5a 2e 6a 5b 45 5d 3b 4a 5b 4a 5b 35 30 31 5d 3d 5a 2e 6a 5b 35 30 31 5d 2c 33 34 37 5d 3d 5a 2e 6a 5b 33 34 37 5d 2c 5a 2e 6a 3d 4a 7d 65 6c 73 65 20 78 28 34 36 39 2c 5a 2c 5a 2e 58 29 7d 29 2c 6d 29 2c 6d 29 2c 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 78 28 28 45 3d Data Ascii: 7,Z),J.length),0);g--;)f=((f\|0)+(uL(Z)\|0))%k,W+=w[J[f]];x(E,Z,W)}),m),[160,0,0]),[2048])),m),function(Z,E,J,g){if(J=Z.Z.pop()){for(g=A(Z);g>0;g--)E=v(Z),J[E]=Z.j[E];J[J[501]=Z.j[501],347]=Z.j[347],Z.j=J}else x(469,Z,Z.X)}),m),m),m),function(Z,E,J,g){x((E=
2024-07-03 12:36:26 UTC	1390	IN	Data Raw: 3e 31 38 7c 32 34 30 2c 74 5b 42 2b 2b 5d 3d 6d 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 74 5b 42 2b 2b 5d 3d 6d 3e 3e 31 32 7c 32 32 34 2c 74 5b 42 2b 2b 5d 3d 6d 3e 3e 36 26 36 33 7c 31 32 38 29 2c 74 5b 42 2b 2b 5d 3d 6d 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 74 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 29 7b 69 66 28 54 3d 3d 34 36 39 7c 7c 54 3d 3d 33 38 36 29 74 2e 6a 5b 54 5d 3f 74 2e 6a 5b 54 5d 2e 63 6f 6e 63 61 74 28 42 29 3a 74 2e 6a 5b 54 5d 3d 42 65 28 42 2c 74 29 3b 65 6c 73 65 7b 69 66 28 74 2e 74 55 26 26 54 21 3d 31 38 39 29 72 65 74 75 72 6e 3b 54 3d 3d 34 35 33 7c 7c 54 3d 3d 33 39 30 7c 7c 54 3d 3d 34 33 35 7c 7c 54 3d 3d 31 37 32 7c 7c 54 3d 3d 35 30 31 7c 7c 54 3d 3d 34 35 39 7c 7c 54 3d 3d 36 35 7c 7c 54 3d 3d 38 Data Ascii: >18\|240,t[B++]=m>>12&63\|128):t[B++]=m>>12\|224,t[B++]=m>>6&63\|128),t[B++]=m&63\|128);return t},x=function(T,t,B){if(T==469\|\|T==386)t.j[T]?t.j[T].concat(B):t.j[T]=Be(B,t);else{if(t.tU&&T!=189)return;T==453\|\|T==390\|\|T==435\|\|T==172\|\|T==501\|\|T==459\|\|T==65\|\|T==8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49767	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:27 UTC	895	OUT	GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://selfcare.firma-remota.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:27 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 12:36:27 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-kpo7bjUfmCg39yzDOU_TzA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:27 UTC	499	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-07-03 12:36:27 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-07-03 12:36:27 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-07-03 12:36:27 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-07-03 12:36:27 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-07-03 12:36:27 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-07-03 12:36:27 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >
2024-07-03 12:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49770	217.61.8.139	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:30 UTC	782	OUT	GET /asmonitor/recupero-password.xhtml HTTP/1.1 Host: selfcare.firma-remota.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=3A2B995F4873AC431A35323F96836B99; cookiesession1=678B29B0F2A6773CDE362153CC2E5288
2024-07-03 12:36:30 UTC	675	IN	HTTP/1.1 200 200 Date: Wed, 03 Jul 2024 12:36:30 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: same-origin Content-Security-Policy: base-uri 'self' Clear-Site-Data: * Content-Security-Policy: img-src 'self' data: https://.serving-sys.com https://.cloudfront.net https://*.usabilla.com Connection: close Content-Type: text/html;charset=UTF-8 content-length: 12877
2024-07-03 12:36:30 UTC	3368	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 63 6f 76 65 72 20 70 61 73 73 77 6f 72 64 3c 2f 74 69 74 6c 65 3e 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 74 72 75 65 22 20 64 65 66 65 72 3d 22 74 72 75 65 22 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 72 65 6e 64 65 72 52 65 43 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 26 61 6d 70 3b 72 65 6e 64 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html><head id="j_idt1"> <title>Recover password</title> <script async="true" defer="true" src="//www.google.com/recaptcha/api.js?onload=renderReCaptchaCallback&rende
2024-07-03 12:36:30 UTC	4048	IN	Data Raw: 68 65 69 67 68 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 64 69 61 6c 6f 67 49 44 29 2e 64 69 61 6c 6f 67 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 77 69 64 74 68 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 68 65 69 67 68 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 4f 6e 45 73 63 61 70 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 Data Ascii: height) { $(dialogID).dialog({ modal: true, width: width, height: height, closeOnEscape: false, open: function (eve
2024-07-03 12:36:30 UTC	4048	IN	Data Raw: 3d 22 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 70 78 2d 33 20 70 78 2d 73 6d 2d 35 20 70 79 2d 33 20 6d 62 2d 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 6d 74 2d 33 22 3e 52 65 63 6f 76 65 72 20 70 61 73 73 77 6f 72 64 3c 2f 68 32 3e 0a 3c 66 6f 72 6d 20 69 64 3d 22 72 65 63 75 70 65 72 6f 50 61 73 73 46 6f 72 6d 22 20 6e 61 6d 65 3d 22 72 65 63 75 70 65 72 6f 50 61 73 73 46 6f 72 6d 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2f 61 73 6d 6f 6e 69 74 6f 72 2f 72 65 63 75 70 65 72 6f 2d 70 61 73 73 77 6f 72 64 2e 78 68 74 6d 6c 22 20 65 6e 63 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 Data Ascii: ="page-container px-3 px-sm-5 py-3 mb-5"> <h2 class="mt-3">Recover password</h2><form id="recuperoPassForm" name="recuperoPassForm" method="post" action="/asmonitor/recupero-password.xhtml" enctype="application/x-www-f
2024-07-03 12:36:30 UTC	1413	IN	Data Raw: 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 56 69 65 77 53 74 61 74 65 22 20 69 64 3d 22 6a 5f 69 64 31 3a 6a 61 76 61 78 2e 66 61 63 65 73 2e 56 69 65 77 53 74 61 74 65 3a 31 22 20 76 61 6c 75 65 3d 22 2d 35 39 32 39 35 35 31 34 30 31 36 35 32 32 39 38 36 31 39 3a 36 36 38 32 35 35 38 37 33 35 33 39 32 35 39 37 36 39 39 22 20 61 75 74 6f Data Ascii: });return false" /> </div> </div><input type="hidden" name="javax.faces.ViewState" id="j_id1:javax.faces.ViewState:1" value="-5929551401652298619:6682558735392597699" auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49772	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:31 UTC	959	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=njtm478xebz HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://selfcare.firma-remota.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:31 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 12:36:31 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-tw9BqVc5oBexGZCGMyJFiA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:31 UTC	499	IN	Data Raw: 32 61 65 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae7<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 32 41 5a 38 62 51 75 75 36 56 69 41 6c 2d 56 50 47 5a 61 76 5a 36 70 5f 6a 5a 52 65 4b 72 2d 74 63 7a 57 45 37 61 70 71 4a 73 72 64 50 61 69 78 59 79 64 42 61 4c 65 6b 52 59 62 79 6a 48 32 78 53 44 69 58 43 6a 44 62 65 6b 49 7a 50 47 31 52 32 71 36 59 46 64 36 65 41 64 6a 54 4b 31 72 56 66 6d 72 34 34 74 57 51 68 66 44 76 35 6f 59 55 6d 77 32 4e 30 75 33 33 6b 72 6d 6c 72 39 62 4c 37 62 66 6e 62 75 71 70 75 69 56 66 4f 37 50 51 48 6f 6e 77 4c 79 49 36 68 4c 36 66 75 34 74 48 71 78 79 79 41 45 5f 39 6f 66 4f 66 7a 4f 51 31 4a 47 70 63 5a 44 2d 56 75 79 66 36 59 43 41 66 6b 65 63 47 46 30 69 72 32 51 7a 44 4c 36 59 32 76 37 59 57 52 59 5f 34 71 54 30 49 54 54 7a 41 50 75 65 4e 64 77 49 4c 73 64 70 74 2d 64 57 53 52 37 52 74 4c 48 63 72 52 70 48 57 50 5f 38 Data Ascii: 2AZ8bQuu6ViAl-VPGZavZ6p_jZReKr-tczWE7apqJsrdPaixYydBaLekRYbyjH2xSDiXCjDbekIzPG1R2q6YFd6eAdjTK1rVfmr44tWQhfDv5oYUmw2N0u33krmlr9bL7bfnbuqpuiVfO7PQHonwLyI6hL6fu4tHqxyyAE_9ofOfzOQ1JGpcZD-Vuyf6YCAfkecGF0ir2QzDL6Y2v7YWRY_4qT0ITTzAPueNdwILsdpt-dWSR7RtLHcrRpHWP_8
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 4e 30 5f 62 53 59 6a 6b 43 31 56 55 7a 31 4f 38 2d 43 6c 39 49 79 49 61 4f 4a 74 6c 6f 4a 6c 4b 55 36 53 2d 45 73 45 4c 49 73 59 6a 43 4c 47 67 33 57 33 6b 6a 45 31 41 52 6e 70 32 53 6e 4d 4f 67 6e 42 4f 46 6e 69 62 45 49 53 62 78 68 55 67 63 57 73 6b 34 58 50 39 64 7a 62 64 41 57 68 75 58 46 35 67 64 6d 4f 53 43 44 4d 59 38 4e 70 77 50 66 2d 57 55 62 67 4f 4e 79 6e 30 42 72 49 5a 42 59 59 44 4c 6e 4c 33 50 36 49 6e 52 46 33 72 6c 70 6d 5a 4e 6e 4f 44 76 39 44 36 79 31 48 77 6e 76 54 54 6c 55 54 46 45 43 33 67 68 38 56 56 69 63 48 79 61 4c 74 41 34 36 68 6b 6d 75 41 55 52 68 50 79 43 56 71 73 72 34 47 41 5f 69 4b 2d 61 4f 65 41 69 76 72 4f 4f 66 64 4d 33 36 6e 70 46 6a 48 33 48 76 6f 5a 6f 64 4c 79 57 54 6a 43 43 50 79 31 69 57 72 6e 30 4e 51 30 39 44 6e Data Ascii: N0_bSYjkC1VUz1O8-Cl9IyIaOJtloJlKU6S-EsELIsYjCLGg3W3kjE1ARnp2SnMOgnBOFnibEISbxhUgcWsk4XP9dzbdAWhuXF5gdmOSCDMY8NpwPf-WUbgONyn0BrIZBYYDLnL3P6InRF3rlpmZNnODv9D6y1HwnvTTlUTFEC3gh8VVicHyaLtA46hkmuAURhPyCVqsr4GA_iK-aOeAivrOOfdM36npFjH3HvoZodLyWTjCCPy1iWrn0NQ09Dn
2024-07-03 12:36:31 UTC	762	IN	Data Raw: 43 53 33 59 76 63 6b 70 54 56 6a 64 5a 59 6c 6b 35 4e 6c 6c 70 59 6e 4e 32 4e 56 52 33 64 44 46 49 4e 30 78 61 5a 57 55 34 55 32 68 47 63 6d 68 77 4f 45 70 30 52 32 5a 6f 4e 58 63 7a 4d 58 4a 49 55 7a 4a 42 53 6e 42 58 63 56 70 79 55 6a 56 4b 53 33 42 42 52 46 68 6d 4b 33 6c 69 55 48 52 43 62 54 56 31 54 57 6f 35 4b 30 52 72 4b 32 73 79 5a 55 77 31 52 6d 78 47 4b 30 46 32 63 6d 45 78 57 58 4a 4f 4e 6c 70 46 52 58 68 42 56 57 56 34 64 46 4e 56 52 54 52 77 59 55 74 54 5a 57 35 61 62 48 4e 69 56 6b 4a 76 64 6c 52 53 57 45 56 75 54 32 6c 52 4e 58 6c 30 52 6b 4a 7a 4e 7a 4e 6f 65 46 6c 6b 57 57 39 47 4f 47 39 53 4c 31 5a 4c 62 45 52 70 4d 6b 74 4c 64 55 70 7a 51 31 64 56 57 54 64 79 51 33 5a 4d 62 33 64 44 52 57 35 36 61 6e 64 46 4e 45 4a 31 52 55 31 6a 65 56 Data Ascii: CS3YvckpTVjdZYlk5NllpYnN2NVR3dDFIN0xaZWU4U2hGcmhwOEp0R2ZoNXczMXJIUzJBSnBXcVpyUjVKS3BBRFhmK3liUHRCbTV1TWo5K0RrK2syZUw1RmxGK0F2cmExWXJONlpFRXhBVWV4dFNVRTRwYUtTZW5abHNiVkJvdlRSWEVuT2lRNXl0RkJzNzNoeFlkWW9GOG9SL1ZLbERpMktLdUpzQ1dVWTdyQ3ZMb3dDRW56andFNEJ1RU1jeV
2024-07-03 12:36:31 UTC	1390	IN	Data Raw: 32 63 36 34 0d 0a 4d 53 58 42 76 5a 33 42 4c 4e 53 39 46 63 57 46 6d 4e 6d 68 6a 52 6e 56 54 4d 6e 52 47 52 33 56 52 62 30 6b 35 55 31 56 76 59 55 34 34 5a 33 4e 4c 52 32 5a 43 5a 57 56 58 64 6b 68 61 55 47 39 50 56 44 52 58 54 6b 70 34 5a 54 5a 56 5a 57 4e 55 61 45 64 32 51 31 42 55 5a 47 39 43 51 6c 5a 56 5a 30 35 58 5a 6b 4a 6e 5a 48 6f 35 62 6b 31 6a 54 6c 67 7a 62 6d 5a 6b 63 6d 64 68 4f 45 35 69 63 54 6c 35 54 56 63 32 62 6a 45 35 54 6b 74 70 56 47 45 76 65 6a 63 76 52 48 70 6a 62 47 39 44 51 6e 42 70 56 44 46 36 56 6d 78 4c 52 48 68 48 53 7a 51 78 63 6c 4e 77 62 46 4e 7a 4d 58 6c 49 52 47 45 33 53 6a 5a 6d 62 33 70 56 51 6e 6b 30 59 53 74 49 62 32 68 4f 56 54 5a 42 59 6a 46 6f 51 33 49 78 51 6c 68 79 61 47 63 31 65 46 6c 4a 5a 58 4a 48 56 55 56 6a Data Ascii: 2c64MSXBvZ3BLNS9FcWFmNmhjRnVTMnRGR3VRb0k5U1VvYU44Z3NLR2ZCZWVXdkhaUG9PVDRXTkp4ZTZVZWNUaEd2Q1BUZG9CQlZVZ05XZkJnZHo5bk1jTlgzbmZkcmdhOE5icTl5TVc2bjE5TktpVGEvejcvRHpjbG9DQnBpVDF6VmxLRHhHSzQxclNwbFNzMXlIRGE3SjZmb3pVQnk0YStIb2hOVTZBYjFoQ3IxQlhyaGc1eFlJZXJHVUVj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49774	216.58.212.164	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:33 UTC	875	OUT	GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://selfcare.firma-remota.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:33 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 12:36:33 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-3r7kkLYCY4JUlDA67jBtOA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:36:33 UTC	499	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-07-03 12:36:33 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-07-03 12:36:33 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-07-03 12:36:33 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-07-03 12:36:33 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-07-03 12:36:33 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-07-03 12:36:33 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >
2024-07-03 12:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49790	185.199.109.153	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:37 UTC	562	OUT	GET /Gallery/css/blueimp-gallery.min.css HTTP/1.1 Host: blueimp.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:37 UTC	706	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8028 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sat, 25 Sep 2021 16:57:14 GMT Access-Control-Allow-Origin: * ETag: "614f54ea-1f5c" expires: Wed, 03 Jul 2024 03:46:39 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: B6DD:86C9F:4E0CCA:5AD459:6684C747 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 12:36:37 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-nyc-kteb1890054-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1720010197.262689,VS0,VE23 Vary: Accept-Encoding X-Fastly-Request-ID: bd78689b186a8347e5ac8a906f9b6b5f5342077b
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 3e 2e 73 6c 69 64 65 2d 63 6f 6e 74 65 6e 74 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 3e 2e 73 6c 69 64 65 2d 63 6f 6e 74 65 6e 74 3e 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6d Data Ascii: @charset "UTF-8";.blueimp-gallery,.blueimp-gallery>.slides>.slide>.slide-content,.blueimp-gallery>.slides>.slide>.slide-content>img{position:absolute;top:0;right:0;bottom:0;left:0;-webkit-transition:opacity .2s linear;-moz-transition:opacity .2s linear;-m
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 30 2e 30 34 35 2c 30 2e 33 35 35 2c 31 29 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 30 2e 30 34 35 2c 30 2e 33 35 35 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 30 2e 30 34 35 2c 30 2e 33 35 35 2c 31 29 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 2d 61 63 74 69 76 65 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 Data Ascii: transition-timing-function:cubic-bezier(0.645,0.045,0.355,1);-o-transition-timing-function:cubic-bezier(0.645,0.045,0.355,1);transition-timing-function:cubic-bezier(0.645,0.045,0.355,1)}.blueimp-gallery>.slides>.slide-active,.blueimp-gallery>.slides>.slid
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 67 29 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 2d 73 76 67 61 73 69 6d 67 3e 2e 70 72 65 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 70 72 65 76 2e 73 76 67 29 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 2d 73 76 67 61 73 69 6d 67 3e 2e 6e 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 6e 65 78 74 2e 73 76 67 29 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 2d 64 69 73 70 6c 61 79 3e 2e 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 35 70 78 3b 72 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 Data Ascii: g)}.blueimp-gallery-svgasimg>.prev{background-image:url(../img/prev.svg)}.blueimp-gallery-svgasimg>.next{background-image:url(../img/next.svg)}.blueimp-gallery-display>.close{position:absolute;top:15px;right:15px;width:30px;height:30px;background:url(../i
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 72 65 76 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 63 6c 6f 73 65 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 6e 65 78 74 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 70 6c 61 79 2d 70 61 75 73 65 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 70 72 65 76 2c 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 3e 2e 73 6c 69 64 65 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b Data Ascii: rev{display:none}.blueimp-gallery>.close,.blueimp-gallery>.next,.blueimp-gallery>.play-pause,.blueimp-gallery>.prev,.blueimp-gallery>.slides>.slide>.slide-content{-webkit-user-select:none;-khtml-user-select:none;-moz-user-select:none;-ms-user-select:none;
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 35 29 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 70 78 20 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 35 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2a 2b 68 74 6d 6c 20 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 69 6e 64 69 63 61 74 6f 72 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 69 6e 64 Data Ascii: izing:content-box;border:1px solid transparent;background:#ccc;background:rgba(255,255,255,.25) center no-repeat;border-radius:5px;box-shadow:0 0 2px #000;opacity:.5;cursor:pointer}*+html .blueimp-gallery>.indicator>li{display:inline}.blueimp-gallery>.ind
