Edit tour

Windows Analysis Report
https://singingfiles.com/show.php?l=0&u=2156442&id=64574

Overview

General Information

Sample URL:	https://singingfiles.com/show.php?l=0&u=2156442&id=64574
Analysis ID:	1467916
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2180,i,4682610930534376281,12712548623362568672,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://singingfiles.com/show.php?l=0&u=2156442&id=64574" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://free2try.com

LLM: Score: 7 brands: Ritz, Jimmy Dean, Arm & Hammer, Vaseline Reasons: The URL 'free2try.com' does not match any known legitimate domain associated with the brands displayed (Ritz, Jimmy Dean, Arm & Hammer, Vaseline). The site prominently features a login form asking for an email address, which is a common tactic in phishing sites. The promise of 'free samples' and the urgency created by phrases like 'Sign up takes Less than 30 seconds' are classic social usering techniques used to lure users into providing their personal information. Additionally, the domain name itself is generic and not associated with any of the brands shown, which raises suspicion. The presence of a suspicious link in the terms and conditions section further indicates potential phishing activity. DOM: 0.0.pages.csv

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: Iframe src: /pushnami/pushnami.html

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30

HTTP Parser: Number of links: 0

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: On click: shLayer();
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: On click: shLayer();
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: On click: shLayer();
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: On click: shLayer();
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: On click: shLayer();

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No favicon
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No favicon
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No favicon
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No favicon
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No favicon
Source: https://api.pushnami.com/scripts/v1/hub	HTTP Parser: No favicon
Source: https://free2try.com/pushnami/pushnami.html	HTTP Parser: No favicon

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="author".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="author".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="author".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="author".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="author".. found

Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="copyright".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="copyright".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="copyright".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="copyright".. found
Source: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64227 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:64204 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: mr.macgsapptrck.com to https://wsjmp.com/c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: wsjmp.com to https://free2try.com/?config=9179&src=wc-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /show.php?l=0&u=2156442&id=64574 HTTP/1.1Host: singingfiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442 HTTP/1.1Host: mr.macgsapptrck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://singingfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/ HTTP/1.1Host: wsjmp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://singingfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5 HTTP/1.1Host: free2try.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://singingfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?session_id=531dd1e83a5911ef8dd1bff723d6de30 HTTP/1.1Host: free2try.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://singingfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bootstrap.min.css HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /images/styles-2016.css HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /9179/registration//colors-2016.css HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /demo_optimize.js HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /images/js_fl.js HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /9179/registration//main_header.png HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /9179/registration//main_header.png HTTP/1.1Host: free2try.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /9179/registration/bg_header.png HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /9179/registration/bg_header.png HTTP/1.1Host: free2try.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /scripts/v1/pushnami-adv/60521c272bf0240010135168 HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pushnami/service-worker.js HTTP/1.1Host: free2try.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v2/pushnami-sw/60521c272bf0240010135168 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/push/track HTTP/1.1Host: trc.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/hub HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/workers/sw.355e010fef1d4bf4045b.bundle.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /js/exp/psfpv4_client_1.126.1_1972ad39bab3c8f1331e288e27e211c34b421bdd275cf6d126a0630d2027683f.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: free2try.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /api/psp HTTP/1.1Host: psp.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pushnami/pushnami.html HTTP/1.1Host: free2try.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
Source: global traffic	HTTP traffic detected: GET /scripts/v1/push/60521c272bf0240010135168 HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/hub HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pushnami/service-worker.js HTTP/1.1Host: free2try.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://free2try.com/pushnami/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080If-None-Match: "341f05-5a-5e92fb15dc300"If-Modified-Since: Wed, 21 Sep 2022 13:12:12 GMT
Source: global traffic	HTTP traffic detected: GET /scripts/v2/pushnami-sw/60521c272bf0240010135168 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free2try.com/pushnami/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/psp HTTP/1.1Host: psp.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/push/subscribe HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/push/image/id/654d251715c286001361bac4 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/push/icon/ext?url=https%3A%2F%2Fapi.pushnami.com%2Fapi%2Fpush%2Ficon%2Fid%2F6570f8e91fd96a00136b0f37%23.png&fallback=%2Fapi%2Fpush%2Ficon%2F605a1b2ddf8629037ec0e584 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: singingfiles.com
Source: global traffic	DNS traffic detected: DNS query: mr.macgsapptrck.com
Source: global traffic	DNS traffic detected: DNS query: wsjmp.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: free2try.com
Source: global traffic	DNS traffic detected: DNS query: api.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: trc.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: psp.pushnami.com

Source: unknown

HTTP traffic detected: POST /api/push/track HTTP/1.1Host: trc.pushnami.comConnection: keep-aliveContent-Length: 76sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json, text/plain, */*content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0key: 60521c272bf0240010135168User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://free2try.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free2try.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 23:01:28 GMTContent-Type: application/json; charset=utf-8Content-Length: 60Connection: closevary: originaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 23:01:38 GMTContent-Type: application/json; charset=utf-8Content-Length: 70Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 23:01:56 GMTContent-Type: application/json; charset=utf-8Content-Length: 70Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 60Connection: closeDate: Thu, 04 Jul 2024 23:02:33 GMTcache-control: no-cachevary: accept-encodingX-Cache: Error from cloudfrontVia: 1.1 3ab47e7bb911be04b665845f18319950.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P3X-Amz-Cf-Id: fH3JBOpD2Gp6eDLJpmvkiQHNz2jEWv9ZYqzDa1sKEvU9Yq8dyNzIiA==

Source: chromecache_158.2.dr	String found in binary or memory: http://a.websponsors.com/c/c=
Source: chromecache_156.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_158.2.dr	String found in binary or memory: http://www.free2try.com/contact.cgi?config=9179
Source: chromecache_158.2.dr	String found in binary or memory: http://www.free2try.com/privacy.cgi?config=9179
Source: chromecache_158.2.dr	String found in binary or memory: http://www.free2try.com/terms.cgi?config=9179&qid=
Source: chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com
Source: chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/subscribe
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/unsubscribe
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/waterfall/enrollment
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/waterfall/enrollment?psid=
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/hub
Source: chromecache_133.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168
Source: chromecache_158.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/pushnami-adv/60521c272bf0240010135168
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/60521c272bf0240010135168
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/pushnami-two-step/60521c272bf0240010135168
Source: chromecache_162.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cdn.pushnami.com/css/opt-in/
Source: chromecache_154.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/exp/psfpv4_client_1.126.1_1972ad39bab3c8f1331e288e27e211c34b421bdd275cf6
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/modules
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/opt-in/
Source: chromecache_157.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_151.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=PT
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins&display=swap
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_155.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_155.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0-ExdGM.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0yExdGM.woff2)
Source: chromecache_156.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js
Source: chromecache_137.2.dr	String found in binary or memory: https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442
Source: chromecache_154.2.dr, chromecache_136.2.dr	String found in binary or memory: https://psp.pushnami.com/api/psp
Source: chromecache_157.2.dr	String found in binary or memory: https://rtpd.pushnami.com
Source: chromecache_157.2.dr	String found in binary or memory: https://trc.pushnami.com
Source: chromecache_136.2.dr	String found in binary or memory: https://trc.pushnami.com/api/push/track

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 64209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 64238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64219
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64218
Source: unknown	Network traffic detected: HTTP traffic on port 64224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64213
Source: unknown	Network traffic detected: HTTP traffic on port 64218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 64235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 64215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64241
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64238
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 64217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 64210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 64227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64208
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64209
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 64213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64205

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:64227 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@24/56@39/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2180,i,4682610930534376281,12712548623362568672,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://singingfiles.com/show.php?l=0&u=2156442&id=64574"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2180,i,4682610930534376281,12712548623362568672,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://singingfiles.com/show.php?l=0&u=2156442&id=64574	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://wsjmp.com/c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/waterfall/enrollment	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/modules	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-two-step/60521c272bf0240010135168	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/opt-in/	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/unsubscribe	0%	Avira URL Cloud	safe
https://rtpd.pushnami.com	0%	Avira URL Cloud	safe
https://free2try.com/favicon.ico	0%	Avira URL Cloud	safe
https://free2try.com/?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/60521c272bf0240010135168	0%	Avira URL Cloud	safe
http://www.free2try.com/privacy.cgi?config=9179	0%	Avira URL Cloud	safe
https://trc.pushnami.com/api/push/track	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/image/id/654d251715c286001361bac4	0%	Avira URL Cloud	safe
http://a.websponsors.com/c/c=	0%	Avira URL Cloud	safe
https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442	0%	Avira URL Cloud	safe
https://api.pushnami.com	0%	Avira URL Cloud	safe
https://free2try.com/9179/registration/bg_header.png	0%	Avira URL Cloud	safe
https://trc.pushnami.com	0%	Avira URL Cloud	safe
https://free2try.com/9179/registration//main_header.png	0%	Avira URL Cloud	safe
https://free2try.com/demo_optimize.js	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js	0%	Avira URL Cloud	safe
https://free2try.com/9179/registration//colors-2016.css	0%	Avira URL Cloud	safe
https://free2try.com/images/bootstrap.min.css	0%	Avira URL Cloud	safe
https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js	0%	Avira URL Cloud	safe
https://free2try.com/images/styles-2016.css	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/css/opt-in/	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/icon/ext?url=https%3A%2F%2Fapi.pushnami.com%2Fapi%2Fpush%2Ficon%2Fid%2F6570f8e91fd96a00136b0f37%23.png&fallback=%2Fapi%2Fpush%2Ficon%2F605a1b2ddf8629037ec0e584	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/subscribe	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js	0%	Avira URL Cloud	safe
https://psp.pushnami.com/psfp/data	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/waterfall/enrollment?psid=	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-adv/60521c272bf0240010135168	0%	Avira URL Cloud	safe
https://free2try.com/images/js_fl.js	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168	0%	Avira URL Cloud	safe
https://psp.pushnami.com/api/psp	0%	Avira URL Cloud	safe
http://www.free2try.com/contact.cgi?config=9179	0%	Avira URL Cloud	safe
http://www.free2try.com/terms.cgi?config=9179&qid=	0%	Avira URL Cloud	safe
https://free2try.com/pushnami/service-worker.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
android.l.google.com	172.217.23.110	true	false	unknown
stun4.l.google.com	74.125.250.129	true	false	unknown
free2try.com	172.67.68.254	true	true	unknown
cdn.pushnami.com	18.244.18.23	true	false	unknown
stun3.l.google.com	74.125.250.129	true	false	unknown
trc.pushnami.com	18.211.221.201	true	false	unknown
psp.pushnami.com	34.203.90.74	true	false	unknown
wsjmp.com	172.67.73.137	true	false	unknown
singingfiles.com	188.114.97.3	true	false	unknown
mobile-gtalk.l.google.com	74.125.71.188	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
wdigital.g2afse.com	34.91.234.242	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
api.pushnami.com	18.66.218.121	true	false	unknown
mr.macgsapptrck.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://free2try.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://singingfiles.com/show.php?l=0&u=2156442&id=64574	false		unknown
https://api.pushnami.com/scripts/v1/hub	false		unknown
https://wsjmp.com/c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/	false	Avira URL Cloud: safe	unknown
https://free2try.com/?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5	true	Avira URL Cloud: safe	unknown
https://free2try.com/9179/registration/bg_header.png	true	Avira URL Cloud: safe	unknown
https://free2try.com/pushnami/pushnami.html	true		unknown
https://trc.pushnami.com/api/push/track	false	Avira URL Cloud: safe	unknown
https://free2try.com/demo_optimize.js	true	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/image/id/654d251715c286001361bac4	false	Avira URL Cloud: safe	unknown
https://free2try.com/9179/registration//main_header.png	true	Avira URL Cloud: safe	unknown
https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442	false	Avira URL Cloud: safe	unknown
https://free2try.com/images/bootstrap.min.css	true	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js	false	Avira URL Cloud: safe	unknown
https://free2try.com/9179/registration//colors-2016.css	true	Avira URL Cloud: safe	unknown
https://free2try.com/images/styles-2016.css	true	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/icon/ext?url=https%3A%2F%2Fapi.pushnami.com%2Fapi%2Fpush%2Ficon%2Fid%2F6570f8e91fd96a00136b0f37%23.png&fallback=%2Fapi%2Fpush%2Ficon%2F605a1b2ddf8629037ec0e584	false	Avira URL Cloud: safe	unknown
https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30	true		unknown
https://api.pushnami.com/api/push/subscribe	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js	false	Avira URL Cloud: safe	unknown
https://psp.pushnami.com/psfp/data	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/pushnami-adv/60521c272bf0240010135168	false	Avira URL Cloud: safe	unknown
https://psp.pushnami.com/api/psp	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168	false	Avira URL Cloud: safe	unknown
https://free2try.com/images/js_fl.js	true	Avira URL Cloud: safe	unknown
https://free2try.com/pushnami/service-worker.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/60521c272bf0240010135168	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/modules	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/pushnami-two-step/60521c272bf0240010135168	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/opt-in/	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://rtpd.pushnami.com	chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/unsubscribe	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/waterfall/enrollment	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com	chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
http://a.websponsors.com/c/c=	chromecache_158.2.dr	false	Avira URL Cloud: safe	unknown
http://www.free2try.com/privacy.cgi?config=9179	chromecache_158.2.dr	false	Avira URL Cloud: safe	unknown
https://trc.pushnami.com	chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/css/opt-in/	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/waterfall/enrollment?psid=	chromecache_154.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
http://www.free2try.com/terms.cgi?config=9179&qid=	chromecache_158.2.dr	false	Avira URL Cloud: safe	unknown
http://www.free2try.com/contact.cgi?config=9179	chromecache_158.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.244.18.23	cdn.pushnami.com	United States	16509	AMAZON-02US	false
13.32.99.40	unknown	United States	16509	AMAZON-02US	false
107.21.125.170	unknown	United States	14618	AMAZON-AESUS	false
18.239.50.73	unknown	United States	16509	AMAZON-02US	false
172.67.68.254	free2try.com	United States	13335	CLOUDFLARENETUS	true
18.239.50.108	unknown	United States	16509	AMAZON-02US	false
34.91.234.242	wdigital.g2afse.com	United States	15169	GOOGLEUS	false
34.193.230.73	unknown	United States	14618	AMAZON-AESUS	false
18.205.31.41	unknown	United States	14618	AMAZON-AESUS	false
172.217.23.110	android.l.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun4.l.google.com	United States	15169	GOOGLEUS	false
172.67.73.137	wsjmp.com	United States	13335	CLOUDFLARENETUS	false
74.125.71.188	mobile-gtalk.l.google.com	United States	15169	GOOGLEUS	false
18.211.221.201	trc.pushnami.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	singingfiles.com	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
34.203.90.74	psp.pushnami.com	United States	14618	AMAZON-AESUS	false
18.66.218.121	api.pushnami.com	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467916
Start date and time:	2024-07-05 01:00:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://singingfiles.com/show.php?l=0&u=2156442&id=64574
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@24/56@39/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, qwavedrv.sys, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 142.250.185.142, 74.125.206.84, 34.104.35.123, 142.250.185.202, 142.250.186.67, 142.250.186.170, 142.250.185.106, 142.250.74.202, 216.58.212.170, 142.250.184.234, 142.250.186.106, 142.250.186.42, 142.250.186.138, 172.217.18.10, 216.58.206.74, 142.250.186.74, 172.217.16.202, 142.250.181.234, 142.250.185.74, 172.217.18.106, 142.250.184.202, 40.68.123.157, 192.229.221.95, 52.165.164.15, 199.232.210.172, 142.250.184.227, 172.217.16.138, 142.250.185.138, 142.250.185.170, 142.250.185.234, 216.58.206.42, 93.184.221.240
Excluded domains from analysis (whitelisted): android.clients.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, mtalk.google.com, fcmregistrations.googleapis.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, firebaseinstallations.googleapis.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://singingfiles.com/show.php?l=0&u=2156442&id=64574

Input	Output
URL: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The webpage contains text that creates a sense of urgency, such as 'Don't Lose out on 24 MEGA Free Samples!' and 'Sign up takes Less than 30 seconds'.","The webpage does not contain a login form, as there are no explicit requests for sensitive information like passwords, email addresses, usernames, phone numbers, or credit card numbers.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: free2try.com OCR: ALL ACCESS pass to FREE Samples! Don't Lose out on 24 MEGA Free Samples! Sign up takes Less than 30 seconds. Steam fresh FREE TRY JimgDean Yes, Really Free Samples! Just take a quick sum:ey abut yourself to match you with the best Free Samples available today! Confirm your email By clicking Continue NIow, agree to email marketing, the Terms & Conditions which includes binding arbitration and Privaq_eglty- Continue SIGN UP NOW Help I ELIuacy_EQljcy_ I Terms & Conditions I Contact us tree2try com IS an independent samples listing site for consumers and is not affiliated with, sponsored by or endorsed by any ot the listed products or retailers. Trademarks, service marks, logos, and/or domain names (including, without limitation, the individual names ot products and retailers) are the
URL: https://free2try.com Model: gpt-4o	```json{ "phishing_score": 7, "brands": "Ritz, Jimmy Dean, Arm & Hammer, Vaseline", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "None", "reasons": "The URL 'free2try.com' does not match any known legitimate domain associated with the brands displayed (Ritz, Jimmy Dean, Arm & Hammer, Vaseline). The site prominently features a login form asking for an email address, which is a common tactic in phishing sites. The promise of 'free samples' and the urgency created by phrases like 'Sign up takes Less than 30 seconds' are classic social usering techniques used to lure users into providing their personal information. Additionally, the domain name itself is generic and not associated with any of the brands shown, which raises suspicion. The presence of a suspicious link in the terms and conditions section further indicates potential phishing activity."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.781756643295834
Encrypted:	false
SSDEEP:	3:qVZx/XMgvOL1dKIUkRp6WNoH//MddHohI9kBbZWu:qzx/Xbvk11pRp6WqH8wOuB9t
MD5:	5F68C75C391C1911BCCED8FA77DF6D99
SHA1:	EBA9F7D50E76DEF7ECB3E78547A0156622839D53
SHA-256:	E313A695A51BEFE3538E5116B34633517B65D821B0BD4B6264AB8AB73B3B916F
SHA-512:	B0A9427923C65972BC9BCFF09C3E2B594E985F28E693B7852665E5BEEFAE6372A3C7ED2F799C395EF25E2E41C24E405FE0C60C3D12215933F13AE80D902FC79F
Malicious:	false
Reputation:	low
URL:	https://free2try.com/pushnami/pushnami.html
Preview:	<html><head><script src="https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168"></script></head></html>.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1295
Entropy (8bit):	5.412873066070557
Encrypted:	false
SSDEEP:	24:yczOYsAeILCczOYs9F/RxczOYs+RVc+u/rczOYsGwy96DGSSf7:ROLAPhOL9FZOOL+RVc+ucOLGN0oD
MD5:	48E6EDFC1C66551D4C914527D214E419
SHA1:	70409C757E500540D6F62458726EAA30736CCE84
SHA-256:	BEB761A0AFF595EC9FA0D76354A16F4455FD3A5C827A3A2A881AF72BF33778B3
SHA-512:	D9859FC29B0B59039A28CB7E402CA252BABD37D5E44456358EC9BDA5B4AB8B51684759AA24DF41BBB6E8905784A6DB7A26E8C253A3B710F6053FFA73827BAE6C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=PT+Sans
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0-ExdGM.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ latin-ext /.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0yExdGM.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 400;.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 370, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	5.709351238290323
Encrypted:	false
SSDEEP:	3:yionv//thPlEclpgl/HRthwkBDsTBZtPAkxMzlVzV3Tadll9tjp:6v/lhPJpgl/5nDspPAkS/jaDl9tjp
MD5:	598A1198978E9C9CFED1C809876DFE26
SHA1:	81F71A6E05D24885179174822465D149BFAEE5E4
SHA-256:	88631AAF9D1F603077058654A6C79EDC4B6A5EEE2C7A38A93F32214BD37C0316
SHA-512:	BD15A506D277F42658B88C41565180A71DEF33BBEBE68A3DBE78C805541CF7E7A5C73AFD877B52284FDFBBDA3D2E69D20CE7572A6516848D54B3843C94545D83
Malicious:	false
Reputation:	low
URL:	https://free2try.com/9179/registration/bg_header.png
Preview:	.PNG........IHDR.......r.......'.....tEXtSoftware.Adobe ImageReadyq.e<...*IDATx.b.......0...9...3....4\|F.(...b....E../;.......IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	96806
Entropy (8bit):	4.110059237210997
Encrypted:	false
SSDEEP:	1536:+SVCAaPqlt0ptZeBLXvV7C7JN79hvaemnU:FCAN0p/eRvV7C7bvqU
MD5:	941F27099DBCEE9B6371D6CAB690ED99
SHA1:	9EA357D4DFD4AD78F46ED44B37D7629F0D34A4D8
SHA-256:	667D93EC79A35C19E5EEDB18720AB6C9DFB3927E02FB8B5C58B47AEEDE48680B
SHA-512:	D7B6D0C333987901D3BD66B1C6E7263891FF85BF7B3B1EA76DFA91BA248670F7FC5EBA59B8179321515A9A53AD205BA354E904D786F98C032FBC1D0B3000A311
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168
Preview:	//.// The empty line above is critical for templating main.beta in the current implementation.// Start Test Mode Detection ;..// .var isRollbar = undefined;.// add rollbar .var pushWrap = {. wrapObj: function (service) {. for (var fn in service){. if (service.hasOwnProperty(fn) && typeof(service[fn]) === 'function') pushWrap.safeWrap(service, fn);. }. },. safeWrap: function(service, fn) {. var pushFn = service[fn];. service[fn] = function (a, b, c, d, e, f, g, h, i, j, k, l) {. try { return pushFn.call(service, a, b, c, d, e, f, g, h, i, j, k, l); }. catch (err) {. pushWrap.report(err);. }. };. },. report: function(err){. var opts = {. event: 'webpush-error-generic',. scope: 'Website',. scopeId: "60521c272bf0240010135167",. l: encodeURIComponent(location.href),. e: JSON.stringify(err, Object.getOwnPropertyNames(err)).

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	5.3332492172479755
Encrypted:	false
SSDEEP:	12:ZtvOGMx1gKGGTVaN1TzqJmDDxhgKGGTVaQdMmjuN/ggKGGTVaLHcQKXGb:vOGMx+KfmG0cKfRM8i/rKfSK8
MD5:	12E56D7C3936EC9E22034B5F05D306A6
SHA1:	FC674AC4109F66B5589347B8BF9E4DB53FF9E03E
SHA-256:	7F44DF92910401F8656953318F0C59C716AA1645E439ADA4DFD8953D0F1CFB02
SHA-512:	9706EB88039C1E810E994681592C9C94FA700FCB57E2EE415F9A42B9DA7DD98CEFABFD9B9495D49336829CD4F11DF5154D7943A3FAA4E328D6D20D3541DD7B77
Malicious:	false
Reputation:	low
URL:	https://singingfiles.com/show.php?l=0&u=2156442&id=64574
Preview:	<html>...<head>....<title>Loading Offer..</title>.......<meta http-equiv="refresh" content="0;url=https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442" />.....<meta name="robots" content="noindex">.....<script type="text/javascript">......window.location.href = 'https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442';.....</script>.....</head>...<body>......<noscript><center>Auto-Redirect failed, Please <a href="https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442">Click Here</a> to continue.</center></noscript>...</body>..</html>

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.144413829577611
Encrypted:	false
SSDEEP:	3:YWR4h2zSaijJpUHLKFjJ4:YWyQOnJpAKZJ4
MD5:	98DB852F61504F975F136DA683B58305
SHA1:	F9B9C6A7454289A5E2029B0411A8C4CD60A8D6B8
SHA-256:	F006BBD60894452B80C7D19E1C832D1E30F457540DC5E52E567BC1FFE522615D
SHA-512:	37CF66B9D554DCC0BAEC9C20FF5E025D9F24B56D50BDAA88C006A9E92C0B19CC424ECEC7C3FC6566EB61D7124C6F953E36F9B0CDD751DFBC44D7A20CE7A57AAD
Malicious:	false
Reputation:	low
Preview:	{"statusCode":404,"error":"Not Found","message":"Not Found"}

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.46909731110833
Encrypted:	false
SSDEEP:	3:YWR4h2zd6GE/Ke8KE98gLjJ4:YWyQK/Wf98oJ4
MD5:	E5F6E0555B000AC24E7EAF8953743E3F
SHA1:	8A983DAEC0942B43F84A95C4136E06FAED7DB877
SHA-256:	5FEB700E15AC4596C246FA7D341549C4535665C9B314D3B9230D5C610469F232
SHA-512:	534994A53DA0662585E5FA90055D2A786D9F5848B560B091ACD1CC62DAA6412879066C93C6C50E8EAE0A3D2F58F84AEF4AEAF206EEEFA7FCF4D43D89458E2472
Malicious:	false
Reputation:	low
Preview:	{"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.144413829577611
Encrypted:	false
SSDEEP:	3:YWR4h2zSaijJpUHLKFjJ4:YWyQOnJpAKZJ4
MD5:	98DB852F61504F975F136DA683B58305
SHA1:	F9B9C6A7454289A5E2029B0411A8C4CD60A8D6B8
SHA-256:	F006BBD60894452B80C7D19E1C832D1E30F457540DC5E52E567BC1FFE522615D
SHA-512:	37CF66B9D554DCC0BAEC9C20FF5E025D9F24B56D50BDAA88C006A9E92C0B19CC424ECEC7C3FC6566EB61D7124C6F953E36F9B0CDD751DFBC44D7A20CE7A57AAD
Malicious:	false
Reputation:	low
Preview:	{"statusCode":404,"error":"Not Found","message":"Not Found"}

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://free2try.com/favicon.ico
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1081
Entropy (8bit):	4.9877385686270355
Encrypted:	false
SSDEEP:	24:TXqc4LYezo8NG6tCE8UE4nZ5LiIRID1yGDu:+c4LY38NLnZ5GimMGDu
MD5:	DB0C2E90FA1DD148C36EDCF6263DF308
SHA1:	F6CDFC56E3AD6444CF2B8B7CB6B10CC10CE31632
SHA-256:	531D8E94E54F31DBECF66EFA142C0D1D62D41A10AF492E7FD7E2FC93EC57506F
SHA-512:	995B6ADB154F9D154CAAA19B6F1FDCBB5F44155A7539C7E4825B64CD179E5635C50E8E90C8D7EF24B0208E4DABC0748A187E5A0C7455BE132A2D99D2BD4567BA
Malicious:	false
Reputation:	low
URL:	https://free2try.com/9179/registration//colors-2016.css
Preview:	/* CSS Colors /.....fg-primary-color {...color: #1469B3;..}..header > .bg-primary-color {...background-color: #1469B3;..}...bg-primary-color { background-color: #CECECE; }...bg-secondary-color { background-color: #f3f3f4; }.....btn-continue {...color: #fff;...background-color: #419639;..}...btn-skip { color: #fff; background-color: #d2d3d5; }.....text-white { color: #fff !important }.....reward-offers { border-bottom: 2px solid #949599; }...reward-offer { border-top: 2px solid #949599; }...reward-offer .ro_desc2 { color: #000; }.....silver-offers { color: #fff; background-color: #c0c0c0; }...gold-offers { color: #fff; background-color: #fdd803; }...platinum-offers { color: #fff; background-color: #e5e4e2; }...bonus-offers { color: #fff; background-color: #036afd; }....#progress { color: #9495a5; }..#progress .status.status-complete { color: #72bf44; }..#progress .status.status-pending { color: #ed2024; }..../ Footer stuff */..footer a { color: #00f !important; }..footer

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45300, version 1.0
Category:	downloaded
Size (bytes):	45300
Entropy (8bit):	7.99526293185803
Encrypted:	true
SSDEEP:	768:XNcHdvw7wbeW4t3x3dcjsflPt8YCRzGzgI/gBPaKkqnMMUQAbc6VBhXGGVJM/:XNmdvw73NAIlPtZCRzGzg+QPaKkqnMMv
MD5:	5FE660C3A23B871807B0E1D3EE973D23
SHA1:	62A9DD423B30B6EE3AB3DD40D573545D579AF10A
SHA-256:	E13FFA988BE59CBF299D7FF68F019F902B60848203AC4990819EB7E4624EE52D
SHA-512:	9EB08055BEFC2B70CC8BBA34496F14414EA32F5B97F185D357F100EA7D74BFDC12AFD815A53E629D02A53DC7F3E37096DF8BBBD36AB44A011C1A4288B42780CD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
Preview:	wOF2..............}...............................>..H.`..D.6........ ..8..R...\.6.$.. . .....\|..[.lqE.6C...&..^.....n...qM~..\|.8f.<...{>F......d.u.y..J!.......d.[N.9........;..i.[..+.I.Y....+\|\|!.rU7...G..2..+k..n&..L.`.g.....c4{..U.........F...DS.f.PY..........S..vY..Wl..BzME.D.~.M......t.y..@.1.....DD.....5.\.^...dy...'.,......0....~..c~.#".=.].}A..mA...>.V......,Lu.....]s..p.T{..%0....QS,.O.>......Av.+lE~....L!..B..[E...S..L9.'^..K.g.....O..6A...r..#W....."rT..{]-+{.v[vgO.iO..>k..s.N5e..M........U3@..i.(.w....[pu\|.....($.)..-..lA.....dW.hz.P.v,..15....1.....@..@.q.t.'E..bI........$..P.$NQv...s..e..= C3..!......6...M$:..G...{..hX.AfM..$.w....A.r....o?.......Y...s.C.r......w.j...]RSh.iR..}%5%5%u.r.Em[..b%Vsz.....J..;%.]..!..O........D.....?.D)d.......\|.\|.P.X....{..K...2.9..q:..U..n.......$.R...l.tLi..^.f-%..O.6..iJ.).&.;....T3..~o" -t;.....:.)....q.[`. .......Fk...Z.Ty....w.e'...t\... .><...9.U0\./....4.IS.h:x..t...m.;..$t.m`e..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	5.294375926589191
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDKEC6S8f:3qD+2+pUAew85zsDKEC5A
MD5:	8CF6EEFC4DB8F5CFBD2A5C8AC099E271
SHA1:	1661AA5EED8B01C98E91B7AFEF8538F6202C876C
SHA-256:	B8E0E4B1C6C4CE4A0DDBB2A36F47A4D8D7030CD7A1436C43822388539A416F20
SHA-512:	FAC83D939D34AF895629EDF1428ECE64BD24354D74BDBB915C4B73560F1C6FC67479609874C42C71DDEC4D308E12EB061A788756D33728C45F3B40C55F8D354D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47203)
Category:	downloaded
Size (bytes):	47302
Entropy (8bit):	5.271253866169857
Encrypted:	false
SSDEEP:	768:yw7tTZT3D6Poxh7pfp2I+lAn9IEixGIPphNBLJTEjpO4/BJ1wsdD9FKGOjqoN3/h:1X6R8uGOBmVHCPfGE
MD5:	09467CBBDFBE0B4F7131476215348A19
SHA1:	F76DC959C1AB1E0BF81F88B80B7EB61D28CAE033
SHA-256:	B41D7402CBDAB32ACBA31CFDD479730C74B7527FA7C881B0486098BD1A895607
SHA-512:	B8FA677DE849304495ED639023C2A7C4A618770F0853288BF7F1D7337CF3967B5D512DBA94B7574E5FF162AA15C418852B9DAB61D55A65532C7D4AEE34023181
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js
Preview:	/! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /.(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}();const t=function(e){const t=[];let n=0;for(let r=0;r<e.length;r++){let i=e.charCodeAt(r);i<128?t[n++]=i:i<2048?(t[n++]=i>>6\|192,t[n++]=63&i\|128):55296==(64512&i)&&r+1<e.length&&56320==(64512&e.charCodeAt(r+1))?(i=65536+((1023&i)<<10)+(1023&e.charCodeAt(++r)),t[n++]=i>>18\|240,t[n++]=i>>12&63\|128,t[n++]=i>>6&63\|128,t[n++]=63&i\|128):(t[n++]=i>>12\|224,t[n++]=i>>6&63\|128,t[n++]=63&i\|128)}return t},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_S

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (582)
Category:	downloaded
Size (bytes):	5355
Entropy (8bit):	5.414198971211669
Encrypted:	false
SSDEEP:	96:b2D7Zyz9MJNSD8icXxVg+kLgkwvdzw83BalxglySJxe3SDDTJl3A23woOuiJJk:whNNXxVgFUTV9sEly6xaoTvALuik
MD5:	DA895E54E10B6D90D18717B09AAF31EC
SHA1:	C6B684A4D2E960A565AA3B740A7F99E259DA3F28
SHA-256:	0235FD09AD0E83440E190F4C94A4400EA1F8451334E27B887C95A040684451E4
SHA-512:	C279CB9C5D269CC76F91C526FCC3DD73C9AD525CDD083355458A2800B94F56B058FF2ABB3033DE3F97EB32CD011E08ADF6286188A210AA8F0FFB57D673D05FDE
Malicious:	false
Reputation:	low
URL:	https://free2try.com/demo_optimize.js
Preview:	.if(!this.JSON){JSON={};}.(function(){function f(n){return n<10?'0'+n:n;}.if(typeof Date.prototype.toJSON!=='function'){Date.prototype.toJSON=function(key){return this.getUTCFullYear()+'-'+.f(this.getUTCMonth()+1)+'-'+.f(this.getUTCDate())+'T'+.f(this.getUTCHours())+':'+.f(this.getUTCMinutes())+':'+.f(this.getUTCSeconds())+'Z';};String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(key){return this.valueOf();};}.var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={'\b':'\\b','\t':'\\t','\n':'\\n','\f':'\\f','\r':'\\r','"':'\\"','\\':'\\\\'},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];return typeof c==='string'?c:'\\u'+('0000'+a.charCodeAt(0).toString(16)).slice(-

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMfn:sf
MD5:	7C1076BFFA3D070ADEC79F4F8C5F3EBB
SHA1:	2A6B03F12ACFAFAE3C94F6F3A8D212606BEDE11F
SHA-256:	4AF28A5EE218E30AB17DD27B3C9CB944D387BC1206F351C943E39FD6E41119A1
SHA-512:	2C7232787B923C1A3BD0DCEF62FFDB8BD8825DECA141A5B38C33B26B5D3F316242326F4B48EF86177F3972C6C74C8E7986A7BCFE23A6EFA21A83B83E3B13C17C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlrryHavnXBHBIFDbt2z70=?alt=proto
Preview:	CgkKBw27ds+9GgA=

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 370, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	237581
Entropy (8bit):	7.991644567400195
Encrypted:	true
SSDEEP:	6144:96Hm+cGyPd3XMGs+hqWrazfg4WZ64k16cK8Q:96HmRGyP1XMGs+hqTzfgizTk
MD5:	75B74D62C7BC6F35C387D8CDA1AD5719
SHA1:	CD3B36FC0BB61B1072F353A0E76BA57620B5C4AC
SHA-256:	65D32C6959D28CE67367F455669536EA4F669783BE2C8242FC28AD058E04A738
SHA-512:	66E80918DD925551D7A0C63F62FAA14FCC71D53415458311BF9748351525C5FB5E8AB9F00705D8D9042A79C7BC56D599F5D593272DC183375127180F9BDF1CB4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r......*:....pHYs................aiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-03-03T09:07:38-05:00" xmp:ModifyDate="2021-03-03T09:41:34-05:00" xmp:MetadataDate="2021-03-03T09:41:34-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:ca3d52c6-ea11-0245-b80d-4eb4c48ede4d" xmpMM:DocumentID=

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	5.406333618109174
Encrypted:	false
SSDEEP:	96:ZOEMIJOEMiDFZ8OEMXkOEMhYOEMvOEMkyhZcyJzV+zmnWOEMfubqGIFuYUOEMmOb:wIAiXBh1Skuy22bqGIwYR3XqO
MD5:	C840A8EFA9639BA51FFFF865A6D5B3ED
SHA1:	00C77DA03DDCFA49CC08A7229BA8FA3F9AFCCC38
SHA-256:	C3061C3788AD5783EF8A5D10C454BAFE7EB942C48200DCCC852CC6D3C9F303D4
SHA-512:	E73A55A7CB4906133D3C85F7F7F5BC1435FB1AE023A565B446B9A628D2540B7501EECC6D6CDC3276871BC418C16DAAE14FF0C84E9A10A691CC40597400ECDEC1
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2319), with no line terminators
Category:	downloaded
Size (bytes):	2319
Entropy (8bit):	5.155835672860843
Encrypted:	false
SSDEEP:	48:01f5dLIpYuNRCgrY+uVd1tyhyFUSK2DUGbTLGbY88GbsSJoxmliuNqLr7SHD27:cbtyAUSK2DPr6swlrNEr7p7
MD5:	5CE420330A1150B64D4F04B6169BB9D4
SHA1:	C268230DD962837161187710F65B38C5AB49984A
SHA-256:	2843128D287DA3614565182DE89A84DEB0E43FD049BE6A4ED4D3A682BDD186C4
SHA-512:	F3488666DE82EABAF871AE24CC7DE6D03ED5233CCCDBD59C86FED0F890267FBC11745FC0415147B105747E09A635052ECA4FEEF359AB23BDCC9D94CDD9F11234
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v1/hub
Preview:	<!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:unavailable","")}catch(n){return}t._permissions=e\|\|[],t._installListener(),window.parent.postMessage("cross-storage:ready","")},t._installListener=function(){var e=t._listener;window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onmessage",e)},t._listener=function(e){var r,n,o,i,s,a,l;if(r="null"===e.origin?"file://":e.origin,"cross-storage:poll"===e.data)return window.parent.postMessage("cross-storage:ready",e.origin);if("cross-storage:ready"!==e.data){try{o=JSON.parse(e.data)}catch(c){return}if(o&&"string"==typeof o.method&&(i=o.method.split("cross-storage:")[1])){if(t._permitted(r,i))try{a=t["_"+i](o.params)}catch(c){s=c.message}else s="Invalid permissions for "+i;l=JSON.stringify({id:o.id,error:s,resul

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6544
Entropy (8bit):	4.9880149439061086
Encrypted:	false
SSDEEP:	192:01eA0d2GFeh9qyp2TacMlx9SaBWvtrap2S:K0dxyuTac8GapT
MD5:	326D5707055F9C75A932882C75291147
SHA1:	8F61C82D9B1C0A85C2B7B731AFD3091B260B888F
SHA-256:	5E94C2881DF96A7E11487D3BE1B57F5898BD5AEECEC40AC977C3D07745A23417
SHA-512:	D6E2ABDE217CBF9D7D841ABA1A13F8F37E7C5C6792930FD58463E0DB2A1B50934B2DCAC7068F3C3C63C52E93F08994BBEB5C6E7F9F50927416C37070310F4FAA
Malicious:	false
Reputation:	low
URL:	https://free2try.com/images/styles-2016.css
Preview:	/* Probably don't edit below this. */.@import 'https://fonts.googleapis.com/css?family=PT+Sans';..html, body { overflow-x: hidden; }..body { font-family: 'PT Sans', sans-serif;}.header img { width: 100%; }.footer { padding: 20px 10%; }.footer table { font-size: 3vw !important; }.h1 { font-size: 8.00vw; margin: 0px !important; padding: 20px 0px !important; }.h2 { font-size: 7.75vw; margin: 0px !important; }.h3 { font-size: 5.5vw; margin: 0px !important; }.h4 { font-size: 4.25vw; margin: 0px !important; }.h5 { font-size: 3.25vw; margin: 0px !important; }..#email-page h1,#reg-page h1 { padding:0px !important; }...rewards h4 { font-size: 3.25vw; margin: 0px !important;padding-top: 10px !important; }..rewards h5 { font-size: 2.5vw; margin: 0px !important; }..input[type='checkbox'], input[type='radio'] { margin-left: 0px; height: 32px; width: 32px; }...empty-panel { height: 80px; }...padding-lg { padding: 30px 0px; }..padding-lg-top {padding: 30px 0px 5px 0px;}..padding-sm { padding: 20px 0

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 370, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	136
Entropy (8bit):	5.709351238290323
Encrypted:	false
SSDEEP:	3:yionv//thPlEclpgl/HRthwkBDsTBZtPAkxMzlVzV3Tadll9tjp:6v/lhPJpgl/5nDspPAkS/jaDl9tjp
MD5:	598A1198978E9C9CFED1C809876DFE26
SHA1:	81F71A6E05D24885179174822465D149BFAEE5E4
SHA-256:	88631AAF9D1F603077058654A6C79EDC4B6A5EEE2C7A38A93F32214BD37C0316
SHA-512:	BD15A506D277F42658B88C41565180A71DEF33BBEBE68A3DBE78C805541CF7E7A5C73AFD877B52284FDFBBDA3D2E69D20CE7572A6516848D54B3843C94545D83
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r.......'.....tEXtSoftware.Adobe ImageReadyq.e<...*IDATx.b.......0...9...3....4\|F.(...b....E../;.......IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	97761
Entropy (8bit):	4.107869055232737
Encrypted:	false
SSDEEP:	1536:7SVCAaPqlt0ptZeBLXvV7C7JN79hvUiemn6:MCAN0p/eRvV7C7bvJ6
MD5:	25D1758A88A2AD3CEC684071C3160C16
SHA1:	EE68F31A9547E74E7EAE1A8DDC29CD064D8D2FC3
SHA-256:	57AF4500E0A8983C8D6F76712E79647943702F019E4D1DA9308135DBEA5A5EA5
SHA-512:	79259E2193F4AC184CE7259AB50448061340E6824F359C949DB42D35F321A9279E17A9223014DBA9855A9D9B03E7DC4DF358AD6CE0A01AE503848F21590EDC01
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v1/pushnami-adv/60521c272bf0240010135168
Preview:	.// The empty line above is critical for templating main.beta in the current implementation.// Start Test Mode Detection ;..// .var isRollbar = null;.// add rollbar .var pushWrap = {. wrapObj: function (service) {. for (var fn in service){. if (service.hasOwnProperty(fn) && typeof(service[fn]) === 'function') pushWrap.safeWrap(service, fn);. }. },. safeWrap: function(service, fn) {. var pushFn = service[fn];. service[fn] = function (a, b, c, d, e, f, g, h, i, j, k, l) {. try { return pushFn.call(service, a, b, c, d, e, f, g, h, i, j, k, l); }. catch (err) {. pushWrap.report(err);. }. };. },. report: function(err){. var opts = {. event: 'webpush-error-generic',. scope: 'Website',. scopeId: "60521c272bf0240010135167",. l: encodeURIComponent(location.href),. e: JSON.stringify(err, Object.getOwnPropertyNames(err)).

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	5.311246673140053
Encrypted:	false
SSDEEP:	24:3AOY7aZw6RVc+u/rAOY7aZwwwy96DGSSf7:QOEaZRVc+ukOEaHN0oD
MD5:	A9A33D98EA8D21AFE643BA2F673AA65F
SHA1:	BFD56D752A02A8A95E0F680FEDD322CBAEDC8C87
SHA-256:	171AD06D195B0098C704A465FEF9E726222A369C1DC39873A7A57AB6E0D74C9D
SHA-512:	F4429FD888E26C0533A91849D8FEDF14F1D1A95DAE17688A3DDC5FE5A8528EB8466EC5A8743CD3EBE907A22A2CBCDC4222F041070AED841EAA13AFFCBCEBA731
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Poppins&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65366)
Category:	downloaded
Size (bytes):	99961
Entropy (8bit):	5.103690141294514
Encrypted:	false
SSDEEP:	768:rnB72vDPZJF1Y13kGxw+snfkzaZbZb3PxNCMpm0Fr89YjMXdQJaQ:j6p1Y13NwTk+fPM4891XE
MD5:	8A7442CA6BEDD62CEC4881040B9A9E83
SHA1:	E2D2B846E9EA72A1985458A3748AAB4E01A8FB3A
SHA-256:	E9503448692B738DD260FBD7F7CABF2E11F09B600FA97E6EB3A56EBA5B1A7E9B
SHA-512:	057FD1D2E51DF045DB3DADBD41FAC2B31839C4F651F897CCD24E8AEB3162CA04E37B50977F11DC96B50A25B94EE2525EA2B2539862788E38F43636D0B5B4D192
Malicious:	false
Reputation:	low
URL:	https://free2try.com/images/bootstrap.min.css
Preview:	/!. Bootstrap v3.1.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.177565906119431
Encrypted:	false
SSDEEP:	6:bDgPRMT4/wRBosIwpoTGRMT4/wRBosyOMyH8v1sXRE11pbpYa8Q9BL6u1AXBJNbl:YiT4IPosNoT4IPostnI12y11p95X9BZy
MD5:	7B6E92D4DD4A6147874A8DC1AC8165C1
SHA1:	A1299CA1BF06F9706636FF062C62E4F822507AD5
SHA-256:	7769E227D2D1841DB677131AAE4558B1AC71DEF7D9FA71F840F35908FA0792D5
SHA-512:	ED26272FC603C49BF8CE52227FD0F6531AC617F87533260A8FDB1CE8E51D19FD65C6FEBED5C1D1E2A7EE6BF4113261F5282846A0D7BDE5B023BCC4CC957804CE
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168
Preview:	"use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"60521c272bf0240010135168",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"60521c272bf0240010135167",rtpUrl:"https://rtpd.pushnami.com"};importScripts("https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js");

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1143), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	16534
Entropy (8bit):	5.4717002241043335
Encrypted:	false
SSDEEP:	384:NeD8qUbjssAzfsmcJzXMHKyny7yJe0oxyzy3y7vnV+Sjm+E43IhCm+hw0hgq:c8qUbBZJzXMtyet2i7VRjmf4MZ++0hgq
MD5:	BA884B76063DE3768FD57E477ED60FF0
SHA1:	DBF4B5B51CE6981E4B46DBBCB11E110CECA1E295
SHA-256:	ADF5355E11DEF40950B4ECB6B98AD5E881D296A1AB0FE907A9F4C7290F6CDD75
SHA-512:	E249EF77163EBF38284485C2821E54D33A64F7BCA54AD27EA1EC635BE2CA7699C0AD2D7937BDF593014B457C66B5A09944EA84AD02F6D31525B6AF9AE7F5F249
Malicious:	false
Reputation:	low
URL:	https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30
Preview:	<!DOCTYPE html><html lang="en-us"><head><meta name="viewport" content="width=device-width, initial-scale=1"><link type="text/css" rel="stylesheet" href="/images/bootstrap.min.css" /><link href="https://fonts.googleapis.com/css?family=Poppins&display=swap" rel="stylesheet"><style>. . .header-disclaimer{..font-size:1.8vw;..width:100%;..margin: 0 auto;..text-align:center;. color:#000;..margin-top: 0px;..font-weight:bold;..font-family:'Poppins';. }. @media screen and (min-width: 768px) {. .header-disclaimer{ . font-size: 12px;. }. }.. . </style><link type="text/css" rel="stylesheet" href="/images/styles-2016.css" /><link type="text/css" rel="stylesheet" href="/9179/registration//colors-2016.css" /><link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet" /><style type="text/css">. header { background: url(/9179/registration/bg_header.png); }. </style>. .<style type="text/css" media="all">..errors {..font: 12px "Arial", Helvetica, sans-serif;..colo

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62342)
Category:	downloaded
Size (bytes):	62430
Entropy (8bit):	5.204923082683395
Encrypted:	false
SSDEEP:	768:8vqMKHl3RGlYrUrQG+N+bb1WiboNFe+WYuj6fYkbGFb7/a4YDEa0yIB4aitCEHWD:5EQiboNF1WqfEF//a4+/0yXaS2D
MD5:	266AA15B465F8CF42ECBFAFA40113B47
SHA1:	DD0B29D4141C0E11AB5D726EDDBC1077B2B4C58E
SHA-256:	51C4937685DA9878B413E809018CBB94A489DBD50A143FB365BAAC1DE5FA88A2
SHA-512:	EA042B9AF8009174D8B4EC8E7FB3EE2CA3BD7328DE21F0776D963EE3DCF7A98CE61EAFBB2B5055D162FBA02007495F604ED0C124311F67FB3244616B35DE0AF5
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js
Preview:	/! For license information please see sw.355e010fef1d4bf4045b.bundle.js.LICENSE.txt /.(()=>{var e={483:(e,n,t)=>{e.exports=function e(n,t,r){function o(a,c){if(!t[a]){if(!n[a]){if(i)return i(a,!0);var u=new Error("Cannot find module '"+a+"'");throw u.code="MODULE_NOT_FOUND",u}var s=t[a]={exports:{}};n[a][0].call(s.exports,(function(e){var t=n[a][1][e];return o(t\|\|e)}),s,s.exports,e,n,t,r)}return t[a].exports}for(var i=void 0,a=0;a<r.length;a++)o(r[a]);return o}({1:[function(e,n,r){(function(e){"use strict";var t,r,o=e.MutationObserver\|\|e.WebKitMutationObserver;if(o){var i=0,a=new o(f),c=e.document.createTextNode("");a.observe(c,{characterData:!0}),t=function(){c.data=i=++i%2}}else if(e.setImmediate\|\|void 0===e.MessageChannel)t="document"in e&&"onreadystatechange"in e.document.createElement("script")?function(){var n=e.document.createElement("script");n.onreadystatechange=function(){f(),n.onreadystatechange=null,n.parentNode.removeChild(n),n=null},e.document.documentElement.appendChil

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	339910
Entropy (8bit):	5.478438818502663
Encrypted:	false
SSDEEP:	3072:oJbNyDtPKI+XkGlaw7N2qArvtJ18phy4cz6n5C47+7RBotNqvHLLUZI5wE:ob2qAxWhSz25dyPLLUZ0
MD5:	66394B4FBB861428F8DB13D2F7AC0AAB
SHA1:	A0B188E8034CED0EC14F23C48D15C3F02163F134
SHA-256:	1972AD39BAB3C8F1331E288E27E211C34B421BDD275CF6D126A0630D2027683F
SHA-512:	DE36EDD0923A5C290E1932D6404E3DA7D9C7A67FB50F686CF10036D7A5CC88277DA3233BF4A9888B064BA78724C883D884DE0E403F19CBB7962DB11F748DD8AD
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/exp/psfpv4_client_1.126.1_1972ad39bab3c8f1331e288e27e211c34b421bdd275cf6d126a0630d2027683f.js
Preview:	/! For license information please see main.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self,(()=>(()=>{var __webpack_modules__={"./node_modules/google-protobuf/google-protobuf.js":function(__unused_webpack_module,exports,__webpack_require__){var $jscomp=$jscomp\|\|{};$jscomp.scope={},$jscomp.findInternal=function(e,t,r){e instanceof String&&(e=String(e));for(var o=e.length,n=0;n<o;n++){var s=e[n];if(t.call(r,s,n,e))return{i:n,v:s}}return{i:-1,v:void 0}},$jscomp.ASSUME_ES5=!1,$jscomp.ASSUME_NO_NATIVE_MAP=!1,$jscomp.ASSUME_NO_NATIVE_SET=!1,$jscomp.SIMPLE_FROUND_POLYFILL=!1,$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,r){e!=Array.prototype&&e!=Object.prototype&&(e[t]=r.value)},$jscomp.getGlobal=function(e){return"undefined"!=typeof window&&window===e?e:vo

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 370, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	237581
Entropy (8bit):	7.991644567400195
Encrypted:	true
SSDEEP:	6144:96Hm+cGyPd3XMGs+hqWrazfg4WZ64k16cK8Q:96HmRGyP1XMGs+hqTzfgizTk
MD5:	75B74D62C7BC6F35C387D8CDA1AD5719
SHA1:	CD3B36FC0BB61B1072F353A0E76BA57620B5C4AC
SHA-256:	65D32C6959D28CE67367F455669536EA4F669783BE2C8242FC28AD058E04A738
SHA-512:	66E80918DD925551D7A0C63F62FAA14FCC71D53415458311BF9748351525C5FB5E8AB9F00705D8D9042A79C7BC56D599F5D593272DC183375127180F9BDF1CB4
Malicious:	false
Reputation:	low
URL:	https://free2try.com/9179/registration//main_header.png
Preview:	.PNG........IHDR.......r......*:....pHYs................aiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-03-03T09:07:38-05:00" xmp:ModifyDate="2021-03-03T09:41:34-05:00" xmp:MetadataDate="2021-03-03T09:41:34-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:ca3d52c6-ea11-0245-b80d-4eb4c48ede4d" xmpMM:DocumentID=

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	90
Entropy (8bit):	4.742785286915661
Encrypted:	false
SSDEEP:	3:JSbMogL1dKIUkRQwIC53//MddHf:qO11pRQ9E8H
MD5:	AC36C48FA2CE8963AED09D4E22766B61
SHA1:	A5C2E31985B187F61100FDCAF792113D2A0892A8
SHA-256:	710B979433EEB6289073EB8D7947EC7973F11AA310CF430999AC209A408DDBA3
SHA-512:	CD449A0531C2384AA69CCF7929345301B726913D11D789ADA14ED5CCF630DD4B461A5C050559F56FB5A31BE48D589C6DA12ADB51BE5171937CD798F2118872C4
Malicious:	false
Reputation:	low
URL:	https://free2try.com/pushnami/service-worker.js
Preview:	importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168");