2024-07-03 12:36:37 UTC	1138	IN	Data Raw: 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 3e 2e 76 69 64 65 6f 2d 69 66 72 61 6d 65 3e 2e 76 69 64 65 6f 2d 63 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 37 29 7d 2e 62 6c 75 65 69 6d 70 2d 67 61 6c 6c 65 72 79 3e 2e 73 6c 69 64 65 73 3e 2e 73 6c 69 64 65 3e 2e 76 69 64 65 6f 2d 63 6f 6e 74 65 6e 74 3e 2e 76 69 64 65 6f 2d 70 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 2d 36 34 70 78 20 61 75 Data Ascii: at;background-size:contain}.blueimp-gallery>.slides>.slide>.video-iframe>.video-cover{background-color:#000;background-color:rgba(0,0,0,.7)}.blueimp-gallery>.slides>.slide>.video-content>.video-play{position:absolute;top:50%;right:0;left:0;margin:-64px au

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49791	185.199.109.153	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:37 UTC	553	OUT	GET /Gallery/js/jquery.blueimp-gallery.min.js HTTP/1.1 Host: blueimp.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:37 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 34434 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sat, 25 Sep 2021 16:57:14 GMT Access-Control-Allow-Origin: * ETag: "614f54ea-8682" expires: Wed, 03 Jul 2024 12:46:37 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 3D56:32C784:9F2F36:BA7FEA:668545D5 Accept-Ranges: bytes Age: 0 Date: Wed, 03 Jul 2024 12:36:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr18139-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1720010197.273929,VS0,VE23 Vary: Accept-Encoding X-Fastly-Request-ID: 43f9ad31ac14c6ffec934621cfbc4dacb504d446
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 2e 2f 62 6c 75 65 69 6d 70 2d 68 65 6c 70 65 72 22 5d 2c 74 29 3a 28 77 69 6e 64 6f 77 2e 62 6c 75 65 69 6d 70 3d 77 69 6e 64 6f 77 2e 62 6c 75 65 69 6d 70 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 62 6c 75 65 69 6d 70 2e 47 61 6c 6c 65 72 79 3d 74 28 77 69 6e 64 6f 77 2e 62 6c 75 65 69 6d 70 2e 68 65 6c 70 65 72 7c 7c 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 29 7d 28 66 75 6e 63 74 69 6f 6e 28 79 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 Data Ascii: !function(t){"use strict";"function"==typeof define&&define.amd?define(["./blueimp-helper"],t):(window.blueimp=window.blueimp\|\|{},window.blueimp.Gallery=t(window.blueimp.helper\|\|window.jQuery))}(function(y){"use strict";function i(t,e){return document.bod
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 3a 22 73 6f 75 72 63 65 73 22 2c 64 69 73 70 6c 61 79 54 72 61 6e 73 69 74 69 6f 6e 3a 21 30 2c 63 6c 65 61 72 53 6c 69 64 65 73 3a 21 30 2c 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 4f 6e 45 6e 74 65 72 3a 21 30 2c 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 4f 6e 53 6c 69 64 65 43 6c 69 63 6b 3a 21 30 2c 74 6f 67 67 6c 65 53 6c 69 64 65 73 68 6f 77 4f 6e 53 70 61 63 65 3a 21 30 2c 65 6e 61 62 6c 65 4b 65 79 62 6f 61 72 64 4e 61 76 69 67 61 74 69 6f 6e 3a 21 30 2c 63 6c 6f 73 65 4f 6e 45 73 63 61 70 65 3a 21 30 2c 63 6c 6f 73 65 4f 6e 53 6c 69 64 65 43 6c 69 63 6b 3a 21 30 2c 63 6c 6f 73 65 4f 6e 53 77 69 70 65 55 70 4f 72 44 6f 77 6e 3a 21 30 2c 63 6c 6f 73 65 4f 6e 48 61 73 68 43 68 61 6e 67 65 3a 21 30 2c 65 6d 75 6c 61 74 65 54 6f 75 63 68 45 76 65 6e Data Ascii: :"sources",displayTransition:!0,clearSlides:!0,toggleControlsOnEnter:!0,toggleControlsOnSlideClick:!0,toggleSlideshowOnSpace:!0,enableKeyboardNavigation:!0,closeOnEscape:!0,closeOnSlideClick:!0,closeOnSwipeUpOrDown:!0,closeOnHashChange:!0,emulateTouchEven
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 7d 2c 65 3d 7b 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 7b 65 6e 64 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 70 72 65 66 69 78 3a 22 2d 77 65 62 6b 69 74 2d 22 7d 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 7b 65 6e 64 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 70 72 65 66 69 78 3a 22 2d 6d 6f 7a 2d 22 7d 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 7b 65 6e 64 3a 22 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 70 72 65 66 69 78 3a 22 2d 6f 2d 22 7d 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 7b 65 6e 64 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 70 72 65 66 69 78 3a 22 22 7d 7d 3b 66 6f Data Ascii: ntTouch&&document instanceof DocumentTouch},e={webkitTransition:{end:"webkitTransitionEnd",prefix:"-webkit-"},MozTransition:{end:"transitionend",prefix:"-moz-"},OTransition:{end:"otransitionend",prefix:"-o-"},transition:{end:"transitionend",prefix:""}};fo
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 66 28 65 3d 65 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 2c 74 68 69 73 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 66 6f 72 6d 29 7b 66 6f 72 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f 75 73 7c 7c 28 74 3d 74 68 69 73 2e 63 69 72 63 6c 65 28 74 29 29 2c 69 3d 4d 61 74 68 2e 61 62 73 28 6f 2d 74 29 2f 28 6f 2d 74 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f 75 73 26 26 28 73 3d 69 2c 28 69 3d 2d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 73 5b 74 68 69 73 2e 63 69 72 63 6c 65 28 74 29 5d 2f 74 68 69 73 2e 73 6c 69 64 65 57 69 64 74 68 29 21 3d 3d 73 26 26 28 74 3d 2d 69 2a 74 68 69 73 2e 6e 75 6d 2b 74 29 29 2c 6e 3d 4d 61 74 68 2e 61 62 73 28 6f 2d 74 29 2d Data Ascii: f(e=e\|\|this.options.transitionDuration,this.support.transform){for(this.options.continuous\|\|(t=this.circle(t)),i=Math.abs(o-t)/(o-t),this.options.continuous&&(s=i,(i=-this.positions[this.circle(t)]/this.slideWidth)!==s&&(t=-i*this.num+t)),n=Math.abs(o-t)-
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 79 50 61 75 73 65 45 6c 65 6d 65 6e 74 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 22 74 72 75 65 22 29 7d 2c 70 61 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 26 26 28 74 68 69 73 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2c 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 49 64 29 2c 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 49 64 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 Data Ascii: yPauseElement[0].setAttribute("aria-pressed","true")},pause:function(){window.clearTimeout(this.timeout),this.interval=null,this.cancelAnimationFrame&&(this.cancelAnimationFrame.call(window,this.animationFrameId),this.animationFrameId=null),this.container
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 65 72 66 6c 6f 77 3d 74 68 69 73 2e 62 6f 64 79 4f 76 65 72 66 6c 6f 77 53 74 79 6c 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 65 61 72 53 6c 69 64 65 73 26 26 74 68 69 73 2e 72 65 73 65 74 53 6c 69 64 65 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 63 6c 6f 73 65 64 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 63 6c 6f 73 65 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 63 6c 6f 73 65 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 63 6c 6f 73 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 Data Ascii: erflow=this.bodyOverflowStyle),this.options.clearSlides&&this.resetSlides(),this.options.onclosed&&this.options.onclosed.call(this)},close:function(){var e=this;this.options.onclose&&this.options.onclose.call(this),this.support.transition&&this.options.di
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 6c 75 65 3d 21 31 7d 2c 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3f 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3a 74 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 21 30 7d 2c 6f 6e 72 65 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6e 69 74 53 6c 69 64 65 73 28 21 30 29 7d 2c 6f 6e 68 61 73 68 63 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4f 6e 48 61 73 68 43 68 61 6e 67 65 26 26 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 2c 6f 6e 6d 6f 75 73 65 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 77 68 69 63 68 26 26 31 3d 3d 3d 74 2e 77 68 69 63 68 26 26 22 56 49 44 45 Data Ascii: lue=!1},stopPropagation:function(t){t.stopPropagation?t.stopPropagation():t.cancelBubble=!0},onresize:function(){this.initSlides(!0)},onhashchange:function(){this.options.closeOnHashChange&&this.close()},onmousedown:function(t){t.which&&1===t.which&&"VIDE
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 72 6f 6c 6c 69 6e 67 7c 7c 4d 61 74 68 2e 61 62 73 28 65 29 3c 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 2e 79 29 29 2c 74 68 69 73 2e 69 73 53 63 72 6f 6c 6c 69 6e 67 29 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 61 72 6f 75 73 65 6c 7c 7c 74 68 69 73 2e 74 72 61 6e 73 6c 61 74 65 59 28 61 2c 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 2e 79 2b 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 73 5b 61 5d 2c 30 29 3b 65 6c 73 65 20 66 6f 72 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f 75 73 3f 69 3d 5b 74 68 69 73 2e 63 69 72 63 6c 65 28 61 2b 31 29 2c 61 2c Data Ascii: rolling\|\|Math.abs(e)<Math.abs(this.touchDelta.y)),this.isScrolling)this.options.carousel\|\|this.translateY(a,this.touchDelta.y+this.positions[a],0);else for(t.preventDefault(),window.clearTimeout(this.timeout),this.options.continuous?i=[this.circle(a+1),a,
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 6d 2d 31 26 26 74 68 69 73 2e 6d 6f 76 65 28 65 2b 31 2c 73 2c 6e 29 29 7d 2c 6f 6e 74 6f 75 63 68 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 26 26 28 74 68 69 73 2e 6f 6e 74 6f 75 63 68 65 6e 64 28 74 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 29 7d 2c 6f 6e 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 73 6c 69 64 65 73 5b 74 68 69 73 2e 69 6e 64 65 78 5d 3b 74 26 26 65 21 3d 3d 74 2e 74 61 72 67 65 74 7c 7c 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 26 26 74 68 69 73 2e 70 6c 61 79 28 29 2c 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 73 6c 69 64 65 65 6e Data Ascii: m-1&&this.move(e+1,s,n))},ontouchcancel:function(t){this.touchStart&&(this.ontouchend(t),delete this.touchStart)},ontransitionend:function(t){var e=this.slides[this.index];t&&e!==t.target\|\|(this.interval&&this.play(),this.setTimeout(this.options.onslideen
2024-07-03 12:36:37 UTC	1378	IN	Data Raw: 73 72 63 45 6c 65 6d 65 6e 74 2c 73 3d 69 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 79 28 69 29 2e 68 61 73 43 6c 61 73 73 28 74 29 7c 7c 79 28 73 29 2e 68 61 73 43 6c 61 73 73 28 74 29 7d 6e 28 65 2e 74 6f 67 67 6c 65 43 6c 61 73 73 29 3f 28 74 68 69 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 74 29 2c 74 68 69 73 2e 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 29 29 3a 6e 28 65 2e 70 72 65 76 43 6c 61 73 73 29 3f 28 74 68 69 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 74 29 2c 74 68 69 73 2e 70 72 65 76 28 29 29 3a 6e 28 65 2e 6e 65 78 74 43 6c 61 73 73 29 3f 28 74 68 69 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 74 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 29 3a 6e 28 65 2e 63 Data Ascii: srcElement,s=i.parentNode;function n(t){return y(i).hasClass(t)\|\|y(s).hasClass(t)}n(e.toggleClass)?(this.preventDefault(t),this.toggleControls()):n(e.prevClass)?(this.preventDefault(t),this.prev()):n(e.nextClass)?(this.preventDefault(t),this.next()):n(e.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49807	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:39 UTC	515	OUT	GET /piwik.js HTTP/1.1 Host: wa.aruba.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:39 UTC	361	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:39 GMT Server: Apache Last-Modified: Fri, 04 Aug 2023 09:28:55 GMT ETag: "10433-60215868a67c7" Accept-Ranges: bytes Content-Length: 66611 Vary: Accept-Encoding Cache-Control: max-age=0 Expires: Wed, 03 Jul 2024 12:36:39 GMT Header: wa01.aruba.it Connection: close Content-Type: application/javascript
2024-07-03 12:36:39 UTC	16384	IN	Data Raw: 2f 2a 21 21 0a 20 2a 20 4d 61 74 6f 6d 6f 20 2d 20 66 72 65 65 2f 6c 69 62 72 65 20 61 6e 61 6c 79 74 69 63 73 20 70 6c 61 74 66 6f 72 6d 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 6f 6d 6f 2d 6f 72 67 2f 6d 61 74 6f 6d 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 42 53 44 2d 33 20 43 6c 61 75 73 65 20 28 61 6c 73 6f 20 69 6e 20 6a 73 Data Ascii: /!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 61 76 69 6e 67 41 74 74 72 69 62 75 74 65 57 69 74 68 56 61 6c 75 65 28 61 75 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 50 49 45 43 45 5f 41 54 54 52 29 3b 69 66 28 61 77 29 7b 72 65 74 75 72 6e 20 61 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 46 72 6f 6d 4e 6f 64 65 28 61 77 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 50 49 45 43 45 5f 41 54 54 52 29 7d 76 61 72 20 61 74 3d 74 68 69 73 2e 66 69 6e 64 50 69 65 63 65 4e 6f 64 65 28 61 75 29 3b 76 61 72 20 61 76 3d 74 68 69 73 2e 66 69 6e 64 4d 65 64 69 61 55 72 6c 49 6e 4e 6f 64 65 28 61 74 29 3b 69 66 28 61 76 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 41 62 73 6f 6c 75 74 65 55 72 6c 28 61 76 29 7d 7d 2c 66 69 6e 64 43 6f 6e 74 65 6e 74 54 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: avingAttributeWithValue(au,this.CONTENT_PIECE_ATTR);if(aw){return ai.getAttributeValueFromNode(aw,this.CONTENT_PIECE_ATTR)}var at=this.findPieceNode(au);var av=this.findMediaUrlInNode(at);if(av){return this.toAbsoluteUrl(av)}},findContentTarget:function(a
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 35 28 29 7b 76 61 72 20 64 46 3d 63 34 28 29 2c 64 44 3d 64 46 5b 30 5d 2c 64 45 3d 64 46 5b 31 5d 2c 64 43 3d 64 46 5b 32 5d 3b 72 65 74 75 72 6e 7b 6e 65 77 56 69 73 69 74 6f 72 3a 64 44 2c 75 75 69 64 3a 64 45 2c 63 72 65 61 74 65 54 73 3a 64 43 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 4c 28 29 7b 76 61 72 20 64 46 3d 6e 65 77 20 44 61 74 65 28 29 2c 64 44 3d 64 46 2e 67 65 74 54 69 6d 65 28 29 2c 64 47 3d 61 35 28 29 2e 63 72 65 61 74 65 54 73 3b 76 61 72 20 64 43 3d 70 61 72 73 65 49 6e 74 28 64 47 2c 31 30 29 3b 76 61 72 20 64 45 3d 28 64 43 2a 31 30 30 30 29 2b 63 30 2d 64 44 3b 0a 72 65 74 75 72 6e 20 64 45 7d 66 75 6e 63 74 69 6f 6e 20 61 52 28 64 43 29 7b 69 66 28 21 63 66 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 64 45 3d 6e 65 77 20 44 61 74 65 28 29 Data Ascii: 5(){var dF=c4(),dD=dF[0],dE=dF[1],dC=dF[2];return{newVisitor:dD,uuid:dE,createTs:dC}}function aL(){var dF=new Date(),dD=dF.getTime(),dG=a5().createTs;var dC=parseInt(dG,10);var dE=(dC*1000)+c0-dD;return dE}function aR(dC){if(!cf){return}var dE=new Date()
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 20 64 43 7d 3b 74 68 69 73 2e 64 65 6c 65 74 65 43 75 73 74 6f 6d 56 61 72 69 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 64 43 2c 64 44 29 7b 69 66 28 74 68 69 73 2e 67 65 74 43 75 73 74 6f 6d 56 61 72 69 61 62 6c 65 28 64 43 2c 64 44 29 29 7b 74 68 69 73 2e 73 65 74 43 75 73 74 6f 6d 56 61 72 69 61 62 6c 65 28 64 43 2c 22 22 2c 22 22 2c 64 44 29 7d 7d 3b 74 68 69 73 2e 64 65 6c 65 74 65 43 75 73 74 6f 6d 56 61 72 69 61 62 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 64 43 29 7b 69 66 28 64 43 3d 3d 3d 22 70 61 67 65 22 7c 7c 64 43 3d 3d 3d 33 29 7b 62 35 3d 7b 7d 0a 7d 65 6c 73 65 7b 69 66 28 64 43 3d 3d 3d 22 65 76 65 6e 74 22 29 7b 63 78 3d 7b 7d 7d 65 6c 73 65 7b 69 66 28 64 43 3d 3d 3d 22 76 69 73 69 74 22 7c 7c 64 43 3d 3d 3d 32 29 7b 61 56 3d 7b 7d 7d 7d Data Ascii: dC};this.deleteCustomVariable=function(dC,dD){if(this.getCustomVariable(dC,dD)){this.setCustomVariable(dC,"","",dD)}};this.deleteCustomVariables=function(dC){if(dC==="page"\|\|dC===3){b5={}}else{if(dC==="event"){cx={}}else{if(dC==="visit"\|\|dC===2){aV={}}}
2024-07-03 12:36:40 UTC	1075	IN	Data Raw: 65 20 73 75 72 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 72 61 63 6b 65 72 20 76 69 61 20 5f 70 61 71 2e 70 75 73 68 20 62 65 66 6f 72 65 20 6c 6f 61 64 69 6e 67 20 6d 61 74 6f 6d 6f 2e 6a 73 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 20 74 72 61 63 6b 65 72 20 76 69 61 20 4d 61 74 6f 6d 6f 2e 61 64 64 54 72 61 63 6b 65 72 28 29 20 6d 61 6e 75 61 6c 6c 79 20 61 6e 64 20 74 68 65 6e 20 75 73 65 20 5f 70 61 71 2e 70 75 73 68 20 62 75 74 20 69 74 20 6d 61 79 20 6e 6f 74 20 66 75 6c 6c 79 20 77 6f 72 6b 20 61 73 20 74 72 61 63 6b 65 72 20 6d 65 74 68 6f 64 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 20 69 6e 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 64 65 72 2e 22 Data Ascii: e sure to configure the tracker via _paq.push before loading matomo.js. Alternatively, you can create a tracker via Matomo.addTracker() manually and then use _paq.push but it may not fully work as tracker methods may not be executed in the correct order."