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	5.29419404601028
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDmO6S8f:3qD+2+pUAew85zsDh5A
MD5:	171BE27AAD9D6F266A2D1A216F8F8715
SHA1:	4020238543D8B5E8C545133932026F0130BA679A
SHA-256:	91F24B85DF6D0CB319229ADB13B27BE5F5F49969A8C083D6939B4E267559AABB
SHA-512:	E7F186228994EA6B51BF192EE0CAADA1D3E1C5346D47D70A9D1F26C4173C0BB0591230433DF58D7D83F6008E791B5EFA4860BC822F22B22B46573C3A6A37F432
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	3.955574502316902
Encrypted:	false
SSDEEP:	12:Mcc6Q1+cPsH3C3FAkBF+0wjOYQk1MVExMnvPnUcn2wnDHUXFnD301n6jnLOn0lnv:dc6i7sy1ZMvmSrg+k0tcS
MD5:	E31BC43E68880C1B96585A4773C9F450
SHA1:	6D57BA5F558211E79BB862EE45F5DC35B541D542
SHA-256:	97C4B79B9DA90087E3586ECC772836A7CE6B15D74983DE2B5479C5ABC859CA74
SHA-512:	7D45AC1650C28C24E28BB3F2CB589660BF9E94287A0BBE537C24C6A58CAFD037A6EFDC3324E7A3A66BBD9A74BC14F737C1D52904110DFF2AC2809D6D86BF9148
Malicious:	false
Reputation:	low
URL:	https://free2try.com/images/js_fl.js
Preview:	var fl_cid = {."284200": "290174",."289507": "290174",."265483": "290174",."289090": "290174",."287650": "290174",."280385": "290174",."289638": "290172",."287437": "290172",."281165": "290172",."287640": "290172",."125934": "290172",."253570": "290172",."289009": "290172",."47609" : "290172",."286121": "290172",."289549": "290172",."289049": "290172",."282609": "290172".}..var fl_campaign_id = {."284200": "125676",."289507": "125676",."265483": "125676",."287650": "125676",."289090": "125676",."280385": "125676",."289638": "125674",."287437": "125674",."281165": "125674",."287640": "125674",."125934": "125674",."253570": "125674",."289009": "125674",."47609" : "125674",."286121": "125674",."289549": "125674",."289049": "125674",."282609": "125674".}.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 01:01:08.645431995 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:08.661076069 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:08.989164114 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:15.186650038 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.186709881 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:15.186770916 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.187043905 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.187057972 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:15.187459946 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.187503099 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:15.187556028 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.187728882 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:15.187743902 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.151146889 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.152057886 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.152092934 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.153107882 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.153172016 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.153426886 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.154288054 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.154314041 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.155698061 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.155756950 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.160650969 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.160800934 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.162574053 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.162647009 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.162785053 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.162796974 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.208245993 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.208281994 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.208328962 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.255436897 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.326297998 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.326416016 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.328727961 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.330954075 CEST	49716	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:16.330976963 CEST	443	49716	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:16.408668041 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.408723116 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:16.408793926 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.409002066 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.409008980 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:16.409056902 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.409203053 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.409214973 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:16.410919905 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:16.410929918 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.193346977 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.206557035 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.243185997 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.254000902 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.266539097 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.266558886 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.266989946 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.266994953 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.267705917 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.267767906 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.268194914 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.268246889 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.418265104 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.418414116 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.419673920 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.419831991 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.422998905 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.423017979 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.465023994 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.465032101 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.465059042 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.512125015 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.598618984 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:17.598674059 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:17.598732948 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:17.600298882 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:17.600312948 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:17.610502005 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.610570908 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.610616922 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.611999989 CEST	49719	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:01:17.612024069 CEST	443	49719	34.91.234.242	192.168.2.6
Jul 5, 2024 01:01:17.675380945 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:17.675434113 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:17.675487995 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:17.675964117 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:17.675977945 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.163436890 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.163711071 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.163736105 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.164809942 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.164874077 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.260061026 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:18.276101112 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:18.442508936 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.442667007 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.447228909 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.447249889 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.447655916 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.449739933 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.449739933 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.449764013 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.450001001 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.492503881 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.498593092 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:18.498630047 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:18.498775005 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:18.500591040 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:18.500612974 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:18.530616045 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.530764103 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.530785084 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.538458109 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:18.538487911 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:18.538575888 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:18.538790941 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:18.538805962 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:18.576500893 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.583372116 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.583388090 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.594619989 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:18.624129057 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.625500917 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.625608921 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.626164913 CEST	49721	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:18.626184940 CEST	443	49721	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:18.628995895 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.671641111 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.671703100 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.674184084 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.682689905 CEST	49722	443	192.168.2.6	172.67.73.137
Jul 5, 2024 01:01:18.682715893 CEST	443	49722	172.67.73.137	192.168.2.6
Jul 5, 2024 01:01:18.709964037 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:18.710005045 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:18.710078001 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:18.710460901 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:18.710477114 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.157607079 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.158057928 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.172698021 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.172717094 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.173032045 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.206896067 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:19.223895073 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.248924017 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:19.248939037 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:19.250081062 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:19.250204086 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:19.264777899 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:19.264885902 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:19.267633915 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.285036087 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.289051056 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.289082050 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.290091038 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.290206909 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.291266918 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.291332960 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.291583061 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.291594982 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.312513113 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.316844940 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:19.316857100 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:19.332881927 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.362199068 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:19.456587076 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.456657887 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.456708908 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.466295958 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.466324091 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.466336966 CEST	49723	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.466344118 CEST	443	49723	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.494842052 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.494941950 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.494987965 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.495625019 CEST	49725	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.495645046 CEST	443	49725	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.518376112 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.518405914 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.518476963 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.518810987 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:19.518822908 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:19.932058096 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.932097912 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:19.932153940 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.932435989 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:19.932454109 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:20.178874969 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.178966999 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.183121920 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.183134079 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.183373928 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.187045097 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.232511044 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.294361115 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 5, 2024 01:01:20.294455051 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 5, 2024 01:01:20.405299902 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:20.420824051 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:20.420866966 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:20.421283007 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:20.425199032 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:20.425265074 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:20.428957939 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:20.446120024 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.446181059 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.446321011 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.447635889 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.447655916 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.447684050 CEST	49726	443	192.168.2.6	23.53.114.19
Jul 5, 2024 01:01:20.447690964 CEST	443	49726	23.53.114.19	192.168.2.6
Jul 5, 2024 01:01:20.476501942 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146033049 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146070004 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146092892 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146116018 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146145105 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146168947 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146176100 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.146213055 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146234035 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.146245956 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146281958 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146799088 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.146804094 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.146934032 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.150755882 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.150795937 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.151036024 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.151041985 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.191804886 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.235861063 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.235970020 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.236268997 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.236380100 CEST	49727	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.236398935 CEST	443	49727	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.398184061 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.398231030 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.398380995 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.398833990 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.398853064 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.423134089 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.423172951 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.423223019 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.424366951 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.424372911 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.424432993 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.425648928 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.425664902 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.425709009 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.426847935 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.426853895 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.426912069 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.427474022 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.427480936 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.427534103 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.428570986 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.428584099 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.429382086 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.429392099 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.430105925 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.430115938 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.431020021 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.431031942 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.431696892 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.431705952 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.896322966 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.898458004 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.898487091 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.898876905 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.899255037 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.899308920 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.899425030 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.908442974 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.908596039 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.908607006 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.909573078 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.909631014 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.910264969 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.910325050 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.910388947 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.910397053 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.915987968 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.916266918 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.916302919 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.917361021 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.917442083 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.918064117 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.918133020 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.918186903 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.918196917 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.918545008 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.918751955 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.918761969 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.920059919 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.920110941 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.920555115 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.920612097 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.920803070 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.920813084 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.926611900 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.929246902 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.929265022 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.929584980 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.929959059 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.930018902 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.930259943 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.936147928 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.936321020 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.936342955 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.937304974 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.937357903 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.937978983 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.938035011 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.938364983 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.938371897 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.940500975 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.957098007 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.972564936 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.972564936 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:21.976506948 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:21.987766981 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.051536083 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051575899 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051599026 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051621914 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051630974 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.051645041 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051665068 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051681042 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.051708937 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.051713943 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051774025 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051801920 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051815033 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.051820040 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.051856995 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.056665897 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.058974981 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059020042 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059042931 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059051991 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059058905 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059078932 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059083939 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059102058 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059115887 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059125900 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059127092 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059132099 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059134007 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059137106 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059154987 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059170961 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059175014 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059204102 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.059210062 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059242964 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.059271097 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.068289995 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.068310022 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.068370104 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.068397999 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.068411112 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.068432093 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.082214117 CEST	49730	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.082227945 CEST	443	49730	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.083275080 CEST	49729	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.083278894 CEST	443	49729	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.091850996 CEST	49731	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.091871023 CEST	443	49731	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.092938900 CEST	49732	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.092945099 CEST	443	49732	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.102408886 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.102416992 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.102931976 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.102979898 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103005886 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103015900 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.103024006 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103050947 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103058100 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.103063107 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103089094 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.103094101 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103122950 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103154898 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.103157997 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103452921 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103483915 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103494883 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.103499889 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.103532076 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.107908964 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145184040 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145217896 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145237923 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145277977 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145278931 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.145306110 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.145325899 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.145354033 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.145359039 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146385908 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146425962 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.146430969 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146466970 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146505117 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.146511078 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146969080 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.146997929 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147007942 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147012949 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147049904 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147057056 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147062063 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147109985 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147114992 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147749901 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147775888 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147789955 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147794962 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147816896 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147816896 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147834063 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.147838116 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.147880077 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.148642063 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.150078058 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.150127888 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.150136948 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.190962076 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.198071003 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198115110 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198143959 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198157072 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.198163986 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198200941 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.198424101 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198461056 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.198498011 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.198503971 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199008942 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199037075 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199064016 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.199069977 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199110985 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.199115992 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199893951 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199934006 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.199974060 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.199980021 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.200025082 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.200037003 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.200735092 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.200762987 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.200778961 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.200786114 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.200824022 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.200828075 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239077091 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239180088 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239204884 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239218950 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239227057 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239259958 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239264011 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239475965 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239515066 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239520073 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239630938 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239654064 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239667892 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239672899 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239706039 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239952087 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.239994049 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.239999056 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240032911 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.240139961 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240180016 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.240441084 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240478992 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.240566015 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240607023 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.240737915 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240766048 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240778923 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.240782976 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.240816116 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.241334915 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241358042 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241370916 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.241375923 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241400957 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.241441965 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241475105 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.241478920 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241528988 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.241561890 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.242363930 CEST	49728	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.242377996 CEST	443	49728	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.253844023 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.253853083 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.293730021 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.293780088 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.293787956 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294019938 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294059992 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.294064999 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294277906 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294320107 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294334888 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.294339895 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294367075 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294378042 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.294384956 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294420958 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.294951916 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294959068 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.294994116 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.295070887 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295077085 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295111895 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.295116901 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295893908 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295933008 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.295938015 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295944929 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.295988083 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.295993090 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.296008110 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.296736956 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.296781063 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.296786070 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.296833992 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.296883106 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.296922922 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.296976089 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.297025919 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.299112082 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.299160957 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.299200058 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.299246073 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.299638033 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.299685955 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390270948 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390305042 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390326977 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390337944 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390362024 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390378952 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390619993 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390656948 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390672922 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390676022 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390696049 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390696049 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390716076 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390721083 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390738964 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390764952 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390805960 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390810966 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390860081 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.390961885 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.390990973 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391000986 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391006947 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391024113 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391043901 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391238928 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391279936 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391386986 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391447067 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391597986 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391654015 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391674995 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391717911 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.391966105 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.391997099 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.392005920 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.392009974 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.392039061 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396205902 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396267891 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396281004 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396320105 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396496058 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396529913 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396541119 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396544933 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396555901 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396570921 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396590948 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396594048 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396608114 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396620989 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396656036 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396661043 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396703005 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.396765947 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.396815062 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486023903 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486083031 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486090899 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486110926 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486141920 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486164093 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486207008 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486238956 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486264944 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486269951 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486289024 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486303091 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486313105 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486316919 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486360073 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486399889 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486458063 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486700058 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486745119 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.486808062 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.486846924 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487070084 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487076998 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487104893 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487123013 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487127066 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487164021 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487279892 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487334967 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487339020 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487368107 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.487371922 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487411976 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487684965 CEST	49733	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.487703085 CEST	443	49733	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.508938074 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.508960962 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.509018898 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.509382010 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:22.509392977 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:22.999927044 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.000200987 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.000225067 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.003758907 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.003830910 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.004241943 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.004409075 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.004431009 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.044511080 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.050736904 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.050749063 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.061034918 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.061069012 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.061193943 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.062388897 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.062403917 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.096165895 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.147844076 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.147882938 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.147923946 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.147949934 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.147959948 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.147974968 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.147994995 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.148005009 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.148031950 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.148039103 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.148518085 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.148545980 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.148591042 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.148603916 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.148637056 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.152607918 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.202301025 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.202315092 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239183903 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239213943 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239236116 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.239248037 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239257097 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239288092 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.239303112 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239346027 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239382029 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.239392042 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.239435911 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.240087032 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.240516901 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.240559101 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.240561962 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.240571022 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.240608931 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.240910053 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241198063 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241219044 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241242886 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.241249084 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241286039 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.241291046 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241692066 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241719961 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241748095 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.241753101 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241780043 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241799116 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.241802931 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.241832972 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.241837025 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.242599964 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.242641926 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.242647886 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.286077976 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.286088943 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330770969 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330802917 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330817938 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.330826998 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330868006 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330890894 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.330894947 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330903053 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330928087 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.330955982 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.330980062 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331134081 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331140995 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331186056 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331192017 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331269026 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331310034 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331315994 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331358910 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331568956 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331614971 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331764936 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331808090 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331883907 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331914902 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331938982 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.331947088 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.331958055 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.332020998 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.332906961 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.332962990 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.332984924 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.333026886 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.333106995 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.333148956 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.333278894 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.333322048 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.333374023 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.333415985 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.333442926 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.333483934 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.422868013 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423012018 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423015118 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423029900 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423131943 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423325062 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423453093 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423476934 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423484087 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423504114 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423547983 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423574924 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423580885 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423607111 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423738003 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423926115 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423933029 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423966885 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.423993111 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.423998117 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424017906 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.424215078 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424324036 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.424329042 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424371958 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424447060 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.424452066 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424573898 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424614906 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424647093 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.424652100 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.424673080 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.425101042 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425260067 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425306082 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.425312996 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425463915 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425498009 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425523996 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425549030 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.425560951 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.425580025 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.425600052 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428123951 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428148031 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428205013 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428205013 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428211927 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428308964 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428375006 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428431034 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428458929 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428462982 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428467989 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428493977 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428524017 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428867102 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.428965092 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.428970098 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429043055 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429219007 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429258108 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429286003 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429287910 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429294109 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429308891 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429517031 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429584980 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429749012 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429754972 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429822922 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429886103 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429919004 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429946899 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.429951906 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.429974079 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.474194050 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.514672041 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.514780045 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.514801025 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.515017986 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.516829967 CEST	49738	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.516844034 CEST	443	49738	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.542867899 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.544909000 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.544924974 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.545285940 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.547878981 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.547945976 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.548058987 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.592504978 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.598680019 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.673118114 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.673190117 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.673502922 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.680485964 CEST	49739	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.680497885 CEST	443	49739	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.695594072 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.695611000 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:23.695705891 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.696230888 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:23.696249962 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.081228971 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.081260920 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.081394911 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.081548929 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.081562996 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.217616081 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.218091011 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.218103886 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.218455076 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.218899012 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.218899012 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.218970060 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.269958019 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.368005991 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.368072987 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.368244886 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.371964931 CEST	49741	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:24.371979952 CEST	443	49741	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:24.844794035 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.846345901 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.846371889 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.847485065 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.847548008 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.849581003 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.849642038 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.850703955 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:24.850717068 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:24.897062063 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.578994036 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:25.579073906 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:25.579407930 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:25.579895020 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:25.579907894 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:25.690202951 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690228939 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690237045 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690268993 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690296888 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690305948 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.690331936 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.690356016 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.700361013 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.700397968 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.700473070 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.700489044 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.700512886 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.754861116 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.776196003 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.776211023 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.776233912 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.776259899 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.776281118 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.776293039 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.776392937 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.839005947 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.839018106 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.839054108 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.839082956 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.839092016 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.839113951 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.839135885 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.839272022 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.881745100 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.881767988 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.882692099 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.882714987 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.888535976 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.973292112 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.973313093 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.973464012 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:25.973481894 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:25.974999905 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:26.051635027 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:26.054068089 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:26.054091930 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:26.058689117 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:26.082690001 CEST	49742	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:26.082724094 CEST	443	49742	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:26.205101967 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.205137014 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.205286980 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.231129885 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.231164932 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.232106924 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:26.232157946 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:26.232245922 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:26.233243942 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:26.233282089 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:26.233417988 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:26.233740091 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:26.233764887 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:26.234689951 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:26.234704018 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:26.386317015 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.386668921 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.389628887 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.389640093 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.389885902 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.392844915 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.393069029 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.393075943 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.394690037 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.440490961 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.572104931 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.572446108 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.572506905 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.572767019 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.572788000 CEST	443	49743	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:26.572825909 CEST	49743	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:26.713303089 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.716603994 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.716634035 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.716970921 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.718283892 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.718350887 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.718441010 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.764502048 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.842662096 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.842720985 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.842765093 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.843614101 CEST	49744	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:26.843631983 CEST	443	49744	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:26.939707994 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:26.939949989 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:26.939965963 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:26.941044092 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:26.941102982 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.011727095 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.012015104 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.012038946 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.013047934 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.013102055 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.149399042 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.149574995 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.150640011 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.150660992 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.151179075 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.151329994 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.151339054 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.182877064 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:27.182914972 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:27.182980061 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:27.183245897 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:27.183259964 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:27.192184925 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.192186117 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.192197084 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.237091064 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.260624886 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.260699034 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.260756016 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.262186050 CEST	49746	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.262206078 CEST	443	49746	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.264019966 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.264041901 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.264098883 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.265109062 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.265121937 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.741519928 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748181105 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748192072 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748234987 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748253107 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748262882 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748279095 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.748306990 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.748348951 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.748389006 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.775439024 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.775719881 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.775734901 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.776087999 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.779164076 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.779232979 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.782711983 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.824492931 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.853509903 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.853523970 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.853562117 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.853596926 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.853607893 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.853635073 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.853948116 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.854861975 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.854892969 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.854938984 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.854974985 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.854974985 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.855061054 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.864500046 CEST	49745	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:27.864515066 CEST	443	49745	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:27.929528952 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.929759979 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:27.929910898 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:27.968252897 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.024717093 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.030076981 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.030085087 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.030103922 CEST	49748	443	192.168.2.6	18.211.221.201
Jul 5, 2024 01:01:28.030123949 CEST	443	49748	18.211.221.201	192.168.2.6
Jul 5, 2024 01:01:28.030543089 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.032064915 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.032197952 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.033655882 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.058499098 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.058521986 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.058640957 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.061006069 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.061021090 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.065265894 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.065273046 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.065583944 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.065584898 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.065607071 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.076497078 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.625363111 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.625591993 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.625644922 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.685842037 CEST	49747	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:28.685869932 CEST	443	49747	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:28.708931923 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:28.708986998 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:28.709043980 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:28.709614992 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:28.709626913 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:28.791874886 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.818526983 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.818545103 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.819793940 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.819849968 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.821780920 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.821871996 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.822264910 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.822272062 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.837570906 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.838119030 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.838128090 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.839129925 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.839194059 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.840981007 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.841047049 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.841506958 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.841520071 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:28.866507053 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.895883083 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:28.968343019 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.968422890 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:28.968473911 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.970274925 CEST	49749	443	192.168.2.6	34.193.230.73
Jul 5, 2024 01:01:28.970294952 CEST	443	49749	34.193.230.73	192.168.2.6
Jul 5, 2024 01:01:29.115840912 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:29.115904093 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:29.116043091 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:29.124078035 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:29.124140978 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:29.124181986 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:29.124193907 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:29.124317884 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:29.124504089 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:29.127522945 CEST	49750	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:29.127547026 CEST	443	49750	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:29.486521006 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:29.537216902 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:29.637908936 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:29.637933016 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:29.638458967 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:29.686908007 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:29.687072992 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:29.687171936 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:29.728513956 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:29.738090038 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.281251907 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281275034 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281281948 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281312943 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281327009 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281335115 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281344891 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.281363010 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.281385899 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.281416893 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.290307999 CEST	49724	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:01:30.290322065 CEST	443	49724	142.250.186.164	192.168.2.6
Jul 5, 2024 01:01:30.291028023 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:30.291069984 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:30.291130066 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:30.291809082 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:30.291821957 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:30.314445019 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.314480066 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.314542055 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.315021038 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.315033913 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369730949 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369745970 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369785070 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369795084 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369803905 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.369823933 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.369859934 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.369874001 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.375061989 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.375070095 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.375121117 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.375128984 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.375181913 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.465245962 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.465296030 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.465313911 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.465327978 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.465354919 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.465373993 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.465378046 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.468744993 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.510236979 CEST	49751	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:30.510252953 CEST	443	49751	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:30.570111990 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:30.570204973 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:30.570266008 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:30.760495901 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:30.802450895 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.075638056 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.131917000 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.248399019 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.248425007 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.248723984 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.248760939 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.249264002 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.249926090 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.250351906 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.250431061 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.250699043 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.250905037 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.250942945 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.251035929 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.292500019 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.292500973 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.357907057 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.357985020 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.358027935 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.376507998 CEST	49755	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.376538992 CEST	443	49755	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.394057035 CEST	49715	443	192.168.2.6	188.114.97.3