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49809	52.50.116.41	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:39 UTC	530	OUT	GET /6c82bc643068.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:39 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:39 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "c7e6eceb4b71f7ef8f3d3d2c490d9079" Pragma: no-cache X-Widget-Server: 2.1
2024-07-03 12:36:39 UTC	3861	IN	Data Raw: 66 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 3d 64 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 3d 7b 6d 6f 64 75 6c 65 73 3a 66 2e 6d 6f 64 75 6c 65 73 7d 2c 72 3d 66 2e 6d 6f 64 75 6c 65 73 3b 65 2e 65 78 70 65 6e 73 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 5f 77 61 69 74 66 6f 72 6c 6f 61 64 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 3b 76 6f 69 64 20 30 3b 65 2e 72 65 71 75 69 72 65 3d 66 2e 72 65 71 75 69 72 65 3b 65 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 61 3d 64 2e 63 6f 6e 73 Data Ascii: f0e(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.cons
2024-07-03 12:36:39 UTC	15107	IN	Data Raw: 33 61 66 62 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3d 65 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 73 74 6f 70 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 Data Ascii: 3afbfunction e(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)}window.usabilla_live=window.usabilla_live\|\|{};window.usabilla_live.onEvent=e;window.usabilla_live.stopEvent=function(a,b,c){a.removeEventListener?a.removeEventLi
2024-07-03 12:36:39 UTC	8932	IN	Data Raw: 32 32 64 63 0d 0a 22 36 63 38 32 62 63 36 34 33 30 36 38 22 3b 76 61 72 20 43 3d 6e 75 6c 6c 3b 76 61 72 20 76 3d 5b 5d 3b 76 61 72 20 46 3d 5b 5d 3b 76 61 72 20 71 3d 5b 5d 3b 76 61 72 20 47 3d 21 31 3b 76 61 72 20 52 3d 7b 7d 3b 0a 76 61 72 20 53 3d 5b 5d 3b 76 61 72 20 54 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3b 69 66 28 30 3c 3d 78 2e 63 61 6c 6c 28 76 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 64 3d 62 2e 67 65 74 54 61 67 73 28 29 3b 76 61 72 20 63 3d 30 3b 66 6f 72 28 61 3d 64 2e 6c 65 6e 67 74 68 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 30 3c 3d 78 2e 63 61 6c 6c 28 46 2c 66 29 29 72 65 74 75 72 6e 21 31 7d 76 2e 70 75 73 68 28 62 29 3b 61 3d 62 2e 67 65 74 54 61 67 73 28 29 3b 62 3d 30 3b 66 Data Ascii: 22dc"6c82bc643068";var C=null;var v=[];var F=[];var q=[];var G=!1;var R={};var S=[];var T=function(b){var a;if(0<=x.call(v,b))return!0;var d=b.getTags();var c=0;for(a=d.length;c<a;c++){var f=d[c];if(0<=x.call(F,f))return!1}v.push(b);a=b.getTags();b=0;f
2024-07-03 12:36:39 UTC	4089	IN	Data Raw: 66 66 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3d 65 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 73 74 6f 70 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: ff2(function(){var d=window.parent.document;function e(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)}window.usabilla_live=window.usabilla_live\|\|{};window.usabilla_live.onEvent=e;window.usabilla_live.stopEvent=function(a,b,
2024-07-03 12:36:39 UTC	3814	IN	Data Raw: 65 64 66 0d 0a 63 2e 69 6e 6e 65 72 48 65 69 67 68 74 7d 65 6c 73 65 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 30 21 3d 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 28 61 3d 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 62 3d 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3a 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 63 6c 69 65 6e Data Ascii: edfc.innerHeight}else"undefined"!=typeof e.documentElement&&"undefined"!=typeof e.documentElement.clientWidth&&0!=e.documentElement.clientWidth?(a=e.documentElement.clientWidth,b=e.documentElement.clientHeight):(a=e.getElementsByTagName("body")[0].clien
2024-07-03 12:36:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49815	169.150.247.37	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:39 UTC	520	OUT	GET /chat.js HTTP/1.1 Host: widget.docsbot.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:40 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:40 GMT Content-Type: text/javascript Content-Length: 492118 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1080 CDN-PullZone: 1317214 CDN-Uid: 586c95b4-b0f2-4c0b-9ebf-6dec61bb17d2 CDN-RequestCountryCode: US Cache-Control: public, max-age=3600 ETag: "6627fc9f-78256" Last-Modified: Tue, 23 Apr 2024 18:23:27 GMT CDN-StorageServer: DE-383 CDN-FileServer: 85 CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/23/2024 18:29:31 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: 31cd0b9ea5bf404b62f0f671dd5247b7 CDN-Cache: HIT Accept-Ranges: bytes
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 32 39 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6e 3d 22 7e 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 66 6e 3d 65 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 2c 74 68 69 73 2e 6f 6e 63 65 3d 6e 7c 7c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 Data Ascii: (()=>{var e={729:e=>{"use strict";var t=Object.prototype.hasOwnProperty,n="~";function r(){}function a(e,t,n){this.fn=e,this.context=t,this.once=n\|\|!1}function o(e,t,r,o,i){if("function"!=typeof r)throw new TypeError("The listener must be a function");var
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 2c 22 22 21 3d 3d 6e 26 26 28 65 2e 6e 61 6d 65 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 74 2c 6e 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 26 26 51 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3d 3d 3d 65 7c 7c 28 6e 75 6c 6c 3d 3d 6e 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 6e 26 26 28 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 6e 29 29 7d 76 61 72 20 74 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 3d 65 Data Ascii: _wrapperState.initialChecked,""!==n&&(e.name=n)}function ee(e,t,n){"number"===t&&Q(e.ownerDocument)===e\|\|(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}var te=Array.isArray;function ne(e,t,n,r){if(e=e
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 74 22 2c 31 39 3a 22 50 61 75 73 65 22 2c 32 30 3a 22 43 61 70 73 4c 6f 63 6b 22 2c 32 37 3a 22 45 73 63 61 70 65 22 2c 33 32 3a 22 20 22 2c 33 33 3a 22 50 61 67 65 55 70 22 2c 33 34 3a 22 50 61 67 65 44 6f 77 6e 22 2c 33 35 3a 22 45 6e 64 22 2c 33 36 3a 22 48 6f 6d 65 22 2c 33 37 3a 22 41 72 72 6f 77 4c 65 66 74 22 2c 33 38 3a 22 41 72 72 6f 77 55 70 22 2c 33 39 3a 22 41 72 72 6f 77 52 69 67 68 74 22 2c 34 30 3a 22 41 72 72 6f 77 44 6f 77 6e 22 2c 34 35 3a 22 49 6e 73 65 72 74 22 2c 34 36 3a 22 44 65 6c 65 74 65 22 2c 31 31 32 3a 22 46 31 22 2c 31 31 33 3a 22 46 32 22 2c 31 31 34 3a 22 46 33 22 2c 31 31 35 3a 22 46 34 22 2c 31 31 36 3a 22 46 35 22 2c 31 31 37 3a 22 46 36 22 2c 31 31 38 3a 22 46 37 22 2c 31 31 39 3a 22 46 38 22 2c 31 32 30 3a 22 46 39 22 Data Ascii: t",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9"
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3f 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3a 76 6f 69 64 20 30 21 3d 3d 6f 61 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 61 2e 72 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 2e 74 68 65 6e 28 65 29 2e 63 61 74 63 68 28 6c 61 29 7d 3a 72 61 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2c 72 3d 30 3b 64 6f 7b 76 61 72 20 61 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 61 26 26 38 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 22 2f 24 22 3d 3d 3d 28 6e 3d 61 2e 64 61 Data Ascii: ueueMicrotask?queueMicrotask:void 0!==oa?function(e){return oa.resolve(null).then(e).catch(la)}:ra;function la(e){setTimeout((function(){throw e}))}function ua(e,t){var n=t,r=0;do{var a=n.nextSibling;if(e.removeChild(n),a&&8===a.nodeType)if("/$"===(n=a.da
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 3d 73 29 7b 69 66 28 28 73 3d 69 2e 74 79 70 65 29 3d 3d 3d 53 29 7b 69 66 28 37 3d 3d 3d 63 2e 74 61 67 29 7b 6e 28 72 2c 63 2e 73 69 62 6c 69 6e 67 29 2c 28 6f 3d 61 28 63 2c 69 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 29 29 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 6f 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 63 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 3d 3d 73 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 26 26 6e 75 6c 6c 21 3d 3d 73 26 26 73 2e 24 24 74 79 70 65 6f 66 3d 3d 3d 54 26 26 47 6f 28 73 29 3d 3d 3d 63 2e 74 79 70 65 29 7b 6e 28 72 2c 63 2e 73 69 62 6c 69 6e 67 29 2c 28 6f 3d 61 28 63 2c 69 2e 70 72 6f 70 73 29 29 2e 72 65 66 3d 59 6f 28 72 2c 63 2c 69 29 2c 6f 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 6f 3b 62 72 65 61 6b Data Ascii: =s){if((s=i.type)===S){if(7===c.tag){n(r,c.sibling),(o=a(c,i.props.children)).return=r,r=o;break e}}else if(c.elementType===s\|\|"object"==typeof s&&null!==s&&s.$$typeof===T&&Go(s)===c.type){n(r,c.sibling),(o=a(c,i.props)).ref=Yo(r,c,i),o.return=r,r=o;break
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 74 65 26 26 28 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 53 6e 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 26 26 28 74 2e 66 6c 61 67 73 7c 3d 31 30 32 34 29 29 3a 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 7c 7c 6c 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 64 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 7c 7c 28 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 53 6e 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 7c 7c 6c 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 64 3d 3d 3d 65 2e 6d 65 6d 6f 69 Data Ascii: te&&(t.flags\|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags\|=1024)):("function"!=typeof i.componentDidUpdate\|\|l===e.memoizedProps&&d===e.memoizedState\|\|(t.flags\|=4),"function"!=typeof i.getSnapshotBeforeUpdate\|\|l===e.memoizedProps&&d===e.memoi
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 3d 6f 26 26 74 75 28 74 2c 6e 2c 6f 29 7d 61 3d 61 2e 6e 65 78 74 7d 77 68 69 6c 65 28 61 21 3d 3d 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 75 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 75 70 64 61 74 65 51 75 65 75 65 29 3f 74 2e 6c 61 73 74 45 66 66 65 63 74 3a 6e 75 6c 6c 29 29 7b 76 61 72 20 6e 3d 74 3d 74 2e 6e 65 78 74 3b 64 6f 7b 69 66 28 28 6e 2e 74 61 67 26 65 29 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 6e 2e 63 72 65 61 74 65 3b 6e 2e 64 65 73 74 72 6f 79 3d 72 28 29 7d 6e 3d 6e 2e 6e 65 78 74 7d 77 68 69 6c 65 28 6e 21 3d 3d 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 75 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 66 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f Data Ascii: =o&&tu(t,n,o)}a=a.next}while(a!==r)}}function au(e,t){if(null!==(t=null!==(t=t.updateQueue)?t.lastEffect:null)){var n=t=t.next;do{if((n.tag&e)===e){var r=n.create;n.destroy=r()}n=n.next}while(n!==t)}}function ou(e){var t=e.ref;if(null!==t){var n=e.stateNo
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 65 2e 66 69 6e 69 73 68 65 64 4c 61 6e 65 73 3d 30 2c 6e 3d 3d 3d 65 2e 63 75 72 72 65 6e 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 37 37 29 29 3b 65 2e 63 61 6c 6c 62 61 63 6b 4e 6f 64 65 3d 6e 75 6c 6c 2c 65 2e 63 61 6c 6c 62 61 63 6b 50 72 69 6f 72 69 74 79 3d 30 3b 76 61 72 20 69 3d 6e 2e 6c 61 6e 65 73 7c 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 26 7e 74 3b 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 3d 74 2c 65 2e 73 75 73 70 65 6e 64 65 64 4c 61 6e 65 73 3d 30 2c 65 2e 70 69 6e 67 65 64 4c 61 6e 65 73 3d 30 2c 65 2e 65 78 70 69 72 65 64 4c 61 6e 65 73 26 3d 74 2c 65 2e 6d 75 74 61 Data Ascii: finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(o(177));e.callbackNode=null,e.callbackPriority=0;var i=n.lanes\|n.childLanes;if(function(e,t){var n=e.pendingLanes&~t;e.pendingLanes=t,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=t,e.muta
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 3a 5b 76 61 2c 6b 61 2c 78 61 2c 4f 65 2c 41 65 2c 63 73 5d 7d 2c 6e 63 3d 7b 66 69 6e 64 46 69 62 65 72 42 79 48 6f 73 74 49 6e 73 74 61 6e 63 65 3a 79 61 2c 62 75 6e 64 6c 65 54 79 70 65 3a 30 2c 76 65 72 73 69 6f 6e 3a 22 31 38 2e 32 2e 30 22 2c 72 65 6e 64 65 72 65 72 50 61 63 6b 61 67 65 4e 61 6d 65 3a 22 72 65 61 63 74 2d 64 6f 6d 22 7d 2c 72 63 3d 7b 62 75 6e 64 6c 65 54 79 70 65 3a 6e 63 2e 62 75 6e 64 6c 65 54 79 70 65 2c 76 65 72 73 69 6f 6e 3a 6e 63 2e 76 65 72 73 69 6f 6e 2c 72 65 6e 64 65 72 65 72 50 61 63 6b 61 67 65 4e 61 6d 65 3a 6e 63 2e 72 65 6e 64 65 72 65 72 50 61 63 6b 61 67 65 4e 61 6d 65 2c 72 65 6e 64 65 72 65 72 43 6f 6e 66 69 67 3a 6e 63 2e 72 65 6e 64 65 72 65 72 43 6f 6e 66 69 67 2c 6f 76 65 72 72 69 64 65 48 6f 6f 6b 53 74 61 Data Ascii: :[va,ka,xa,Oe,Ae,cs]},nc={findFiberByHostInstance:ya,bundleType:0,version:"18.2.0",rendererPackageName:"react-dom"},rc={bundleType:nc.bundleType,version:nc.version,rendererPackageName:nc.rendererPackageName,rendererConfig:nc.rendererConfig,overrideHookSta
2024-07-03 12:36:40 UTC	16384	IN	Data Raw: 61 72 74 54 69 6d 65 2d 6e 29 2c 75 3d 21 31 7d 72 65 74 75 72 6e 20 75 7d 66 69 6e 61 6c 6c 79 7b 64 3d 6e 75 6c 6c 2c 70 3d 6f 2c 6d 3d 21 31 7d 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 26 26 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 29 3b 76 61 72 20 53 2c 43 3d 21 31 2c 45 3d 6e 75 6c 6c 2c 4f 3d 2d 31 2c 41 3d 35 2c 50 3d 2d 31 3b 66 75 Data Ascii: artTime-n),u=!1}return u}finally{d=null,p=o,m=!1}}"undefined"!=typeof navigator&&void 0!==navigator.scheduling&&void 0!==navigator.scheduling.isInputPending&&navigator.scheduling.isInputPending.bind(navigator.scheduling);var S,C=!1,E=null,O=-1,A=5,P=-1;fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49819	52.50.116.41	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:40 UTC	528	OUT	GET /ce67dfba33a7.js?s1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:40 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "26925379d0256277f2beda1851f94de9" Pragma: no-cache X-Widget-Server: 2.1
2024-07-03 12:36:40 UTC	3861	IN	Data Raw: 66 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 28 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 72 67 75 6d 65 6e 74 73 2e 75 6e 73 68 69 66 74 28 22 55 73 61 62 69 6c 6c 61 20 46 65 65 64 62 61 63 6b 3a 20 22 29 3b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 2e 61 70 70 6c 79 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 66 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 7d 76 61 72 20 67 3d 7b 7d 2c 68 3d 7b 7d 2c 63 3d 5b 5d 3b 61 Data Ascii: f0e(function(){function l(){}window.console&&window.console.error&&(l=function(){arguments.unshift("Usabilla Feedback: ");window.console.error.apply(window.console,arguments)});(function(a){function m(f){return"function"===typeof f}var g={},h={},c=[];a
2024-07-03 12:36:40 UTC	2033	IN	Data Raw: 37 65 61 0d 0a 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 61 3d 28 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6c 69 6e 6b 5b 72 65 6c 3d 63 61 6e 6f 6e 69 63 61 6c 5d 22 29 7c 7c 7b 7d 29 2e 68 72 65 66 3b 69 66 28 21 61 29 72 65 74 75 72 6e 22 22 2b 62 2e 6c 6f 63 61 74 69 6f 6e 3b 76 61 72 20 63 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 63 2e 68 72 65 66 3d 61 3b 72 65 74 75 72 6e 20 63 2e 68 72 65 66 7d 76 61 72 20 65 3d 2f 5e 28 64 61 74 61 2d 29 3f 28 75 62 2d 29 3f 69 6e 2d 70 61 67 65 2d 28 2e 2b 29 2f 3b 6e 5b 22 69 6e 2d 70 61 67 65 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 61 2e 6c 65 6e 67 74 68 26 26 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 63 Data Ascii: 7eareturn c}function r(){var a=(b.querySelector("link[rel=canonical]")\|\|{}).href;if(!a)return""+b.location;var c=b.createElement("a");c.href=a;return c.href}var e=/^(data-)?(ub-)?in-page-(.+)/;n["in-page"]=function(a){a&&a.length&&p(function(){for(var c
2024-07-03 12:36:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49830	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:40 UTC	1445	OUT	POST /piwik.php?action_name=Selfcare%20Firma%20Remota%20-%20Funzionalit%C3%A0%20ed%20utilizzo%20%7C%20Guide%20pec.it&idsite=40&rec=1&r=302050&h=8&m=36&s=39&url=https%3A%2F%2Fguide.pec.it%2Ffunzionalita-pannello-firma-remota.aspx%23a_1474450182479&_id=a4896a26507eaf63&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=COGZuh&devicePixelRatio=1&pf_net=0&pf_srv=544&pf_tfr=284&pf_dm1=2563&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: wa.aruba.it Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://guide.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:41 UTC	253	IN	HTTP/1.1 204 No Response Date: Wed, 03 Jul 2024 12:36:40 GMT Server: Apache Connection: close Content-Encoding: none Cache-Control: max-age=0 Expires: Wed, 03 Jul 2024 12:36:40 GMT Header: wa01.aruba.it Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49835	52.222.206.40	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:41 UTC	764	OUT	GET /live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:41 UTC	616	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 7612 Connection: close Date: Wed, 03 Jul 2024 12:36:42 GMT Last-Modified: Wed, 13 Mar 2024 10:54:01 GMT ETag: "37460b13081569d777a6c525d11e2fcb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400000 x-amz-version-id: tBRl.dMLr6Bj.TB8TS4VF4YjmBF8feRK Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 54fc556adf6e8c787574c6f132d70178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: jJMQUrwBsqevOQJQW8FWgCxRKEhcEewzZH0KZVaDmY7ETU8mKcZNUg==
2024-07-03 12:36:41 UTC	7612	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 75 62 57 69 64 67 65 74 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 36 74 69 7a 66 74 6c 72 70 75 6f 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 61 72 75 62 61 2d 69 74 61 6c 79 2d 61 72 75 62 61 2d 32 30 32 31 2d 62 61 73 69 63 2d Data Ascii: <!doctype html><html ng-app="ubWidget"><head> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <link rel="stylesheet" href="https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49851	52.222.206.40	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:42 UTC	722	OUT	GET /themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:43 UTC	616	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 29962 Connection: close Date: Wed, 03 Jul 2024 12:36:43 GMT Last-Modified: Tue, 23 May 2023 15:25:54 GMT ETag: "6cac8584191ce485eb6e11121e5b2bb3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: gZ3i3Uq.m7H1UxNOnEUI6V9xyvhwVulg Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9e1b24b39ac8b669f996f1e7907eb696.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: _yJtGcTOOHnOWaE5XdjSSoCe3qdbKhFFbLndHwgdGjdBpLt1Guqc0w==
2024-07-03 12:36:43 UTC	8949	IN	Data Raw: 2f 2a 21 20 73 61 6e 69 74 69 7a 65 2e 63 73 73 20 76 35 2e 30 2e 30 20 7c 20 43 43 30 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 6e 61 74 68 61 6e 74 6e 65 61 6c 2f 73 61 6e 69 74 69 7a 65 2e 63 73 73 20 2a 2f 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 22 29 3b 2a 2c 3a 3a 62 65 66 6f 72 65 2c 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 3a 3a 62 65 66 6f 72 65 2c 3a 3a 61 66 74 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c Data Ascii: /! sanitize.css v5.0.0 \| CC0 License \| github.com/jonathantneal/sanitize.css /@import url("https://fonts.googleapis.com/css?family=Lato");*,::before,::after{background-repeat:no-repeat;box-sizing:inherit}::before,::after{text-decoration:inherit;vertical
2024-07-03 12:36:43 UTC	8439	IN	Data Raw: 67 72 6f 75 6e 64 3a 23 31 34 37 34 42 44 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 6e 67 65 5d 3a 3a 2d 6d 73 2d 74 72 61 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 61 6e 69 6d 61 74 65 3a 30 2e 32 73 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 33 70 78 20 30 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 6e 67 65 5d 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 6c 6f 77 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 35 36 2c 31 37 32 2c 31 38 Data Ascii: ground:#1474BD;cursor:pointer}input[type=range]::-ms-track{width:100%;height:5px;cursor:pointer;animate:0.2s;background:transparent;border-color:transparent;border-width:23px 0;color:transparent}input[type=range]::-ms-fill-lower{background:rgba(156,172,18
2024-07-03 12:36:43 UTC	12574	IN	Data Raw: 68 2d 63 68 69 6c 64 28 32 29 20 69 6e 70 75 74 3a 61 66 74 65 72 2c 2e 63 6f 6e 74 72 6f 6c 2d 6d 61 74 72 69 78 52 61 74 69 6e 67 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 69 6e 70 75 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 32 22 7d 2e 63 6f 6e 74 72 6f 6c 2d 72 61 74 69 6e 67 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 69 6e 70 75 74 3a 61 66 74 65 72 2c 2e 63 6f 6e 74 72 6f 6c 2d 6d 61 74 72 69 78 52 61 74 69 6e 67 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 69 6e 70 75 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 33 22 7d 2e 63 6f 6e 74 72 6f 6c 2d 72 61 74 69 6e 67 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 20 69 6e 70 75 74 3a 61 66 74 65 72 2c 2e 63 6f 6e 74 72 6f 6c 2d 6d 61 74 72 69 78 52 61 74 69 6e Data Ascii: h-child(2) input:after,.control-matrixRating li:nth-child(2) input:after{content:"2"}.control-rating li:nth-child(3) input:after,.control-matrixRating li:nth-child(3) input:after{content:"3"}.control-rating li:nth-child(4) input:after,.control-matrixRatin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	49850	52.222.206.40	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:42 UTC	645	OUT	GET /vendor/1.6.5/angular.min.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:42 UTC	592	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 168517 Connection: close Date: Sun, 22 Oct 2023 08:37:08 GMT Last-Modified: Mon, 15 Oct 2018 13:12:21 GMT ETag: "07a72b597f2fc10d6f88c8277d903d94" Cache-Control: public, max-age=31536000 x-amz-version-id: vcdCWXCYksVKD7G3lFwbKc37p7539vVp Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8af5231b014ab5e8c35000dd4cf4b68c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: TgGZobqhXmQgeq-IfrXDL6lWLc-LHQM_sXD4qdea_I8s2fTBE8tiIg== Age: 22046375