Jul 5, 2024 01:01:31.394078016 CEST	443	49715	188.114.97.3	192.168.2.6
Jul 5, 2024 01:01:31.499278069 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.499329090 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.499382973 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.499767065 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:31.499782085 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.842251062 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.851083994 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.851095915 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.851118088 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.851138115 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.851169109 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.851195097 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.851213932 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.933300018 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.933355093 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.933396101 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.933404922 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.933451891 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.937839031 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.937858105 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.937911034 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:31.937916994 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:31.985423088 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:31.987868071 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.030512094 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030524969 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030575037 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030596018 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.030610085 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030622959 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030658007 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.030664921 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.030683041 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.030697107 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.032066107 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032085896 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032136917 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.032143116 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032181978 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.032896042 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032932043 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032955885 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.032959938 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.032988071 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.034812927 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.034833908 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.034868002 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.034873962 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.034898043 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.034914017 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.122916937 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.122946978 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123064995 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123078108 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123111963 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123184919 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123204947 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123229027 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123234034 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123255968 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123270035 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123522997 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123562098 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123577118 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123580933 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123617887 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.123720884 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.123754025 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.124294043 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.124314070 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.124346972 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.124351978 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.124368906 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.128500938 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.130094051 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.130121946 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.130140066 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.130146027 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.130178928 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.191004038 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.215312958 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.215347052 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.215435028 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.215461969 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.215501070 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.215895891 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.215940952 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.215960979 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.215965986 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.216003895 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.216723919 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.216782093 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.216933012 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.216973066 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.216991901 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.216998100 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.217012882 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.217031002 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.217782974 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.217803001 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.217849016 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.217855930 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.217879057 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.218449116 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.218461990 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.218513012 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.218521118 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.221853971 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.221870899 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.221934080 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.221942902 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.221977949 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.222218990 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.222250938 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.222279072 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.222285032 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.222317934 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.222331047 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.223051071 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.223067045 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.223118067 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.223124027 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.223153114 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.223164082 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.306173086 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.306205988 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.306247950 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.306324005 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.306337118 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.306344032 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.306382895 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.490794897 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.490839958 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.492257118 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.493740082 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.493925095 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.494453907 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.528110027 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.540503979 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.562462091 CEST	49756	443	192.168.2.6	18.244.18.23
Jul 5, 2024 01:01:32.562491894 CEST	443	49756	18.244.18.23	192.168.2.6
Jul 5, 2024 01:01:32.600625992 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.600723028 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:32.600775957 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.607861996 CEST	49757	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:32.607891083 CEST	443	49757	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:34.402509928 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:34.402556896 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:34.402729034 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:34.403002024 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:34.403017998 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.018054962 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.018335104 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.018362999 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.019799948 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.019866943 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.020903111 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.020981073 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.021083117 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.021090984 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.120542049 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.139590025 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.139741898 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.139791965 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.140295982 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.140316010 CEST	443	49759	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.140326977 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.140357018 CEST	49759	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.141669035 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.141706944 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.141760111 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.142241001 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.142257929 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.760730982 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.761017084 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.761048079 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.761518002 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.761881113 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.761974096 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.762079000 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.762094975 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.762113094 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.879437923 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.879595995 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.879657030 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.880090952 CEST	49760	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.880110025 CEST	443	49760	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.882800102 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.882836103 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:35.883080006 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.883292913 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:35.883304119 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.469854116 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.470474958 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.470494032 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.470959902 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.471488953 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.471561909 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.472090006 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.512495995 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.558603048 CEST	64204	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:36.564706087 CEST	53	64204	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:36.564764023 CEST	64204	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:36.564795017 CEST	64204	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:36.570450068 CEST	53	64204	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:36.720948935 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.721019983 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.721067905 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.721434116 CEST	49761	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.721448898 CEST	443	49761	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.722260952 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.722296953 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:36.722526073 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.722754002 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:36.722764015 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.028538942 CEST	53	64204	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:37.029304028 CEST	64204	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:37.042982101 CEST	53	64204	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:37.043032885 CEST	64204	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:37.351216078 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.351484060 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:37.351510048 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.351963043 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.352435112 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:37.352535009 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.352711916 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:37.396501064 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.493824959 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.493928909 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.494018078 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:37.496072054 CEST	64205	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:37.496090889 CEST	443	64205	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:37.517862082 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:37.517901897 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:37.518065929 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:37.518436909 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:37.518450975 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:37.888214111 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:37.888336897 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:37.888406992 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:37.889121056 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:37.889166117 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.273694038 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.274097919 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.274125099 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.275563955 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.275630951 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.276041985 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.276124001 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.276256084 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.316508055 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.316639900 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.316657066 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.362554073 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.476737976 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.476841927 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.476929903 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.477452040 CEST	64207	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:38.477483988 CEST	443	64207	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:38.700838089 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.700906992 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.705892086 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.705904961 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.706151962 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.708091974 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.708153963 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.708158016 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.708332062 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.752490044 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.887393951 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.887813091 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.887824059 CEST	443	64208	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:38.887835026 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:38.887862921 CEST	64208	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:50.994641066 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:50.994699955 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:50.995125055 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:50.995480061 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:50.995495081 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.475263119 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.475538015 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:51.475572109 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.476773977 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.477093935 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:51.477267027 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.477372885 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:51.524499893 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.660372972 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.660686016 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.660746098 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:51.661665916 CEST	64209	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:51.661698103 CEST	443	64209	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:51.671009064 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:51.671072006 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:51.671143055 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:51.671334982 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:51.671348095 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:52.426423073 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:52.430598974 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:52.430625916 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:52.431106091 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:52.436424017 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:52.436518908 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:52.439342022 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:52.484543085 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.169018030 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.180536985 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.180583954 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.180618048 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.180649996 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.180668116 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.180697918 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.185808897 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.185880899 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.257740974 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.257813931 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.257826090 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.257839918 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.257872105 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.257879019 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.259337902 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.259397030 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.259413004 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.259557009 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.266510963 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.266571045 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.273639917 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.273714066 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.273720026 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.315881968 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.346127987 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.346196890 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.346229076 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.346282005 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.346966028 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.347049952 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.347069979 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.347717047 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.347764015 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.347776890 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.347785950 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.347821951 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.348612070 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.348689079 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.349668026 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.349735975 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.349742889 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.349824905 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.351545095 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.351607084 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.351612091 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.351728916 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.351808071 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.351865053 CEST	64210	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:53.351882935 CEST	443	64210	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:53.379967928 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:53.380026102 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:53.380098104 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:53.380287886 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:53.380307913 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.144049883 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.146208048 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.146225929 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.147356987 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.147686958 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.147768021 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.147835016 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.190603971 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.190633059 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.438766956 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.438826084 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.438903093 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.442987919 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.450728893 CEST	64211	443	192.168.2.6	13.32.99.40
Jul 5, 2024 01:01:54.450759888 CEST	443	64211	13.32.99.40	192.168.2.6
Jul 5, 2024 01:01:54.454262018 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:54.454303026 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:54.454494953 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:54.454715967 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:54.454725027 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:54.943296909 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:54.943334103 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:54.943417072 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:54.943662882 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:54.943675041 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:54.944880009 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:54.944889069 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:54.944937944 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:54.945152998 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:54.945162058 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.050998926 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.051440954 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.051474094 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.051949024 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.052385092 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.052465916 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.052757025 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.100497007 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.175347090 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.175487041 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.175534010 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.176016092 CEST	64212	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.176033974 CEST	443	64212	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.176816940 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.176836967 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.177035093 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.177246094 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.177263975 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.422265053 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.422574997 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.422591925 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.422951937 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.423301935 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.423384905 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.423434973 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.468497992 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.472476006 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.573337078 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.573409081 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.574738979 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.574763060 CEST	443	64213	172.67.68.254	192.168.2.6
Jul 5, 2024 01:01:55.574790001 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.574906111 CEST	64213	443	192.168.2.6	172.67.68.254
Jul 5, 2024 01:01:55.577114105 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:55.577150106 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:55.577214956 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:55.577454090 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:55.577464104 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:55.616524935 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.616781950 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.616791964 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.617181063 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.617372990 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.617913961 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.618077993 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.618933916 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.619054079 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.619146109 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.659955025 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.659975052 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.706733942 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.775661945 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.776056051 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.776086092 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.777620077 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.777971983 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.778068066 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.778098106 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.820506096 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.831861019 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.924806118 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.924956083 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.925149918 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.925657034 CEST	64215	443	192.168.2.6	34.203.90.74
Jul 5, 2024 01:01:55.925673962 CEST	443	64215	34.203.90.74	192.168.2.6
Jul 5, 2024 01:01:55.928368092 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:55.928411961 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:55.928535938 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:55.928711891 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:55.928725004 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:55.961299896 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.961437941 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.961572886 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.962718964 CEST	64214	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.962734938 CEST	443	64214	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.963877916 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.963879108 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.963898897 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.963905096 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.964457035 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.964457035 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.964834929 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.964834929 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:55.964845896 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.964852095 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:55.970031977 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:55.974844933 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:55.974946976 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:55.975106955 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:55.979827881 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.341861963 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.342354059 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:56.342381954 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.342684984 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.343224049 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:56.343276024 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.346734047 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:56.392498016 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.537517071 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.537992001 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:56.538018942 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.538503885 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.539050102 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:56.539133072 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.539310932 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:56.584508896 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.593348026 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593359947 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593369961 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593380928 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593391895 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593404055 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.593416929 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:56.593470097 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:56.610227108 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.616373062 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.659962893 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.659965992 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.662822008 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.662899971 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.662957907 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:56.683602095 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.693706989 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.693900108 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.693957090 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:56.731070995 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.731105089 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.731708050 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.738121033 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:56.742312908 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:56.747381926 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.748195887 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.748261929 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.748847961 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.751231909 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.751379967 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.754157066 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:56.759047985 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:56.759569883 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.759687901 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.763029099 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.763071060 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:56.808499098 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.808511019 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:56.825786114 CEST	64217	443	192.168.2.6	18.205.31.41
Jul 5, 2024 01:01:56.825824022 CEST	443	64217	18.205.31.41	192.168.2.6
Jul 5, 2024 01:01:56.826623917 CEST	64216	443	192.168.2.6	18.66.218.121
Jul 5, 2024 01:01:56.826653004 CEST	443	64216	18.66.218.121	192.168.2.6
Jul 5, 2024 01:01:56.862276077 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:56.862323999 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:56.862461090 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:56.864016056 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:56.864032984 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.003053904 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:57.050592899 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:57.050641060 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.050767899 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.050858974 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:57.051064014 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.051166058 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.051265955 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:57.053297043 CEST	64219	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:57.053311110 CEST	443	64219	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.054389000 CEST	64218	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:01:57.054414988 CEST	443	64218	172.217.23.110	192.168.2.6
Jul 5, 2024 01:01:57.092931032 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:57.093488932 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:57.098598003 CEST	5228	64220	74.125.71.188	192.168.2.6
Jul 5, 2024 01:01:57.098649979 CEST	64220	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:01:57.670196056 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.670345068 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.672590971 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.672597885 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.672931910 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.675846100 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.675960064 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.675966024 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.676206112 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.720519066 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.854062080 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.854166031 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:01:57.854227066 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.854624987 CEST	64221	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:01:57.854649067 CEST	443	64221	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:02.472043991 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:02:02.472071886 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:02:17.009126902 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:02:17.009203911 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:02:17.009253979 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:02:18.287754059 CEST	49720	443	192.168.2.6	34.91.234.242
Jul 5, 2024 01:02:18.287789106 CEST	443	49720	34.91.234.242	192.168.2.6
Jul 5, 2024 01:02:18.824229956 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:18.824268103 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:18.824501991 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:18.825249910 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:18.825265884 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:18.972987890 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:18.973009109 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:18.973092079 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:18.973486900 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:18.973501921 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.499690056 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:19.500149965 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:19.500163078 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:19.501334906 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:19.501946926 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:19.502132893 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:19.549984932 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:19.637304068 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.637736082 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:19.637746096 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.638112068 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.638493061 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:19.638552904 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.638771057 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:19.680502892 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.950442076 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.950546026 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:19.950633049 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:20.127932072 CEST	64225	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:20.127944946 CEST	443	64225	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:20.128855944 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.133692026 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.133776903 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.134128094 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.139003038 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752603054 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752619028 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752629042 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752679110 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.752706051 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752718925 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752731085 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752738953 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.752743006 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.752764940 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.753541946 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.754329920 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:20.759531021 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:20.760066986 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:21.015549898 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:21.065608978 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:21.151977062 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:21.205112934 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:21.463867903 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:21.463917971 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:21.463975906 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:21.464514971 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:21.464529037 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:21.769608974 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:21.769638062 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:21.769973040 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:21.770113945 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:21.770129919 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.285454035 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.285583019 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.287369967 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.287379980 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.287620068 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.289912939 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.289912939 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.289932013 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.290030003 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.332509041 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.423631907 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.423949003 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:22.423958063 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.424302101 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.424729109 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:22.424729109 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:22.424741030 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.424783945 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:22.471926928 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:22.485187054 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.485397100 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.485625982 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.485625982 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:22.485654116 CEST	443	64227	40.115.3.253	192.168.2.6
Jul 5, 2024 01:02:22.485685110 CEST	64227	443	192.168.2.6	40.115.3.253
Jul 5, 2024 01:02:24.164916039 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:24.165055990 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:24.165539026 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:24.166393995 CEST	64228	443	192.168.2.6	172.217.23.110
Jul 5, 2024 01:02:24.166413069 CEST	443	64228	172.217.23.110	192.168.2.6
Jul 5, 2024 01:02:24.167663097 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.172741890 CEST	5228	64226	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.172878027 CEST	64226	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.221529961 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.226422071 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.226682901 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.227111101 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.231878996 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854186058 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854202986 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854214907 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854269028 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.854284048 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854295015 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854305983 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.854335070 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.854362965 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.855516911 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.856066942 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:24.860361099 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:24.861011028 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:25.121436119 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:25.175625086 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:25.253771067 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:25.300605059 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:29.503607988 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:29.503770113 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:29.503855944 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:30.031486988 CEST	64224	443	192.168.2.6	142.250.186.164
Jul 5, 2024 01:02:30.031527042 CEST	443	64224	142.250.186.164	192.168.2.6
Jul 5, 2024 01:02:30.040873051 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.040909052 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.040971994 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.041367054 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.041383982 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.685162067 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.685435057 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.685446024 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.688505888 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.688565969 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.688935041 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.689016104 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.689142942 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:30.689151049 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:30.738111973 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.189836979 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.190012932 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.190115929 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.191104889 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.191128969 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.191277027 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.191468954 CEST	64235	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.191476107 CEST	443	64235	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.191840887 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.191854000 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.917464972 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.917746067 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.917757034 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.918236971 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.918817997 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.918817997 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.918817997 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:31.918836117 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.918900013 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:31.972560883 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:32.526825905 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:32.527034998 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:32.528048038 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:32.528139114 CEST	64237	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:32.528153896 CEST	443	64237	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:32.549117088 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:32.549153090 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:32.549328089 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:32.549448013 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:32.549463034 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.270339966 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.270595074 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.270612001 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.274182081 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.274261951 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.274593115 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.274729013 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.274760962 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.316272974 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.316281080 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.359189987 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.453931093 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.453943968 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.454068899 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:33.484800100 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:33.484822989 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:33.484889030 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:33.485146999 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:33.485157013 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:33.579802036 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.579843998 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.580230951 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:33.584038019 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.584076881 CEST	5228	64229	74.125.71.188	192.168.2.6
Jul 5, 2024 01:02:33.584429026 CEST	64229	5228	192.168.2.6	74.125.71.188
Jul 5, 2024 01:02:33.608876944 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.609054089 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:33.609869957 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.610049009 CEST	64238	443	192.168.2.6	18.239.50.73
Jul 5, 2024 01:02:33.610060930 CEST	443	64238	18.239.50.73	192.168.2.6
Jul 5, 2024 01:02:34.203783035 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.204051971 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:34.204067945 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.204401016 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.204801083 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:34.204859972 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.205049038 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:34.248503923 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.403512001 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.403791904 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.405445099 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:34.405740023 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.405772924 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:34.405853987 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.406444073 CEST	64239	443	192.168.2.6	107.21.125.170
Jul 5, 2024 01:02:34.406450987 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.406456947 CEST	443	64239	107.21.125.170	192.168.2.6
Jul 5, 2024 01:02:34.406491995 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:34.406699896 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.406714916 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:34.406742096 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.409584045 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:34.409598112 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.141583920 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.141843081 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.141891003 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.142224073 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.142709017 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.142709017 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.142781973 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.159842014 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.160060883 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.160087109 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.160598040 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.160984993 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.160984993 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.161003113 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.161065102 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.191267014 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.206908941 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.589293957 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.589351892 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.589435101 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.589452982 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.589497089 CEST	443	64240	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.589523077 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.589565039 CEST	64240	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.803150892 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.803174973 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.803183079 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.803263903 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.803263903 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.803293943 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.847510099 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.896121979 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.896131039 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.896148920 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.896156073 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.896182060 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.896183968 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.896214008 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.897269011 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.897304058 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.897316933 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.897335052 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.897345066 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.897357941 CEST	443	64241	18.239.50.108	192.168.2.6
Jul 5, 2024 01:02:35.897375107 CEST	64241	443	192.168.2.6	18.239.50.108
Jul 5, 2024 01:02:35.897480965 CEST	64241	443	192.168.2.6	18.239.50.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 01:01:13.845278978 CEST	53	50863	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:13.848931074 CEST	53	54473	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:14.879111052 CEST	53	56264	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:15.169528008 CEST	63980	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:15.169693947 CEST	56253	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:15.185604095 CEST	53	63980	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:15.185825109 CEST	53	56253	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:16.374562025 CEST	52239	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:16.374856949 CEST	54407	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:16.407336950 CEST	53	52239	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:16.408186913 CEST	53	54407	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:17.620701075 CEST	64396	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:17.621309996 CEST	56461	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:17.661040068 CEST	53	56461	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:17.674418926 CEST	53	64396	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:18.530402899 CEST	50585	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:18.530402899 CEST	64146	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:18.537631989 CEST	53	50585	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:18.537647009 CEST	53	64146	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:18.684828043 CEST	51458	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:18.686681986 CEST	51031	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:18.694178104 CEST	53	51458	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:18.725313902 CEST	53	51031	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:21.428687096 CEST	53	52180	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:22.431787968 CEST	53	51725	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:22.492733002 CEST	54986	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:22.492861986 CEST	61898	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:22.506196976 CEST	53	61898	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:22.508462906 CEST	53	54986	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:23.058160067 CEST	63811	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:23.058569908 CEST	51304	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:23.065855026 CEST	53	51304	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:23.112993002 CEST	53	52715	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:24.073239088 CEST	61199	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:24.080738068 CEST	53	61199	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:26.197575092 CEST	55537	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:26.197576046 CEST	54608	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:26.204088926 CEST	56373	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:26.204088926 CEST	56423	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:26.205653906 CEST	53	54608	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:26.206192970 CEST	53	55537	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:26.213148117 CEST	53	56373	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:26.213159084 CEST	53	56423	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:28.042593956 CEST	64097	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:28.043242931 CEST	60764	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:28.048587084 CEST	59744	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:28.049316883 CEST	62346	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:28.053631067 CEST	53	60764	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:28.057518005 CEST	53	62346	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:28.057678938 CEST	53	59744	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:28.062110901 CEST	53	64097	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:32.502191067 CEST	53	52245	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.610753059 CEST	55527	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.610915899 CEST	60319	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.611083031 CEST	64440	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.611186981 CEST	62374	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.618732929 CEST	53	60319	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.618752003 CEST	53	55527	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.618763924 CEST	53	64440	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.619415045 CEST	53	62374	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.620066881 CEST	63103	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:33.620137930 CEST	63105	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:33.620194912 CEST	63107	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:33.722074986 CEST	51634	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.724630117 CEST	64854	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:33.734117985 CEST	53	51634	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.734205008 CEST	53	64854	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:33.898201942 CEST	63103	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:33.898662090 CEST	63105	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:33.898679018 CEST	63107	19302	192.168.2.6	74.125.250.129
Jul 5, 2024 01:01:34.094094992 CEST	19302	63105	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.094105005 CEST	19302	63105	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.103245020 CEST	19302	63103	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.103282928 CEST	19302	63103	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.110297918 CEST	19302	63107	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.110383987 CEST	19302	63107	74.125.250.129	192.168.2.6
Jul 5, 2024 01:01:34.275923014 CEST	49432	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:34.276740074 CEST	58741	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:34.392277956 CEST	53	58741	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:34.401993990 CEST	53	49432	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:36.558223009 CEST	53	50751	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:37.498955011 CEST	63458	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:37.499093056 CEST	65321	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:01:37.507227898 CEST	53	65321	1.1.1.1	192.168.2.6
Jul 5, 2024 01:01:37.517398119 CEST	53	63458	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:13.704735994 CEST	53	58462	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:24.223835945 CEST	53	52582	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:26.706985950 CEST	53	58394	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:26.713759899 CEST	53	52054	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:30.032149076 CEST	62667	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:30.032526970 CEST	62663	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:30.039978981 CEST	53	62667	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:30.039994001 CEST	53	62663	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:30.051858902 CEST	53	60985	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:32.530770063 CEST	64398	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:32.531042099 CEST	51527	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:32.538279057 CEST	53	51527	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:32.548672915 CEST	53	64398	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:33.466767073 CEST	51846	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:33.466999054 CEST	52470	53	192.168.2.6	1.1.1.1
Jul 5, 2024 01:02:33.474731922 CEST	53	52470	1.1.1.1	192.168.2.6
Jul 5, 2024 01:02:33.484406948 CEST	53	51846	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 5, 2024 01:01:18.725425005 CEST	192.168.2.6	1.1.1.1	c20a	(Port unreachable)	Destination Unreachable
Jul 5, 2024 01:01:34.110750914 CEST	192.168.2.6	74.125.250.129	4e4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 01:01:15.169528008 CEST	192.168.2.6	1.1.1.1	0xfbd0	Standard query (0)	singingfiles.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:15.169693947 CEST	192.168.2.6	1.1.1.1	0x1bb4	Standard query (0)	singingfiles.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:16.374562025 CEST	192.168.2.6	1.1.1.1	0xb226	Standard query (0)	mr.macgsapptrck.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:16.374856949 CEST	192.168.2.6	1.1.1.1	0x5675	Standard query (0)	mr.macgsapptrck.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:17.620701075 CEST	192.168.2.6	1.1.1.1	0x93e8	Standard query (0)	wsjmp.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:17.621309996 CEST	192.168.2.6	1.1.1.1	0xaf92	Standard query (0)	wsjmp.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:18.530402899 CEST	192.168.2.6	1.1.1.1	0x5a43	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.530402899 CEST	192.168.2.6	1.1.1.1	0xf6e7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:18.684828043 CEST	192.168.2.6	1.1.1.1	0xb525	Standard query (0)	free2try.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.686681986 CEST	192.168.2.6	1.1.1.1	0xcc8f	Standard query (0)	free2try.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:22.492733002 CEST	192.168.2.6	1.1.1.1	0xd431	Standard query (0)	free2try.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:22.492861986 CEST	192.168.2.6	1.1.1.1	0xca82	Standard query (0)	free2try.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:23.058160067 CEST	192.168.2.6	1.1.1.1	0xd98b	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:23.058569908 CEST	192.168.2.6	1.1.1.1	0x64e3	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:24.073239088 CEST	192.168.2.6	1.1.1.1	0xc7ba	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.197575092 CEST	192.168.2.6	1.1.1.1	0x3862	Standard query (0)	trc.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.197576046 CEST	192.168.2.6	1.1.1.1	0xc801	Standard query (0)	trc.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:26.204088926 CEST	192.168.2.6	1.1.1.1	0x6681	Standard query (0)	cdn.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.204088926 CEST	192.168.2.6	1.1.1.1	0xa08	Standard query (0)	cdn.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:28.042593956 CEST	192.168.2.6	1.1.1.1	0xd621	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.043242931 CEST	192.168.2.6	1.1.1.1	0xf8a0	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:28.048587084 CEST	192.168.2.6	1.1.1.1	0x583c	Standard query (0)	trc.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.049316883 CEST	192.168.2.6	1.1.1.1	0xa57d	Standard query (0)	trc.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:33.610753059 CEST	192.168.2.6	1.1.1.1	0x4d39	Standard query (0)	stun3.l.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.610915899 CEST	192.168.2.6	1.1.1.1	0x24c5	Standard query (0)	stun4.l.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.611083031 CEST	192.168.2.6	1.1.1.1	0xa869	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 5, 2024 01:01:33.611186981 CEST	192.168.2.6	1.1.1.1	0x44fd	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 5, 2024 01:01:33.722074986 CEST	192.168.2.6	1.1.1.1	0x72dd	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 5, 2024 01:01:33.724630117 CEST	192.168.2.6	1.1.1.1	0xb4d9	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 5, 2024 01:01:34.275923014 CEST	192.168.2.6	1.1.1.1	0x7af4	Standard query (0)	psp.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:34.276740074 CEST	192.168.2.6	1.1.1.1	0xa770	Standard query (0)	psp.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:01:37.498955011 CEST	192.168.2.6	1.1.1.1	0xa48	Standard query (0)	psp.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:37.499093056 CEST	192.168.2.6	1.1.1.1	0x215b	Standard query (0)	psp.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:02:30.032149076 CEST	192.168.2.6	1.1.1.1	0xc73	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:30.032526970 CEST	192.168.2.6	1.1.1.1	0xc1f8	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:02:32.530770063 CEST	192.168.2.6	1.1.1.1	0x96c7	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:32.531042099 CEST	192.168.2.6	1.1.1.1	0xcb67	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Jul 5, 2024 01:02:33.466767073 CEST	192.168.2.6	1.1.1.1	0x729	Standard query (0)	trc.pushnami.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.466999054 CEST	192.168.2.6	1.1.1.1	0x1fc5	Standard query (0)	trc.pushnami.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 01:01:15.185604095 CEST	1.1.1.1	192.168.2.6	0xfbd0	No error (0)	singingfiles.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:15.185604095 CEST	1.1.1.1	192.168.2.6	0xfbd0	No error (0)	singingfiles.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:15.185825109 CEST	1.1.1.1	192.168.2.6	0x1bb4	No error (0)	singingfiles.com			65	IN (0x0001)	false
Jul 5, 2024 01:01:16.407336950 CEST	1.1.1.1	192.168.2.6	0xb226	No error (0)	mr.macgsapptrck.com	wdigital.g2afse.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 01:01:16.407336950 CEST	1.1.1.1	192.168.2.6	0xb226	No error (0)	wdigital.g2afse.com		34.91.234.242	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:16.407336950 CEST	1.1.1.1	192.168.2.6	0xb226	No error (0)	wdigital.g2afse.com		34.141.179.97	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:16.408186913 CEST	1.1.1.1	192.168.2.6	0x5675	No error (0)	mr.macgsapptrck.com	wdigital.g2afse.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 01:01:17.661040068 CEST	1.1.1.1	192.168.2.6	0xaf92	No error (0)	wsjmp.com			65	IN (0x0001)	false
Jul 5, 2024 01:01:17.674418926 CEST	1.1.1.1	192.168.2.6	0x93e8	No error (0)	wsjmp.com		172.67.73.137	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:17.674418926 CEST	1.1.1.1	192.168.2.6	0x93e8	No error (0)	wsjmp.com		104.26.15.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:17.674418926 CEST	1.1.1.1	192.168.2.6	0x93e8	No error (0)	wsjmp.com		104.26.14.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.537631989 CEST	1.1.1.1	192.168.2.6	0x5a43	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.537647009 CEST	1.1.1.1	192.168.2.6	0xf6e7	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 01:01:18.694178104 CEST	1.1.1.1	192.168.2.6	0xb525	No error (0)	free2try.com		172.67.68.254	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.694178104 CEST	1.1.1.1	192.168.2.6	0xb525	No error (0)	free2try.com		104.26.7.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.694178104 CEST	1.1.1.1	192.168.2.6	0xb525	No error (0)	free2try.com		104.26.6.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:18.725313902 CEST	1.1.1.1	192.168.2.6	0xcc8f	No error (0)	free2try.com			65	IN (0x0001)	false
Jul 5, 2024 01:01:22.506196976 CEST	1.1.1.1	192.168.2.6	0xca82	No error (0)	free2try.com			65	IN (0x0001)	false
Jul 5, 2024 01:01:22.508462906 CEST	1.1.1.1	192.168.2.6	0xd431	No error (0)	free2try.com		172.67.68.254	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:22.508462906 CEST	1.1.1.1	192.168.2.6	0xd431	No error (0)	free2try.com		104.26.6.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:22.508462906 CEST	1.1.1.1	192.168.2.6	0xd431	No error (0)	free2try.com		104.26.7.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:24.080738068 CEST	1.1.1.1	192.168.2.6	0xc7ba	No error (0)	api.pushnami.com		18.66.218.121	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:24.080738068 CEST	1.1.1.1	192.168.2.6	0xc7ba	No error (0)	api.pushnami.com		18.66.218.9	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:24.080738068 CEST	1.1.1.1	192.168.2.6	0xc7ba	No error (0)	api.pushnami.com		18.66.218.107	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:24.080738068 CEST	1.1.1.1	192.168.2.6	0xc7ba	No error (0)	api.pushnami.com		18.66.218.24	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		18.211.221.201	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		35.153.124.234	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		3.218.59.242	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		107.21.125.170	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		52.72.136.184	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		34.193.230.73	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		184.73.202.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.206192970 CEST	1.1.1.1	192.168.2.6	0x3862	No error (0)	trc.pushnami.com		34.238.12.202	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.213148117 CEST	1.1.1.1	192.168.2.6	0x6681	No error (0)	cdn.pushnami.com		18.244.18.23	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.213148117 CEST	1.1.1.1	192.168.2.6	0x6681	No error (0)	cdn.pushnami.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.213148117 CEST	1.1.1.1	192.168.2.6	0x6681	No error (0)	cdn.pushnami.com		18.244.18.49	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:26.213148117 CEST	1.1.1.1	192.168.2.6	0x6681	No error (0)	cdn.pushnami.com		18.244.18.36	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		34.193.230.73	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		52.72.136.184	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		184.73.202.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		3.95.75.234	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		107.21.125.170	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		44.214.14.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		44.223.236.47	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.057678938 CEST	1.1.1.1	192.168.2.6	0x583c	No error (0)	trc.pushnami.com		52.5.4.72	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.062110901 CEST	1.1.1.1	192.168.2.6	0xd621	No error (0)	api.pushnami.com		13.32.99.40	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.062110901 CEST	1.1.1.1	192.168.2.6	0xd621	No error (0)	api.pushnami.com		13.32.99.63	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.062110901 CEST	1.1.1.1	192.168.2.6	0xd621	No error (0)	api.pushnami.com		13.32.99.54	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:28.062110901 CEST	1.1.1.1	192.168.2.6	0xd621	No error (0)	api.pushnami.com		13.32.99.22	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:29.987049103 CEST	1.1.1.1	192.168.2.6	0x1bff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 01:01:29.987049103 CEST	1.1.1.1	192.168.2.6	0x1bff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.191282034 CEST	1.1.1.1	192.168.2.6	0x6e49	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.191282034 CEST	1.1.1.1	192.168.2.6	0x6e49	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.618732929 CEST	1.1.1.1	192.168.2.6	0x24c5	No error (0)	stun4.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.618752003 CEST	1.1.1.1	192.168.2.6	0x4d39	No error (0)	stun3.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:33.618763924 CEST	1.1.1.1	192.168.2.6	0xa869	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 5, 2024 01:01:33.619415045 CEST	1.1.1.1	192.168.2.6	0x44fd	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 5, 2024 01:01:33.734117985 CEST	1.1.1.1	192.168.2.6	0x72dd	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 5, 2024 01:01:33.734205008 CEST	1.1.1.1	192.168.2.6	0xb4d9	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 5, 2024 01:01:34.401993990 CEST	1.1.1.1	192.168.2.6	0x7af4	No error (0)	psp.pushnami.com		34.203.90.74	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:34.401993990 CEST	1.1.1.1	192.168.2.6	0x7af4	No error (0)	psp.pushnami.com		3.234.56.91	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:34.401993990 CEST	1.1.1.1	192.168.2.6	0x7af4	No error (0)	psp.pushnami.com		18.205.31.41	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:37.517398119 CEST	1.1.1.1	192.168.2.6	0xa48	No error (0)	psp.pushnami.com		18.205.31.41	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:37.517398119 CEST	1.1.1.1	192.168.2.6	0xa48	No error (0)	psp.pushnami.com		3.234.56.91	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:37.517398119 CEST	1.1.1.1	192.168.2.6	0xa48	No error (0)	psp.pushnami.com		34.203.90.74	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:54.940927982 CEST	1.1.1.1	192.168.2.6	0xc728	No error (0)	android.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:01:55.969614983 CEST	1.1.1.1	192.168.2.6	0xa2e9	No error (0)	mobile-gtalk.l.google.com		74.125.71.188	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:30.039978981 CEST	1.1.1.1	192.168.2.6	0xc73	No error (0)	api.pushnami.com		18.239.50.108	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:30.039978981 CEST	1.1.1.1	192.168.2.6	0xc73	No error (0)	api.pushnami.com		18.239.50.73	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:30.039978981 CEST	1.1.1.1	192.168.2.6	0xc73	No error (0)	api.pushnami.com		18.239.50.128	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:30.039978981 CEST	1.1.1.1	192.168.2.6	0xc73	No error (0)	api.pushnami.com		18.239.50.40	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:32.548672915 CEST	1.1.1.1	192.168.2.6	0x96c7	No error (0)	api.pushnami.com		18.239.50.73	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:32.548672915 CEST	1.1.1.1	192.168.2.6	0x96c7	No error (0)	api.pushnami.com		18.239.50.108	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:32.548672915 CEST	1.1.1.1	192.168.2.6	0x96c7	No error (0)	api.pushnami.com		18.239.50.40	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:32.548672915 CEST	1.1.1.1	192.168.2.6	0x96c7	No error (0)	api.pushnami.com		18.239.50.128	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		107.21.125.170	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		34.193.230.73	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		52.5.4.72	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		52.72.136.184	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		34.238.12.202	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		44.223.236.47	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		3.218.59.242	A (IP address)	IN (0x0001)	false
Jul 5, 2024 01:02:33.484406948 CEST	1.1.1.1	192.168.2.6	0x729	No error (0)	trc.pushnami.com		184.73.202.44	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