2024-07-03 12:36:42 UTC	16384	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 35 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 70 65 28 61 29 7b 69 66 28 47 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 54 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 54 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.5 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return
2024-07-03 12:36:42 UTC	16384	IN	Data Raw: 43 68 69 6c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 62 7c 7c 7a 62 28 61 29 3b 76 61 72 20 64 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 64 26 26 64 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 69 67 28 61 2c 0a 62 29 7b 62 3d 62 7c 7c 78 3b 69 66 28 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 62 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 29 3b 65 6c 73 65 20 7a 28 62 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 64 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 78 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 62 29 3b Data Ascii: Child)}function Gb(a,b){b\|\|zb(a);var d=a.parentNode;d&&d.removeChild(a)}function ig(a,b){b=b\|\|x;if("complete"===b.document.readyState)b.setTimeout(a);else z(b).on("load",a)}function gd(a){function b(){x.document.removeEventListener("DOMContentLoaded",b);
2024-07-03 12:36:42 UTC	16384	IN	Data Raw: 61 72 20 62 3d 61 2e 69 6e 73 74 61 6e 63 65 3b 69 66 28 45 28 62 2e 24 6f 6e 43 68 61 6e 67 65 73 29 29 74 72 79 7b 62 2e 24 6f 6e 43 68 61 6e 67 65 73 28 61 2e 62 69 6e 64 69 6e 67 49 6e 66 6f 2e 69 6e 69 74 69 61 6c 43 68 61 6e 67 65 73 29 7d 63 61 74 63 68 28 64 29 7b 63 28 64 29 7d 69 66 28 45 28 62 2e 24 6f 6e 49 6e 69 74 29 29 74 72 79 7b 62 2e 24 6f 6e 49 6e 69 74 28 29 7d 63 61 74 63 68 28 65 29 7b 63 28 65 29 7d 45 28 62 2e 24 64 6f 43 68 65 63 6b 29 26 26 28 5a 2e 24 77 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 24 64 6f 43 68 65 63 6b 28 29 7d 29 2c 62 2e 24 64 6f 43 68 65 63 6b 28 29 29 3b 45 28 62 2e 24 6f 6e 44 65 73 74 72 6f 79 29 26 26 5a 2e 24 6f 6e 28 22 24 64 65 73 74 72 6f 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 24 Data Ascii: ar b=a.instance;if(E(b.$onChanges))try{b.$onChanges(a.bindingInfo.initialChanges)}catch(d){c(d)}if(E(b.$onInit))try{b.$onInit()}catch(e){c(e)}E(b.$doCheck)&&(Z.$watch(function(){b.$doCheck()}),b.$doCheck());E(b.$onDestroy)&&Z.$on("$destroy",function(){b.$
2024-07-03 12:36:43 UTC	14808	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 63 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 61 28 63 29 7d 62 3f 6b 2e 24 61 70 70 6c 79 41 73 79 6e 63 28 64 29 3a 6b 2e 24 24 70 68 61 73 65 3f 64 28 29 3a 6b 2e 24 61 70 70 6c 79 28 64 29 7d 7d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 71 28 63 2c 61 2c 64 2c 65 29 7d 4a 26 26 28 32 30 30 3c 3d 61 26 26 33 30 30 3e 61 3f 4a 2e 70 75 74 28 63 61 2c 5b 61 2c 63 2c 78 64 28 64 29 2c 65 5d 29 3a 4a 2e 72 65 6d 6f 76 65 28 63 61 29 29 3b 62 3f 6b 2e 24 61 70 70 6c 79 41 73 79 6e 63 28 67 29 3a 28 67 28 29 2c 6b 2e 24 24 70 68 61 73 65 7c 7c 6b 2e 24 61 70 70 6c 79 28 29 29 7d Data Ascii: ,function(a,d){c[d]=function(c){function d(){a(c)}b?k.$applyAsync(d):k.$$phase?d():k.$apply(d)}});return c}}function l(a,c,d,e){function g(){q(c,a,d,e)}J&&(200<=a&&300>a?J.put(ca,[a,c,xd(d),e]):J.remove(ca));b?k.$applyAsync(g):(g(),k.$$phase\|\|k.$apply())}
2024-07-03 12:36:43 UTC	408	IN	Data Raw: 74 75 72 6e 20 68 7d 2c 62 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 63 2c 64 29 7b 6c 3d 61 3b 45 28 62 29 26 26 62 28 61 2c 63 2c 64 29 3b 74 28 61 29 26 26 64 2e 24 24 70 6f 73 74 44 69 67 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6c 29 26 26 6b 28 29 7d 29 7d 76 61 72 20 6b 2c 6c 3b 72 65 74 75 72 6e 20 6b 3d 64 2e 69 6e 70 75 74 73 3f 67 28 61 2c 68 2c 63 2c 64 2c 65 29 3a 61 2e 24 77 61 74 63 68 28 66 2c 68 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 76 61 72 20 62 3d 21 30 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: turn h},b,c,e)}function k(a,b,c,d,e){function f(a){return d(a)}function h(a,c,d){l=a;E(b)&&b(a,c,d);t(a)&&d.$$postDigest(function(){t(l)&&k()})}var k,l;return k=d.inputs?g(a,h,c,d,e):a.$watch(f,h,c)}function h(a,b,c,d){function e(a){var b=!0;p(a,function(
2024-07-03 12:36:43 UTC	16384	IN	Data Raw: 28 29 7d 29 7d 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 24 77 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 65 28 29 3b 72 65 74 75 72 6e 20 64 28 61 29 7d 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 69 66 28 21 62 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 63 3d 61 2e 24 24 77 61 74 63 68 44 65 6c 65 67 61 74 65 2c 64 3d 21 31 2c 65 3d 63 21 3d 3d 68 26 26 63 21 3d 3d 6b 3f 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 67 2c 66 29 7b 67 3d 64 26 26 66 3f 66 5b 30 5d 3a 61 28 63 2c 65 2c 67 2c 66 29 3b 72 65 74 75 72 6e 20 62 28 67 2c 63 2c 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 67 29 7b 65 3d 61 28 63 2c 64 2c 65 2c 67 29 3b 63 3d 62 28 Data Ascii: ()})},c)}function l(a,b,c,d){var e=a.$watch(function(a){e();return d(a)},b,c);return e}function m(a,b){if(!b)return a;var c=a.$$watchDelegate,d=!1,e=c!==h&&c!==k?function(c,e,g,f){g=d&&f?f[0]:a(c,e,g,f);return b(g,c,e)}:function(c,d,e,g){e=a(c,d,e,g);c=b(
2024-07-03 12:36:43 UTC	16384	IN	Data Raw: 65 61 2e 70 72 6f 74 6f 63 6f 6c 3f 65 61 2e 70 72 6f 74 6f 63 6f 6c 2e 72 65 70 6c 61 63 65 28 2f 3a 24 2f 2c 22 22 29 3a 22 22 2c 68 6f 73 74 3a 65 61 2e 68 6f 73 74 2c 73 65 61 72 63 68 3a 65 61 2e 73 65 61 72 63 68 3f 65 61 2e 73 65 61 72 63 68 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 3f 2f 2c 22 22 29 3a 22 22 2c 68 61 73 68 3a 65 61 2e 68 61 73 68 3f 65 61 2e 68 61 73 68 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 3a 22 22 2c 68 6f 73 74 6e 61 6d 65 3a 65 61 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 65 61 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 22 2f 22 3d 3d 3d 65 61 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 3f 65 61 2e 70 61 74 68 6e 61 6d 65 3a 22 2f 22 2b 65 61 2e 70 61 74 68 6e 61 6d 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ea.protocol?ea.protocol.replace(/:$/,""):"",host:ea.host,search:ea.search?ea.search.replace(/^\?/,""):"",hash:ea.hash?ea.hash.replace(/^#/,""):"",hostname:ea.hostname,port:ea.port,pathname:"/"===ea.pathname.charAt(0)?ea.pathname:"/"+ea.pathname}}function
2024-07-03 12:36:43 UTC	16384	IN	Data Raw: 6c 29 7b 63 61 73 65 20 22 68 74 74 70 3a 22 3a 63 61 73 65 20 22 68 74 74 70 73 3a 22 3a 63 61 73 65 20 22 66 74 70 3a 22 3a 63 61 73 65 20 22 62 6c 6f 62 3a 22 3a 63 61 73 65 20 22 66 69 6c 65 3a 22 3a 63 61 73 65 20 22 64 61 74 61 3a 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 29 7d 28 78 2e 64 6f 63 75 6d 65 6e 74 29 2c 42 65 3d 2f 5b 41 2d 5a 5d 2f 67 2c 57 63 3d 21 31 2c 4d 61 3d 33 2c 47 65 3d 7b 66 75 6c 6c 3a 22 31 2e 36 2e 35 22 2c 6d 61 6a 6f 72 3a 31 2c 6d 69 6e 6f 72 3a 36 2c 64 6f 74 3a 35 2c 63 6f 64 65 4e 61 6d 65 3a 22 74 6f 66 66 65 65 2d 73 61 6c 69 6e 69 7a 61 74 69 6f 6e 22 7d 3b 53 2e 65 78 70 61 6e 64 6f 3d 22 6e 67 33 33 39 22 3b 76 61 72 20 6a 62 3d 53 2e 63 61 63 68 65 3d 7b 7d 2c 68 67 Data Ascii: l){case "http:":case "https:":case "ftp:":case "blob:":case "file:":case "data:":return!0;default:return!1}})}(x.document),Be=/[A-Z]/g,Wc=!1,Ma=3,Ge={full:"1.6.5",major:1,minor:6,dot:5,codeName:"toffee-salinization"};S.expando="ng339";var jb=S.cache={},hg
2024-07-03 12:36:43 UTC	16384	IN	Data Raw: 69 6e 64 65 78 3a 61 2c 0a 74 65 78 74 3a 74 68 69 73 2e 74 65 78 74 2e 73 6c 69 63 65 28 61 2c 74 68 69 73 2e 69 6e 64 65 78 29 2c 69 64 65 6e 74 69 66 69 65 72 3a 21 30 7d 29 7d 2c 72 65 61 64 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 69 6e 64 65 78 3b 74 68 69 73 2e 69 6e 64 65 78 2b 2b 3b 66 6f 72 28 76 61 72 20 64 3d 22 22 2c 63 3d 61 2c 65 3d 21 31 3b 74 68 69 73 2e 69 6e 64 65 78 3c 74 68 69 73 2e 74 65 78 74 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 74 65 78 74 2e 63 68 61 72 41 74 28 74 68 69 73 2e 69 6e 64 65 78 29 2c 63 3d 63 2b 66 3b 69 66 28 65 29 22 75 22 3d 3d 3d 66 3f 28 65 3d 74 68 69 73 2e 74 65 78 74 2e 73 75 62 73 74 72 69 6e 67 28 74 68 69 73 2e 69 6e 64 65 78 2b 31 Data Ascii: index:a,text:this.text.slice(a,this.index),identifier:!0})},readString:function(a){var b=this.index;this.index++;for(var d="",c=a,e=!1;this.index<this.text.length;){var f=this.text.charAt(this.index),c=c+f;if(e)"u"===f?(e=this.text.substring(this.index+1
2024-07-03 12:36:43 UTC	16384	IN	Data Raw: 6f 6e 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 3f 0a 7b 76 61 6c 75 65 3a 61 7d 3a 61 7d 3b 63 61 73 65 20 72 2e 4c 6f 63 61 6c 73 45 78 70 72 65 73 73 69 6f 6e 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 62 3f 7b 76 61 6c 75 65 3a 63 7d 3a 63 7d 3b 63 61 73 65 20 72 2e 4e 47 56 61 6c 75 65 50 61 72 61 6d 65 74 65 72 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 62 3f 7b 76 61 6c 75 65 3a 64 7d 3a 64 7d 7d 7d 2c 22 75 6e 61 72 79 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 65 2c 66 29 7b 64 3d 61 28 64 2c 63 2c 65 2c 66 29 3b 64 3d 74 28 64 29 3f 2b 64 3a 30 Data Ascii: on:return function(a){return b?{value:a}:a};case r.LocalsExpression:return function(a,c){return b?{value:c}:c};case r.NGValueParameter:return function(a,c,d){return b?{value:d}:d}}},"unary+":function(a,b){return function(d,c,e,f){d=a(d,c,e,f);d=t(d)?+d:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	49852	52.222.206.40	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:42 UTC	661	OUT	GET /live/campaign/js/b1f1cccccf.in-page-form.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:42 UTC	614	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 32249 Connection: close Last-Modified: Tue, 15 Nov 2022 13:49:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: hY1_lnZn_AySRgIuMTbR8NGU29qTq2nN Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 03 Jul 2024 12:17:06 GMT Cache-Control: public, max-age=3600 ETag: "b1f1cccccf3938858d7c39a323db038e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e45d812d65a0d0336b945e28b9381462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: dPCPMjFcDbX4m_q62McTNaGwRqYaAYr_ZXYpI6c3eld_6mK5H7Uf7A== Age: 1738
2024-07-03 12:36:42 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 65 2e 6d 3d 6e 2c 65 2e 63 3d 74 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 6f 29 7b 65 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(n){function e(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return n[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,o){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,
2024-07-03 12:36:42 UTC	15865	IN	Data Raw: 74 28 22 66 72 6f 6e 74 65 6e 64 2f 76 69 65 77 73 2f 66 6f 72 6d 2f 63 6f 6e 74 72 6f 6c 2f 63 6f 6d 6d 65 6e 74 2e 68 74 6d 6c 22 2c 27 3c 64 69 76 20 6e 67 2d 66 6f 72 6d 3d 22 66 6f 72 6d 22 20 6e 67 2d 69 6e 69 74 3d 22 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 20 3d 20 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 7c 7c 63 6f 6e 74 72 6f 6c 2e 64 65 66 61 75 6c 74 7c 7c 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 22 3e 5c 6e 20 20 20 20 3c 68 33 20 69 64 3d 22 7b 7b 20 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 20 7d 7d 22 20 6e 67 2d 69 66 3d 22 63 6f 6e 74 72 6f 6c 2e 74 69 74 6c 65 22 3e 7b 7b 63 6f 6e 74 72 6f 6c 2e 74 69 74 6c 65 7d 7d 3c 2f 68 33 3e 5c 6e 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 61 72 69 61 2d 6c 61 62 Data Ascii: t("frontend/views/form/control/comment.html",'<div ng-form="form" ng-init="data[control.name] = data[control.name]\|\|control.default\|\|data[control.name]">\n <h3 id="{{ control.name }}" ng-if="control.title">{{control.title}}</h3>\n <textarea aria-lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.9	49859	52.222.206.40	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:45 UTC	781	OUT	GET /themes/production/aruba-italy-aruba-2021-basic-sprite-7295ba7d35c48a17a3785d22e0ad07f0.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:45 UTC	593	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8240 Connection: close Date: Wed, 03 Jul 2024 12:36:46 GMT Last-Modified: Tue, 23 May 2023 15:25:54 GMT ETag: "7295ba7d35c48a17a3785d22e0ad07f0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: CqaHeIFMIPets07q7MOLbTnxknWpmEIh Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e45d812d65a0d0336b945e28b9381462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: noRxS0CySLQwvjOJqOC3DdYY35hqUyyA2rLe-NnqlYnnzIR5ZCybjg==
2024-07-03 12:36:45 UTC	8240	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 3c 00 00 01 5e 08 03 00 00 00 9f 3e 20 e7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 4c 69 71 fd c8 64 fc c8 63 ff cb 62 ff c8 64 fd c8 64 fe c8 64 d5 d7 dd cb cd d5 ca ce d4 ff c0 63 fd c8 63 fd c8 64 e2 ef 45 fd c8 65 fd c9 64 ff cb 63 fd c8 64 fd c8 64 fb c9 63 fb c7 64 ff cc 64 fc c8 64 ff ff ff fc c8 64 fc c8 63 fd c8 64 fc c9 64 ff c9 63 fd c8 64 fd c8 64 fd c8 64 ff c8 64 fd c7 64 fd c8 64 d2 d2 e4 fd c8 64 f2 f2 f5 f3 f3 f5 f3 f3 f6 fd c8 64 ff c8 65 fd c9 64 bb b2 ba fd c9 64 ff c7 62 ff d0 60 cb ce d7 fd c8 64 fd c8 64 14 74 bd ca ce d6 cd d0 d8 14 74 bd ff c6 65 fc c9 64 ff c8 64 cb ce d5 ee ef f0 14 74 bd fc c8 64 11 70 Data Ascii: PNGIHDR<^> gAMAasRGBPLTELiqdcbdddccdEedcddcddddcddcddddddddeddb`ddtteddtdp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.9	49861	76.76.21.21	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:46 UTC	584	OUT	GET /api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx HTTP/1.1 Host: docsbot.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://guide.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:46 UTC	509	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 191 Cache-Control: public Content-Length: 2596 Content-Type: application/json; charset=utf-8 Date: Wed, 03 Jul 2024 12:33:34 GMT Etag: "16yzuhkd7f21zx" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Matched-Path: /api/widget/[teamId]/[botId] X-Vercel-Cache: HIT X-Vercel-Id: iad1::pdx1::2mwgf-1720010206145-a97c8fe81a1b X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:36:46 UTC	2372	IN	Data Raw: 7b 22 62 6f 74 49 64 22 3a 22 79 65 4a 44 69 56 69 78 66 48 6f 35 79 4d 65 34 75 66 48 78 22 2c 22 74 65 61 6d 49 64 22 3a 22 64 4c 62 70 4d 43 46 78 66 30 44 55 35 33 4a 42 30 61 42 55 22 2c 22 62 6f 74 4e 61 6d 65 22 3a 22 41 72 75 62 61 20 41 49 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 73 73 69 73 74 65 6e 74 65 20 56 69 72 74 75 61 6c 65 20 41 72 75 62 61 22 2c 22 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 3a 5b 22 67 75 69 64 65 2e 64 65 76 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 68 6f 73 74 69 6e 67 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 73 65 72 76 65 72 64 65 64 69 63 61 74 69 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 70 65 63 2e 69 74 22 2c 22 6b 62 2e 64 Data Ascii: {"botId":"yeJDiVixfHo5yMe4ufHx","teamId":"dLbpMCFxf0DU53JB0aBU","botName":"Aruba AI","description":"Assistente Virtuale Aruba","allowedDomains":["guide.dev.aruba.it","guide.dev.hosting.aruba.it","guide.dev.serverdedicati.aruba.it","guide.dev.pec.it","kb.d
2024-07-03 12:36:46 UTC	224	IN	Data Raw: 73 22 3a 5b 22 43 6f 6d 65 20 66 61 63 63 69 6f 20 61 20 72 65 63 75 70 65 72 61 72 65 20 65 20 72 65 69 6d 70 6f 73 74 61 72 65 20 6c 65 20 63 72 65 64 65 6e 7a 69 61 6c 69 20 64 69 20 61 63 63 65 73 73 6f 3f 22 2c 22 43 6f 6d 65 20 66 61 63 63 69 6f 20 61 20 72 69 6e 6e 6f 76 61 72 65 20 69 20 73 65 72 76 69 7a 69 20 41 72 75 62 61 3f 22 2c 22 48 6f 20 70 61 67 61 74 6f 20 69 6c 20 73 65 72 76 69 7a 69 6f 20 6d 61 20 6e 6f 6e 20 c3 a8 20 61 6e 63 6f 72 61 20 61 74 74 69 76 6f 22 5d 2c 22 68 69 64 65 53 6f 75 72 63 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 68 65 61 64 65 72 41 6c 69 67 6e 6d 65 6e 74 22 3a 22 63 65 6e 74 65 72 22 7d Data Ascii: s":["Come faccio a recuperare e reimpostare le credenziali di accesso?","Come faccio a rinnovare i servizi Aruba?","Ho pagato il servizio ma non ancora attivo"],"hideSources":false,"logo":false,"headerAlignment":"center"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49862	18.239.15.219	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:46 UTC	442	OUT	GET /themes/production/aruba-italy-aruba-2021-basic-sprite-7295ba7d35c48a17a3785d22e0ad07f0.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:46 UTC	600	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8240 Connection: close Date: Wed, 03 Jul 2024 12:36:46 GMT Last-Modified: Tue, 23 May 2023 15:25:54 GMT ETag: "7295ba7d35c48a17a3785d22e0ad07f0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: CqaHeIFMIPets07q7MOLbTnxknWpmEIh Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 0bdea9339f79fea2216fd97b3f7856f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: J0Wrkl2BTGRG83fXb-MOaLxtTNzM5RHQM12KpvixUSlhDtdweHjJ7w== Age: 1
2024-07-03 12:36:46 UTC	8240	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 3c 00 00 01 5e 08 03 00 00 00 9f 3e 20 e7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 4c 69 71 fd c8 64 fc c8 63 ff cb 62 ff c8 64 fd c8 64 fe c8 64 d5 d7 dd cb cd d5 ca ce d4 ff c0 63 fd c8 63 fd c8 64 e2 ef 45 fd c8 65 fd c9 64 ff cb 63 fd c8 64 fd c8 64 fb c9 63 fb c7 64 ff cc 64 fc c8 64 ff ff ff fc c8 64 fc c8 63 fd c8 64 fc c9 64 ff c9 63 fd c8 64 fd c8 64 fd c8 64 ff c8 64 fd c7 64 fd c8 64 d2 d2 e4 fd c8 64 f2 f2 f5 f3 f3 f5 f3 f3 f6 fd c8 64 ff c8 65 fd c9 64 bb b2 ba fd c9 64 ff c7 62 ff d0 60 cb ce d7 fd c8 64 fd c8 64 14 74 bd ca ce d6 cd d0 d8 14 74 bd ff c6 65 fc c9 64 ff c8 64 cb ce d5 ee ef f0 14 74 bd fc c8 64 11 70 Data Ascii: PNGIHDR<^> gAMAasRGBPLTELiqdcbdddccdEedcddcddddcddcddddddddeddb`ddtteddtdp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.9	49865	76.76.21.21	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:47 UTC	386	OUT	GET /api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx HTTP/1.1 Host: docsbot.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:47 UTC	509	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 192 Cache-Control: public Content-Length: 2596 Content-Type: application/json; charset=utf-8 Date: Wed, 03 Jul 2024 12:33:34 GMT Etag: "16yzuhkd7f21zx" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Matched-Path: /api/widget/[teamId]/[botId] X-Vercel-Cache: HIT X-Vercel-Id: iad1::pdx1::8k7zr-1720010207253-d441318f5738 X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:36:47 UTC	2372	IN	Data Raw: 7b 22 62 6f 74 49 64 22 3a 22 79 65 4a 44 69 56 69 78 66 48 6f 35 79 4d 65 34 75 66 48 78 22 2c 22 74 65 61 6d 49 64 22 3a 22 64 4c 62 70 4d 43 46 78 66 30 44 55 35 33 4a 42 30 61 42 55 22 2c 22 62 6f 74 4e 61 6d 65 22 3a 22 41 72 75 62 61 20 41 49 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 73 73 69 73 74 65 6e 74 65 20 56 69 72 74 75 61 6c 65 20 41 72 75 62 61 22 2c 22 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 3a 5b 22 67 75 69 64 65 2e 64 65 76 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 68 6f 73 74 69 6e 67 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 73 65 72 76 65 72 64 65 64 69 63 61 74 69 2e 61 72 75 62 61 2e 69 74 22 2c 22 67 75 69 64 65 2e 64 65 76 2e 70 65 63 2e 69 74 22 2c 22 6b 62 2e 64 Data Ascii: {"botId":"yeJDiVixfHo5yMe4ufHx","teamId":"dLbpMCFxf0DU53JB0aBU","botName":"Aruba AI","description":"Assistente Virtuale Aruba","allowedDomains":["guide.dev.aruba.it","guide.dev.hosting.aruba.it","guide.dev.serverdedicati.aruba.it","guide.dev.pec.it","kb.d