singingfiles.com

https:

mr.macgsapptrck.com

wsjmp.com

free2try.com

api.pushnami.com

cdn.pushnami.com

trc.pushnami.com

psp.pushnami.com

fs.microsoft.com

android.clients.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	188.114.97.3	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:16 UTC	690	OUT	GET /show.php?l=0&u=2156442&id=64574 HTTP/1.1 Host: singingfiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:16 UTC	606	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNwFG9yWlMJ%2Bog7hOfHXyXnE3CjVOu%2FMAtR77YTrs4f9I%2Fkul8bQrntWb5AiW1DpEhjLEGaZ31IbRD8Tbs7LRKnORhACyV1QuktPpM9LJf2tF7XDBQduJlWbj2y%2FdmLKP2q0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc785eb94211-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 23:01:16 UTC	652	IN	Data Raw: 32 38 35 0d 0a 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 4c 6f 61 64 69 6e 67 20 4f 66 66 65 72 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 09 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 6d 72 2e 6d 61 63 67 73 61 70 70 74 72 63 6b 2e 63 6f 6d 2f 63 6c 69 63 6b 3f 70 69 64 3d 31 30 30 26 6f 66 66 65 72 5f 69 64 3d 32 34 35 31 36 26 73 75 62 36 3d 31 32 36 36 30 39 33 36 35 32 26 73 75 62 32 3d 31 30 30 5f 32 31 35 36 34 34 32 22 20 2f 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: 285<html><head><title>Loading Offer..</title><meta http-equiv="refresh" content="0;url=https://mr.macgsapptrck.com/click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442" /><meta name="robots" content="noindex"><script typ
2024-07-04 23:01:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49719	34.91.234.242	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:17 UTC	745	OUT	GET /click?pid=100&offer_id=24516&sub6=1266093652&sub2=100_2156442 HTTP/1.1 Host: mr.macgsapptrck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://singingfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:17 UTC	487	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 04 Jul 2024 23:01:17 GMT Content-Length: 0 Connection: close X-Adjust-Use-Original-Forwarded-For: 1 Location: https://wsjmp.com/c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/ Set-Cookie: afclick=668729bd4830bd0001a8790b; expires=Fri, 04 Jul 2025 23:01:17 GMT; secure; SameSite=None Set-Cookie: afoffers={"24516":1720134077}; expires=Fri, 04 Jul 2025 23:01:17 GMT; secure; SameSite=None Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49721	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:18 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 64 2b 72 54 77 52 77 2b 6b 71 56 66 69 32 4a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 34 66 65 35 39 65 63 39 65 64 33 38 62 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jd+rTwRw+kqVfi2J.1Context: e34fe59ec9ed38ba
2024-07-04 23:01:18 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 23:01:18 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6a 64 2b 72 54 77 52 77 2b 6b 71 56 66 69 32 4a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 34 66 65 35 39 65 63 39 65 64 33 38 62 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 6b 55 56 64 72 73 65 4b 34 67 32 65 6c 43 73 4b 72 64 78 70 31 56 58 58 70 4a 64 72 56 4a 33 75 74 42 49 37 37 43 32 78 4a 63 6d 79 5a 6c 46 37 42 45 4b 4d 38 32 79 35 78 33 63 76 45 78 55 48 33 42 76 66 70 37 72 6b 54 44 36 4e 37 7a 36 4e 4a 49 2f 2f 6a 55 57 7a 6c 46 63 45 65 35 6c 66 65 4f 67 6b 6c 38 4c 2f 50 73 44 51 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: jd+rTwRw+kqVfi2J.2Context: e34fe59ec9ed38ba<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATkUVdrseK4g2elCsKrdxp1VXXpJdrVJ3utBI77C2xJcmyZlF7BEKM82y5x3cvExUH3Bvfp7rkTD6N7z6NJI//jUWzlFcEe5lfeOgkl8L/PsDQ
2024-07-04 23:01:18 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 64 2b 72 54 77 52 77 2b 6b 71 56 66 69 32 4a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 34 66 65 35 39 65 63 39 65 64 33 38 62 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: jd+rTwRw+kqVfi2J.3Context: e34fe59ec9ed38ba<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 23:01:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 23:01:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 2b 41 78 55 74 74 4b 49 45 79 6b 47 72 72 62 43 69 61 46 43 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: M+AxUttKIEykGrrbCiaFCA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49722	172.67.73.137	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:18 UTC	734	OUT	GET /c/s=291454/c=1598122/m=668729bd4830bd0001a8790b_100_2156442/ HTTP/1.1 Host: wsjmp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://singingfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:18 UTC	851	IN	HTTP/1.1 302 Found Date: Thu, 04 Jul 2024 23:01:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 331 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, proxy-revalidate, no-transform Pragma: no-cache Expires: 0 P3P: CP=NOI OTC OTP OUR NOR Location: https://free2try.com/?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jVaKpWaAOhxd6V0np4OKyT2xBIKVNhIx5%2BSwTyHW2PapCOBbon7lLnKU40nsv7ohAeRwvvy%2FYcrfYyqpWTn3QrLxinu2aTG3VfDS1pb58okTErJJOVtOHuZJEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc871a5a41e0-EWR
2024-07-04 23:01:18 UTC	331	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 72 65 65 32 74 72 79 2e 63 6f 6d 2f 3f 63 6f 6e 66 69 67 3d 39 31 37 39 26 61 6d 70 3b 73 72 63 3d 57 43 2d 32 39 31 34 35 34 61 61 61 36 36 38 37 32 39 62 64 34 38 33 30 62 64 30 30 30 31 61 38 37 39 30 62 5f 31 30 30 5f 32 31 35 36 34 34 32 3a 31 35 39 38 31 32 32 3a 26 61 6d Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://free2try.com/?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	23.53.114.19	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 23:01:19 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=28965 Date: Thu, 04 Jul 2024 23:01:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:19 UTC	795	OUT	GET /?config=9179&src=WC-291454aaa668729bd4830bd0001a8790b_100_2156442:1598122:&wsclid=5de0b3ae-2882-4116-bd49-387b28f8d7a5 HTTP/1.1 Host: free2try.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://singingfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:19 UTC	650	IN	HTTP/1.1 302 Found Date: Thu, 04 Jul 2024 23:01:19 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eU0Zt4hCgDWYGGT%2FcO8yUznJTR0sl5a1alOpio%2FtSudt5r8cfT5v7SceUDK3DeDNYq%2Bx23xIRyJtBxAlyOsP6APvbt61jwzme0T0tKgre2F8iCHpiBIGRLE6RcUaEg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc8becff1801-EWR
2024-07-04 23:01:19 UTC	255	IN	Data Raw: 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 72 65 65 32 74 72 79 2e 63 6f 6d 2f 3f 73 65 73 73 69 6f 6e 5f 69 64 3d 35 33 31 64 64 31 65 38 33 61 35 39 31 31 65 66 38 64 64 31 62 66 66 37 32 33 64 36 64 65 33 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f9<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30">here</a>.</p></body></html>
2024-07-04 23:01:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49726	23.53.114.19	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 23:01:20 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=28872 Date: Thu, 04 Jul 2024 23:01:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 23:01:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49727	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:20 UTC	721	OUT	GET /?session_id=531dd1e83a5911ef8dd1bff723d6de30 HTTP/1.1 Host: free2try.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://singingfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:21 UTC	839	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; domain=.free2try.com; path=/; expires=Fri, 05-Jul-2024 01:01:20 GMT Set-Cookie: 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080; domain=free2try.com; path=/; expires=Sun, 14-Jul-2024 23:01:20 GMT Vary: Accept-Encoding P3P: CP="NOI OTC OTP OUR NOR" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GiEEptu%2B3GC4SmXGf7V%2BkM9TLAEOKKwDH9J3IwHp3vWfAvuPwse9Adbe7ArWXQggyjSbopc2Mmd0UZoxAJ0TGdTGPuJjF7Kl9T%2FNEmEjPOqpESwph2Ho2yTnbd8MBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9329150fa3-EWR
2024-07-04 23:01:21 UTC	530	IN	Data Raw: 34 30 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 26 64 69 73 70 6c 61 79 Data Ascii: 4096<!DOCTYPE html><html lang="en-us"><head><meta name="viewport" content="width=device-width, initial-scale=1"><link type="text/css" rel="stylesheet" href="/images/bootstrap.min.css" /><link href="https://fonts.googleapis.com/css?family=Poppins&display
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 0a 20 20 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 73 74 79 6c 65 73 2d 32 30 31 36 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 39 31 37 39 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 2f 2f 63 6f 6c 6f 72 73 2d 32 30 31 36 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e Data Ascii: ont-size: 12px; } } </style><link type="text/css" rel="stylesheet" href="/images/styles-2016.css" /><link type="text/css" rel="stylesheet" href="/9179/registration//colors-2016.css" /><link href="https://fonts.googleapis.com/css?family=Open+San
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 32 59 41 41 33 32 52 54 57 37 43 4d 42 43 46 37 35 4a 31 69 32 62 38 4f 32 61 58 6d 4f 51 4b 58 53 42 6b 4f 62 45 4c 55 55 4f 43 45 6e 61 49 75 39 63 42 4b 67 46 74 32 59 33 39 2f 50 6d 39 6d 54 6c 6c 33 62 42 74 47 39 2b 35 70 68 75 61 72 7a 56 73 54 6e 74 2f 63 47 30 34 5a 38 74 4d 6b 4d 72 65 73 76 61 51 53 6c 6f 49 74 55 44 47 46 35 79 6e 71 77 63 6d 71 66 50 64 46 47 50 76 5a 6d 4b 5a 53 51 47 56 73 45 4c 77 58 42 72 45 73 71 4c 63 46 69 58 69 71 6b 42 70 56 57 34 72 53 61 6f 71 6a 5a 71 70 4d 58 36 4f 63 64 72 46 6b 44 42 38 2f 6e 6e 4e 4e 71 64 2b 43 50 45 57 42 34 48 6f 61 6a 53 2f 35 70 71 44 45 70 49 4a 64 6d 66 75 69 4e 2f 38 72 5a 54 32 6c 62 38 43 58 66 7a 6c 39 39 7a 39 4e 48 57 70 48 76 71 35 48 4a 74 55 66 74 68 33 5a 6c 42 49 34 62 31 58 Data Ascii: 2YAA32RTW7CMBCF75J1i2b8O2aXmOQKXSBkObELUUOCEnaIu9cBKgFt2Y39/Pm9mTll3bBtG9+5phuarzVsTnt/cG04Z8tMkMresvaQSloItUDGF5ynqwcmqfPdFGPvZmKZSQGVsELwXBrEsqLcFiXiqkBpVW4rSaoqjZqpMX6OcdrFkDB8/nnNNqd+CPEWB4HoajS/5pqDEpIJdmfuiN/8rZT2lb8CXfzl99z9NHWpHvq5HJtUfth3ZlBI4b1X
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 0a 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 20 69 64 3d 22 65 6d 61 69 6c 2d 70 61 67 65 22 20 6f 6e 4c 6f 61 64 3d 22 20 61 74 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2c 20 27 64 65 6d 6f 5f 6f 70 74 27 29 3b 22 3e 0a 3c 73 63 72 69 70 74 3e 0a 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 3d 20 27 27 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 66 72 65 65 32 74 72 79 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e Data Ascii: </head> <body id="email-page" onLoad=" at(document.forms[0], 'demo_opt');"><script>document.referrer = '';</script><title>free2try.com</title><script language="javascript"> function handler (e) { if (document.forms[0].
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 0d 0a 2f 2a 0d 0a 23 6d 61 73 6b 20 7b 0d 0a 20 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 65 64 3b 0d 0a 7d 0d 0a 2a 2f 0d 0a 23 74 63 6c 61 79 65 72 2c 20 23 6d 61 73 6b 32 20 7b 20 2f 2a 20 50 6f 70 20 4c 61 79 65 72 20 2a 2f 0d 0a 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 20 72 69 67 68 74 3a 20 35 70 78 3b 0d 0a 20 77 69 64 74 68 3a 20 32 39 38 70 78 3b 0d 0a 20 68 65 69 67 68 74 3a 20 33 35 30 70 78 3b 0d 0a 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0d 0a 20 7a 2d 69 6e 64 65 78 3a 20 35 30 3b 0d 0a 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 23 6d 61 73 6b 32 20 7b Data Ascii: /#mask { border: 3px solid red;}/#tclayer, #mask2 { /* Pop Layer */ position: absolute; top: 15px; right: 5px; width: 298px; height: 350px; padding: 10px; border: 2px solid black; z-index: 50; overflow: hidden;}#mask2 {
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 32 27 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 3b 22 3e 54 65 72 6d 73 20 26 20 43 6f 6e 64 69 74 69 6f 6e 73 3c 2f 61 3e 20 66 6f 72 20 74 68 65 20 6c 69 73 74 20 6f 66 20 64 69 73 71 75 61 6c 69 66 69 65 64 20 7a 69 70 20 63 6f 64 65 73 29 3b 20 33 29 20 63 6f 6d 70 6c 65 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 77 61 72 64 20 6f 66 66 65 72 73 3a 20 32 20 53 69 6c 76 65 72 20 6f 66 66 65 72 73 2c 20 32 20 47 6f 6c 64 20 6f 66 66 65 72 73 2c 20 61 6e 64 20 32 20 50 6c 61 74 69 6e 75 6d 20 6f 66 66 65 72 73 20 28 41 76 61 69 6c 61 62 6c 65 20 72 65 77 61 72 64 20 6f 66 66 65 72 73 20 77 69 6c 6c 20 20 76 61 72 79 2e 20 53 6f 6d 65 20 72 65 77 61 72 64 20 6f 66 66 65 72 73 20 72 Data Ascii: 2');return false;" href="javascript:;">Terms & Conditions</a> for the list of disqualified zip codes); 3) complete the following reward offers: 2 Silver offers, 2 Gold offers, and 2 Platinum offers (Available reward offers will vary. Some reward offers r
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 66 75 6e 63 74 69 6f 6e 20 73 68 4c 61 79 65 72 28 78 29 7b 0a 20 69 66 28 78 29 7b 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 73 6b 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 73 6b 32 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 63 6c 61 79 65 72 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0a 20 7d 20 65 6c 73 65 20 7b 0a 20 20 69 66 28 64 6f 63 75 6d 65 6e 74 2e Data Ascii: ipt language="javascript">function shLayer(x){ if(x){ document.getElementById("mask").style.display="none"; document.getElementById("mask2").style.display="none"; document.getElementById("tclayer").style.display="none"; } else { if(document.
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 20 74 68 65 20 62 65 73 74 20 46 72 65 65 20 53 61 6d 70 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 64 61 79 21 3c 2f 70 3e 0a 20 20 20 20 20 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 09 0a 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 69 64 3d 22 65 6d 61 69 6c 2d 72 6f 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 3c 49 4e 50 55 54 20 54 59 50 45 3d 22 65 6d 61 69 6c 22 20 20 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 70 6c 61 63 65 48 6f 6c 64 65 72 3d 22 43 6f 6e 66 69 72 6d 20 79 6f 75 72 20 65 6d 61 69 6c 22 20 4e 41 4d 45 3d 22 70 73 65 5f 31 38 33 31 5f 65 6d 61 69 Data Ascii: the best Free Samples available today!</p> </div></div> <div class="row" id="email-row"><div class="col-xs-12"><div class="form-group"><INPUT TYPE="email" class="form-control" id="email" placeHolder="Confirm your email" NAME="pse_1831_emai
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 6f 6c 64 6f 6e 73 75 62 6d 69 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 6f 6e 73 75 62 6d 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 6f 6e 73 75 62 6d 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 29 2a 29 7c 28 Data Ascii: language="Javascript"> document.forms[0].oldonsubmit = document.forms[0].onsubmit; document.forms[0].onsubmit = function() { if (!/^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)\|(
2024-07-04 23:01:21 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 7d 0d 0a 23 63 73 64 5f 64 61 69 6c 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 20 3c 74 61 62 6c 65 20 69 64 3d 22 63 73 64 5f 66 6f 6f 74 65 72 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 62 6f 72 64 65 72 3d 22 30 22 20 20 73 74 79 6c 65 3d 22 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 20 66 6f 6e 74 3a 31 34 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 36 33 35 70 78 3b 22 3e 0d 0a 20 20 Data Ascii: text-decoration: underline;}#csd_daily a:hover { text-decoration:none;}</style> <table id="csd_footer" align="center" border="0" style="line-height:14px; margin-top:15px; font:14px Arial, Helvetica, sans-serif; max-width:635px;">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	696	OUT	GET /images/bootstrap.min.css HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:21 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 05 Jun 2014 15:33:14 GMT ETag: W/"121540-18679-4fb1876936280" Vary: Accept-Encoding P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1531 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0nsTVrUzgtNdA2I37M2eCa8PpuB%2FtdPquv9kEjSYFGfXvV5BIn4eqoU2IrmEi7snBcPpNEMr4C6ztv%2BOT4xWHDa4QcxlR%2ByJYT%2FSr8Gt4cE9GeIBlzIpSPE2ziHAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c6b0543c2-EWR
2024-07-04 23:01:22 UTC	666	IN	Data Raw: 37 63 65 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 31 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 Data Ascii: 7ce0/! Bootstrap v3.1.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sa
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a Data Ascii: trong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2a 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 61 2c 61 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e Data Ascii: overflow:auto}optgroup{font-weight:700}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}@media print{*{text-shadow:none!important;color:#000!important;background:transparent!important;box-shadow:none!important}a,a:visited{text-decoration:un
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 23 34 32 38 62 63 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 32 61 36 34 39 36 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6d 67 2d 72 65 73 70 Data Ascii: ;line-height:inherit}a{color:#428bca;text-decoration:none}a:hover,a:focus{color:#2a6496;text-decoration:underline}a:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}figure{margin:0}img{vertical-align:middle}.img-resp
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 68 31 20 2e 73 6d 61 6c 6c 2c 2e 68 31 20 2e 73 6d 61 6c 6c 2c 68 32 20 2e 73 6d 61 6c 6c 2c 2e 68 32 20 2e 73 6d 61 6c 6c 2c 68 33 20 2e 73 6d 61 6c 6c 2c 2e 68 33 20 2e 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 35 25 7d 68 34 2c 2e 68 34 2c 68 35 2c 2e 68 35 2c 68 36 2c 2e 68 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 68 34 20 73 6d 61 6c 6c 2c 2e 68 34 20 73 6d 61 6c 6c 2c 68 35 20 73 6d 61 6c 6c 2c 2e 68 35 20 73 6d 61 6c 6c 2c 68 36 20 73 6d 61 6c 6c 2c 2e 68 36 20 73 6d 61 6c 6c 2c 68 34 20 2e 73 6d 61 6c 6c 2c 2e 68 34 20 2e 73 6d 61 6c 6c 2c 68 35 20 2e 73 6d 61 6c 6c 2c 2e 68 35 20 2e 73 6d 61 6c 6c 2c 68 36 20 2e 73 6d 61 6c 6c 2c 2e 68 36 20 2e 73 6d 61 6c 6c 7b 66 6f Data Ascii: h1 .small,.h1 .small,h2 .small,.h2 .small,h3 .small,.h3 .small{font-size:65%}h4,.h4,h5,.h5,h6,.h6{margin-top:10px;margin-bottom:10px}h4 small,.h4 small,h5 small,.h5 small,h6 small,.h6 small,h4 .small,.h4 .small,h5 .small,.h5 .small,h6 .small,.h6 .small{fo
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 7d 61 2e 62 67 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 34 62 39 62 39 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 6d 61 72 67 69 6e 3a 34 30 70 78 20 30 20 32 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 75 6c 2c 6f 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 75 6c 20 75 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 6f 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 7b 70 61 64 64 69 6e 67 Data Ascii: danger{background-color:#f2dede}a.bg-danger:hover{background-color:#e4b9b9}.page-header{padding-bottom:9px;margin:40px 0 20px;border-bottom:1px solid #eee}ul,ol{margin-top:0;margin-bottom:10px}ul ul,ol ul,ul ol,ol ol{margin-bottom:0}.list-unstyled{padding
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 72 65 76 65 72 73 65 20 66 6f 6f 74 65 72 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 66 6f 6f 74 65 72 3a 62 65 66 6f 72 65 2c 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 2e 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 2e 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 66 6f 6f 74 65 72 3a 61 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c Data Ascii: reverse footer:before,blockquote.pull-right footer:before,.blockquote-reverse small:before,blockquote.pull-right small:before,.blockquote-reverse .small:before,blockquote.pull-right .small:before{content:''}.blockquote-reverse footer:after,blockquote.pull
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 37 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 31 37 30 70 78 7d 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 7d 2e 63 6f 6c 2d 78 73 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c Data Ascii: (min-width:992px){.container{width:970px}}@media (min-width:1200px){.container{width:1170px}}.container-fluid{margin-right:auto;margin-left:auto;padding-left:15px;padding-right:15px}.row{margin-left:-15px;margin-right:-15px}.col-xs-1,.col-sm-1,.col-md-1,
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d Data Ascii: l-8{right:66.66666667%}.col-xs-pull-7{right:58.33333333%}.col-xs-pull-6{right:50%}.col-xs-pull-5{right:41.66666667%}.col-xs-pull-4{right:33.33333333%}.col-xs-pull-3{right:25%}.col-xs-pull-2{right:16.66666667%}.col-xs-pull-1{right:8.33333333%}.col-xs-pull-
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 Data Ascii: m-10{width:83.33333333%}.col-sm-9{width:75%}.col-sm-8{width:66.66666667%}.col-sm-7{width:58.33333333%}.col-sm-6{width:50%}.col-sm-5{width:41.66666667%}.col-sm-4{width:33.33333333%}.col-sm-3{width:25%}.col-sm-2{width:16.66666667%}.col-sm-1{width:8.33333333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	694	OUT	GET /images/styles-2016.css HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 18 Oct 2018 15:20:05 GMT ETag: W/"3c1366-1990-5788252486ada" Vary: Accept-Encoding P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1532 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8cqP1DRVbRZcxu8gm4ADYt2gu5e5NjEKELL4B5LgUa0ifH%2FAZxdGCy%2FSg6YZr2IkuGPuppxV7GeUef0KYBNcdUf5TW1ugh6V9TtpB4TSFpPvC8NLRogn4mAVROHoRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c7c46c331-EWR
2024-07-04 23:01:22 UTC	671	IN	Data Raw: 31 39 39 30 0d 0a 2f 2a 20 50 72 6f 62 61 62 6c 79 20 64 6f 6e 27 74 20 65 64 69 74 20 62 65 6c 6f 77 20 74 68 69 73 2e 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 54 2b 53 61 6e 73 27 3b 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 62 6f 64 79 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 54 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 7d 0a 68 65 61 64 65 72 20 69 6d 67 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 66 6f 6f 74 65 72 20 7b 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 31 30 25 3b 20 7d 0a 66 6f 6f 74 65 72 20 74 61 62 6c 65 20 Data Ascii: 1990/* Probably don't edit below this. */@import 'https://fonts.googleapis.com/css?family=PT+Sans';html, body { overflow-x: hidden; }body { font-family: 'PT Sans', sans-serif;}header img { width: 100%; }footer { padding: 20px 10%; }footer table
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 72 65 77 61 72 64 73 20 68 35 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 35 76 77 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 20 68 65 69 67 68 74 3a 20 33 32 70 78 3b 20 77 69 64 74 68 3a 20 33 32 70 78 3b 20 7d 0a 0a 2e 65 6d 70 74 79 2d 70 61 6e 65 6c 20 7b 20 68 65 69 67 68 74 3a 20 38 30 70 78 3b 20 7d 0a 0a 2e 70 61 64 64 69 6e 67 2d 6c 67 20 7b 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 30 Data Ascii: mportant;padding-top: 10px !important; }.rewards h5 { font-size: 2.5vw; margin: 0px !important; }input[type='checkbox'], input[type='radio'] { margin-left: 0px; height: 32px; width: 32px; }.empty-panel { height: 80px; }.padding-lg { padding: 30px 0
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 7b 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 7d 0a 0a 2f 2a 20 49 64 20 53 70 65 63 69 66 69 63 20 53 74 79 6c 65 73 20 2a 2f 0a 0a 23 72 65 73 69 64 65 6e 74 20 2b 20 6c 61 62 65 6c 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 37 35 65 6d 3b 20 7d 0a 0a 0a 23 70 72 6f 67 72 65 73 73 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 35 25 3b 20 7d 0a 23 70 72 6f 67 72 65 73 73 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 2e 30 30 76 77 3b 20 7d 0a 23 70 72 6f 67 72 65 73 73 20 2e 73 74 61 74 75 73 20 20 20 20 20 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 2e 33 33 76 77 3b 20 7d 0a 0a 0a 66 6f 6f 74 65 72 20 23 63 73 64 Data Ascii: { color: red;}/* Id Specific Styles */#resident + label { font-size: 0.75em; }#progress { text-align: center; padding: 20px 5%; }#progress .description { font-size: 3.00vw; }#progress .status { font-size: 3.33vw; }footer #csd
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 31 36 2e 70 6e 67 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 0a 7d 0a 0a 23 72 65 67 2d 70 61 67 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 3a 63 68 65 63 6b 65 64 20 2b 20 6c 61 62 65 6c 20 2e 63 62 6f 78 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 63 68 65 63 6b 2d 32 30 31 36 2e 70 6e 67 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 0a 7d 0a 0a 2e 63 62 6f 78 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 37 2e 31 34 76 77 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 37 2e 31 34 76 77 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 2d 31 70 78 20 34 70 78 20 30 20 30 70 78 3b 0a 20 20 20 20 76 Data Ascii: 16.png);background-size:cover;}#reg-page input[type='radio']:checked + label .cbox{ background:url(check-2016.png); background-size:cover;}.cbox {display:inline-block; width:7.14vw; height:7.14vw; margin:-1px 4px 0 0px; v
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 67 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 72 65 77 61 72 64 73 20 68 35 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 0a 2e 72 65 77 61 72 64 2d 6f 66 66 65 72 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 70 78 20 32 30 70 78 20 30 70 78 3b 20 7d 0a 2e 72 65 77 61 72 64 2d 6f 66 66 65 72 20 2e 6f 66 66 65 72 2d 69 6d 61 67 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 20 7d 0a 0a 2e 72 65 77 61 72 64 2d 6f 66 66 65 72 20 2e 6f 66 66 65 72 2d 69 6d 61 67 65 20 69 6d 67 20 7b 20 68 65 69 67 68 74 3a 20 Data Ascii: g-top: 10px !important; }.rewards h5 { font-size: 1em; margin: 0px !important; }.reward-offer { position: relative; padding: 20px 0px 20px 0px; }.reward-offer .offer-image { position: relative;float:left; }.reward-offer .offer-image img { height:
2024-07-04 23:01:22 UTC	405	IN	Data Raw: 68 74 3a 20 61 75 74 6f 3b 20 20 7d 0a 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 2c 20 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 20 7b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 65 6d 3b 20 7d 0a 23 72 65 67 2d 70 61 67 65 20 20 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 20 7b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 7d 0a 23 72 65 67 2d 70 61 67 65 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 Data Ascii: ht: auto; }.checkbox label, .checkbox-inline label, .radio label, .radio-inline label { margin-right: 10px; font-size: 1.5em; }#reg-page .radio-inline label { line-height: 3em;padding-left:0px;margin-left:0px;}#reg-page .radio-inline {padding-left:0
2024-07-04 23:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	706	OUT	GET /9179/registration//colors-2016.css HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 13 May 2019 19:37:42 GMT ETag: W/"1a34a4-439-588ca0cc0b22f" Vary: Accept-Encoding P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1532 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uzDxg4gIZKAxRq5oQM4MsaCYFfHWv2ImBStPyvg5MApYGj5XI3jyHg%2BQzfNGkHUrdc0oLew%2FFjwJzMm%2Bbvu%2FQp4EP4q81QogRH0pN26tVfzV%2FzLacwGCX2r4cSc4Ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c889478ed-EWR
2024-07-04 23:01:22 UTC	666	IN	Data Raw: 34 33 39 0d 0a 2f 2a 20 43 53 53 20 43 6f 6c 6f 72 73 20 2a 2f 0d 0a 0d 0a 2e 66 67 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 31 34 36 39 42 33 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 20 3e 20 2e 62 67 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 34 36 39 42 33 3b 0d 0a 7d 0d 0a 2e 62 67 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 43 45 43 45 43 45 3b 20 7d 0d 0a 2e 62 67 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 33 66 33 66 34 3b 20 7d 0d 0a 0d 0a 2e 62 74 6e 2d 63 6f 6e 74 69 6e 75 65 20 7b 0d 0a 09 63 6f 6c 6f Data Ascii: 439/* CSS Colors */.fg-primary-color {color: #1469B3;}header > .bg-primary-color {background-color: #1469B3;}.bg-primary-color { background-color: #CECECE; }.bg-secondary-color { background-color: #f3f3f4; }.btn-continue {colo
2024-07-04 23:01:22 UTC	422	IN	Data Raw: 33 3b 20 7d 0d 0a 2e 70 6c 61 74 69 6e 75 6d 2d 6f 66 66 65 72 73 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 35 65 34 65 32 3b 20 7d 0d 0a 2e 62 6f 6e 75 73 2d 6f 66 66 65 72 73 20 20 20 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 33 36 61 66 64 3b 20 7d 0d 0a 0d 0a 23 70 72 6f 67 72 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 20 23 39 34 39 35 61 35 3b 20 7d 0d 0a 23 70 72 6f 67 72 65 73 73 20 2e 73 74 61 74 75 73 2e 73 74 61 74 75 73 2d 63 6f 6d 70 6c 65 74 65 20 7b 20 63 6f 6c 6f 72 3a 20 23 37 32 62 66 34 34 3b 20 7d 0d 0a 23 70 72 6f 67 72 65 73 73 20 2e 73 74 61 74 75 73 2e 73 74 61 74 75 73 2d 70 65 6e 64 69 6e 67 20 20 7b 20 63 Data Ascii: 3; }.platinum-offers { color: #fff; background-color: #e5e4e2; }.bonus-offers { color: #fff; background-color: #036afd; }#progress { color: #9495a5; }#progress .status.status-complete { color: #72bf44; }#progress .status.status-pending { c
2024-07-04 23:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49732	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	674	OUT	GET /demo_optimize.js HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:22 GMT Content-Type: text/javascript Content-Length: 5355 Connection: close Last-Modified: Wed, 04 Feb 2009 16:15:04 GMT ETag: "3c02fd-14eb-4621a1727d200" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1532 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UDMC3wM53yrpuD5IMpaqmliweOcOnrUsT%2BS3hh4Uwwgz6ZMcMSVnrHM6TK7m9G4GnQ1%2ByVSoBeG0LmKGhfgxSRJM1abtB1TBVwidVOILvoMczzV9uGQU%2BKqeumwf4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c8c0d1a1b-EWR