2024-07-03 12:36:47 UTC	224	IN	Data Raw: 73 22 3a 5b 22 43 6f 6d 65 20 66 61 63 63 69 6f 20 61 20 72 65 63 75 70 65 72 61 72 65 20 65 20 72 65 69 6d 70 6f 73 74 61 72 65 20 6c 65 20 63 72 65 64 65 6e 7a 69 61 6c 69 20 64 69 20 61 63 63 65 73 73 6f 3f 22 2c 22 43 6f 6d 65 20 66 61 63 63 69 6f 20 61 20 72 69 6e 6e 6f 76 61 72 65 20 69 20 73 65 72 76 69 7a 69 20 41 72 75 62 61 3f 22 2c 22 48 6f 20 70 61 67 61 74 6f 20 69 6c 20 73 65 72 76 69 7a 69 6f 20 6d 61 20 6e 6f 6e 20 c3 a8 20 61 6e 63 6f 72 61 20 61 74 74 69 76 6f 22 5d 2c 22 68 69 64 65 53 6f 75 72 63 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 68 65 61 64 65 72 41 6c 69 67 6e 6d 65 6e 74 22 3a 22 63 65 6e 74 65 72 22 7d Data Ascii: s":["Come faccio a recuperare e reimpostare le credenziali di accesso?","Come faccio a rinnovare i servizi Aruba?","Ho pagato il servizio ma non ancora attivo"],"hideSources":false,"logo":false,"headerAlignment":"center"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49864	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:47 UTC	690	OUT	GET /teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media HTTP/1.1 Host: cdn.docsbot.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:48 UTC	1367	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:48 GMT Content-Type: image/png Content-Length: 459 Connection: close Server: BunnyCDN-DE1-1081 CDN-PullZone: 1355836 CDN-Uid: 586c95b4-b0f2-4c0b-9ebf-6dec61bb17d2 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Type Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: max-age=0, private ETag: "10b1d7e81719234ac5909afcfc97481a" Expires: Wed, 03 Jul 2024 12:36:48 GMT Last-Modified: Thu, 18 Apr 2024 13:33:15 GMT x-goog-generation: 1713447195089071 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 459 x-goog-meta-firebaseStorageDownloadTokens: 5dfc3da4-1b26-444f-bf04-df170e70dbed x-goog-hash: crc32c=Sb4T6w== x-goog-hash: md5=ELHX6BcZI0rFkJr8/JdIGg== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0Nq11r1nTUIahd7J5myYZVUaq8TjgKyWAnDBSXVW2He_EDCnGLJtyXejm4AwMkJMNadZWXs Content-Disposition: inline; filename*=utf-8''8c6a0757-e53e-4e4f-a431-7b983cf93c64.png CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:36:48 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: 76d611c26a32fa5549292c1007956e00 CDN-Cache: MISS
2024-07-03 12:36:48 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 60 49 44 41 54 78 01 b5 55 81 71 83 30 0c 94 73 1d 80 11 9c 09 ca 06 b0 41 bb 41 19 a1 9d 20 6c d0 15 da 0d b2 41 c2 04 c9 06 ce 06 b0 81 22 9d c5 c5 e7 b3 8d 4d c8 df e9 00 5b d2 4b b6 90 14 24 80 88 15 3d 3e 49 1a 92 96 a4 12 61 5c 45 06 a5 d4 1f 94 82 9d 93 1c 48 46 cc 83 61 fd 12 02 2d 46 6b 60 d8 7e 89 a0 2e 88 3e 06 b6 af 53 19 3c 4b e0 12 e9 10 89 c1 6d 61 d0 16 0e ec 84 80 2f 4d c3 b6 d0 24 df fc a2 e6 2c 60 7b 12 c6 44 b2 67 82 2e 94 e2 5a a0 bd 5b 17 1d 1f 57 e3 e8 dc e8 c7 9a e0 09 90 fd cd Data Ascii: PNGIHDRcpHYssRGBgAMAa`IDATxUq0sAA lA"M[K$=>Ia\EHFa-Fk`~.>S<Kma/M$,`{Dg.Z[W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49880	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:50 UTC	603	OUT	GET /piwik.js HTTP/1.1 Host: wa.aruba.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "10433-60215868a67c7" If-Modified-Since: Fri, 04 Aug 2023 09:28:55 GMT
2024-07-03 12:36:50 UTC	196	IN	HTTP/1.1 304 Not Modified Date: Wed, 03 Jul 2024 12:36:50 GMT Server: Apache Connection: close ETag: "10433-60215868a67c7" Expires: Wed, 03 Jul 2024 12:36:50 GMT Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49898	52.50.116.41	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:53 UTC	581	OUT	GET /6c82bc643068.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c7e6eceb4b71f7ef8f3d3d2c490d9079"
2024-07-03 12:36:53 UTC	200	IN	HTTP/1.1 304 Not Modified Date: Wed, 03 Jul 2024 12:36:53 GMT Connection: close Cache-Control: public,max-age=0 Etag: "c7e6eceb4b71f7ef8f3d3d2c490d9079" Pragma: no-cache X-Widget-Server: 2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49901	52.50.116.41	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:53 UTC	579	OUT	GET /ce67dfba33a7.js?s1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26925379d0256277f2beda1851f94de9"
2024-07-03 12:36:53 UTC	200	IN	HTTP/1.1 304 Not Modified Date: Wed, 03 Jul 2024 12:36:53 GMT Connection: close Cache-Control: public,max-age=0 Etag: "26925379d0256277f2beda1851f94de9" Pragma: no-cache X-Widget-Server: 2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.9	49892	169.150.247.39	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:53 UTC	458	OUT	GET /teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media HTTP/1.1 Host: cdn.docsbot.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:53 UTC	1367	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:53 GMT Content-Type: image/png Content-Length: 459 Connection: close Server: BunnyCDN-DE1-1082 CDN-PullZone: 1355836 CDN-Uid: 586c95b4-b0f2-4c0b-9ebf-6dec61bb17d2 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Type Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: max-age=0, private ETag: "10b1d7e81719234ac5909afcfc97481a" Expires: Wed, 03 Jul 2024 12:36:53 GMT Last-Modified: Thu, 18 Apr 2024 13:33:15 GMT x-goog-generation: 1713447195089071 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 459 x-goog-meta-firebaseStorageDownloadTokens: 5dfc3da4-1b26-444f-bf04-df170e70dbed x-goog-hash: crc32c=Sb4T6w== x-goog-hash: md5=ELHX6BcZI0rFkJr8/JdIGg== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0NqjZ_YVZp_sBmGyT4eGYbXSeKZktDAyag0EkG51780Sj3cxaboyENbXQ_pZTozqTU7AE20 Content-Disposition: inline; filename*=utf-8''8c6a0757-e53e-4e4f-a431-7b983cf93c64.png CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:36:53 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: 1a713da76a6e1efb600425b3e1ba6229 CDN-Cache: MISS
2024-07-03 12:36:53 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 60 49 44 41 54 78 01 b5 55 81 71 83 30 0c 94 73 1d 80 11 9c 09 ca 06 b0 41 bb 41 19 a1 9d 20 6c d0 15 da 0d b2 41 c2 04 c9 06 ce 06 b0 81 22 9d c5 c5 e7 b3 8d 4d c8 df e9 00 5b d2 4b b6 90 14 24 80 88 15 3d 3e 49 1a 92 96 a4 12 61 5c 45 06 a5 d4 1f 94 82 9d 93 1c 48 46 cc 83 61 fd 12 02 2d 46 6b 60 d8 7e 89 a0 2e 88 3e 06 b6 af 53 19 3c 4b e0 12 e9 10 89 c1 6d 61 d0 16 0e ec 84 80 2f 4d c3 b6 d0 24 df fc a2 e6 2c 60 7b 12 c6 44 b2 67 82 2e 94 e2 5a a0 bd 5b 17 1d 1f 57 e3 e8 dc e8 c7 9a e0 09 90 fd cd Data Ascii: PNGIHDRcpHYssRGBgAMAa`IDATxUq0sAA lA"M[K$=>Ia\EHFa-Fk`~.>S<Kma/M$,`{Dg.Z[W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.9	49905	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:54 UTC	1509	OUT	POST /piwik.php?action_name=App%20Aruba%20OTP%3A%20come%20riconfigurarla%20in%20caso%20di%20problemi%20o%20cambio%20di%20telefono%2Ftablet%20%7C%20Guide%20pec.it&idsite=40&rec=1&r=194324&h=8&m=36&s=49&url=https%3A%2F%2Fguide.pec.it%2Fsoluzioni-firma-digitale%2Ffirma-remota%2Friconfigurare-app-aruba-otp.aspx&_id=a4896a26507eaf63&_idn=0&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=k2yXhB&devicePixelRatio=1&pf_net=538&pf_srv=458&pf_tfr=384&pf_dm1=1499&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: wa.aruba.it Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://guide.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:36:54 UTC	253	IN	HTTP/1.1 204 No Response Date: Wed, 03 Jul 2024 12:36:54 GMT Server: Apache Connection: close Content-Encoding: none Cache-Control: max-age=0 Expires: Wed, 03 Jul 2024 12:36:54 GMT Header: wa01.aruba.it Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49914	76.76.21.21	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:56 UTC	617	OUT	GET /api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx HTTP/1.1 Host: docsbot.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://guide.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "16yzuhkd7f21zx"
2024-07-03 12:36:56 UTC	228	IN	HTTP/1.1 304 Not Modified Cache-Control: public Date: Wed, 03 Jul 2024 12:33:34 GMT Etag: "16yzuhkd7f21zx" Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::pdx1::qcv5m-1720010216664-f19176d71de0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.9	49917	76.76.21.21	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:57 UTC	419	OUT	GET /api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx HTTP/1.1 Host: docsbot.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "16yzuhkd7f21zx"
2024-07-03 12:36:57 UTC	228	IN	HTTP/1.1 304 Not Modified Cache-Control: public Date: Wed, 03 Jul 2024 12:33:34 GMT Etag: "16yzuhkd7f21zx" Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::pdx1::9426v-1720010217347-0a7ef3e0b56c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.9	49916	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:57 UTC	791	OUT	GET /teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media HTTP/1.1 Host: cdn.docsbot.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://guide.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "10b1d7e81719234ac5909afcfc97481a" If-Modified-Since: Thu, 18 Apr 2024 13:33:15 GMT
2024-07-03 12:36:58 UTC	1367	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:58 GMT Content-Type: image/png Content-Length: 459 Connection: close Server: BunnyCDN-DE1-1081 CDN-PullZone: 1355836 CDN-Uid: 586c95b4-b0f2-4c0b-9ebf-6dec61bb17d2 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Type Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: max-age=0, private ETag: "10b1d7e81719234ac5909afcfc97481a" Expires: Wed, 03 Jul 2024 12:36:57 GMT Last-Modified: Thu, 18 Apr 2024 13:33:15 GMT x-goog-generation: 1713447195089071 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 459 x-goog-meta-firebaseStorageDownloadTokens: 5dfc3da4-1b26-444f-bf04-df170e70dbed x-goog-hash: crc32c=Sb4T6w== x-goog-hash: md5=ELHX6BcZI0rFkJr8/JdIGg== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0Nq4r70GdTQgwkp7xrSXt1S61LUg6Sxi62_HYIzxhNnkRZAaPPz-S5oGW83UOuhzqx2W8dM Content-Disposition: inline; filename*=utf-8''8c6a0757-e53e-4e4f-a431-7b983cf93c64.png CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:36:58 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: f8279cdb0e195f44a7822b2c4af774f5 CDN-Cache: MISS
2024-07-03 12:36:58 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 60 49 44 41 54 78 01 b5 55 81 71 83 30 0c 94 73 1d 80 11 9c 09 ca 06 b0 41 bb 41 19 a1 9d 20 6c d0 15 da 0d b2 41 c2 04 c9 06 ce 06 b0 81 22 9d c5 c5 e7 b3 8d 4d c8 df e9 00 5b d2 4b b6 90 14 24 80 88 15 3d 3e 49 1a 92 96 a4 12 61 5c 45 06 a5 d4 1f 94 82 9d 93 1c 48 46 cc 83 61 fd 12 02 2d 46 6b 60 d8 7e 89 a0 2e 88 3e 06 b6 af 53 19 3c 4b e0 12 e9 10 89 c1 6d 61 d0 16 0e ec 84 80 2f 4d c3 b6 d0 24 df fc a2 e6 2c 60 7b 12 c6 44 b2 67 82 2e 94 e2 5a a0 bd 5b 17 1d 1f 57 e3 e8 dc e8 c7 9a e0 09 90 fd cd Data Ascii: PNGIHDRcpHYssRGBgAMAa`IDATxUq0sAA lA"M[K$=>Ia\EHFa-Fk`~.>S<Kma/M$,`{Dg.Z[W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49920	169.150.247.39	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:36:58 UTC	559	OUT	GET /teams%2FdLbpMCFxf0DU53JB0aBU%2Fbots%2FyeJDiVixfHo5yMe4ufHx%2Fimages%2F8c6a0757-e53e-4e4f-a431-7b983cf93c64.png?alt=media HTTP/1.1 Host: cdn.docsbot.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "10b1d7e81719234ac5909afcfc97481a" If-Modified-Since: Thu, 18 Apr 2024 13:33:15 GMT
2024-07-03 12:36:59 UTC	1367	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:36:59 GMT Content-Type: image/png Content-Length: 459 Connection: close Server: BunnyCDN-DE1-1082 CDN-PullZone: 1355836 CDN-Uid: 586c95b4-b0f2-4c0b-9ebf-6dec61bb17d2 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Type Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: max-age=0, private ETag: "10b1d7e81719234ac5909afcfc97481a" Expires: Wed, 03 Jul 2024 12:36:59 GMT Last-Modified: Thu, 18 Apr 2024 13:33:15 GMT x-goog-generation: 1713447195089071 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 459 x-goog-meta-firebaseStorageDownloadTokens: 5dfc3da4-1b26-444f-bf04-df170e70dbed x-goog-hash: crc32c=Sb4T6w== x-goog-hash: md5=ELHX6BcZI0rFkJr8/JdIGg== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0NrSVoKY1AfrJRJFmJd0clRjeODRKw1geQfcSXQE8BRok-gePC4_YxENq8hK_l4bAMwFrxU Content-Disposition: inline; filename*=utf-8''8c6a0757-e53e-4e4f-a431-7b983cf93c64.png CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:36:59 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: 5d40035931a5bff69399c6acd0cb0fdd CDN-Cache: MISS
2024-07-03 12:36:59 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 60 49 44 41 54 78 01 b5 55 81 71 83 30 0c 94 73 1d 80 11 9c 09 ca 06 b0 41 bb 41 19 a1 9d 20 6c d0 15 da 0d b2 41 c2 04 c9 06 ce 06 b0 81 22 9d c5 c5 e7 b3 8d 4d c8 df e9 00 5b d2 4b b6 90 14 24 80 88 15 3d 3e 49 1a 92 96 a4 12 61 5c 45 06 a5 d4 1f 94 82 9d 93 1c 48 46 cc 83 61 fd 12 02 2d 46 6b 60 d8 7e 89 a0 2e 88 3e 06 b6 af 53 19 3c 4b e0 12 e9 10 89 c1 6d 61 d0 16 0e ec 84 80 2f 4d c3 b6 d0 24 df fc a2 e6 2c 60 7b 12 c6 44 b2 67 82 2e 94 e2 5a a0 bd 5b 17 1d 1f 57 e3 e8 dc e8 c7 9a e0 09 90 fd cd Data Ascii: PNGIHDRcpHYssRGBgAMAa`IDATxUq0sAA lA"M[K$=>Ia\EHFa-Fk`~.>S<Kma/M$,`{Dg.Z[W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49961	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:12 UTC	625	OUT	GET /uc.js?cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&implementation=gtm&consentmode-dataredaction=dynamic&culture=it HTTP/1.1 Host: consent.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:13 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1081 CDN-PullZone: 673261 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Access-Control-Expose-Headers: Request-Context Cache-Control: public, max-age=0 ETag: W/"83a342b673c8da1:0" Last-Modified: Thu, 27 Jun 2024 09:23:46 GMT Request-Context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef Cross-Origin-Resource-Policy: cross-origin CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:37:13 CDN-EdgeStorageId: 1079 CDN-Status: 200 CDN-RequestId: 3fb924104f09210ba02119edc8caea89 CDN-Cache: BYPASS
2024-07-03 12:37:13 UTC	15606	IN	Data Raw: 63 30 35 62 0d 0a 2f 2f 20 32 2e 36 39 2e 30 20 2d 20 32 30 32 34 2d 30 36 2d 32 37 54 30 39 3a 32 31 3a 30 35 2e 39 34 39 5a 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 69 6e 61 6c 6c 79 43 6f 6e 73 74 72 75 63 74 6f 72 28 63 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 72 65 73 6f 6c 76 65 28 63 61 6c 6c 62 61 63 6b 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 61 6c 75 65 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 72 65 61 73 6f 6e 29 7b 72 65 74 Data Ascii: c05b// 2.69.0 - 2024-06-27T09:21:05.949Z!function(){function finallyConstructor(callback){var constructor=this.constructor;return this.then((function(value){return constructor.resolve(callback()).then((function(){return value}))}),(function(reason){ret
2024-07-03 12:37:13 UTC	16384	IN	Data Raw: 65 73 46 72 6f 6d 53 74 72 69 6e 67 41 72 72 61 79 28 63 61 74 65 67 6f 72 79 53 74 72 69 6e 67 73 29 7b 66 6f 72 28 76 61 72 20 63 61 74 65 67 6f 72 79 4e 75 6d 62 65 72 41 72 72 61 79 3d 5b 5d 2c 69 3d 30 3b 69 3c 63 61 74 65 67 6f 72 79 53 74 72 69 6e 67 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 63 61 74 65 67 6f 72 79 53 74 72 69 6e 67 3d 63 61 74 65 67 6f 72 79 53 74 72 69 6e 67 73 5b 69 5d 3b 73 77 69 74 63 68 28 63 61 74 65 67 6f 72 79 53 74 72 69 6e 67 29 7b 63 61 73 65 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 63 61 74 65 67 6f 72 79 4e 75 6d 62 65 72 41 72 72 61 79 2e 70 75 73 68 28 32 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 74 61 74 69 73 74 69 63 73 22 3a 63 61 74 65 67 6f 72 79 4e 75 6d 62 65 72 41 72 72 61 79 2e 70 75 73 68 28 Data Ascii: esFromStringArray(categoryStrings){for(var categoryNumberArray=[],i=0;i<categoryStrings.length;i++){var categoryString=categoryStrings[i];switch(categoryString){case"preferences":categoryNumberArray.push(2);break;case"statistics":categoryNumberArray.push(
2024-07-03 12:37:13 UTC	16384	IN	Data Raw: 74 61 67 50 61 72 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 61 67 43 6c 6f 6e 65 2c 6e 6f 64 65 29 2c 74 61 67 50 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 6f 64 65 29 29 7d 7d 65 6c 73 65 20 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 49 4d 47 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 45 4d 42 45 44 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 56 49 44 45 4f 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 41 55 44 49 4f 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 50 49 43 54 55 52 45 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 53 4f 55 52 43 45 22 3d 3d 3d 6e 6f 64 65 2e 74 61 67 4e 61 6d 65 29 7b 69 66 28 21 69 73 50 6f 73 Data Ascii: tagParent.insertBefore(tagClone,node),tagParent.removeChild(node))}}else if("IFRAME"===node.tagName\|\|"IMG"===node.tagName\|\|"EMBED"===node.tagName\|\|"VIDEO"===node.tagName\|\|"AUDIO"===node.tagName\|\|"PICTURE"===node.tagName\|\|"SOURCE"===node.tagName){if(!isPos
2024-07-03 12:37:13 UTC	877	IN	Data Raw: 29 29 64 3d 61 73 73 75 6d 65 64 43 6f 6f 6b 69 65 62 6f 74 53 63 72 69 70 74 2c 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3f 74 68 69 73 2e 73 63 72 69 70 74 49 64 3d 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3a 64 2e 69 64 3d 74 68 69 73 2e 73 63 72 69 70 74 49 64 3b 65 6c 73 65 20 69 66 28 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 68 69 73 2e 73 63 72 69 70 74 49 64 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 29 2c 64 29 74 68 69 73 2e 73 63 72 69 70 74 49 64 3d 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 74 61 67 73 41 6c 6c 3d 64 6f 63 75 Data Ascii: ))d=assumedCookiebotScript,d.hasAttribute("id")?this.scriptId=d.getAttribute("id"):d.id=this.scriptId;else if(d=document.getElementById(this.scriptId)\|\|document.getElementById("CookieConsent"),d)this.scriptId=d.getAttribute("id");else for(var tagsAll=docu
2024-07-03 12:37:13 UTC	16384	IN	Data Raw: 64 62 39 38 0d 0a 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 64 2e 73 72 63 2e 6d 61 74 63 68 28 2f 3a 5c 2f 5c 2f 28 2e 5b 5e 2f 5d 2b 29 2f 29 5b 31 5d 2b 22 2f 22 2c 68 6f 73 74 48 61 73 53 75 66 66 69 78 28 74 68 69 73 2e 68 6f 73 74 2c 22 63 6f 6f 6b 69 65 62 6f 74 2e 65 75 2f 22 29 3f 28 74 68 69 73 2e 43 44 4e 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 63 64 6e 2e 63 6f 6f 6b 69 65 62 6f 74 2e 65 75 22 2c 74 68 69 73 2e 63 6f 6d 70 75 74 65 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 75 73 65 42 75 6e 6e 79 3d 21 30 29 3a 74 68 69 73 2e 43 44 4e 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 63 64 6e 2e 63 6f 6f 6b 69 65 62 6f 74 2e 63 6f 6d 22 3b 76 61 72 20 65 3d 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 62 69 64 22 Data Ascii: db98="https://"+d.src.match(/:\/\/(.[^/]+)/)[1]+"/",hostHasSuffix(this.host,"cookiebot.eu/")?(this.CDN="https://consentcdn.cookiebot.eu",this.computedConfiguration.useBunny=!0):this.CDN="https://consentcdn.cookiebot.com";var e=d.getAttribute("data-cbid"
2024-07-03 12:37:13 UTC	16384	IN	Data Raw: 6c 6b 72 65 73 65 74 64 6f 6d 61 69 6e 73 3d 5b 5d 7d 63 61 74 63 68 28 65 29 7b 7d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 69 66 72 61 6d 65 52 65 61 64 79 3d 21 30 7d 7d 2c 74 68 69 73 2e 63 68 65 63 6b 46 6f 72 42 75 6c 6b 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 68 61 74 3d 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 69 66 72 61 6d 65 52 65 61 64 79 26 26 74 68 69 73 2e 62 75 6c 6b 43 6f 6e 73 65 6e 74 46 72 61 6d 65 52 65 74 72 79 43 6f 75 6e 74 65 72 3c 34 30 29 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 6c 6b 43 6f 6e 73 65 6e 74 46 72 61 6d 65 52 65 74 72 79 43 6f 75 6e 74 65 72 2b 2b 2c 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 61 74 2e 63 68 65 63 Data Ascii: lkresetdomains=[]}catch(e){}window.CookieConsent.iframeReady=!0}},this.checkForBulkConsent=function(){var that=this;if(!this.iframeReady&&this.bulkConsentFrameRetryCounter<40)return this.bulkConsentFrameRetryCounter++,void setTimeout((function(){that.chec
2024-07-03 12:37:13 UTC	16384	IN	Data Raw: 43 6f 6e 73 65 6e 74 4d 6f 64 65 44 69 73 61 62 6c 65 64 7c 7c 28 74 68 69 73 2e 70 75 73 68 47 6f 6f 67 6c 65 43 6f 6e 73 65 6e 74 28 22 63 6f 6e 73 65 6e 74 22 2c 22 75 70 64 61 74 65 22 2c 7b 61 64 5f 73 74 6f 72 61 67 65 3a 63 6f 6e 73 65 6e 74 4d 61 72 6b 65 74 69 6e 67 3f 22 67 72 61 6e 74 65 64 22 3a 22 64 65 6e 69 65 64 22 2c 61 64 5f 75 73 65 72 5f 64 61 74 61 3a 63 6f 6e 73 65 6e 74 4d 61 72 6b 65 74 69 6e 67 3f 22 67 72 61 6e 74 65 64 22 3a 22 64 65 6e 69 65 64 22 2c 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 3a 63 6f 6e 73 65 6e 74 4d 61 72 6b 65 74 69 6e 67 3f 22 67 72 61 6e 74 65 64 22 3a 22 64 65 6e 69 65 64 22 2c 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 3a 63 6f 6e 73 65 6e 74 53 74 61 74 69 73 74 69 63 73 3f 22 67 72 Data Ascii: ConsentModeDisabled\|\|(this.pushGoogleConsent("consent","update",{ad_storage:consentMarketing?"granted":"denied",ad_user_data:consentMarketing?"granted":"denied",ad_personalization:consentMarketing?"granted":"denied",analytics_storage:consentStatistics?"gr
2024-07-03 12:37:13 UTC	13450	IN	Data Raw: 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 49 41 42 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 3d 22 22 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 41 42 43 4d 50 26 26 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 41 42 43 4d 50 2e 65 6e 63 6f 64 65 47 41 43 4d 53 74 72 69 6e 67 26 26 6c 61 74 65 73 74 54 63 44 61 74 61 2e 61 64 64 74 6c 43 6f 6e 73 65 6e 74 3f 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 47 41 43 4d 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 41 42 43 4d 50 2e 65 6e 63 6f 64 65 47 41 43 4d 53 74 72 69 6e 67 28 6c 61 74 65 73 74 54 63 44 61 74 61 2e 61 64 64 74 6c 43 Data Ascii: ow.CookieConsent.IABConsentString="","object"==typeof window.CookieConsentIABCMP&&window.CookieConsentIABCMP.encodeGACMString&&latestTcData.addtlConsent?window.CookieConsent.GACMConsentString=window.CookieConsentIABCMP.encodeGACMString(latestTcData.addtlC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.9	49965	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:14 UTC	619	OUT	GET /171bc42f-3eec-4afe-be43-f3c81c141fa7/cc.js?renew=false&referer=www.pec.it&dnt=false&init=false&culture=it HTTP/1.1 Host: consent.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:14 UTC	766	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:14 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1081 CDN-PullZone: 673261 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Access-Control-Expose-Headers: Request-Context Cache-Control: public, max-age=0 Last-Modified: Wed, 03 Jul 2024 12:37:14 GMT Request-Context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef Cross-Origin-Resource-Policy: cross-origin CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:37:14 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: b4a5a8cf373dab1a60e3934f97a7b7d8 CDN-Cache: BYPASS
2024-07-03 12:37:14 UTC	15618	IN	Data Raw: 64 64 32 66 0d 0a 2f 2f 20 32 2e 36 39 2e 30 20 2d 20 32 30 32 34 2d 30 36 2d 32 37 54 30 39 3a 32 31 3a 30 35 2e 39 34 39 5a 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 29 7b 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 5b 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 2e 45 6c 65 6d 65 6e 74 61 6c 43 75 73 74 6f 6d 3d 31 5d 3d 22 45 6c 65 6d 65 6e 74 61 6c 43 75 73 74 6f 6d 22 2c 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 5b 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 2e 53 77 69 66 74 3d 32 5d 3d 22 53 77 69 66 74 22 7d 28 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 7c 7c 28 44 69 61 6c 6f 67 56 65 72 73 69 6f 6e 3d 7b 7d 29 29 3b 76 61 72 20 63 73 73 3d 27 23 43 Data Ascii: dd2f// 2.69.0 - 2024-06-27T09:21:05.949Z!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#C
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 6c 6c 6f 77 65 64 47 6f 6f 67 6c 65 41 43 56 65 6e 64 6f 72 73 29 7b 69 66 28 61 6c 6c 6f 77 65 64 47 6f 6f 67 6c 65 50 61 72 74 6e 65 72 73 3d 5b 5d 2c 69 6e 6c 69 6e 65 43 6f 6e 66 69 67 2e 41 6c 6c 6f 77 65 64 47 6f 6f 67 6c 65 41 43 56 65 6e 64 6f 72 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 64 69 61 6c 6f 67 2e 67 6f 6f 67 6c 65 50 61 72 74 6e 65 72 73 53 6f 72 74 65 64 49 64 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 69 6e 6c 69 6e 65 43 6f 6e 66 69 67 2e 41 6c 6c 6f 77 65 64 47 6f 6f 67 6c 65 41 43 56 65 6e 64 6f 72 73 2e 69 6e 64 65 78 4f 66 28 64 69 61 6c 6f 67 2e 67 6f 6f 67 6c 65 50 61 72 74 6e 65 72 73 53 6f 72 74 65 64 49 64 73 5b 6e 5d 29 3e 3d 30 29 7b 76 61 72 20 61 6c 6c 6f 77 65 64 47 6f 6f 67 6c 65 Data Ascii: llowedGoogleACVendors){if(allowedGooglePartners=[],inlineConfig.AllowedGoogleACVendors.length>0)for(var n=0;n<dialog.googlePartnersSortedIds.length;n++)if(inlineConfig.AllowedGoogleACVendors.indexOf(dialog.googlePartnersSortedIds[n])>=0){var allowedGoogle
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 69 63 79 55 52 4c 2b 22 27 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 61 72 69 61 2d 6c 61 62 65 6c 3d 27 22 2b 64 69 61 6c 6f 67 2e 49 41 42 52 65 73 6f 75 72 63 65 53 74 72 69 6e 67 73 2e 70 6f 6c 69 63 79 55 52 4c 2b 22 20 2d 20 22 2b 64 69 61 6c 6f 67 2e 6f 70 65 6e 73 49 6e 4e 65 77 57 69 6e 64 6f 77 54 65 78 74 2b 22 27 22 2c 76 65 6e 64 6f 72 43 6f 6e 74 65 6e 74 2b 3d 22 20 72 65 6c 3d 27 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 20 6e 6f 66 6f 6c 6c 6f 77 27 20 73 74 79 6c 65 3d 27 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 27 3e 22 2c 76 65 6e 64 6f 72 43 6f 6e 74 65 6e 74 2b 3d 70 6f 6c 69 63 79 55 52 4c 2b 65 78 74 65 72 6e 61 6c 4c 69 6e 6b 49 63 6f Data Ascii: icyURL+"' target='_blank' aria-label='"+dialog.IABResourceStrings.policyURL+" - "+dialog.opensInNewWindowText+"'",vendorContent+=" rel='noopener noreferrer nofollow' style='margin-top: 0; word-break: break-word;'>",vendorContent+=policyURL+externalLinkIco
2024-07-03 12:37:14 UTC	8245	IN	Data Raw: 39 37 37 43 34 2e 36 31 39 37 37 20 33 2e 31 32 36 36 33 20 38 2e 37 37 33 31 20 30 2e 36 36 36 36 32 36 20 31 33 2e 34 39 39 38 20 30 2e 36 36 36 36 32 36 43 31 38 2e 36 39 39 38 20 30 2e 36 36 36 36 32 36 20 32 33 2e 31 39 39 38 20 33 2e 36 35 33 32 39 20 32 35 2e 33 39 33 31 20 37 2e 39 39 39 39 36 5a 22 20 66 69 6c 6c 3d 22 23 46 34 34 33 33 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 2e 32 37 31 39 37 20 36 2e 38 34 32 36 35 4c 38 2e 31 36 37 33 31 20 31 36 2e 37 35 30 37 4c 31 31 2e 35 20 31 36 4c 32 2e 32 37 31 39 37 20 36 2e 38 34 32 36 35 5a 22 20 66 69 6c 6c 3d 22 23 44 44 32 43 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 39 33 38 20 32 37 2e 33 33 33 33 4c 31 38 2e 38 39 34 20 31 36 2e 36 32 37 33 4c 31 36 2e 31 36 36 37 20 31 34 2e Data Ascii: 977C4.61977 3.12663 8.7731 0.666626 13.4998 0.666626C18.6998 0.666626 23.1998 3.65329 25.3931 7.99996Z" fill="#F44336"/><path d="M2.27197 6.84265L8.16731 16.7507L11.5 16L2.27197 6.84265Z" fill="#DD2C00"/><path d="M12.938 27.3333L18.894 16.6273L16.1667 14.
2024-07-03 12:37:14 UTC	502	IN	Data Raw: 31 65 66 0d 0a 20 30 2e 32 35 30 36 33 34 20 31 37 2e 37 30 37 39 20 30 2e 32 35 31 33 32 31 43 31 37 2e 37 30 35 39 20 30 2e 32 35 32 30 30 39 20 31 37 2e 37 30 31 34 20 30 2e 32 35 35 31 30 33 20 31 37 2e 36 39 38 33 20 30 2e 32 35 36 34 37 39 43 31 37 2e 31 38 32 39 20 30 2e 35 30 30 39 33 37 20 31 34 2e 31 32 36 20 35 2e 33 34 31 36 33 20 31 38 2e 32 36 39 31 20 39 2e 34 38 31 32 36 4c 31 38 2e 32 36 37 33 20 39 2e 34 38 37 31 31 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 38 5f 72 61 64 69 61 6c 5f 36 32 37 5f 31 31 33 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 37 30 34 36 20 31 31 2e 32 36 38 32 43 31 39 2e 36 34 36 35 20 31 31 2e 32 31 34 39 20 31 39 2e 35 37 38 31 20 31 31 2e 31 35 39 39 20 31 39 2e 35 30 34 39 20 31 31 2e Data Ascii: 1ef 0.250634 17.7079 0.251321C17.7059 0.252009 17.7014 0.255103 17.6983 0.256479C17.1829 0.500937 14.126 5.34163 18.2691 9.48126L18.2673 9.48711Z" fill="url(#paint8_radial_627_1132)"/><path d="M19.7046 11.2682C19.6465 11.2149 19.5781 11.1599 19.5049 11.
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 38 62 64 32 0d 0a 32 30 2e 30 37 33 32 20 31 30 2e 37 39 37 39 20 32 30 2e 30 33 38 38 20 31 30 2e 37 32 33 36 20 32 30 2e 30 30 30 33 4c 31 30 2e 37 33 32 39 20 32 30 2e 30 30 36 31 43 31 31 2e 36 35 39 32 20 32 30 2e 36 33 38 34 20 31 36 2e 32 33 34 31 20 32 32 2e 31 38 33 32 20 32 31 2e 30 31 36 37 20 31 38 2e 32 38 37 4c 32 31 2e 30 32 34 32 20 31 38 2e 32 36 39 38 43 32 31 2e 31 34 33 35 20 31 37 2e 39 39 31 33 20 32 32 2e 37 32 36 35 20 31 34 2e 30 35 34 36 20 31 39 2e 37 30 34 20 31 31 2e 32 36 39 36 4c 31 39 2e 37 30 34 36 20 31 31 2e 32 36 38 32 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 39 5f 72 61 64 69 61 6c 5f 36 32 37 5f 31 31 33 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 38 34 38 37 20 31 35 2e 36 33 34 37 43 37 2e Data Ascii: 8bd220.0732 10.7979 20.0388 10.7236 20.0003L10.7329 20.0061C11.6592 20.6384 16.2341 22.1832 21.0167 18.287L21.0242 18.2698C21.1435 17.9913 22.7265 14.0546 19.704 11.2696L19.7046 11.2682Z" fill="url(#paint9_radial_627_1132)"/><path d="M7.58487 15.6347C7.
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 77 69 64 74 68 3d 22 30 2e 33 35 31 35 34 33 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 32 31 37 33 20 31 34 2e 32 38 30 32 43 32 36 2e 32 31 37 33 20 31 37 2e 35 32 30 34 20 32 34 2e 39 33 30 31 20 32 30 2e 36 32 38 20 32 32 2e 36 33 38 39 20 32 32 2e 39 31 39 32 43 32 30 2e 33 34 37 37 20 32 35 2e 32 31 30 34 20 31 37 2e 32 34 30 32 20 32 36 2e 34 39 37 36 20 31 33 2e 39 39 39 39 20 32 36 2e 34 39 37 36 43 31 30 2e 37 35 39 36 20 32 36 2e 34 39 37 36 20 37 2e 36 35 32 30 38 20 32 35 2e 32 31 30 34 20 35 2e 33 36 30 38 37 20 32 32 2e 39 31 39 32 43 33 2e 30 36 39 36 36 20 32 30 2e 36 32 38 20 31 2e 37 38 32 34 Data Ascii: width="0.351543" stroke-linecap="round" stroke-linejoin="round"/><path d="M26.2173 14.2802C26.2173 17.5204 24.9301 20.628 22.6389 22.9192C20.3477 25.2104 17.2402 26.4976 13.9999 26.4976C10.7596 26.4976 7.65208 25.2104 5.36087 22.9192C3.06966 20.628 1.7824
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 43 31 30 2e 39 34 35 35 20 32 34 2e 32 35 32 34 20 31 30 2e 38 39 34 35 20 32 34 2e 31 35 32 32 20 31 30 2e 38 30 30 36 20 32 34 2e 31 32 31 37 43 31 30 2e 37 37 37 32 20 32 34 2e 31 31 34 31 20 31 30 2e 37 35 33 33 20 32 34 2e 31 31 31 36 20 31 30 2e 37 33 30 33 20 32 34 2e 31 31 33 35 5a 4d 31 37 2e 32 36 38 33 20 32 34 2e 31 31 33 39 43 31 37 2e 32 34 35 33 20 32 34 2e 31 31 31 38 20 31 37 2e 32 32 31 35 20 32 34 2e 31 31 34 33 20 31 37 2e 31 39 38 20 32 34 2e 31 32 32 31 43 31 37 2e 31 30 34 32 20 32 34 2e 31 35 32 36 20 31 37 2e 30 35 33 31 20 32 34 2e 32 35 32 37 20 31 37 2e 30 38 33 36 20 32 34 2e 33 34 36 36 4c 31 37 2e 33 35 30 37 20 32 35 2e 31 36 38 35 43 31 37 2e 33 38 31 32 20 32 35 2e 32 36 32 34 20 31 37 2e 34 38 31 33 20 32 35 2e 33 31 33 Data Ascii: C10.9455 24.2524 10.8945 24.1522 10.8006 24.1217C10.7772 24.1141 10.7533 24.1116 10.7303 24.1135ZM17.2683 24.1139C17.2453 24.1118 17.2215 24.1143 17.198 24.1221C17.1042 24.1526 17.0531 24.2527 17.0836 24.3466L17.3507 25.1685C17.3812 25.2624 17.4813 25.313
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 4c 69 6e 6b 2e 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 20 6e 6f 66 6f 6c 6c 6f 77 22 2c 70 72 6f 76 69 64 65 72 4c 69 6e 6b 2e 61 72 69 61 4c 61 62 65 6c 3d 74 68 69 73 2e 70 72 6f 76 69 64 65 72 4c 69 6e 6b 54 65 78 74 2b 22 20 2d 20 22 2b 74 68 69 73 2e 6f 70 65 6e 73 49 6e 4e 65 77 57 69 6e 64 6f 77 54 65 78 74 2c 70 72 6f 76 69 64 65 72 4c 69 6e 6b 2e 68 72 65 66 3d 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 3c 62 72 2f 3e 22 29 5b 30 5d 2c 70 72 6f 76 69 64 65 72 4c 69 6e 6b 49 63 6f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2c 70 72 6f 76 69 64 65 72 4c 69 6e 6b 49 63 6f 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 43 79 62 6f 74 45 78 74 65 72 6e 61 6c 4c Data Ascii: Link.rel="noopener noreferrer nofollow",providerLink.ariaLabel=this.providerLinkText+" - "+this.opensInNewWindowText,providerLink.href=cookieDomain.split("<br/>")[0],providerLinkIcon=document.createElement("img"),providerLinkIcon.className="CybotExternalL
2024-07-03 12:37:14 UTC	16384	IN	Data Raw: 61 74 69 73 74 69 63 73 2c 48 54 4d 4c 54 61 62 65 6c 54 65 6d 70 6c 61 74 65 2c 74 65 78 74 41 6c 69 67 6e 6d 65 6e 74 29 29 2c 74 65 6d 70 50 61 72 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 50 61 72 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 23 43 4f 4f 4b 49 45 54 41 42 4c 45 5f 41 44 56 45 52 54 49 53 49 4e 47 23 5d 2f 67 2c 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 54 61 62 6c 65 48 54 4d 4c 28 22 41 64 76 65 72 74 69 73 69 6e 67 22 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 54 61 62 6c 65 41 64 76 65 72 74 69 73 69 6e 67 2c 48 54 4d 4c 54 61 62 65 6c 54 65 6d 70 6c 61 74 65 2c 74 65 78 74 41 6c 69 67 6e 6d 65 6e 74 29 29 2c 74 65 6d 70 50 61 72 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 50 61 72 65 6e Data Ascii: atistics,HTMLTabelTemplate,textAlignment)),tempParent.innerHTML=tempParent.innerHTML.replace(/\[#COOKIETABLE_ADVERTISING#]/g,this.getCookieTableHTML("Advertising",this.cookieTableAdvertising,HTMLTabelTemplate,textAlignment)),tempParent.innerHTML=tempParen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	49966	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:14 UTC	698	OUT	GET /sdk/bc-v4.min.html HTTP/1.1 Host: consentcdn.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:14 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:14 GMT Content-Type: text/html Content-Length: 627 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1081 CDN-PullZone: 673291 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Cache-Control: max-age=31536000 ETag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163" Expires: Sat, 07 Jun 2025 19:17:05 GMT Last-Modified: Mon, 04 Apr 2022 07:23:49 GMT X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1717787825053_390277166_194655660_16_1094_5_0_-";dur=1 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: cross-origin CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 06/07/2024 19:17:05 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: b9fd9a6e476e04890169a8f05f2c034d CDN-Cache: HIT Accept-Ranges: bytes
2024-07-03 12:37:14 UTC	627	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 42 75 6c 6b 53 65 74 74 69 6e 67 2d 22 3b 74 68 69 73 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 74 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 74 2e 6f 72 69 67 69 6e 29 7d 76 61 72 20 69 2c 65 2c 6f 2c 72 2c 75 3b 74 72 79 7b 69 66 28 69 3d 74 2e 64 61 74 61 2c 65 3d 74 79 70 65 6f 66 20 69 3d 3d 22 73 74 72 69 6e 67 22 2c 65 26 26 28 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 69 29 29 2c 6f 3d 69 2e 76 61 6c 75 65 26 26 69 2e 76 61 6c 75 65 2e 65 78 70 69 72 Data Ascii: <!doctype html><html><body><script>(function(){var n="CookieConsentBulkSetting-";this.handleRequest=function(t){function f(n){t.source.postMessage(n,t.origin)}var i,e,o,r,u;try{if(i=t.data,e=typeof i=="string",e&&(i=JSON.parse(i)),o=i.value&&i.value.expir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	49967	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:16 UTC	627	OUT	GET /1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7 HTTP/1.1 Host: img.sct.eu1.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:16 UTC	1106	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:16 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: BunnyCDN-DE1-1081 CDN-PullZone: 1790563 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Age: 818 Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: public, max-age=1800 ETag: "c2196de8ba412c60c22ab491af7b1409" Last-Modified: Mon, 23 Oct 2023 11:39:32 GMT x-goog-generation: 1698061172769999 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 35 x-goog-hash: crc32c=rX4K2g== x-goog-hash: md5=whlt6LpBLGDCKrSRr3sUCQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0Nr7qVTVpdkc_AiB7BX5VM_yU3E8tJnpOjJ3XWZ6EqZwflj_OFh59tAR6nqAxD6KYdHmJ4PEAUDurg CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:37:16 CDN-EdgeStorageId: 1080 CDN-Status: 200 CDN-RequestId: af68a88e314c8e4c6e12d56faa52737b CDN-Cache: BYPASS
2024-07-03 12:37:16 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	49970	169.150.247.39	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:17 UTC	397	OUT	GET /1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7 HTTP/1.1 Host: img.sct.eu1.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:18 UTC	1106	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:18 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: BunnyCDN-DE1-1082 CDN-PullZone: 1790563 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Age: 820 Alt-Svc: h3=":443"; ma=2592000 Alt-Svc: h3-29=":443"; ma=2592000 Cache-Control: public, max-age=1800 ETag: "c2196de8ba412c60c22ab491af7b1409" Last-Modified: Mon, 23 Oct 2023 11:39:32 GMT x-goog-generation: 1698061172769999 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 35 x-goog-hash: crc32c=rX4K2g== x-goog-hash: md5=whlt6LpBLGDCKrSRr3sUCQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: ACJd0Nr7qVTVpdkc_AiB7BX5VM_yU3E8tJnpOjJ3XWZ6EqZwflj_OFh59tAR6nqAxD6KYdHmJ4PEAUDurg CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:37:18 CDN-EdgeStorageId: 1080 CDN-Status: 200 CDN-RequestId: debdc31c8321443c19066255246e8bcb CDN-Cache: BYPASS
2024-07-03 12:37:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49971	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:29 UTC	747	OUT	GET /logconsent.ashx?action=accept&nocache=1720010247689&dnt=false&method=strict&clp=true&cls=true&clm=true&cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&cbt=inlineoptin&hasdata=true&usercountry=US-06&referer=https%3A%2F%2Fwww.pec.it&rc=false HTTP/1.1 Host: consent.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:29 UTC	763	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:29 GMT Content-Type: application/x-javascript Content-Length: 1404 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1081 CDN-PullZone: 673261 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Access-Control-Expose-Headers: Request-Context Cache-Control: public, max-age=0 Last-Modified: Wed, 03 Jul 2024 12:37:29 GMT Pragma: no-cache Request-Context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef Cross-Origin-Resource-Policy: cross-origin CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 07/03/2024 12:37:29 CDN-EdgeStorageId: 1081 CDN-Status: 200 CDN-RequestId: 8f48770cbb2ae0dca12f68eeec955f5e CDN-Cache: BYPASS
2024-07-03 12:37:29 UTC	1404	IN	Data Raw: 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 73 65 74 43 6f 6f 6b 69 65 28 22 7b 73 74 61 6d 70 3a 25 32 37 57 53 43 79 33 77 58 63 4a 59 68 55 79 4c 75 5a 55 4a 73 38 52 59 58 31 55 70 5a 59 6c 5a 72 30 42 57 2f 75 4f 70 66 72 37 33 4e 66 55 2f 48 75 49 62 73 6f 74 77 3d 3d 25 32 37 25 32 43 6e 65 63 65 73 73 61 72 79 3a 74 72 75 65 25 32 43 70 72 65 66 65 72 65 6e 63 65 73 3a 74 72 75 65 25 32 43 73 74 61 74 69 73 74 69 63 73 3a 74 72 75 65 25 32 43 6d 61 72 6b 65 74 69 6e 67 3a 74 72 75 65 25 32 43 6d 65 74 68 6f 64 3a 25 32 37 65 78 70 6c 69 63 69 74 25 32 37 25 32 43 76 65 72 3a 32 25 32 43 75 74 63 3a 31 37 32 30 30 31 30 32 34 39 35 39 39 25 32 43 72 65 67 69 6f 6e 3a 25 32 37 75 73 2d 30 36 25 32 37 7d 22 2c 20 6e 65 77 20 44 61 74 65 28 31 37 33 35 Data Ascii: CookieConsent.setCookie("{stamp:%27WSCy3wXcJYhUyLuZUJs8RYX1UpZYlZr0BW/uOpfr73NfU/HuIbsotw==%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cmethod:%27explicit%27%2Cver:2%2Cutc:1720010249599%2Cregion:%27us-06%27}", new Date(1735

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49972	142.250.186.36	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	849	OUT	POST /pagead/landing?gcs=G111&gcd=13r3r3r3r5&tag_exp=0&rnd=1739542049.1720010249&url=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&dma=0&npa=0&gtm=45He4710n81NFRXKCGv867718176za200&auid=1043949294.1720010249 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.pec.it X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	854	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:37:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13r3r3r3r5&tag_exp=0&rnd=1739542049.1720010249&url=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&dma=0&npa=0&gtm=45He4710n81NFRXKCGv867718176za200&auid=1043949294.1720010249 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:37:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49976	195.181.175.15	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	537	OUT	GET /02DMJn6RqhevYZYcV7wq.js HTTP/1.1 Host: tags.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	1029	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Expires: Wed, 03 Jul 2024 13:00:25 GMT Last-Modified: Thu, 03 Aug 2023 08:30:26 GMT ETag: W/"7dd71e4b922b44d4a1b639cea2047fcd" Vary: Accept-Encoding x-goog-generation: 1691051426701378 x-goog-metageneration: 4 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1741 x-goog-hash: crc32c=U/iOdA== x-goog-hash: md5=fdceS5IrRNShtjnOogR/zQ== x-goog-storage-class: STANDARD X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ACJd0Np3_DYApezQjktW__clSgIh8Pk4aDQhX1Ts1DDuebWi8RRURWA_B2TnNQwyks-YKbG5Fpk Alt-Svc: h3=":443"; ma=86400 X-77-NZT: EggBw7WvDgFBDAElE8IuAfexCAAA X-77-NZT-Ray: 908339302031fc650a46856675c1d922 X-Accel-Expires: @1720011625 X-Accel-Date: 1720008025 X-77-Cache: HIT X-77-Age: 2225 Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-07-03 12:37:30 UTC	4043	IN	Data Raw: 66 63 34 0d 0a 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 61 3d 22 72 74 62 68 45 76 65 6e 74 73 22 2c 62 3d 22 5f 5f 72 74 62 68 2e 22 2c 63 3d 5b 22 75 69 64 22 2c 22 73 69 64 22 2c 22 61 69 64 22 2c 22 65 69 64 22 2c 22 6c 69 64 22 5d 2c 64 3d 33 31 35 33 36 30 30 30 30 30 30 2c 65 3d 5b 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 69 6e 64 6f 77 2e 72 74 62 68 45 76 65 6e 74 73 29 7c 7c 28 77 69 6e 64 6f 77 2e 72 74 62 68 45 76 65 6e 74 73 3d 5b 5d 29 2c 77 69 6e 64 6f 77 2e 72 74 62 68 45 76 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 21 77 69 6e 64 6f 77 2e 72 74 62 68 45 76 65 6e 74 73 2e 70 75 73 68 2e 70 72 6f 74 6f 74 79 70 65 29 74 72 79 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 3d 22 61 6d 73 22 29 7b Data Ascii: fc4(async function(){const a="rtbhEvents",b="__rtbh.",c=["uid","sid","aid","eid","lid"],d=31536000000,e=[];if(Array.isArray(window.rtbhEvents)\|\|(window.rtbhEvents=[]),window.rtbhEvents.length&&!window.rtbhEvents.push.prototype)try{function f(a,b="ams"){
2024-07-03 12:37:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	49974	157.240.252.13	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	531	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 12:37:30 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 12:37:30 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-07-03 12:37:30 UTC	14606	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-07-03 12:37:30 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 73 65 6c 65 63 74 6f 72 3b 62 3d 64 28 62 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 62 2c 73 65 6c 65 63 74 6f 72 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 69 66 28 Data Ascii: unction h(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.parameter_type;a=a.selector;b=d(b);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&a!=null?{parameter_type:b,selector:a}:null}function j(a){if(