2024-07-04 23:01:22 UTC	671	IN	Data Raw: 0a 69 66 28 21 74 68 69 73 2e 4a 53 4f 4e 29 7b 4a 53 4f 4e 3d 7b 7d 3b 7d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 31 30 3f 27 30 27 2b 6e 3a 6e 3b 7d 0a 69 66 28 74 79 70 65 6f 66 20 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 21 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 29 7b 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2b 27 2d 27 2b 0a 66 28 74 68 69 73 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2b 31 29 2b 27 2d 27 2b 0a 66 28 74 68 69 73 2e 67 65 74 55 54 43 44 61 74 65 28 29 29 2b 27 54 27 2b 0a 66 28 74 68 69 73 2e 67 65 74 Data Ascii: if(!this.JSON){JSON={};}(function(){function f(n){return n<10?'0'+n:n;}if(typeof Date.prototype.toJSON!=='function'){Date.prototype.toJSON=function(key){return this.getUTCFullYear()+'-'+f(this.getUTCMonth()+1)+'-'+f(this.getUTCDate())+'T'+f(this.get
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 67 61 70 2c 69 6e 64 65 6e 74 2c 6d 65 74 61 3d 7b 27 5c 62 27 3a 27 5c 5c 62 27 2c 27 5c 74 27 3a 27 5c 5c 74 27 2c 27 5c 6e 27 3a 27 5c 5c 6e 27 2c 27 5c 66 27 3a 27 5c 5c 66 27 2c 27 5c 72 27 3a 27 5c 5c 72 27 2c 27 22 27 3a 27 5c 5c 22 27 2c 27 5c 5c 27 3a 27 5c 5c 5c 5c 27 7d 2c 72 65 70 3b 66 75 6e 63 74 69 6f 6e 20 71 75 6f 74 65 28 73 74 72 69 6e 67 29 7b 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 73 74 72 69 6e 67 29 3f 27 22 27 2b 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 6d 65 74 61 5b 61 5d 3b 72 65 74 75 72 6e Data Ascii: eff\ufff0-\uffff]/g,gap,indent,meta={'\b':'\\b','\t':'\\t','\n':'\\n','\f':'\\f','\r':'\\r','"':'\\"','\\':'\\\\'},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];return
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 7d 7d 0a 76 3d 70 61 72 74 69 61 6c 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 27 7b 7d 27 3a 67 61 70 3f 27 7b 5c 6e 27 2b 67 61 70 2b 70 61 72 74 69 61 6c 2e 6a 6f 69 6e 28 27 2c 5c 6e 27 2b 67 61 70 29 2b 27 5c 6e 27 2b 0a 6d 69 6e 64 2b 27 7d 27 3a 27 7b 27 2b 70 61 72 74 69 61 6c 2e 6a 6f 69 6e 28 27 2c 27 29 2b 27 7d 27 3b 67 61 70 3d 6d 69 6e 64 3b 72 65 74 75 72 6e 20 76 3b 7d 7d 0a 69 66 28 74 79 70 65 6f 66 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 21 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 29 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 72 65 70 6c 61 63 65 72 2c 73 70 61 63 65 29 7b 76 61 72 20 69 3b 67 61 70 3d 27 27 3b 69 6e 64 65 6e 74 3d 27 27 3b 69 66 28 74 79 70 65 6f 66 20 73 70 61 63 65 3d 3d 3d Data Ascii: }}v=partial.length===0?'{}':gap?'{\n'+gap+partial.join(',\n'+gap)+'\n'+mind+'}':'{'+partial.join(',')+'}';gap=mind;return v;}}if(typeof JSON.stringify!=='function'){JSON.stringify=function(value,replacer,space){var i;gap='';indent='';if(typeof space===
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 66 28 21 65 29 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 76 61 72 20 74 3b 69 66 28 65 2e 74 61 72 67 65 74 29 74 3d 65 2e 74 61 72 67 65 74 3b 65 6c 73 65 20 69 66 28 65 2e 73 72 63 45 6c 65 6d 65 6e 74 29 74 3d 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3b 73 74 61 72 74 54 69 6d 65 3d 64 2e 67 65 74 54 69 6d 65 28 29 3b 6f 5b 27 65 27 5d 5b 74 2e 6e 61 6d 65 5d 5b 30 5d 2b 2b 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 62 28 65 29 7b 76 61 72 20 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 69 66 28 21 65 29 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 76 61 72 20 74 3b 69 66 28 65 2e 74 61 72 67 65 74 29 74 3d 65 2e 74 61 72 67 65 74 3b 65 6c 73 65 20 69 66 28 65 2e 73 72 63 45 6c 65 6d 65 6e 74 29 74 3d 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3b Data Ascii: f(!e)var e=window.event;var t;if(e.target)t=e.target;else if(e.srcElement)t=e.srcElement;startTime=d.getTime();o['e'][t.name][0]++;}function tb(e){var d=new Date();if(!e)var e=window.event;var t;if(e.target)t=e.target;else if(e.srcElement)t=e.srcElement;
2024-07-04 23:01:22 UTC	577	IN	Data Raw: 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6c 3d 66 2e 65 6c 65 6d 65 6e 74 73 5b 69 5d 3b 69 66 28 6c 2e 74 79 70 65 21 3d 27 68 69 64 64 65 6e 27 29 7b 69 66 28 6c 2e 6f 6e 66 6f 63 75 73 29 7b 6c 2e 6f 66 3d 6c 2e 6f 6e 66 6f 63 75 73 3b 7d 0a 6c 2e 6f 6e 66 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 66 28 65 29 3b 69 66 28 28 74 68 69 73 2e 6f 66 29 26 26 28 74 68 69 73 2e 6f 66 21 3d 6e 75 6c 6c 29 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 28 65 29 3b 7d 0a 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 0a 69 66 28 6c 2e 6f 6e 62 6c 75 72 29 7b 6c 2e 6f 62 3d 6c 2e 6f 6e 62 6c 75 72 3b 7d 0a 6c 2e 6f 6e 62 6c 75 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 62 28 65 29 3b 69 66 28 28 74 68 69 73 2e 6f 62 29 26 26 28 74 68 69 73 2e 6f 62 21 3d 6e 75 Data Ascii: th;i++){var l=f.elements[i];if(l.type!='hidden'){if(l.onfocus){l.of=l.onfocus;}l.onfocus=function(e){tf(e);if((this.of)&&(this.of!=null)){return this.of(e);}return true;}if(l.onblur){l.ob=l.onblur;}l.onblur=function(e){tb(e);if((this.ob)&&(this.ob!=nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49729	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	673	OUT	GET /images/js_fl.js HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:22 GMT Content-Type: text/javascript Content-Length: 761 Connection: close Last-Modified: Fri, 11 Mar 2016 20:36:22 GMT ETag: "12155c-2f9-52dcbe24f1d80" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1532 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUIM9%2F6Fm4%2BgQ9ptrxg5P9K6zLgbjoihQ%2BAFlm49BdAFWxvMNaJEJ5%2Fv9VAyXHzv0pz4DwRaf%2Fh4TNb2EQ7kFu%2FWMC7PNfaJBmmGb0LXLad29X%2FsRP4RuscK6h6ZRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c8deb41c1-EWR
2024-07-04 23:01:22 UTC	665	IN	Data Raw: 76 61 72 20 66 6c 5f 63 69 64 20 3d 20 7b 0a 22 32 38 34 32 30 30 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 38 39 35 30 37 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 36 35 34 38 33 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 38 39 30 39 30 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 38 37 36 35 30 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 38 30 33 38 35 22 3a 20 22 32 39 30 31 37 34 22 2c 0a 22 32 38 39 36 33 38 22 3a 20 22 32 39 30 31 37 32 22 2c 0a 22 32 38 37 34 33 37 22 3a 20 22 32 39 30 31 37 32 22 2c 0a 22 32 38 31 31 36 35 22 3a 20 22 32 39 30 31 37 32 22 2c 0a 22 32 38 37 36 34 30 22 3a 20 22 32 39 30 31 37 32 22 2c 0a 22 31 32 35 39 33 34 22 3a 20 22 32 39 30 31 37 32 22 2c 0a 22 32 35 33 35 37 30 22 3a 20 22 32 39 30 31 37 32 22 2c 0a Data Ascii: var fl_cid = {"284200": "290174","289507": "290174","265483": "290174","289090": "290174","287650": "290174","280385": "290174","289638": "290172","287437": "290172","281165": "290172","287640": "290172","125934": "290172","253570": "290172",
2024-07-04 23:01:22 UTC	96	IN	Data Raw: 39 22 20 3a 20 22 31 32 35 36 37 34 22 2c 0a 22 32 38 36 31 32 31 22 3a 20 22 31 32 35 36 37 34 22 2c 0a 22 32 38 39 35 34 39 22 3a 20 22 31 32 35 36 37 34 22 2c 0a 22 32 38 39 30 34 39 22 3a 20 22 31 32 35 36 37 34 22 2c 0a 22 32 38 32 36 30 39 22 3a 20 22 31 32 35 36 37 34 22 0a 7d 0a Data Ascii: 9" : "125674","286121": "125674","289549": "125674","289049": "125674","282609": "125674"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49733	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:21 UTC	752	OUT	GET /9179/registration//main_header.png HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:22 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:22 GMT Content-Type: image/png Content-Length: 237581 Connection: close Last-Modified: Wed, 03 Mar 2021 14:52:23 GMT ETag: "2e1813-3a00d-5bca2ffaaa606" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1532 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abHwEmFzOwJHf1C%2FuYOz%2B1u9gDXEtnSTDZOv8Isn%2BkDQsDtfT32vnPgCUvH68hSnUTT1%2FuXxpAlmfuMNYFPHs%2Fxgoqb1ClOSZ%2BjaUS%2FS6jUFZjCTvznxCYaFwfQk3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bc9c99f40fa4-EWR
2024-07-04 23:01:22 UTC	666	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 01 72 08 02 00 00 00 cd 96 2a 3a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0b 61 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRr*:pHYsaiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 30 37 3a 33 38 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 78 6d Data Ascii: l="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-03-03T09:07:38-05:00" xmp:ModifyDate="2021-03-03T09:41:34-05:00" xmp:MetadataDate="2021-03-03T09:41:34-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xm
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 63 61 37 33 66 31 37 2d 63 65 33 61 2d 31 33 34 64 2d 61 34 32 32 2d 32 63 37 63 32 61 31 37 63 35 64 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 Data Ascii: /> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:0ca73f17-ce3a-134d-a422-2c7c2a17c5d6" stEvt:when="2021-03-03T09:41:34-05:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:paramete
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: a2 c4 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 25 01 2a 51 a2 44 89 12 25 4a ac 38 94 04 a8 44 89 12 25 4a 94 28 b1 e2 50 12 a0 12 25 4a 94 28 51 a2 c4 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 25 01 2a 51 a2 44 89 12 25 4a ac 38 94 04 a8 44 89 12 25 4a 94 28 b1 e2 90 5c e8 0a 94 58 2e dc be 73 64 64 20 75 9f bf f6 d4 f8 fe c9 d6 c5 5c ec 52 61 db 60 e5 75 97 0f c7 af e7 58 c3 a5 2d ad 44 89 12 4b 82 72 60 96 58 12 5c 48 02 f4 a9 9f b8 e6 8a cd 43 c5 23 7f f3 8d e7 ee f8 fa c1 c5 5c fb f1 b7 5f 51 fc 7a 7a a6 f5 d1 7b f7 9f 5d 35 96 b0 a8 33 c5 b9 b4 c0 9c b8 65 53 fd 67 de b0 ed c6 cb d7 6c df 38 d4 f5 d3 b1 f1 d9 87 9f 1e fb ec 77 0f 7d e6 c1 63 17 a4 d8 2f 7d e8 55 67 7a df 22 fe cb 5d 4f dc bd f7 d4 7c bf 7e f8 d6 6d 37 5f b1 f6 da cb d6 d4 6b 69 d7 Data Ascii: CIJ(QD+%QD%J8D%J(P%J(QCIJ(QD+%QD%J8D%J(\X.sdd u\Ra`uX-DKr`X\HC#\_Qzz{]53eSgl8w}c/}Ugz"]O\|~m7_ki
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 72 7e 70 01 08 50 97 7a e3 d8 f8 ec 2f 7e fa 81 bb 7f ed fb 3b ce 79 f9 a6 97 30 01 5a 92 16 78 ff 6b 2e e9 f2 50 fe dc 03 cf bf 60 1f fd ad bb f7 46 a6 32 dd 68 ef 3b 3c 71 7a a6 a3 47 2e 53 b1 e7 01 d7 5f 3a 3c 5f 8b dd 77 68 3a 52 cc dd fb c6 00 1c 1a 9b db 81 69 99 4a eb c5 7b 6e 5c f7 89 7f 79 73 fc ea 4c 09 db 06 2b ef 7b f3 b6 1f 79 fd f6 e2 2b 78 ef ad 57 1c 1b 9f fd d4 3f 3c b1 70 7e 84 0f df ba ed 5d 6f dc 31 9f 63 d9 b1 f1 d9 3f fb f2 d3 0b e7 77 78 c1 94 07 df 7a ec c8 a7 ee 79 7a 81 ce 70 ee 25 cc 89 ae b6 2a e2 f8 ff 7d 7b fc 3c fa 0b 77 f7 9e 30 67 93 46 ec de 37 f6 87 9f 7f fa c5 2b 6a f6 1f 9f b9 d0 55 38 df 58 aa 81 79 d6 e3 e5 4b 1f 7a 55 d1 2a f7 81 3f b8 ff 33 0f 1e 7b cf 8d eb 7e e6 2d 3b ba ac 75 1f 78 67 fb 7f 7e 75 5f 74 66 d8 36 Data Ascii: r~pPz/~;y0Zxk.P`F2h;<qzG.S_:<_wh:RiJ{n\ysL+{y+xW?<p~]o1c?wxzyzp%}{<w0gF7+jU8XyKzU?3{~-;uxg~u_tf6
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 2d 01 96 0f e7 d5 04 d6 e5 fc 3b dd 68 7f e6 9b 87 e2 d7 5e 5f 93 b7 de b8 11 2f 2d 2c 55 0b 2c d3 4e 2e 17 e7 06 31 f3 61 ff 64 6b ce 48 e0 5e b8 f5 e2 1f fd f2 6b be f4 a1 57 cd 17 9f bf b4 a5 9d 1d ee bc 77 cf 07 ef da 13 27 e9 fd 93 ad 1f fc e4 77 dc 22 ac 78 f7 a2 f6 78 e3 ea 0e 01 fd e9 ff fd 64 51 fa df 77 68 ba c8 b0 1d ba 94 cf c5 5d b5 e7 c3 7f fa eb c7 01 ec de 37 f6 ad c7 8e dc 79 ef 9e 3b ee da 5d 54 56 9f 7b 09 0b 63 ff 64 eb 33 0f 1e fb cc 83 c7 0e 8d 75 eb 23 dd 71 f7 5f 3c f8 be 37 6f eb 9a 7e 5c ec 74 d1 3e fb c1 bb f6 bc ef bf 75 93 a7 1f 79 fd f6 8b c7 10 56 af a5 bb b6 af 99 f3 bf 39 cf df bd 6f ec a5 a7 32 c7 52 0f cc 73 1f 2f bd f8 d6 63 47 8a bd eb ee bd a7 ee f9 f6 f3 bd a7 bd ef bf dd 1f 7b e9 fe c9 d6 ff f5 17 8f 75 9d 70 d3 ce Data Ascii: -;h^_/-,U,N.1adkH^kWw'w"xxdQwh]7y;]TV{cd3u#q_<7o~\t>uyV9o2Rs/cG{up
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: be b4 40 25 ef de 7b 6a e4 ee 27 ba 96 35 71 f9 b2 b4 a5 9d 67 cc 27 cd f7 1d 9e 78 ea d0 c4 e3 07 c6 4f 4f b7 3f fc 93 37 be 60 39 77 ef 3d b5 fb 23 5f 7a df 9b b7 bd ed e6 2d 2f d8 57 b7 6f 1c fa 77 b7 ef fc b9 3f 7d 74 69 4b 28 b1 30 ee de 7b ea b2 bf da dd f5 36 5f 74 19 8c 16 8f e5 18 98 4b 35 5e 4a f4 62 c9 25 c0 79 20 43 e7 83 00 f5 3a ff 9e 29 7e e6 0d db ee 7b 31 cb ca e5 68 81 07 f6 76 db 5c 17 b3 ff e8 2d 9b ea 6e 85 14 33 89 ed 3b 3c 51 cc 1f bf 4c c5 2e 2d b6 8d f6 77 49 b1 5b 77 8d 2e cc d2 3e f3 e0 b1 4f 9c 97 d2 ce 1a 0b e8 90 ba 8c f4 d1 15 b1 37 ab 9b db c3 a8 18 7c b1 78 f7 43 e7 60 f1 c1 bb f6 38 83 cb 4d 3b e7 8d b8 06 70 db 2b 36 a3 67 48 9e 7b 09 e7 8e 5e 67 8b f9 62 55 1c ba 14 06 8b 71 b0 bd 80 b8 e3 eb 07 af d9 3a dc f5 d2 97 24 Data Ascii: @%{j'5qg'xOO?7`9w=#_z-/Wow?}tiK(0{6_tK5^Jb%y C:)~{1hv\-n3;<QL.-wI[w.>O7\|xC`8M;p+6gH{^gbUq:$
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: a6 cd 6f bd 69 f3 9c 9b 30 3b fc e1 e7 f3 bc c6 8f 1f 18 ef 7a 1d 6f bd 69 f3 fe 6b d6 ef 3b 3c 31 e7 d6 d6 0e 5d ae 94 bf 75 f7 de 5e ba 70 d3 ce 35 5f 7c f8 b0 4b 68 7b fd a5 c3 bd 13 4c b1 1b 9f 7b 09 8b 44 ef 0a f2 bd b7 e6 4a f5 0f fc c1 fd 4e 5e cf a9 20 71 be f9 f3 ed 06 0f e0 5b 8f 1d 79 51 a8 7f 22 7e e3 cf be f7 47 bf fc 9a e2 91 75 c3 7d 0b 47 d6 9c e3 a0 3b 0f 05 76 61 69 07 e6 92 8c 97 0b 8e 33 12 11 8b 44 2f d1 dc b5 7d cd dd bf f6 fd fb 0e 4f 4c 37 da 73 8e 97 e2 2a f7 bc 49 80 25 c7 32 12 a0 39 9d 7f 7b 7d 6c e7 c3 1f 7e 65 7f d7 f4 3f 9f 05 f4 a2 c5 f9 69 81 77 7f fa a1 4f cd b4 cf 34 b3 c5 5f 7f 6d df c2 e2 7e 99 8a 5d 42 dc f1 f5 83 ab ea 69 97 a1 70 51 17 de b5 bb 57 a2 2d 6d 69 67 81 e2 36 70 f3 4d 2a 77 de bb a7 78 af 8f de bb ff 5d Data Ascii: oi0;zoik;<1]u^p5_\|Kh{L{DJN^ q[yQ"~Gu}G;vai3D/}OL7sI%29{}l~e?iwO4_m~]BipQW-mig6pMwx]
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 89 dd fd bf 2e 74 1d 4a 94 28 51 a2 44 89 12 25 ce 2b 4a 0d 50 89 12 25 4a 94 28 51 62 c5 a1 24 40 25 4a 94 28 51 a2 44 89 15 87 92 00 95 28 51 a2 44 89 12 25 56 1c 4a 02 54 a2 44 89 12 25 4a 94 58 71 28 09 50 89 12 25 4a 94 28 51 62 c5 81 54 75 b9 ef 51 b8 85 fb a8 f9 21 ff 41 a1 1d 67 aa ff d2 53 37 55 10 14 20 f2 3f 11 40 e4 3f 51 bc 0e aa a4 80 40 15 44 0a 09 f7 71 ff 08 08 50 f7 f4 02 a8 fb 8f fc 07 84 cf 20 52 a8 3f a8 10 57 00 91 3b 41 dc b5 0a 02 c8 d5 04 20 5f 19 10 c0 44 04 65 28 29 25 0a ca 1f 02 85 2f 81 83 2a 54 44 c8 37 10 44 a0 80 a8 c4 46 50 85 aa 2a 04 0a 40 44 f3 87 05 54 49 00 88 0a 20 aa 16 b0 60 11 c9 a0 6d c0 0a ac 68 66 25 03 ac 68 a6 9a 29 dc b3 13 51 68 31 88 aa 50 a8 4c 78 58 d7 52 ec fe Data Ascii: CIJ(QD+.tJ(QD%+JP%J(Qb$@%J(QD(QD%VJTD%JXq(P%J(QbTuQ!AgS7U ?@?Q@DqP R?W;A _De()%/TD7DFP@DTI `mhf%h)Qh1PLxXR
2024-07-04 23:01:22 UTC	1369	IN	Data Raw: c2 2c aa 00 b1 11 15 2b be 7f f9 36 22 05 94 e1 95 74 c5 1e e7 15 30 08 6a 17 76 ca 2f 47 36 bd a6 d2 b5 9c a7 22 81 65 92 67 91 6c d8 6b e3 d8 bd 38 8e 74 c8 f3 5d 02 fb ee e4 47 9f 7b 9b ea 99 5a 64 45 08 1d 5a 03 83 73 bc 48 3d 67 02 03 a2 ea 38 31 c4 11 62 62 0d fa ba 30 1f bb 4f 0a 08 60 49 6d e8 7e 61 f8 02 aa 96 3c 3b 0c 6f c4 9f a3 c4 a4 c8 07 35 11 81 84 54 dc aa 41 15 4c 51 2c b0 53 cf 84 f6 88 35 17 d7 d0 04 25 56 52 28 03 02 65 f7 06 84 14 20 15 a7 55 52 05 98 9d 26 89 c0 aa 59 d0 36 a9 a7 d8 ec 6b 2f d6 dd c2 77 12 af db 81 8a b2 17 0a e2 16 02 c4 8e 9d 40 01 13 d6 4f ae 9e 42 20 62 62 a3 cc 80 01 12 42 42 30 04 f6 03 0d 4c 60 82 21 4e d8 a4 04 c3 44 6e 7d 02 62 22 02 73 ae 39 f7 5d d8 f3 e2 de 7e 5e a2 c4 4a c0 85 20 40 73 2a 54 28 ea bc 03 Data Ascii: ,+6"t0jv/G6"eglk8t]G{ZdEZsH=g81bb0O`Im~a<;o5TALQ,S5%VR(e UR&Y6k/w@OB bbBB0L`!NDn}b"s9]~^J @s*T(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49738	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:23 UTC	475	OUT	GET /9179/registration//main_header.png HTTP/1.1 Host: free2try.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:23 UTC	705	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:23 GMT Content-Type: image/png Content-Length: 237581 Connection: close Last-Modified: Wed, 03 Mar 2021 14:52:23 GMT ETag: "2e1813-3a00d-5bca2ffaaa606" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1533 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3rFd1DNfQ5tltkNBayojuPQ6%2FDfDGZbP4nw%2FnTyR%2FUZbBe%2FTq6r8p%2FQMiogwq6lm9OA8OV7%2Ba0o1XIjhERzxXrxmGEy44IqLaxNb61LM%2BjY6ReT%2B7vpVgvmSsd6nxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bca34f240ca5-EWR
2024-07-04 23:01:23 UTC	664	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 01 72 08 02 00 00 00 cd 96 2a 3a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0b 61 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRr*:pHYsaiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 30 37 3a 33 38 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 Data Ascii: ool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-03-03T09:07:38-05:00" xmp:ModifyDate="2021-03-03T09:41:34-05:00" xmp:MetadataDate="2021-03-03T09:41:34-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 63 61 37 33 66 31 37 2d 63 65 33 61 2d 31 33 34 64 2d 61 34 32 32 2d 32 63 37 63 32 61 31 37 63 35 64 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 30 33 54 30 39 3a 34 31 3a 33 34 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 Data Ascii: /"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:0ca73f17-ce3a-134d-a422-2c7c2a17c5d6" stEvt:when="2021-03-03T09:41:34-05:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parame
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 28 51 a2 c4 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 25 01 2a 51 a2 44 89 12 25 4a ac 38 94 04 a8 44 89 12 25 4a 94 28 b1 e2 50 12 a0 12 25 4a 94 28 51 a2 c4 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 25 01 2a 51 a2 44 89 12 25 4a ac 38 94 04 a8 44 89 12 25 4a 94 28 b1 e2 90 5c e8 0a 94 58 2e dc be 73 64 64 20 75 9f bf f6 d4 f8 fe c9 d6 c5 5c ec 52 61 db 60 e5 75 97 0f c7 af e7 58 c3 a5 2d ad 44 89 12 4b 82 72 60 96 58 12 5c 48 02 f4 a9 9f b8 e6 8a cd 43 c5 23 7f f3 8d e7 ee f8 fa c1 c5 5c fb f1 b7 5f 51 fc 7a 7a a6 f5 d1 7b f7 9f 5d 35 96 b0 a8 33 c5 b9 b4 c0 9c b8 65 53 fd 67 de b0 ed c6 cb d7 6c df 38 d4 f5 d3 b1 f1 d9 87 9f 1e fb ec 77 0f 7d e6 c1 63 17 a4 d8 2f 7d e8 55 67 7a df 22 fe cb 5d 4f dc bd f7 d4 7c bf 7e f8 d6 6d 37 5f b1 f6 da cb d6 d4 6b Data Ascii: (QCIJ(QD+%QD%J8D%J(P%J(QCIJ(QD+%QD%J8D%J(\X.sdd u\Ra`uX-DKr`X\HC#\_Qzz{]53eSgl8w}c/}Ugz"]O\|~m7_k
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 67 19 72 7e 70 01 08 50 97 7a e3 d8 f8 ec 2f 7e fa 81 bb 7f ed fb 3b ce 79 f9 a6 97 30 01 5a 92 16 78 ff 6b 2e e9 f2 50 fe dc 03 cf bf 60 1f fd ad bb f7 46 a6 32 dd 68 ef 3b 3c 71 7a a6 a3 47 2e 53 b1 e7 01 d7 5f 3a 3c 5f 8b dd 77 68 3a 52 cc dd fb c6 00 1c 1a 9b db 81 69 99 4a eb c5 7b 6e 5c f7 89 7f 79 73 fc ea 4c 09 db 06 2b ef 7b f3 b6 1f 79 fd f6 e2 2b 78 ef ad 57 1c 1b 9f fd d4 3f 3c b1 70 7e 84 0f df ba ed 5d 6f dc 31 9f 63 d9 b1 f1 d9 3f fb f2 d3 0b e7 77 78 c1 94 07 df 7a ec c8 a7 ee 79 7a 81 ce 70 ee 25 cc 89 ae b6 2a e2 f8 ff 7d 7b fc 3c fa 0b 77 f7 9e 30 67 93 46 ec de 37 f6 87 9f 7f fa c5 2b 6a f6 1f 9f b9 d0 55 38 df 58 aa 81 79 d6 e3 e5 4b 1f 7a 55 d1 2a f7 81 3f b8 ff 33 0f 1e 7b cf 8d eb 7e e6 2d 3b ba ac 75 1f 78 67 fb 7f 7e 75 5f 74 66 Data Ascii: gr~pPz/~;y0Zxk.P`F2h;<qzG.S_:<_wh:RiJ{n\ysL+{y+xW?<p~]o1c?wxzyzp%}{<w0gF7+jU8XyKzU?3{~-;uxg~u_tf
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 58 cb 2d 01 96 0f e7 d5 04 d6 e5 fc 3b dd 68 7f e6 9b 87 e2 d7 5e 5f 93 b7 de b8 11 2f 2d 2c 55 0b 2c d3 4e 2e 17 e7 06 31 f3 61 ff 64 6b ce 48 e0 5e b8 f5 e2 1f fd f2 6b be f4 a1 57 cd 17 9f bf b4 a5 9d 1d ee bc 77 cf 07 ef da 13 27 e9 fd 93 ad 1f fc e4 77 dc 22 ac 78 f7 a2 f6 78 e3 ea 0e 01 fd e9 ff fd 64 51 fa df 77 68 ba c8 b0 1d ba 94 cf c5 5d b5 e7 c3 7f fa eb c7 01 ec de 37 f6 ad c7 8e dc 79 ef 9e 3b ee da 5d 54 56 9f 7b 09 0b 63 ff 64 eb 33 0f 1e fb cc 83 c7 0e 8d 75 eb 23 dd 71 f7 5f 3c f8 be 37 6f eb 9a 7e 5c ec 74 d1 3e fb c1 bb f6 bc ef bf 75 93 a7 1f 79 fd f6 8b c7 10 56 af a5 bb b6 af 99 f3 bf 39 cf df bd 6f ec a5 a7 32 c7 52 0f cc 73 1f 2f bd f8 d6 63 47 8a bd eb ee bd a7 ee f9 f6 f3 bd a7 bd ef bf dd 1f 7b e9 fe c9 d6 ff f5 17 8f 75 9d 70 Data Ascii: X-;h^_/-,U,N.1adkH^kWw'w"xxdQwh]7y;]TV{cd3u#q_<7o~\t>uyV9o2Rs/cG{up
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: fe 9f be b4 40 25 ef de 7b 6a e4 ee 27 ba 96 35 71 f9 b2 b4 a5 9d 67 cc 27 cd f7 1d 9e 78 ea d0 c4 e3 07 c6 4f 4f b7 3f fc 93 37 be 60 39 77 ef 3d b5 fb 23 5f 7a df 9b b7 bd ed e6 2d 2f d8 57 b7 6f 1c fa 77 b7 ef fc b9 3f 7d 74 69 4b 28 b1 30 ee de 7b ea b2 bf da dd f5 36 5f 74 19 8c 16 8f e5 18 98 4b 35 5e 4a f4 62 c9 25 c0 79 20 43 e7 83 00 f5 3a ff 9e 29 7e e6 0d db ee 7b 31 cb ca e5 68 81 07 f6 76 db 5c 17 b3 ff e8 2d 9b ea 6e 85 14 33 89 ed 3b 3c 51 cc 1f bf 4c c5 2e 2d b6 8d f6 77 49 b1 5b 77 8d 2e cc d2 3e f3 e0 b1 4f 9c 97 d2 ce 1a 0b e8 90 ba 8c f4 d1 15 b1 37 ab 9b db c3 a8 18 7c b1 78 f7 43 e7 60 f1 c1 bb f6 38 83 cb 4d 3b e7 8d b8 06 70 db 2b 36 a3 67 48 9e 7b 09 e7 8e 5e 67 8b f9 62 55 1c ba 14 06 8b 71 b0 bd 80 b8 e3 eb 07 af d9 3a dc f5 d2 Data Ascii: @%{j'5qg'xOO?7`9w=#_z-/Wow?}tiK(0{6_tK5^Jb%y C:)~{1hv\-n3;<QL.-wI[w.>O7\|xC`8M;p+6gH{^gbUq:
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: bc f5 a6 cd 6f bd 69 f3 9c 9b 30 3b fc e1 e7 f3 bc c6 8f 1f 18 ef 7a 1d 6f bd 69 f3 fe 6b d6 ef 3b 3c 31 e7 d6 d6 0e 5d ae 94 bf 75 f7 de 5e ba 70 d3 ce 35 5f 7c f8 b0 4b 68 7b fd a5 c3 bd 13 4c b1 1b 9f 7b 09 8b 44 ef 0a f2 bd b7 e6 4a f5 0f fc c1 fd 4e 5e cf a9 20 71 be f9 f3 ed 06 0f e0 5b 8f 1d 79 51 a8 7f 22 7e e3 cf be f7 47 bf fc 9a e2 91 75 c3 7d 0b 47 d6 9c e3 a0 3b 0f 05 76 61 69 07 e6 92 8c 97 0b 8e 33 12 11 8b 44 2f d1 dc b5 7d cd dd bf f6 fd fb 0e 4f 4c 37 da 73 8e 97 e2 2a f7 bc 49 80 25 c7 32 12 a0 39 9d 7f 7b 7d 6c e7 c3 1f 7e 65 7f d7 f4 3f 9f 05 f4 a2 c5 f9 69 81 77 7f fa a1 4f cd b4 cf 34 b3 c5 5f 7f 6d df c2 e2 7e 99 8a 5d 42 dc f1 f5 83 ab ea 69 97 a1 70 51 17 de b5 bb 57 a2 2d 6d 69 67 81 e2 36 70 f3 4d 2a 77 de bb a7 78 af 8f de bb Data Ascii: oi0;zoik;<1]u^p5_\|Kh{L{DJN^ q[yQ"~Gu}G;vai3D/}OL7sI%29{}l~e?iwO4_m~]BipQW-mig6pMwx
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: a2 c4 8a 43 49 80 4a 94 28 51 a2 44 89 12 2b 0e 89 dd fd bf 2e 74 1d 4a 94 28 51 a2 44 89 12 25 ce 2b 4a 0d 50 89 12 25 4a 94 28 51 62 c5 a1 24 40 25 4a 94 28 51 a2 44 89 15 87 92 00 95 28 51 a2 44 89 12 25 56 1c 4a 02 54 a2 44 89 12 25 4a 94 58 71 28 09 50 89 12 25 4a 94 28 51 62 c5 81 54 75 b9 ef 51 b8 85 fb a8 f9 21 ff 41 a1 1d 67 aa ff d2 53 37 55 10 14 20 f2 3f 11 40 e4 3f 51 bc 0e aa a4 80 40 15 44 0a 09 f7 71 ff 08 08 50 f7 f4 02 a8 fb 8f fc 07 84 cf 20 52 a8 3f a8 10 57 00 91 3b 41 dc b5 0a 02 c8 d5 04 20 5f 19 10 c0 44 04 65 28 29 25 0a ca 1f 02 85 2f 81 83 2a 54 44 c8 37 10 44 a0 80 a8 c4 46 50 85 aa 2a 04 0a 40 44 f3 87 05 54 49 00 88 0a 20 aa 16 b0 60 11 c9 a0 6d c0 0a ac 68 66 25 03 ac 68 a6 9a 29 dc b3 13 51 68 31 88 aa 50 a8 4c 78 58 d7 52 Data Ascii: CIJ(QD+.tJ(QD%+JP%J(Qb$@%J(QD(QD%VJTD%JXq(P%J(QbTuQ!AgS7U ?@?Q@DqP R?W;A _De()%/TD7DFP@DTI `mhf%h)Qh1PLxXR
2024-07-04 23:01:23 UTC	1369	IN	Data Raw: 0f a6 c2 2c aa 00 b1 11 15 2b be 7f f9 36 22 05 94 e1 95 74 c5 1e e7 15 30 08 6a 17 76 ca 2f 47 36 bd a6 d2 b5 9c a7 22 81 65 92 67 91 6c d8 6b e3 d8 bd 38 8e 74 c8 f3 5d 02 fb ee e4 47 9f 7b 9b ea 99 5a 64 45 08 1d 5a 03 83 73 bc 48 3d 67 02 03 a2 ea 38 31 c4 11 62 62 0d fa ba 30 1f bb 4f 0a 08 60 49 6d e8 7e 61 f8 02 aa 96 3c 3b 0c 6f c4 9f a3 c4 a4 c8 07 35 11 81 84 54 dc aa 41 15 4c 51 2c b0 53 cf 84 f6 88 35 17 d7 d0 04 25 56 52 28 03 02 65 f7 06 84 14 20 15 a7 55 52 05 98 9d 26 89 c0 aa 59 d0 36 a9 a7 d8 ec 6b 2f d6 dd c2 77 12 af db 81 8a b2 17 0a e2 16 02 c4 8e 9d 40 01 13 d6 4f ae 9e 42 20 62 62 a3 cc 80 01 12 42 42 30 04 f6 03 0d 4c 60 82 21 4e d8 a4 04 c3 44 6e 7d 02 62 22 02 73 ae 39 f7 5d d8 f3 e2 de 7e 5e a2 c4 4a c0 85 20 40 73 2a 54 28 ea Data Ascii: ,+6"t0jv/G6"eglk8t]G{ZdEZsH=g81bb0O`Im~a<;o5TALQ,S5%VR(e UR&Y6k/w@OB bbBB0L`!NDn}b"s9]~^J @s*T(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49739	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:23 UTC	749	OUT	GET /9179/registration/bg_header.png HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:23 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:23 GMT Content-Type: image/png Content-Length: 136 Connection: close Last-Modified: Wed, 08 May 2019 18:47:10 GMT ETag: "1a343f-88-58864c2d14867" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1533 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yKCqaRo9QRFYdZJ%2FbwP33WEQQ6lGx5nJGUlWeQokY7Ngq7Ru3joPE8PQXS4dt81cDfIy4Y0slvdGBlxVAgeH2rAi%2BAb3zhRJL5zSy9%2FfI3k6ep3VEPnQ1nynvSJsOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bca69e9019cf-EWR
2024-07-04 23:01:23 UTC	136	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 72 08 02 00 00 00 bb b6 27 05 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 2a 49 44 41 54 78 da 62 10 c9 dc cc c4 c0 c0 30 8a e9 8f 99 d9 39 05 b0 89 33 fc ff ff 7f 34 7c 46 f1 28 1e c5 c4 62 80 00 03 00 45 ba 07 2f 3b ba f1 e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRr'tEXtSoftwareAdobe ImageReadyqe<*IDATxb0934\|F(bE/;IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49741	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:24 UTC	472	OUT	GET /9179/registration/bg_header.png HTTP/1.1 Host: free2try.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:24 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:24 GMT Content-Type: image/png Content-Length: 136 Connection: close Last-Modified: Wed, 08 May 2019 18:47:10 GMT ETag: "1a343f-88-58864c2d14867" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1534 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PzOQZRKr4rRRInLgCaPmbmOCU%2F7idowLZZ9BFMIOw6Xx1%2B7RiW0pOr0E2uXumwVPDVhhL9kBj6vQNU5MIejKZsNKdEHt%2FFA2uJZfJxS5DwQ1r7g%2FPKfr2C%2BSqfPsoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bcaaec39433f-EWR
2024-07-04 23:01:24 UTC	136	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 72 08 02 00 00 00 bb b6 27 05 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 2a 49 44 41 54 78 da 62 10 c9 dc cc c4 c0 c0 30 8a e9 8f 99 d9 39 05 b0 89 33 fc ff ff 7f 34 7c 46 f1 28 1e c5 c4 62 80 00 03 00 45 ba 07 2f 3b ba f1 e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRr'tEXtSoftwareAdobe ImageReadyqe<*IDATxb0934\|F(bE/;IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49742	18.66.218.121	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:24 UTC	560	OUT	GET /scripts/v1/pushnami-adv/60521c272bf0240010135168 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:25 UTC	418	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 97761 Connection: close Date: Thu, 04 Jul 2024 23:01:25 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 93034e1747bf3756ba1c0f1c60038690.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P2 X-Amz-Cf-Id: 5LDCkJ7_FkMDQFf8vB4WwB30BnwIfLlBbBPc-3AG78OizHXQBd7rBQ==
2024-07-04 23:01:25 UTC	14230	IN	Data Raw: 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 6e 75 6c 6c 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 7b 0a 20 20 20 20 20 Data Ascii: // The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = null;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service){
2024-07-04 23:01:25 UTC	14480	IN	Data Raw: 74 61 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 41 72 72 61 79 5b 69 5d 20 3d 20 72 61 77 44 61 74 61 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 41 72 72 61 79 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6d 6d 69 74 45 6e 72 6f 6c 6c 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 75 62 73 63 72 69 62 65 72 49 64 2c 20 74 61 67 2c 20 6f 70 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 57 69 70 65 20 61 6e 79 20 70 65 6e 64 69 6e 67 20 65 6e 72 6f 6c 6c 6d 65 6e 74 20 66 6f 72 20 74 68 69 73 20 74 61 67 0a 20 20 Data Ascii: ta.length; ++i) { outputArray[i] = rawData.charCodeAt(i); } return outputArray; } var commitEnrollment = function(subscriberId, tag, opts) { //Wipe any pending enrollment for this tag
2024-07-04 23:01:25 UTC	14480	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 61 6c 72 65 61 64 79 53 75 62 73 63 72 69 62 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 61 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 64 2d 6e 65 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: if (!alreadySubscribed) { Pushnami.fire('permissions-action-subscribed-new'); } }
2024-07-04 23:01:25 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 52 6f 6c 6c 62 61 72 29 20 52 6f 6c 6c 62 61 72 2e 65 72 72 6f 72 28 65 72 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return false; } }) .catch(function (err) { if (isRollbar) Rollbar.error(err);
2024-07-04 23:01:25 UTC	16384	IN	Data Raw: 5d 29 20 5f 6f 70 74 73 5b 74 61 67 5d 20 3d 20 5f 70 61 72 61 6d 73 5b 74 61 67 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 75 73 68 6e 61 6d 69 54 72 61 63 6b 28 5f 6f 70 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 Data Ascii: ]) _opts[tag] = _params[tag]; }); pushnamiTrack(_opts); } } } else { Pu
2024-07-04 23:01:25 UTC	16384	IN	Data Raw: 72 20 65 6e 64 70 6f 69 6e 74 20 3d 20 27 2f 61 70 69 2f 70 75 73 68 2f 75 6e 73 75 62 73 63 72 69 62 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 62 61 73 65 55 72 6c 20 2b 20 65 6e 64 70 6f 69 6e 74 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: r endpoint = '/api/push/unsubscribe'; return fetch(baseUrl + endpoint, { method: 'POST', body: JSON.stringify({
2024-07-04 23:01:26 UTC	5419	IN	Data Raw: 20 73 63 6f 70 65 49 64 3a 20 27 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 37 27 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 2f 2a 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 64 20 74 68 65 20 65 72 72 6f 72 20 2a 2f 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: scopeId: '60521c272bf0240010135167' }); } } }) .catch(function () { /* silently discard the error */ });