2024-07-03 12:37:30 UTC	16384	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 65 3d 64 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 69 72 Data Ascii: sOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsEventValidation"),c=f.getFbeventsModules("SignalsFBEventsConfigStore"),d=f.getFbeventsModules("SignalsFBEventsEvents"),e=d.configLoaded,k=f.getFbeventsModules("SignalsFBEventsFir
2024-07-03 12:37:30 UTC	16384	IN	Data Raw: 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 69 6d 69 6e 67 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 Data Ascii: afePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetTimingsEvent",function(){return function(g,h
2024-07-03 12:37:30 UTC	1777	IN	Data Raw: 61 67 72 61 6d 2e 63 6f 6d 2f 74 72 2f 22 2c 41 45 4d 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 73 61 6e 64 62 6f 78 2f 70 69 78 65 6c 2f 72 65 67 69 73 74 65 72 2f 74 72 69 67 67 65 72 2f 22 7d 3b 6a 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c Data Ascii: agram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/"};j.exports=a})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("Signal
2024-07-03 12:37:30 UTC	14607	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 66 3d 65 3d 3d 21 30 26 26 64 2e 69 73 4f 70 74 65 64 4f 75 74 28 61 2c 63 29 3b 66 7c 7c 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 30 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 74 4f 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 31 29 7d Data Ascii: uments.length>2&&arguments[2]!==void 0?arguments[2]:!1;b(this._getOpts(c),function(b){var f=e==!0&&d.isOptedOut(a,c);f\|\|d._setOpt(a,b,!0)});return this}},{key:"optOut",value:function(a,c){var d=this;b(this._getOpts(c),function(b){return d._setOpt(a,b,!1)}
2024-07-03 12:37:30 UTC	16384	IN	Data Raw: 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 62 2e 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3b 62 2e 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3b 67 2e 74 6f 70 21 3d 3d 67 3b 66 75 6e 63 74 69 6f 6e 20 72 28 62 29 7b 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 61 28 7b 7d 2c 62 2e 63 75 73 74 6f 6d 44 61 74 61 29 3b 62 2e 74 69 6d 65 73 74 61 6d 70 3d 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 3b 76 61 72 20 66 3d 6e 75 6c 6c 3b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 21 3d 6e 75 6c 6c 26 26 28 66 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 67 65 74 28 22 65 69 64 22 29 29 3b 69 66 28 66 Data Ascii: f.getFbeventsModules("SignalsFBEventsExperimentNames");b.BATCHING_EXPERIMENT;b.SEND_XHR_EXPERIMENT;g.top!==g;function r(b){b.customData=a({},b.customData);b.timestamp=new Date().valueOf();var f=null;b.customParams!=null&&(f=b.customParams.get("eid"));if(f
2024-07-03 12:37:30 UTC	16384	IN	Data Raw: 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 64 28 61 29 3d 3d 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 66 28 61 29 3d 3d 3d 21 30 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 6a 28 61 29 3d 3d 3d Data Ascii: a==="number"\|\|typeof a==="string"&&/^\d+$/.test(a)}function f(a){return a!=null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&d(a)===!1}function j(a){return f(a)===!0&&Object.prototype.toString.call(a)==="[object Object]"}function k(a){if(j(a)===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.9	49978	142.250.185.98	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	973	OUT	GET /td/ga/rul?tid=G-CBSMR1FX8C&gacid=1713985919.1720010249&gtm=45je4710v880708810z8867718176za200zb867718176&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=103516950 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:37:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 12:52:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:37:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-03 12:37:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.9	49977	142.250.181.238	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	1231	OUT	POST /g/collect?v=2&tid=G-CBSMR1FX8C&gtm=45je4710v880708810z8867718176za200zb867718176&_p=1720010227484&_gaz=1&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&tag_exp=0&gdid=dMWZhNz&cid=1713985919.1720010249&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1720010248&sct=1&seg=0&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&dt=Cookie%20policy%20%7C%20Pec.it&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=22592&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.pec.it X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	444	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.pec.it Date: Wed, 03 Jul 2024 12:37:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49979	169.150.247.39	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:30 UTC	605	OUT	GET /consentconfig/171bc42f-3eec-4afe-be43-f3c81c141fa7/settings.json HTTP/1.1 Host: consentcdn.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:30 UTC	1163	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:30 GMT Content-Type: application/json Content-Length: 611 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1082 CDN-PullZone: 673291 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: max-age=19175 ETag: "caccb58ae4356bcce62271b2bff2c55b:1708094201.959548" Expires: Thu, 16 May 2024 15:17:48 GMT Last-Modified: Fri, 16 Feb 2024 14:36:41 GMT Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1715853493382_34664601_2828372521_9_612_4_0_-";dur=1 CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/16/2024 09:58:13 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: b2d352014a9288c5b8ed82ca89b56dea CDN-Cache: HIT Accept-Ranges: bytes
2024-07-03 12:37:30 UTC	611	IN	Data Raw: 7b 22 77 69 64 67 65 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 2d 6c 65 66 74 22 2c 22 64 69 73 74 61 6e 63 65 56 65 72 74 69 63 61 6c 50 78 22 3a 31 30 2c 22 64 69 73 74 61 6e 63 65 48 6f 72 69 7a 6f 6e 74 61 6c 50 78 22 3a 31 30 7d 2c 22 74 68 65 6d 65 22 3a 7b 22 63 6c 6f 73 65 64 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 31 34 31 34 31 34 22 2c 22 66 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 6f 70 65 6e 65 64 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 66 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 31 34 31 34 31 34 Data Ascii: {"widget":{"enabled":false,"position":{"position":"bottom-left","distanceVerticalPx":10,"distanceHorizontalPx":10},"theme":{"closed":{"backgroundColor":"#141414","foregroundColor":"#FFFFFF"},"opened":{"backgroundColor":"#FFFFFF","foregroundColor":"#141414

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.9	49981	142.250.185.194	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:31 UTC	814	OUT	GET /pagead/landing?gcs=G111&gcd=13r3r3r3r5&tag_exp=0&rnd=1739542049.1720010249&url=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&dma=0&npa=0&gtm=45He4710n81NFRXKCGv867718176za200&auid=1043949294.1720010249 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:31 UTC	791	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:37:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 12:52:31 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:37:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49982	185.184.8.90	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:31 UTC	529	OUT	OPTIONS /tags/v2?type=json HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.pec.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.pec.it/cookie-policy.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:31 UTC	312	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:31 GMT access-control-allow-origin: https://www.pec.it access-control-allow-credentials: true access-control-allow-methods: GET, POST access-control-max-age: 3600 vary: Origin access-control-allow-headers: content-type content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.9	49985	169.150.247.38	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:31 UTC	411	OUT	GET /consentconfig/171bc42f-3eec-4afe-be43-f3c81c141fa7/settings.json HTTP/1.1 Host: consentcdn.cookiebot.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:32 UTC	1163	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:32 GMT Content-Type: application/json Content-Length: 611 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1081 CDN-PullZone: 673291 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: max-age=19175 ETag: "caccb58ae4356bcce62271b2bff2c55b:1708094201.959548" Expires: Thu, 16 May 2024 15:17:48 GMT Last-Modified: Fri, 16 Feb 2024 14:36:41 GMT Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1715853493382_34664601_2828372521_9_612_4_0_-";dur=1 CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/16/2024 09:58:13 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: b8440f4a98e14e28ffa90e8c3ca44c91 CDN-Cache: HIT Accept-Ranges: bytes
2024-07-03 12:37:32 UTC	611	IN	Data Raw: 7b 22 77 69 64 67 65 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 2d 6c 65 66 74 22 2c 22 64 69 73 74 61 6e 63 65 56 65 72 74 69 63 61 6c 50 78 22 3a 31 30 2c 22 64 69 73 74 61 6e 63 65 48 6f 72 69 7a 6f 6e 74 61 6c 50 78 22 3a 31 30 7d 2c 22 74 68 65 6d 65 22 3a 7b 22 63 6c 6f 73 65 64 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 31 34 31 34 31 34 22 2c 22 66 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 6f 70 65 6e 65 64 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 66 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 31 34 31 34 31 34 Data Ascii: {"widget":{"enabled":false,"position":{"position":"bottom-left","distanceVerticalPx":10,"distanceHorizontalPx":10},"theme":{"closed":{"backgroundColor":"#141414","foregroundColor":"#FFFFFF"},"opened":{"backgroundColor":"#FFFFFF","foregroundColor":"#141414

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.9	49991	185.184.8.90	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:32 UTC	626	OUT	POST /tags/v2?type=json HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive Content-Length: 176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/cookie-policy.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:32 UTC	176	OUT	Data Raw: 7b 22 76 22 3a 22 76 30 2e 31 2e 35 22 2c 22 73 72 22 3a 22 22 2c 22 73 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 63 2e 69 74 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2e 61 73 70 78 22 2c 22 74 68 22 3a 22 30 32 44 4d 4a 6e 36 52 71 68 65 76 59 5a 59 63 56 37 77 71 22 2c 22 74 61 67 73 22 3a 5b 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 70 6c 61 63 65 62 6f 22 7d 2c 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 6c 69 64 22 2c 22 69 64 22 3a 22 55 63 73 31 48 6d 37 48 4c 48 70 6d 55 6b 6c 31 6c 59 68 36 22 7d 5d 7d Data Ascii: {"v":"v0.1.5","sr":"","su":"https://www.pec.it/cookie-policy.aspx","th":"02DMJn6RqhevYZYcV7wq","tags":[{"eventType":"placebo"},{"eventType":"lid","id":"Ucs1Hm7HLHpmUkl1lYh6"}]}
2024-07-03 12:37:32 UTC	1098	IN	HTTP/1.1 307 Temporary Redirect date: Wed, 03 Jul 2024 12:37:32 GMT vary: Origin access-control-allow-origin: https://www.pec.it access-control-allow-credentials: true access-control-allow-methods: GET, POST access-control-max-age: 3600 set-cookie: g=yzcr0RiQwSFf4j40kRul_1720010252380;Path=/;Domain=.creativecdn.com;Expires=Thu, 03-Jul-2025 12:37:32 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: c=yzcr0RiQwSFf4j40kRul_02DMJn6RqhevYZYcV7wq_1720010252380;Path=/;Domain=.creativecdn.com;Expires=Thu, 03-Jul-2025 12:37:32 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned set-cookie: ts=1720010252;Path=/;Domain=.creativecdn.com;Expires=Thu, 03-Jul-2025 12:37:32 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://ams.creativecdn.com/tags/v2?type=json&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Wed, 03 Jul 2024 12:37:32 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.9	49992	157.240.252.13	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:32 UTC	1311	OUT	GET /signals/config/144174932978658?v=2.9.160&r=stable&domain=www.pec.it&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:32 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 12:37:32 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-07-03 12:37:32 UTC	272	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 67 4e 61 6d 65 2b 28 6e 2e 74 79 70 65 3d 3d 3d 76 6f 69 64 20 30 3f 22 22 3a 6e 2e 74 79 70 65 29 3b 6f 3d 6a 2e 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 6f 3d 63 28 6e 2c 66 26 26 6c 21 3d 6e 75 6c 6c 29 3b 6e 3d 69 28 6f 2c 32 29 3b 6f 3d 6e 5b 30 5d 3b 6e 3d 6e 5b 31 5d 3b 6f 21 3d 6e 75 6c 6c 26 26 6b 2e 70 75 73 68 28 6f 29 3b 6c 3d 62 28 6c 2c 6e 29 7d 7d 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 Data Ascii: gName+(n.type===void 0?"":n.type);o=j.incrementAndGet(o);if(o>d\|\|n===g)continue;o=c(n,f&&l!=null);n=i(o,2);o=n[0];n=n[1];o!=null&&k.push(o);l=b(l,n)}}return{formFieldFeatures:k,userData:l}}l.exports=g})();return l.exports}(a,b,c,d)});f.ensureModuleRegist
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 7d 29 3b 69 66 28 63 3d 3d 3d 22 2e 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 6c 61 73 74 44 6f 74 49 6e 64 65 78 3a 62 7d 29 3b 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 65 2e 74 65 73 74 28 63 29 3d 3d 3d 21 31 7c 7c 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 75 73 65 72 22 26 26 64 2e 74 65 73 74 28 63 29 3d 3d 3d Data Ascii: ")return f.userOrDomain==="domain"?null:a({},f,{userOrDomain:"domain"});if(c===".")return f.userOrDomain==="domain"&&f.lastDotIndex===b-1?null:a({},f,{lastDotIndex:b});return f.userOrDomain==="domain"&&e.test(c)===!1\|\|f.userOrDomain==="user"&&d.test(c)===
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 5b 67 5d 21 3d 3d 61 5b 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 62 3d 41 72 72 61 79 28 61 29 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 76 61 72 20 64 3d 74 68 69 73 2e 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 3b 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3d 62 3b 72 65 74 75 72 Data Ascii: g=0;g<e.length;g++)if(e[g]!==a[g])return!0;return!1}},{key:"passesThrottle",value:function(){for(var a=arguments.length,b=Array(a),c=0;c<a;c++)b[c]=arguments[c];var d=this._passesThrottleImpl.apply(this,b);this._lastTime=Date.now();this._lastArgs=b;retur
2024-07-03 12:37:32 UTC	1500	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 6e 28 63 2e 74 61 72 67 65 74 29 3a 6e 75 6c 6c 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 69 66 28 70 28 65 29 29 72 65 74 75 72 6e 3b 69 66 28 21 42 2e 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 28 65 29 29 72 65 74 75 72 6e 3b 63 3d 62 2e 67 65 74 4f 70 74 65 64 49 6e 50 69 78 65 6c 73 28 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 29 3b 79 28 63 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 66 3d 61 2e 67 65 74 28 63 2e 69 64 2c 22 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 29 2c 67 3d 21 31 3b 66 21 3d 6e 75 6c 6c 26 26 66 2e 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 21 3d 6e 75 6c 6c 26 26 28 67 3d 66 2e 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 29 3b Data Ascii: instanceof Node?n(c.target):null;if(e!=null){if(p(e))return;if(!B.passesThrottle(e))return;c=b.getOptedInPixels("InferredEvents");y(c,function(c){var f=a.get(c.id,"inferredEvents"),g=!1;f!=null&&f.disableRestrictedData!=null&&(g=f.disableRestrictedData);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.9	49986	169.150.247.39	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:32 UTC	576	OUT	GET /consentconfig/171bc42f-3eec-4afe-be43-f3c81c141fa7/state.js HTTP/1.1 Host: consentcdn.cookiebot.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:32 UTC	875	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:37:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1082 CDN-PullZone: 673291 CDN-Uid: 51eaa7b0-db3f-4cd5-9bcb-19d0a0285b82 CDN-RequestCountryCode: US Cache-Control: max-age=21544 ETag: W/"de49a87f336eb551f8c307a0e7b2c51c:1710497036.175043" Expires: Thu, 16 May 2024 16:18:08 GMT Last-Modified: Fri, 15 Mar 2024 10:03:56 GMT Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1715854744928_34664601_2832518145_8_718_5_0_-";dur=1 Cross-Origin-Resource-Policy: cross-origin CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/16/2024 10:19:04 CDN-EdgeStorageId: 1082 CDN-Status: 200 CDN-RequestId: 6820d3ea3b97f36fdd7532043c9af6aa CDN-Cache: HIT
2024-07-03 12:37:32 UTC	36	IN	Data Raw: 31 65 0d 0a 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6c 61 74 65 73 74 56 65 72 73 69 6f 6e 3d 32 3b 0d 0a Data Ascii: 1eCookieConsent.latestVersion=2;
2024-07-03 12:37:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.9	49993	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:32 UTC	601	OUT	GET /piwik.js HTTP/1.1 Host: wa.aruba.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "10433-60215868a67c7" If-Modified-Since: Fri, 04 Aug 2023 09:28:55 GMT
2024-07-03 12:37:32 UTC	196	IN	HTTP/1.1 304 Not Modified Date: Wed, 03 Jul 2024 12:37:32 GMT Server: Apache Connection: close ETag: "10433-60215868a67c7" Expires: Wed, 03 Jul 2024 12:37:32 GMT Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.9	49997	185.184.8.90	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:33 UTC	534	OUT	OPTIONS /tags/v2?type=json&tc=1 HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.pec.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.pec.it/cookie-policy.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:33 UTC	312	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:33 GMT access-control-allow-origin: https://www.pec.it access-control-allow-credentials: true access-control-allow-methods: GET, POST access-control-max-age: 3600 vary: Origin access-control-allow-headers: content-type content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.9	49998	173.194.76.154	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:33 UTC	851	OUT	POST /g/collect?v=2&tid=G-CBSMR1FX8C&cid=1713985919.1720010249&gtm=45je4710v880708810z8867718176za200zb867718176&aip=1&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.pec.it X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-03 12:37:33 UTC	444	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.pec.it Date: Wed, 03 Jul 2024 12:37:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.9	50000	62.149.188.146	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:33 UTC	1378	OUT	POST /piwik.php?action_name=www.pec.it%2FCookie%20policy%20%7C%20Pec.it&idsite=14&rec=1&r=891864&h=8&m=37&s=31&url=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&_id=5f494fd7f8a7663e&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=6QMUJn&devicePixelRatio=1&pf_net=646&pf_srv=555&pf_tfr=275&pf_dm1=2964&pf_dm2=3845&pf_onl=4&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1 Host: wa.aruba.it Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://www.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:34 UTC	253	IN	HTTP/1.1 204 No Response Date: Wed, 03 Jul 2024 12:37:33 GMT Server: Apache Connection: close Content-Encoding: none Cache-Control: max-age=0 Expires: Wed, 03 Jul 2024 12:37:33 GMT Header: wa01.aruba.it Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.9	50001	157.240.252.35	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:33 UTC	867	OUT	GET /tr/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:34 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=133, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:37:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.9	50004	185.184.8.90	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:34 UTC	751	OUT	POST /tags/v2?type=json&tc=1 HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive Content-Length: 176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.pec.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.pec.it/cookie-policy.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=yzcr0RiQwSFf4j40kRul_1720010252380; c=yzcr0RiQwSFf4j40kRul_02DMJn6RqhevYZYcV7wq_1720010252380; ts=1720010252
2024-07-03 12:37:34 UTC	176	OUT	Data Raw: 7b 22 76 22 3a 22 76 30 2e 31 2e 35 22 2c 22 73 72 22 3a 22 22 2c 22 73 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 63 2e 69 74 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2e 61 73 70 78 22 2c 22 74 68 22 3a 22 30 32 44 4d 4a 6e 36 52 71 68 65 76 59 5a 59 63 56 37 77 71 22 2c 22 74 61 67 73 22 3a 5b 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 70 6c 61 63 65 62 6f 22 7d 2c 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 6c 69 64 22 2c 22 69 64 22 3a 22 55 63 73 31 48 6d 37 48 4c 48 70 6d 55 6b 6c 31 6c 59 68 36 22 7d 5d 7d Data Ascii: {"v":"v0.1.5","sr":"","su":"https://www.pec.it/cookie-policy.aspx","th":"02DMJn6RqhevYZYcV7wq","tags":[{"eventType":"placebo"},{"eventType":"lid","id":"Ucs1Hm7HLHpmUkl1lYh6"}]}
2024-07-03 12:37:34 UTC	739	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:34 GMT vary: Origin access-control-allow-origin: https://www.pec.it access-control-allow-credentials: true access-control-allow-methods: GET, POST access-control-max-age: 3600 set-cookie: ar_debug=1;Path=/;Domain=.creativecdn.com;Expires=Thu, 03-Jul-2025 12:37:34 GMT;SameSite=None;Secure;HttpOnly set-cookie: receive-cookie-deprecation=1;Path=/;Domain=.creativecdn.com;Secure;HttpOnly;SameSite=None;Partitioned; Max-Age=15552000 content-type: application/json;charset=utf-8 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Wed, 03 Jul 2024 12:37:34 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 476 connection: close
2024-07-03 12:37:34 UTC	476	IN	Data Raw: 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 33 31 35 26 63 6f 64 65 3d 30 6e 6e 68 43 51 2d 75 5a 62 6a 78 70 57 42 4c 32 35 36 30 48 31 6a 74 49 46 43 55 35 63 44 77 35 5f 7a 51 67 4b 63 4b 61 6b 45 22 2c 22 74 79 70 65 22 3a 22 49 4d 47 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 73 2e 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 69 67 2d 6d 65 6d 62 65 72 73 68 69 70 3f 6e 74 6b 3d 57 34 77 6f 65 78 6e 71 43 69 37 51 71 73 79 67 6c 68 47 51 59 56 5a 70 47 4c 46 4d 49 38 6c 35 42 6a 47 49 4b 4a 62 5a 65 48 51 6c 6c 52 47 4a 52 6c 52 6b 35 5a 6c 68 75 5a 75 35 75 34 66 53 74 59 48 32 44 35 34 63 31 6f 61 75 31 64 5a 61 74 31 58 63 6e 6c 7a 54 53 Data Ascii: [{"url":"https://ib.adnxs.com/setuid?entity=315&code=0nnhCQ-uZbjxpWBL2560H1jtIFCU5cDw5_zQgKcKakE","type":"IMG"},{"url":"https://ams.creativecdn.com/ig-membership?ntk=W4woexnqCi7QqsyglhGQYVZpGLFMI8l5BjGIKJbZeHQllRGJRlRk5ZlhuZu5u4fStYH2D54c1oau1dZat1XcnlzTS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.9	50005	157.240.252.35	443	5648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:34 UTC	982	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:34 UTC	1265	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x89530e8253230c1e","source_keys":["1","2"]},{"key_piece":"0xa7d0883e5d79e86e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387387791469529491", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387387791469529491"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:37:34 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:37:34 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-07-03 12:37:34 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-07-03 12:37:34 UTC	69	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`
2024-07-03 12:37:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	50007	157.240.0.35	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:34 UTC	637	OUT	GET /tr/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:34 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:37:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	50009	185.184.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:35 UTC	963	OUT	GET /ig-membership?ntk=W4woexnqCi7QqsyglhGQYVZpGLFMI8l5BjGIKJbZeHQllRGJRlRk5ZlhuZu5u4fStYH2D54c1oau1dZat1XcnlzTS71XK-OByR9Qiq5_Yr4 HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=yzcr0RiQwSFf4j40kRul_1720010252380; c=yzcr0RiQwSFf4j40kRul_02DMJn6RqhevYZYcV7wq_1720010252380; ts=1720010252; ar_debug=1; receive-cookie-deprecation=1
2024-07-03 12:37:35 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:35 GMT vary: Accept-Encoding content-type: text/html;charset=utf-8 cache-control: public, max-age=86400 date: Wed, 03 Jul 2024 12:37:35 GMT expires: Thu, 04 Jul 2024 12:37:35 GMT content-length: 1058 connection: close
2024-07-03 12:37:35 UTC	1058	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 61 64 64 49 67 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 62 61 73 65 50 61 74 68 20 3d 20 27 68 74 74 70 73 3a 2f 2f 61 6d 73 2e 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 69 67 2d 6d 65 6d 62 65 72 73 68 69 70 27 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 66 65 6e 63 65 64 46 72 61 6d 65 73 45 6e 61 62 6c 65 64 20 3d 20 77 69 6e 64 6f 77 2e 46 65 6e 63 65 64 46 Data Ascii: <html><body><script type="module"> if (navigator.joinAdInterestGroup) { const addIgScript = document.createElement('script'); let basePath = 'https://ams.creativecdn.com/ig-membership'; let fencedFramesEnabled = window.FencedF

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.9	50008	185.184.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:35 UTC	967	OUT	GET /topics-membership?ntk=zisNacvYQvrsJi1AYt4OuiadDFgl3YcOq-EQC5qeAH56FRTbUjwCMzR0FGoG-y8OGs1wReORHUjCtiYh5JyBvHO1b9pB3FXo6ti-_tJycA4 HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=yzcr0RiQwSFf4j40kRul_1720010252380; c=yzcr0RiQwSFf4j40kRul_02DMJn6RqhevYZYcV7wq_1720010252380; ts=1720010252; ar_debug=1; receive-cookie-deprecation=1
2024-07-03 12:37:35 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:35 GMT vary: Accept-Encoding content-type: text/html;charset=utf-8 cache-control: public, max-age=86400 date: Wed, 03 Jul 2024 12:37:35 GMT expires: Thu, 04 Jul 2024 12:37:35 GMT content-length: 965 connection: close
2024-07-03 12:37:35 UTC	965	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 69 67 6e 6f 72 65 41 73 79 6e 63 52 65 73 75 6c 74 28 78 29 20 7b 20 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 52 65 73 70 6f 6e 73 65 28 72 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 2e 6f 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 2e 62 6c 6f 62 28 29 2e 74 68 65 6e 28 69 67 6e 6f 72 65 41 73 79 6e 63 52 65 73 75 6c 74 2c 20 69 67 6e 6f 72 65 41 73 79 6e 63 52 65 73 75 6c 74 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 54 6f 70 69 63 73 28 72 65 73 75 6c 74 29 20 Data Ascii: <html><head></head><body><script>function ignoreAsyncResult(x) { }function readResponse(r) { try { if (r.ok) { r.blob().then(ignoreAsyncResult, ignoreAsyncResult); } } catch (e) { }}function handleTopics(result)

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	50011	185.184.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:35 UTC	423	OUT	GET /tags/v2?type=json&tc=1 HTTP/1.1 Host: ams.creativecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=yzcr0RiQwSFf4j40kRul_1720010252380; ar_debug=1
2024-07-03 12:37:35 UTC	418	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:37:35 GMT vary: Origin access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Wed, 03 Jul 2024 12:37:35 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	50013	157.240.0.35	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:35 UTC	674	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=144174932978658&ev=PageView&dl=https%3A%2F%2Fwww.pec.it%2Fcookie-policy.aspx&rl=&if=false&ts=1720010251883&sw=1280&sh=1024&v=2.9.160&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1720010251882.366624440619127845&ler=empty&cdl=API_unavailable&it=1720010250111&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:35 UTC	952	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387387795741486026", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387387795741486026"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:37:35 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:37:35 UTC	1820	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	50010	37.252.171.52	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:37:35 UTC	632	OUT	GET /setuid?entity=315&code=0nnhCQ-uZbjxpWBL2560H1jtIFCU5cDw5_zQgKcKakE HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pec.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:37:35 UTC	1403	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 03 Jul 2024 12:37:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D315%26code%3D0nnhCQ-uZbjxpWBL2560H1jtIFCU5cDw5_zQgKcKakE AN-X-Request-Uuid: 65e9d3da-281f-48d5-a0f0-d8a257ac955b Set-Cookie: XANDR_PANID=pEdg_hy3KEdxP1EW1YOBwx885n47cDGA6LvBP0bOLvJvhqM0ixEHZ-y5kTTt2X1m84R4v3D5Y3iyJZb3iMA8m0xcuBAyg7yJTg6YfQGOblg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 12:37:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 21-Jun-2034 12:37:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1346628156078073296; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 12:37:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Target ID:	0
Start time:	08:35:58
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	08:35:59
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,16248433379570988683,2973663790764214421,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:36:03
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfcare.firma-remota.it/asmonitor/panel/login"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: Iframe src: https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: Iframe src: https://consentcdn.cookiebot.com/sdk/bc-v4.min.html

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: Number of links: 0
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: Number of links: 1
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: Number of links: 1

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: Total embedded image size: 24020
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: Total embedded image size: 24020
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: Total embedded image size: 24020
Source: https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx	HTTP Parser: Total embedded image size: 24020
Source: https://www.pec.it/cookie-policy.aspx	HTTP Parser: Total embedded image size: 24020

Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: Title: Username recovery does not match URL
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: Title: Recover password does not match URL

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No favicon
Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No favicon
Source: https://consentcdn.cookiebot.com/sdk/bc-v4.min.html	HTTP Parser: No favicon
Source: https://selfcare.firma-remota.it/asmonitor/informazioni-profilo.xhtml?faces-redirect=true	HTTP Parser: No favicon
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No favicon
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=a8xvudbfjpme	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO	HTTP Parser: No favicon
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=njtm478xebz	HTTP Parser: No favicon
Source: https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html	HTTP Parser: No favicon

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No <meta name="author".. found
Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No <meta name="author".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No <meta name="author".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No <meta name="author".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: No <meta name="author".. found

Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No <meta name="copyright".. found
Source: https://selfcare.firma-remota.it/asmonitor/login.xhtml	HTTP Parser: No <meta name="copyright".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No <meta name="copyright".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml	HTTP Parser: No <meta name="copyright".. found
Source: https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_269.1.dr	String found in binary or memory: <a id="ico-facebook" href="https://www.facebook.com/aruba.it" rel="nofollow noopener noreferrer"><span class="sr-only visually-hidden">Facebook</span></a> equals www.facebook.com (Facebook)
Source: chromecache_315.1.dr	String found in binary or memory: consente al utente di accedere ad un sito web tramite la sua applicazione LinkedIn, ad esempio.","1 anno","Cookie HTTP","1","","www.linkedin.com","it"]]; equals www.linkedin.com (Linkedin)
Source: chromecache_359.1.dr	String found in binary or memory: consente al utente di accedere ad un sito web tramite la sua applicazione LinkedIn, ad esempio.","1 anno","HTTP","1","","www.linkedin.com","it"]]; equals www.linkedin.com (Linkedin)
Source: chromecache_359.1.dr	String found in binary or memory: dei contenuti video di YouTube sul sito.","Persistente","IDB","6","","youtube.com","it"],["TESTCOOKIESENABLED","youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","0 giorno","HTTP","1","","www.youtube.com","it"],["VISITOR_INFO1_LIVE","youtube.com","Prova a stimare la velocit equals www.youtube.com (Youtube)
Source: chromecache_315.1.dr	String found in binary or memory: dei contenuti video di YouTube sul sito.","Persistente","IndexedDB","6","","youtube.com","it"],["TESTCOOKIESENABLED","youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","1 giorno","Cookie HTTP","1","","www.youtube.com","it"],["VISITOR_INFO1_LIVE","youtube.com","Prova a stimare la velocit equals www.youtube.com (Youtube)
Source: chromecache_315.1.dr	String found in binary or memory: dei contenuti video di YouTube sul sito.","Sessione","Cookie HTTP","1","","www.youtube.com","it"],["ServiceWorkerLogsDatabase#SWHealthLog","youtube.com","Necessario per l'implementazione e la funzionalit equals www.youtube.com (Youtube)
Source: chromecache_359.1.dr	String found in binary or memory: dei contenuti video di YouTube sul sito.","Sessione","HTTP","1","","www.youtube.com","it"],["ServiceWorkerLogsDatabase#SWHealthLog","youtube.com","Necessario per l'implementazione e la funzionalit equals www.youtube.com (Youtube)
Source: chromecache_359.1.dr	String found in binary or memory: impostato da Twitter - Il cookie consente al'utente di condividere contenuti dal sito web sul proprio profilo Twitter.","399 giorni","HTTP","1","","twitter.com","it"],["a/t","w.usabilla.com","aiuta a capire il modo in cui gli Utenti interagiscono con il sito web, raccogliendo e trasmettendo informazioni in forma anonima","Sessione","Pixel","5","","w.usabilla.com","it"],["td","www.googletagmanager.com","Registra dati statistici sul comportamento dei utenti sul sito web. Questi vengono utilizzati per l'analisi interna dall'operatore del sito.","Sessione","Pixel","5","","www.googletagmanager.com","it"]]; equals www.twitter.com (Twitter)
Source: chromecache_359.1.dr	String found in binary or memory: utilizzato.","0 giorno","HTTP","1","","www.pec.it","it"],["#-#","www.youtube-nocookie.com<br/>youtube.com","In attesa","Sessione","HTML","2","","www.youtube-nocookie.com",null],["iU5q-!O9@$","www.youtube-nocookie.com<br/>youtube.com","Registra un ID univoco per statistiche legate a quali video YouTube sono stati visualizzati dall'utente.","Sessione","HTML","2","","www.youtube-nocookie.com","it"],["LAST_RESULT_ENTRY_KEY","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","HTTP","1","","www.youtube-nocookie.com","it"],["nextId","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","HTTP","1","","www.youtube-nocookie.com","it"],["requests","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","HTTP","1","","www.youtube-nocookie.com","it"],["yt.innertube::nextId","www.youtube-nocookie.com<br/>youtube.com","Registra un ID univoco per statistiche legate a quali video YouTube sono stati visualizzati dall'utente.","Persistente","HTML","2","","www.youtube-nocookie.com","it"],["ytidb::LAST_RESULT_ENTRY_KEY","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Persistente","HTML","2","","www.youtube-nocookie.com","it"],["YtIdbMeta#databases","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Persistente","IDB","6","","www.youtube-nocookie.com","it"],["yt-remote-cast-available","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-cast-installed","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-connected-devices","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Persistente","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-device-id","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Persistente","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-fast-check-period","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-session-app","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-s
Source: chromecache_315.1.dr	String found in binary or memory: utilizzato.","1 giorno","Cookie HTTP","1","","www.pec.it","it"],["#-#","www.youtube-nocookie.com<br/>youtube.com","In attesa","Sessione","Archiviazione locale HTML","2","","www.youtube-nocookie.com",null],["iU5q-!O9@$","www.youtube-nocookie.com<br/>youtube.com","Registra un ID univoco per statistiche legate a quali video YouTube sono stati visualizzati dall'utente.","Sessione","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["LAST_RESULT_ENTRY_KEY","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","Cookie HTTP","1","","www.youtube-nocookie.com","it"],["nextId","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","Cookie HTTP","1","","www.youtube-nocookie.com","it"],["requests","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Sessione","Cookie HTTP","1","","www.youtube-nocookie.com","it"],["yt.innertube::nextId","www.youtube-nocookie.com<br/>youtube.com","Registra un ID univoco per statistiche legate a quali video YouTube sono stati visualizzati dall'utente.","Persistente","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["ytidb::LAST_RESULT_ENTRY_KEY","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Persistente","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["YtIdbMeta#databases","www.youtube-nocookie.com<br/>youtube.com","Utilizzato per tracciare l'interazione dell'utente con i contenuti incorporati.","Persistente","IndexedDB","6","","www.youtube-nocookie.com","it"],["yt-remote-cast-available","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-cast-installed","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-connected-devices","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Persistente","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-device-id","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Persistente","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["yt-remote-fast-check-period","www.youtube-nocookie.com<br/>youtube.com","Memorizza le preferenze del lettore video dell'utente usando il video YouTube incorporato","Sessione","Archiviazione locale HTML","2","","www.youtube-nocookie.com","it"],["yt-rem
Source: chromecache_302.1.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_269.1.dr	String found in binary or memory: <a id="ico-linkedin" href="https://www.linkedin.com/company/aruba-s-p-a-" rel="nofollow noopener noreferrer"><span class="sr-only visually-hidden">Linkedin</span></a> equals www.linkedin.com (Linkedin)
Source: chromecache_269.1.dr	String found in binary or memory: <a id="ico-youtube" href="https://www.youtube.com/user/ArubaWebTV" rel="nofollow noopener noreferrer"><span class="sr-only visually-hidden">Youtube</span></a> equals www.youtube.com (Youtube)
Source: chromecache_305.1.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_305.1.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_174.1.dr, chromecache_306.1.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_366.1.dr, chromecache_315.1.dr	String found in binary or memory: utente con il servizio di identificazione.","Sessione","Cookie HTTP","1","","videoriconoscimento.arubapec.it","it"],["openid_state","webmail.pec.it","Cookie necessario per la gestione delle sessioni\t","Sessione","Cookie HTTP","1","","webmail.pec.it","it"],["bscookie","www.linkedin.com","Questo cookie viene utilizzato per identificare l'utente attraverso un'applicazione. Ci equals www.linkedin.com (Linkedin)
Source: chromecache_359.1.dr	String found in binary or memory: utente con il servizio di identificazione.","Sessione","HTTP","1","","videoriconoscimento.arubapec.it","it"],["_HID_.D5C42B047C59A9A98A4D0053654B882A","webmail.pec.it","Cookie necessario per la protezione della sessione nei casi di download dei files\t","Sessione","HTTP","1","","webmail.pec.it","it"],["openid_state","webmail.pec.it","Cookie necessario per la gestione delle sessioni\t","Sessione","HTTP","1","","webmail.pec.it","it"],["x-csrf-token.IeBAInjBo2bNipMyc@BAJiStM9Ymzb8SbJkzl6dD0xpM_YKVqUKdM@","webmail.pec.it","Cookie necessario per la protezione della sessione\t","Sessione","HTTP","1","","webmail.pec.it","it"],["bscookie","www.linkedin.com","Questo cookie viene utilizzato per identificare l'utente attraverso un'applicazione. Ci equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: selfcare.firma-remota.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: guide.pec.it
Source: global traffic	DNS traffic detected: DNS query: mediacdn.aruba.it
Source: global traffic	DNS traffic detected: DNS query: blueimp.github.io
Source: global traffic	DNS traffic detected: DNS query: wa.aruba.it
Source: global traffic	DNS traffic detected: DNS query: w.usabilla.com
Source: global traffic	DNS traffic detected: DNS query: widget.docsbot.ai
Source: global traffic	DNS traffic detected: DNS query: d6tizftlrpuof.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: docsbot.ai
Source: global traffic	DNS traffic detected: DNS query: cdn.docsbot.ai
Source: global traffic	DNS traffic detected: DNS query: imgsct.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: www.pec.it
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.eu
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.eu
Source: global traffic	DNS traffic detected: DNS query: img.sct.eu1.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: u360.d-bi.fr
Source: global traffic	DNS traffic detected: DNS query: tags.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ams.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: script.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://selfcare.firma-remota.it/asmonitor/panel/login

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Windows Analysis Report
https://selfcare.firma-remota.it/asmonitor/panel/login