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49743	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 36 67 72 6f 37 34 45 58 45 57 33 31 33 39 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 39 64 35 35 65 62 30 30 36 37 61 38 32 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 96gro74EXEW31396.1Context: 669d55eb0067a82c
2024-07-04 23:01:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 23:01:26 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 39 36 67 72 6f 37 34 45 58 45 57 33 31 33 39 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 39 64 35 35 65 62 30 30 36 37 61 38 32 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 6b 55 56 64 72 73 65 4b 34 67 32 65 6c 43 73 4b 72 64 78 70 31 56 58 58 70 4a 64 72 56 4a 33 75 74 42 49 37 37 43 32 78 4a 63 6d 79 5a 6c 46 37 42 45 4b 4d 38 32 79 35 78 33 63 76 45 78 55 48 33 42 76 66 70 37 72 6b 54 44 36 4e 37 7a 36 4e 4a 49 2f 2f 6a 55 57 7a 6c 46 63 45 65 35 6c 66 65 4f 67 6b 6c 38 4c 2f 50 73 44 51 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 96gro74EXEW31396.2Context: 669d55eb0067a82c<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATkUVdrseK4g2elCsKrdxp1VXXpJdrVJ3utBI77C2xJcmyZlF7BEKM82y5x3cvExUH3Bvfp7rkTD6N7z6NJI//jUWzlFcEe5lfeOgkl8L/PsDQ
2024-07-04 23:01:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 36 67 72 6f 37 34 45 58 45 57 33 31 33 39 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 39 64 35 35 65 62 30 30 36 37 61 38 32 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 96gro74EXEW31396.3Context: 669d55eb0067a82c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 23:01:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 23:01:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6b 36 62 65 56 69 70 30 44 6b 43 65 43 31 34 5a 7a 71 79 75 70 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: k6beVip0DkCeC14ZzqyupQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49744	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:26 UTC	615	OUT	GET /pushnami/service-worker.js HTTP/1.1 Host: free2try.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:26 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:26 GMT Content-Type: text/javascript Content-Length: 90 Connection: close Last-Modified: Wed, 21 Sep 2022 13:12:12 GMT ETag: "341f05-5a-5e92fb15dc300" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4729 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2trcsQOg4RnK5JMoFYKoCz%2BW0wcd7SLuq%2FiEnUNdFL3NkRTfJmws8I%2BRGYI3Nv0EzEuxMjoC%2BZyHOvNpFjg4K7eSMhJrGKneS2yN1CY1QwqTJs8Wg%2BaSIOfbxvFrhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bcba6e534407-EWR
2024-07-04 23:01:26 UTC	90	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 76 32 2f 70 75 73 68 6e 61 6d 69 2d 73 77 2f 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 38 22 29 3b Data Ascii: importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/60521c272bf0240010135168");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49746	18.211.221.201	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:27 UTC	500	OUT	OPTIONS /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://free2try.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:27 UTC	380	IN	HTTP/1.1 204 No Content Date: Thu, 04 Jul 2024 23:01:27 GMT Content-Type: null Connection: close access-control-allow-origin: * access-control-allow-methods: POST access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,key access-control-max-age: 86400 access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49745	18.244.18.23	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:27 UTC	567	OUT	GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:27 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47302 Connection: close Last-Modified: Fri, 10 May 2024 21:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: DKNNXfrKVNQFoskvuTtbaAOVbVs0JYVO Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 23:01:28 GMT ETag: "09467cbbdfbe0b4f7131476215348a19" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 49c384ab63de091c5f4d1534f8845d0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: 4kXv7IdMxh25Dz4tFQWdAm70N6eCTXBAgUwjcQUkgyH945Ss4sKxGA==
2024-07-04 23:01:27 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 63 6d 2d 76 31 2d 6d 6f 64 75 6c 65 2e 30 31 39 37 38 31 65 63 37 61 31 63 39 37 33 36 33 65 38 35 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 Data Ascii: /! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("obje
2024-07-04 23:01:27 UTC	16384	IN	Data Raw: 6c 6c 22 7d 2c 45 65 3d 6e 65 77 20 4d 61 70 2c 43 65 3d 6e 65 77 20 4d 61 70 2c 5f 65 3d 6e 65 77 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 74 29 7b 74 72 79 7b 65 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 59 2e 64 65 62 75 67 28 60 43 6f 6d 70 6f 6e 65 6e 74 20 24 7b 74 2e 6e 61 6d 65 7d 20 66 61 69 6c 65 64 20 74 6f 20 72 65 67 69 73 74 65 72 20 77 69 74 68 20 46 69 72 65 62 61 73 65 41 70 70 20 24 7b 65 2e 6e 61 6d 65 7d 60 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 6e 61 6d 65 3b 69 66 28 5f 65 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 20 59 2e 64 65 62 75 67 28 60 54 68 65 72 65 20 77 65 72 65 20 6d 75 6c 74 69 70 6c 65 20 Data Ascii: ll"},Ee=new Map,Ce=new Map,_e=new Map;function De(e,t){try{e.container.addComponent(t)}catch(n){Y.debug(`Component ${t.name} failed to register with FirebaseApp ${e.name}`,n)}}function ke(e){const t=e.name;if(_e.has(t))return Y.debug(`There were multiple
2024-07-04 23:01:27 UTC	14534	IN	Data Raw: 28 65 29 7b 69 66 28 22 64 61 74 61 62 61 73 65 73 22 69 6e 20 69 6e 64 65 78 65 64 44 42 29 7b 63 6f 6e 73 74 20 65 3d 28 61 77 61 69 74 20 69 6e 64 65 78 65 64 44 42 2e 64 61 74 61 62 61 73 65 73 28 29 29 2e 6d 61 70 28 28 65 3d 3e 65 2e 6e 61 6d 65 29 29 3b 69 66 28 21 65 2e 69 6e 63 6c 75 64 65 73 28 47 74 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6c 65 74 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 28 61 77 61 69 74 20 78 28 47 74 2c 4a 74 2c 7b 75 70 67 72 61 64 65 3a 61 73 79 6e 63 28 6e 2c 72 2c 69 2c 61 29 3d 3e 7b 76 61 72 20 6f 3b 69 66 28 72 3c 32 29 72 65 74 75 72 6e 3b 69 66 28 21 6e 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 59 74 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 61 2e 6f 62 6a 65 63 74 Data Ascii: (e){if("databases"in indexedDB){const e=(await indexedDB.databases()).map((e=>e.name));if(!e.includes(Gt))return null}let t=null;return(await x(Gt,Jt,{upgrade:async(n,r,i,a)=>{var o;if(r<2)return;if(!n.objectStoreNames.contains(Yt))return;const s=a.object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49748	18.211.221.201	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:27 UTC	683	OUT	POST /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 60521c272bf0240010135168 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:27 UTC	76	OUT	Data Raw: 65 76 65 6e 74 3d 77 65 62 70 75 73 68 2d 73 73 6c 2d 6f 70 74 69 6e 2d 73 68 6f 77 6e 26 73 63 6f 70 65 3d 57 65 62 73 69 74 65 26 73 63 6f 70 65 49 64 3d 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 37 Data Ascii: event=webpush-ssl-optin-shown&scope=Website&scopeId=60521c272bf0240010135167
2024-07-04 23:01:27 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-07-04 23:01:27 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49747	18.66.218.121	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:28 UTC	455	OUT	GET /scripts/v2/pushnami-sw/60521c272bf0240010135168 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:28 UTC	416	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 376 Connection: close Date: Thu, 04 Jul 2024 23:01:28 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 700cde4f0f5657e960ef85bdf58168b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P2 X-Amz-Cf-Id: Yo1j3mxy4IgrkZQGTCPiGGDjl_hexxDcv0Kb-YgAoX8rGNzSpi9vlA==
2024-07-04 23:01:28 UTC	376	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 6e 43 6f 6e 66 69 67 3d 7b 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 2c 72 63 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 7d 2c 61 70 69 4b 65 79 3a 22 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 38 22 2c 74 72 61 63 6b 69 6e 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 72 63 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 61 70 69 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 77 65 62 73 69 74 65 49 64 3a 22 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 37 22 2c 72 74 Data Ascii: "use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"60521c272bf0240010135168",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"60521c272bf0240010135167",rt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49749	34.193.230.73	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:28 UTC	354	OUT	GET /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:28 UTC	258	IN	HTTP/1.1 404 Not Found Date: Thu, 04 Jul 2024 23:01:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close vary: origin access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-07-04 23:01:28 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49750	13.32.99.40	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:28 UTC	689	OUT	GET /scripts/v1/hub HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:29 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2319 Connection: close Date: Thu, 04 Jul 2024 22:03:02 GMT access-control-allow-origin: https://rightdailyfeed.com access-control-allow-methods: GET,PUT,POST,DELETE access-control-allow-headers: X-Requested-With content-security-policy: default-src 'unsafe-inline' * x-content-security-policy: default-src 'unsafe-inline' * x-webkit-csp: default-src 'unsafe-inline' * access-control-allow-credentials: true Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 b4904c5988fd0eaae341a12cc47f3766.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 X-Amz-Cf-Id: p0CRc_I4pbaF1KcO3q5_nPLIoGg2wCuABCRbgTQGRA1JYbawSDpjDw== Age: 3507
2024-07-04 23:01:29 UTC	2319	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 75 73 68 6e 61 6d 69 20 48 75 62 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 21 30 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 72 3d 21 31 29 7d 63 61 74 63 68 28 6e 29 7b 72 3d 21 31 7d 69 66 28 21 72 29 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 63 72 6f 73 73 2d 73 74 6f 72 61 67 65 3a 75 6e 61 Data Ascii: <!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:una

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49751	18.244.18.23	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:29 UTC	452	OUT	GET /js/workers/sw.355e010fef1d4bf4045b.bundle.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:30 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 62430 Connection: close Last-Modified: Mon, 22 Apr 2024 21:42:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .wqASbGvbJdif5TFIcYwUu_6CwG9JdKG Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 23:01:31 GMT ETag: "266aa15b465f8cf42ecbfafa40113b47" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 012ed5015dc2306833b5abb65b3a0378.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: W2oSUtscGtiS9_k6QGUmJU_iY6CMvWEAhd9saE5T5c30pNZgyc6CIQ==
2024-07-04 23:01:30 UTC	15803	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 77 2e 33 35 35 65 30 31 30 66 65 66 31 64 34 62 66 34 30 34 35 62 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 38 33 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 63 29 7b 69 66 28 21 74 5b 61 5d 29 7b 69 66 28 21 6e 5b 61 5d 29 7b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 61 2c 21 30 29 3b 76 61 72 20 75 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 61 2b 22 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f Data Ascii: /! For license information please see sw.355e010fef1d4bf4045b.bundle.js.LICENSE.txt /(()=>{var e={483:(e,n,t)=>{e.exports=function e(n,t,r){function o(a,c){if(!t[a]){if(!n[a]){if(i)return i(a,!0);var u=new Error("Cannot find module '"+a+"'");throw u.co
2024-07-04 23:01:30 UTC	16384	IN	Data Raw: 29 72 2b 3d 56 5b 74 5b 6e 5d 3e 3e 32 5d 2c 72 2b 3d 56 5b 28 33 26 74 5b 6e 5d 29 3c 3c 34 7c 74 5b 6e 2b 31 5d 3e 3e 34 5d 2c 72 2b 3d 56 5b 28 31 35 26 74 5b 6e 2b 31 5d 29 3c 3c 32 7c 74 5b 6e 2b 32 5d 3e 3e 36 5d 2c 72 2b 3d 56 5b 36 33 26 74 5b 6e 2b 32 5d 5d 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 25 33 3d 3d 32 3f 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 2d 31 29 2b 22 3d 22 3a 74 2e 6c 65 6e 67 74 68 25 33 3d 3d 31 26 26 28 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 2d 32 29 2b 22 3d 3d 22 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 65 26 26 28 74 3d 76 65 2e 63 61 6c 6c 28 65 29 29 2c 65 26 26 28 22 5b 6f 62 6a 65 63 74 20 Data Ascii: )r+=V[t[n]>>2],r+=V[(3&t[n])<<4\|t[n+1]>>4],r+=V[(15&t[n+1])<<2\|t[n+2]>>6],r+=V[63&t[n+2]];return t.length%3==2?r=r.substring(0,r.length-1)+"=":t.length%3==1&&(r=r.substring(0,r.length-2)+"=="),r}function de(e,n){var t="";if(e&&(t=ve.call(e)),e&&("[object
2024-07-04 23:01:30 UTC	16384	IN	Data Raw: 2c 6e 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 28 29 7d 2c 74 2e 73 68 6f 75 6c 64 4c 65 61 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 2c 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 70 6e 43 6f 6e 66 69 67 2e 72 63 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 61 6c 6c 6f 77 65 64 50 75 62 6c 69 63 4b 65 79 73 3b 72 65 74 75 72 6e 21 21 28 74 68 69 73 2e 70 6e 43 6f 6e 66 69 67 2e 72 63 26 26 74 68 69 73 2e 70 6e 43 6f 6e 66 69 67 2e 72 63 2e 70 61 74 68 26 26 6e 26 26 6f 26 26 69 26 26 69 2e 6c 65 6e 67 74 68 3e 30 26 26 21 69 2e 73 6f 6d 65 28 28 66 75 6e 63 Data Ascii: ,n.sent()]}}))}))()},t.shouldLeap=function(n){var t,r,o=null==n?void 0:n.options.applicationServerKey,i=null===(t=this.pnConfig.rc)\|\|void 0===t?void 0:t.allowedPublicKeys;return!!(this.pnConfig.rc&&this.pnConfig.rc.path&&n&&o&&i&&i.length>0&&!i.some((func
2024-07-04 23:01:30 UTC	13700	IN	Data Raw: 74 75 72 6e 20 78 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 6f 3b 72 65 74 75 72 6e 20 4f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 73 77 69 74 63 68 28 69 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 28 72 3d 74 2e 67 65 74 50 75 73 68 45 76 65 6e 74 50 61 79 6c 6f 61 64 28 65 29 29 3f 5b 33 2c 32 5d 3a 6e 26 26 6e 2e 65 6e 64 70 6f 69 6e 74 3f 28 6f 3d 6e 2e 65 6e 64 70 6f 69 6e 74 2c 5b 34 2c 74 2e 70 61 79 6c 6f 61 64 53 65 72 76 69 63 65 2e 66 65 74 63 68 50 61 79 6c 6f 61 64 28 6f 29 5d 29 3a 5b 32 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 29 5d 3b 63 61 73 65 20 31 3a 72 3d 69 2e 73 65 6e 74 28 29 2c 69 2e 6c 61 62 65 6c 3d 32 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 32 2c 72 5d 7d 7d 29 29 Data Ascii: turn x((function(){var r,o;return O(this,(function(i){switch(i.label){case 0:return(r=t.getPushEventPayload(e))?[3,2]:n&&n.endpoint?(o=n.endpoint,[4,t.payloadService.fetchPayload(o)]):[2,Promise.reject()];case 1:r=i.sent(),i.label=2;case 2:return[2,r]}}))
2024-07-04 23:01:30 UTC	159	IN	Data Raw: 3d 6e 65 77 20 46 28 59 2c 6e 65 77 20 45 28 70 6e 43 6f 6e 66 69 67 2c 24 2c 59 29 2c 65 65 2c 6e 65 77 20 77 28 56 2c 58 2c 59 29 2c 6e 65 77 20 4e 28 24 2c 70 6e 43 6f 6e 66 69 67 2c 58 2c 59 2c 5a 2c 56 29 2c 6e 65 77 20 5f 28 56 2c 58 29 2c 6e 65 77 20 54 28 56 29 29 3b 6e 65 77 20 42 28 70 6e 43 6f 6e 66 69 67 2c 58 2c 56 29 2e 68 61 6e 64 6c 65 53 65 72 76 69 63 65 57 6f 72 6b 65 72 53 74 61 72 74 65 64 28 29 2c 6e 65 2e 62 69 6e 64 28 29 7d 29 28 29 7d 29 28 29 3b Data Ascii: =new F(Y,new E(pnConfig,$,Y),ee,new w(V,X,Y),new N($,pnConfig,X,Y,Z,V),new _(V,X),new T(V));new B(pnConfig,X,V).handleServiceWorkerStarted(),ne.bind()})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49755	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:31 UTC	729	OUT	GET /favicon.ico HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:31 UTC	701	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:31 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 43 Connection: close Last-Modified: Mon, 01 Aug 2005 13:15:38 GMT ETag: "117e-2b-3fd46070d9280" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4230 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Saj9b2NcQS6DvXRl2SXtvJWzSR7vxho%2BzuFlyQf7fFcnl9LYuHBFnzx%2B47vSt8VKjoWW07pmszcsPtHKYCl2gICnQgye3miEynoMOWWVifqAyvVdghAxh0VgI%2FqssA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bcd6acd24340-EWR
2024-07-04 23:01:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49756	18.244.18.23	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:31 UTC	608	OUT	GET /js/exp/psfpv4_client_1.126.1_1972ad39bab3c8f1331e288e27e211c34b421bdd275cf6d126a0630d2027683f.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:31 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 339910 Connection: close Last-Modified: Tue, 04 Jun 2024 21:56:41 GMT x-amz-server-side-encryption: AES256 Content-Encoding: utf-8 x-amz-version-id: fqZJi451IsZ4b9ZE97VT.DK035kcgAxw Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 23:01:32 GMT ETag: "66394b4fbb861428f8db13d2f7ac0aab" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0b761d2a74b283528cf840bf9ce44b20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: m_vuyHaaBemvNg5WJaINh2OtFjJv25MT9w9_6RrN5MxoS51OdJMWWA==
2024-07-04 23:01:31 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 50 73 66 70 3d 74 28 29 3a 65 2e 50 73 66 70 3d 74 28 29 7d 28 73 65 6c 66 Data Ascii: /! For license information please see main.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self
2024-07-04 23:01:31 UTC	10463	IN	Data Raw: 49 4e 53 54 41 4e 43 45 53 3d 67 6f 6f 67 2e 44 45 42 55 47 2c 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 63 72 65 61 74 65 53 65 61 6c 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 53 45 41 4c 5f 43 4c 41 53 53 5f 49 4e 53 54 41 4e 43 45 53 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 69 73 55 6e 73 65 61 6c 61 62 6c 65 5f 28 74 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 5b 67 6f 6f 67 2e 55 49 44 5f 50 52 4f 50 45 52 54 59 5f 5d 3d 74 5b 67 6f 6f 67 2e Data Ascii: INSTANCES=goog.DEBUG,goog.defineClass.createSealingConstructor_=function(e,t){if(!goog.defineClass.SEAL_CLASS_INSTANCES)return e;var r=!goog.defineClass.isUnsealable_(t),o=function(){var t=e.apply(this,arguments)\|\|this;return t[goog.UID_PROPERTY_]=t[goog.
2024-07-04 23:01:31 UTC	16384	IN	Data Raw: 6e 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 65 2e 6c 6f 61 64 65 64 28 29 7d 2c 6e 2e 73 72 63 3d 67 6f 6f 67 2e 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 3f 67 6f 6f 67 2e 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 74 68 69 73 2e 70 61 74 68 29 3a 74 68 69 73 2e 70 61 74 68 2c 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 7d 65 6c 73 65 20 67 6f 6f 67 2e 6c 6f 67 54 6f 43 6f 6e 73 6f 6c 65 5f 28 22 43 61 6e 6e 6f 74 20 75 73 65 20 64 65 66 61 75 6c 74 20 64 65 62 75 67 20 6c 6f 61 64 65 72 20 6f 75 74 73 69 64 65 20 6f 66 20 48 54 4d 4c 20 64 6f 63 75 6d 65 6e 74 73 2e 22 29 2c 22 64 65 70 73 2e 6a 73 22 3d 3d 74 68 69 73 2e 72 65 6c 61 74 69 76 Data Ascii: n.onload=null,e.loaded()},n.src=goog.TRUSTED_TYPES_POLICY_?goog.TRUSTED_TYPES_POLICY_.createScriptURL(this.path):this.path,t.head.appendChild(n)}}else goog.logToConsole_("Cannot use default debug loader outside of HTML documents."),"deps.js"==this.relativ
2024-07-04 23:01:32 UTC	16384	IN	Data Raw: 73 65 72 74 73 2e 61 73 73 65 72 74 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 61 73 73 65 72 74 73 2e 45 4e 41 42 4c 45 5f 41 53 53 45 52 54 53 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 67 6f 6f 67 2e 61 73 73 65 72 74 73 2e 64 6f 41 73 73 65 72 74 46 61 69 6c 75 72 65 5f 28 22 45 78 70 65 63 74 65 64 20 73 74 72 69 6e 67 20 62 75 74 20 67 6f 74 20 25 73 3a 20 25 73 2e 22 2c 5b 67 6f 6f 67 2e 74 79 70 65 4f 66 28 65 29 2c 65 5d 2c 74 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 29 2c 65 7d 2c 67 6f 6f 67 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f Data Ascii: serts.assertString=function(e,t,r){return goog.asserts.ENABLE_ASSERTS&&"string"!=typeof e&&goog.asserts.doAssertFailure_("Expected string but got %s: %s.",[goog.typeOf(e),e],t,Array.prototype.slice.call(arguments,2)),e},goog.asserts.assertFunction=functio
2024-07-04 23:01:32 UTC	4768	IN	Data Raw: 2c 67 6f 6f 67 2e 64 6f 6d 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 49 73 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 64 6f 6d 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 49 73 45 6c 65 6d 65 6e 74 54 79 70 65 5f 28 65 2c 22 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 29 7d 2c 67 6f 6f 67 2e 64 6f 6d 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 49 73 48 54 4d 4c 4f 62 6a 65 63 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 64 6f 6d 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 49 73 45 6c 65 6d 65 6e 74 54 79 70 65 5f 28 65 2c 22 48 54 4d 4c 4f 62 6a 65 63 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 67 6f 6f 67 2e 64 Data Ascii: ,goog.dom.asserts.assertIsHTMLIFrameElement=function(e){return goog.dom.asserts.assertIsElementType_(e,"HTMLIFrameElement")},goog.dom.asserts.assertIsHTMLObjectElement=function(e){return goog.dom.asserts.assertIsElementType_(e,"HTMLObjectElement")},goog.d
2024-07-04 23:01:32 UTC	16384	IN	Data Raw: 61 6d 65 2e 43 4f 44 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 43 4f 44 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 43 4f 4c 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 43 4f 4c 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 43 4f 4c 47 52 4f 55 50 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 43 4f 4c 47 52 4f 55 50 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 43 4f 4d 4d 41 4e 44 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 43 4f 4d 4d 41 4e 44 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 44 41 54 41 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 44 41 54 41 22 29 2c 67 Data Ascii: ame.CODE=new goog.dom.TagName("CODE"),goog.dom.TagName.COL=new goog.dom.TagName("COL"),goog.dom.TagName.COLGROUP=new goog.dom.TagName("COLGROUP"),goog.dom.TagName.COMMAND=new goog.dom.TagName("COMMAND"),goog.dom.TagName.DATA=new goog.dom.TagName("DATA"),g
2024-07-04 23:01:32 UTC	10463	IN	Data Raw: 74 2e 52 4c 4d 3a 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 46 6f 72 6d 61 74 2e 4c 52 4d 2c 65 2e 72 65 70 6c 61 63 65 28 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 62 72 61 63 6b 65 74 47 75 61 72 64 54 65 78 74 52 65 5f 2c 74 2b 22 24 26 22 2b 74 29 7d 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 65 6e 66 6f 72 63 65 52 74 6c 49 6e 48 74 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 3c 22 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3f 65 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 77 2b 2f 2c 22 24 26 20 64 69 72 3d 72 74 6c 22 29 3a 22 5c 6e 3c 73 70 61 6e 20 64 69 72 3d 72 74 6c 3e 22 2b 65 2b 22 3c 2f 73 70 61 6e 3e 22 7d 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 65 6e 66 6f 72 63 65 52 74 6c 49 6e 54 65 78 74 3d 66 75 6e 63 74 Data Ascii: t.RLM:goog.i18n.bidi.Format.LRM,e.replace(goog.i18n.bidi.bracketGuardTextRe_,t+"$&"+t)},goog.i18n.bidi.enforceRtlInHtml=function(e){return"<"==e.charAt(0)?e.replace(/<\w+/,"$& dir=rtl"):"\n<span dir=rtl>"+e+"</span>"},goog.i18n.bidi.enforceRtlInText=funct
2024-07-04 23:01:32 UTC	16384	IN	Data Raw: 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 55 72 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 70 6c 65 6d 65 6e 74 73 47 6f 6f 67 53 74 72 69 6e 67 54 79 70 65 64 53 74 72 69 6e 67 3d 21 30 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 55 72 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 79 70 65 64 53 74 72 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 53 61 66 65 55 72 6c 57 72 61 70 70 65 64 56 61 6c 75 65 5f 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 55 72 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 70 6c 65 6d 65 6e 74 73 47 6f 6f 67 49 31 38 6e 42 69 64 69 44 69 72 65 63 74 69 6f 6e 61 6c 53 74 Data Ascii: ,goog.html.SafeUrl.prototype.implementsGoogStringTypedString=!0,goog.html.SafeUrl.prototype.getTypedStringValue=function(){return this.privateDoNotAccessOrElseSafeUrlWrappedValue_.toString()},goog.html.SafeUrl.prototype.implementsGoogI18nBidiDirectionalSt
2024-07-04 23:01:32 UTC	16384	IN	Data Raw: 28 22 46 78 69 4f 53 22 29 7d 2c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 2e 6d 61 74 63 68 53 61 66 61 72 69 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 6d 61 74 63 68 55 73 65 72 41 67 65 6e 74 28 22 53 61 66 61 72 69 22 29 26 26 21 28 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 2e 6d 61 74 63 68 43 68 72 6f 6d 65 5f 28 29 7c 7c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 2e 6d 61 74 63 68 43 6f 61 73 74 5f 28 29 7c 7c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 2e 6d 61 74 63 68 4f 70 65 72 61 5f 28 29 7c 7c 67 6f Data Ascii: ("FxiOS")},goog.labs.userAgent.browser.matchSafari_=function(){return goog.labs.userAgent.util.matchUserAgent("Safari")&&!(goog.labs.userAgent.browser.matchChrome_()\|\|goog.labs.userAgent.browser.matchCoast_()\|\|goog.labs.userAgent.browser.matchOpera_()\|\|go
2024-07-04 23:01:32 UTC	16384	IN	Data Raw: 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 28 74 29 7d 2c 67 6f 6f 67 2e 64 6f 6d 2e 73 61 66 65 3d 7b 7d 2c 67 6f 6f 67 2e 64 6f 6d 2e 73 61 66 65 2e 49 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 74 6d 6c 50 6f 73 69 74 69 6f 6e 3d 7b 41 46 54 45 52 42 45 47 49 4e 3a 22 61 66 74 65 72 62 65 67 69 6e 22 2c 41 46 54 45 52 45 4e 44 3a 22 61 66 74 65 72 65 6e 64 22 2c 42 45 46 4f 52 45 42 45 47 49 4e 3a 22 62 65 66 6f 72 65 62 65 67 69 6e 22 2c 42 45 46 4f 52 45 45 4e 44 3a 22 62 65 66 6f 72 65 65 6e 64 22 7d 2c 67 6f 6f 67 2e 64 6f 6d 2e 73 61 66 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 74 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 74 2c 67 Data Ascii: yPrivateDoNotAccessOrElse(t)},goog.dom.safe={},goog.dom.safe.InsertAdjacentHtmlPosition={AFTERBEGIN:"afterbegin",AFTEREND:"afterend",BEFOREBEGIN:"beforebegin",BEFOREEND:"beforeend"},goog.dom.safe.insertAdjacentHtml=function(e,t,r){e.insertAdjacentHTML(t,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49757	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:32 UTC	452	OUT	GET /favicon.ico HTTP/1.1 Host: free2try.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:32 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:32 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 43 Connection: close Last-Modified: Mon, 01 Aug 2005 13:15:38 GMT ETag: "117e-2b-3fd46070d9280" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4231 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZztTUJFSDmGxYP7ch8UqO3gL5LqRHim%2Bmb%2F2hugEewMYeh3c5tcv26eR4vWoTCdsCNqZBJxT7wgNTzM2JM2%2Fn56TW769zJstlcrVYapSH%2BYZZm76lK1FnP3Uo5RxVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bcde6adcc332-EWR
2024-07-04 23:01:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49759	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:35 UTC	504	OUT	OPTIONS /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://free2try.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:35 UTC	301	IN	HTTP/1.1 204 No Content Date: Thu, 04 Jul 2024 23:01:35 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: content-type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49760	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:35 UTC	610	OUT	POST /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 1423 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/octet-stream Accept: / Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:35 UTC	1423	OUT	Data Raw: 0a 20 38 30 63 66 63 62 64 31 33 32 33 33 65 37 30 61 31 66 66 37 30 32 35 34 36 65 33 66 62 61 31 66 12 20 39 30 32 66 30 66 65 39 38 37 31 39 62 37 37 39 65 61 33 37 66 32 37 35 32 38 64 66 62 30 61 61 1a 20 66 38 35 65 31 66 63 63 36 65 32 64 62 33 35 64 63 32 34 33 33 33 38 61 32 36 65 36 65 62 31 36 22 20 36 36 64 33 32 64 62 33 64 66 61 39 63 34 65 62 37 37 32 64 31 30 32 65 35 36 30 64 66 34 62 35 2a 20 62 36 36 36 62 32 36 63 66 31 33 34 31 65 62 34 64 31 37 39 62 38 64 38 34 61 62 66 39 36 34 38 32 20 34 64 34 36 64 62 66 65 32 36 38 34 64 37 35 35 66 66 66 34 62 39 30 30 34 61 61 32 34 65 33 35 3a 20 33 66 39 39 63 64 62 32 63 61 36 31 62 38 31 63 61 33 33 65 65 31 61 34 34 35 34 35 37 61 38 30 42 20 32 61 63 39 64 65 62 65 64 35 34 36 61 33 38 Data Ascii: 80cfcbd13233e70a1ff702546e3fba1f 902f0fe98719b779ea37f27528dfb0aa f85e1fcc6e2db35dc243338a26e6eb16" 66d32db3dfa9c4eb772d102e560df4b5* b666b26cf1341eb4d179b8d84abf96482 4d46dbfe2684d755fff4b9004aa24e35: 3f99cdb2ca61b81ca33ee1a445457a80B 2ac9debed546a38
2024-07-04 23:01:35 UTC	244	IN	HTTP/1.1 201 Created Date: Thu, 04 Jul 2024 23:01:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 61 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"3d-IkA/E7qSOwx3Wx2ZN5uPYyY37aU"
2024-07-04 23:01:35 UTC	61	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 70 73 66 70 22 3a 22 61 66 38 31 35 66 30 63 2d 62 37 38 34 2d 35 62 64 61 2d 38 32 36 35 2d 35 62 38 31 63 33 35 61 66 33 65 36 22 7d Data Ascii: {"status":"ok","psfp":"af815f0c-b784-5bda-8265-5b81c35af3e6"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49761	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:36 UTC	493	OUT	OPTIONS /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://free2try.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:36 UTC	292	IN	HTTP/1.1 204 No Content Date: Thu, 04 Jul 2024 23:01:36 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	64205	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:37 UTC	676	OUT	POST /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 91 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 60521c272bf0240010135168 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:37 UTC	91	OUT	Data Raw: 70 73 70 3d 61 66 38 31 35 66 30 63 2d 62 37 38 34 2d 35 62 64 61 2d 38 32 36 35 2d 35 62 38 31 63 33 35 61 66 33 65 36 26 74 62 6c 61 3d 26 61 6c 74 50 73 66 70 3d 63 39 31 66 37 31 65 39 2d 64 37 33 62 2d 34 33 31 65 2d 39 30 36 33 2d 63 36 38 32 65 37 62 34 32 66 61 34 Data Ascii: psp=af815f0c-b784-5bda-8265-5b81c35af3e6&tbla=&altPsfp=c91f71e9-d73b-431e-9063-c682e7b42fa4
2024-07-04 23:01:37 UTC	230	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-07-04 23:01:37 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	64207	18.205.31.41	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:38 UTC	347	OUT	GET /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:38 UTC	246	IN	HTTP/1.1 404 Not Found Date: Thu, 04 Jul 2024 23:01:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 70 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
2024-07-04 23:01:38 UTC	70	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 70 73 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	64208	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:38 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 36 6a 53 74 66 30 6d 7a 45 79 68 59 6c 65 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 36 35 61 61 38 38 34 66 37 62 65 30 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: c6jStf0mzEyhYle9.1Context: 8d965aa884f7be05
2024-07-04 23:01:38 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 23:01:38 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 63 36 6a 53 74 66 30 6d 7a 45 79 68 59 6c 65 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 36 35 61 61 38 38 34 66 37 62 65 30 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 6b 55 56 64 72 73 65 4b 34 67 32 65 6c 43 73 4b 72 64 78 70 31 56 58 58 70 4a 64 72 56 4a 33 75 74 42 49 37 37 43 32 78 4a 63 6d 79 5a 6c 46 37 42 45 4b 4d 38 32 79 35 78 33 63 76 45 78 55 48 33 42 76 66 70 37 72 6b 54 44 36 4e 37 7a 36 4e 4a 49 2f 2f 6a 55 57 7a 6c 46 63 45 65 35 6c 66 65 4f 67 6b 6c 38 4c 2f 50 73 44 51 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: c6jStf0mzEyhYle9.2Context: 8d965aa884f7be05<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATkUVdrseK4g2elCsKrdxp1VXXpJdrVJ3utBI77C2xJcmyZlF7BEKM82y5x3cvExUH3Bvfp7rkTD6N7z6NJI//jUWzlFcEe5lfeOgkl8L/PsDQ
2024-07-04 23:01:38 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 63 36 6a 53 74 66 30 6d 7a 45 79 68 59 6c 65 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 36 35 61 61 38 38 34 66 37 62 65 30 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: c6jStf0mzEyhYle9.3Context: 8d965aa884f7be05<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 23:01:38 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 23:01:38 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 77 2f 2b 2f 61 4f 67 43 6b 79 35 48 73 2b 4b 46 6f 6a 48 76 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +w/+/aOgCky5Hs+KFojHvQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	64209	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:51 UTC	843	OUT	GET /pushnami/pushnami.html HTTP/1.1 Host: free2try.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://free2try.com/?session_id=531dd1e83a5911ef8dd1bff723d6de30 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080
2024-07-04 23:01:51 UTC	629	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 21 Sep 2022 13:47:44 GMT Vary: Accept-Encoding P3P: CP="NOI OTC OTP OUR NOR" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2F53oJXVVyAIxuH6j4WHXTbLYiMPb5ziWdcqrc6oM7YjPbYTYdD8PztusaUeo6syNskBdLTn%2FUotmX0dE%2FowkxlAHSaftj%2FrKWRnq4N0GErw61eWgxC5jkm1nxMhcA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bd552a32428b-EWR
2024-07-04 23:01:51 UTC	122	IN	Data Raw: 37 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 76 31 2f 70 75 73 68 2f 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 38 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 74<html><head><script src="https://api.pushnami.com/scripts/v1/push/60521c272bf0240010135168"></script></head></html>
2024-07-04 23:01:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	64210	18.66.218.121	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:52 UTC	552	OUT	GET /scripts/v1/push/60521c272bf0240010135168 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:53 UTC	418	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 96806 Connection: close Date: Thu, 04 Jul 2024 23:01:52 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 9d4ff65dfbb2eb35f945c6fa4d05cf3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P2 X-Amz-Cf-Id: n31Vp84jxU1dD4xZq1b4kmof1201kEK7dZMDHBi7xoCd_enb0mx7RQ==
2024-07-04 23:01:53 UTC	16384	IN	Data Raw: 2f 2f 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 Data Ascii: //// The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = undefined;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service)
2024-07-04 23:01:53 UTC	1514	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 61 74 61 2e 65 72 72 6f 72 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 2e 65 72 72 6f 72 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 61 74 61 2e 72 65 73 75 6c 74 73 20 7c 7c 20 64 61 74 61 2e 72 65 73 75 6c 74 73 2e 70 72 6f 63 65 73 73 65 64 20 21 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 4e 6f 20 72 65 73 75 6c 74 73 20 72 65 74 75 72 6e 65 64 20 62 79 20 41 50 49 27 29 3b 0a 20 20 Data Ascii: if (data.errors) { throw new Error(JSON.stringify(data.errors)); } if (!data.results \|\| data.results.processed !== 1) { throw new Error('No results returned by API');
2024-07-04 23:01:53 UTC	12792	IN	Data Raw: 72 6f 6d 70 74 44 69 73 61 62 6c 65 64 29 20 72 65 74 75 72 6e 20 50 75 73 68 6e 61 6d 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 69 6e 69 74 69 61 6c 69 7a 69 6e 67 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 73 4c 6f 63 61 6c 68 6f 73 74 20 3d 20 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 3d 3d 3d 20 27 6c 6f 63 61 6c 68 6f 73 74 27 20 7c 7c 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 3d 3d 3d 20 27 5b 3a 3a 31 5d 27 20 7c 7c 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5e 31 32 37 28 3f 3a 5c 2e 28 3f 3a 32 35 Data Ascii: romptDisabled) return Pushnami; Pushnami.fire('permissions-initializing'); var isLocalhost = Boolean(window.location.hostname === 'localhost' \|\| window.location.hostname === '[::1]' \|\| window.location.hostname.match(/^127(?:\.(?:25
2024-07-04 23:01:53 UTC	6396	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 66 61 69 6c 65 64 27 29 3b 0a 20 Data Ascii: } return data; }) .catch(function (err) { Pushnami.fire('permissions-failed');
2024-07-04 23:01:53 UTC	768	IN	Data Raw: 65 20 68 61 76 65 20 74 68 65 20 22 73 75 62 73 63 72 69 62 65 72 20 61 6e 79 77 68 65 72 65 22 20 66 65 61 74 75 72 65 20 65 6e 61 62 6c 65 64 0a 20 20 20 20 20 2a 20 20 77 65 20 77 69 6c 6c 20 6e 6f 77 20 6c 6f 61 64 20 75 70 20 61 6e 20 69 66 72 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 6e 61 76 69 67 61 74 65 20 74 68 65 20 75 73 65 72 20 74 6f 20 74 68 65 20 73 63 6f 70 65 20 69 6e 20 77 68 69 63 68 20 77 65 20 63 61 6e 20 67 65 74 0a 20 20 20 20 20 2a 20 20 74 68 65 20 70 75 73 68 20 6d 61 6e 61 67 65 72 20 74 6f 20 67 69 76 65 20 75 73 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 6b 65 79 73 20 61 6e 64 20 74 68 65 20 6c 69 6b 65 20 2a 2f 0a 20 20 20 20 6b 6c 61 73 73 2e 73 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 6e 29 20 7b 0a 20 20 20 20 20 Data Ascii: e have the "subscriber anywhere" feature enabled * we will now load up an iframe that will navigate the user to the scope in which we can get * the push manager to give us subscription keys and the like */ klass.show = function(on) {
2024-07-04 23:01:53 UTC	5336	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 49 46 72 61 6d 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 49 46 72 61 6d 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 20 3d 20 27 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 49 46 72 61 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 76 69 73 69 62 69 6c 69 74 79 27 2c 20 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 49 46 72 61 6d 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 29 Data Ascii: newIFrame.style.height = '0px'; newIFrame.style.border = '0px'; newIFrame.setAttribute('visibility', 'hidden'); newIFrame.style.display = 'none'; (document.body \|\| document.head)
2024-07-04 23:01:53 UTC	8949	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 52 6f 6c 6c 62 61 72 29 20 52 6f 6c 6c 62 61 72 2e 65 72 72 6f 72 28 65 72 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: return false; } }) .catch(function (err) { if (isRollbar) Rollbar.error(err);
2024-07-04 23:01:53 UTC	6396	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 27 73 61 66 61 72 69 27 20 69 6e 20 77 69 6e 64 6f 77 20 26 26 20 27 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 27 20 69 6e 20 77 69 6e 64 6f 77 2e 73 61 66 61 72 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 70 65 6e 64 69 6e 67 53 61 66 61 72 69 50 72 6f 6d 70 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 73 74 61 74 65 3a 20 27 70 72 6f 6d 70 74 27 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b Data Ascii: if ('safari' in window && 'pushNotification' in window.safari) { Pushnami.pendingSafariPrompt = true; return Promise.resolve({state: 'prompt'}); } else {
2024-07-04 23:01:53 UTC	1039	IN	Data Raw: 49 6e 43 73 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 73 72 63 20 3d 20 74 77 6f 53 74 65 70 53 63 72 69 70 74 55 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: InCss); var script = document.createElement("script"); script.src = twoStepScriptUrl; script.type = "text/javascript";
2024-07-04 23:01:53 UTC	8949	IN	Data Raw: 61 6d 73 5b 74 61 67 5d 29 20 5f 6f 70 74 73 5b 74 61 67 5d 20 3d 20 5f 70 61 72 61 6d 73 5b 74 61 67 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 75 73 68 6e 61 6d 69 54 72 61 63 6b 28 5f 6f 70 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ams[tag]) _opts[tag] = _params[tag]; }); pushnamiTrack(_opts); } } } else {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	64211	13.32.99.40	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:54 UTC	689	OUT	GET /scripts/v1/hub HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:54 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2319 Connection: close Date: Thu, 04 Jul 2024 22:03:02 GMT access-control-allow-origin: https://rightdailyfeed.com access-control-allow-methods: GET,PUT,POST,DELETE access-control-allow-headers: X-Requested-With content-security-policy: default-src 'unsafe-inline' * x-content-security-policy: default-src 'unsafe-inline' * x-webkit-csp: default-src 'unsafe-inline' * access-control-allow-credentials: true Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 5b6e22c950501920595c86fc25834582.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 X-Amz-Cf-Id: DZ1Q1io3Dtx-bPKp6ABZ3e2abV6YYtG36E1XL7ilTG60FURjcHcjZg== Age: 3532
2024-07-04 23:01:54 UTC	2319	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 75 73 68 6e 61 6d 69 20 48 75 62 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 21 30 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 72 3d 21 31 29 7d 63 61 74 63 68 28 6e 29 7b 72 3d 21 31 7d 69 66 28 21 72 29 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 63 72 6f 73 73 2d 73 74 6f 72 61 67 65 3a 75 6e 61 Data Ascii: <!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:una

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	64212	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:55 UTC	493	OUT	OPTIONS /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://free2try.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:55 UTC	292	IN	HTTP/1.1 204 No Content Date: Thu, 04 Jul 2024 23:01:55 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	64213	172.67.68.254	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:55 UTC	689	OUT	GET /pushnami/service-worker.js HTTP/1.1 Host: free2try.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://free2try.com/pushnami/service-worker.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 531dd1e83a5911ef8dd1bff723d6de30=1720134080; 531dd1e83a5911ef8dd1bff723d6de30%7C9179=1720134080 If-None-Match: "341f05-5a-5e92fb15dc300" If-Modified-Since: Wed, 21 Sep 2022 13:12:12 GMT
2024-07-04 23:01:55 UTC	641	IN	HTTP/1.1 304 Not Modified Date: Thu, 04 Jul 2024 23:01:55 GMT Connection: close Last-Modified: Wed, 21 Sep 2022 13:12:12 GMT ETag: "341f05-5a-5e92fb15dc300" P3P: CP="NOI OTC OTP OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4758 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZHj9RsfJh9TBGf3Hxk%2Bw8tQo93bo%2Fw%2F3owuZIZDh3I4fINEqHMOzeBxEMS9EJw3%2F1Y0HcACYOPu%2BWBtEihnJjfzWtW4qu37QAqp0b%2F%2BbEPq0Dyd%2BIfpBib8V117EHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2bd6def251829-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	64214	172.217.23.110	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:55 UTC	406	OUT	POST /checkin HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 86 Content-Type: application/x-protobuf Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:55 UTC	86	OUT	Data Raw: 10 00 1a 2a 31 2d 64 61 33 39 61 33 65 65 35 65 36 62 34 62 30 64 33 32 35 35 62 66 65 66 39 35 36 30 31 38 39 30 61 66 64 38 30 37 30 39 22 18 60 03 6a 14 08 01 12 0e 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 18 01 69 00 00 00 00 00 00 00 00 70 03 b0 01 00 Data Ascii: *1-da39a3ee5e6b4b0d3255bfef95601890afd80709"`j117.0.5938.134ip
2024-07-04 23:01:55 UTC	1016	IN	HTTP/1.1 200 OK Content-Type: application/x-protobuffer Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 23:01:55 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /checkin/_/AndroidCheckinHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 23:01:55 UTC	374	IN	Data Raw: 31 66 30 0d 0a 08 01 18 f7 c3 ee ff 87 32 2a 21 0a 0a 61 6e 64 72 6f 69 64 5f 69 64 12 13 34 36 39 34 38 35 36 39 30 31 37 34 37 30 32 32 33 33 32 2a 12 0a 0d 63 68 72 6f 6d 65 5f 64 65 76 69 63 65 12 01 31 2a 14 0a 0e 64 65 76 69 63 65 5f 63 6f 75 6e 74 72 79 12 02 75 73 2a 29 0a 18 64 65 76 69 63 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 74 69 6d 65 12 0d 31 37 32 30 31 33 34 30 30 30 30 30 30 39 fc 19 ec 4b 7a 7b 27 41 41 ef 89 b0 52 d6 1b 82 78 48 00 5a 1f 59 35 7a 34 6d 38 38 4d 33 66 38 61 51 45 62 31 61 42 4a 36 58 68 78 79 48 37 72 5f 42 78 6b 62 b7 02 41 42 46 45 74 31 58 32 62 78 55 51 67 6c 67 48 42 73 58 58 58 5a 55 49 32 47 48 50 4a 56 4a 58 67 41 78 50 4d 6a 53 53 63 43 2d 73 65 66 54 78 65 4b 74 49 78 6d 45 31 51 48 36 4a 48 76 49 30 77 Data Ascii: 1f02!android_id4694856901747022332chrome_device1device_countryus)device_registration_time17201340000009Kz{'AARxHZY5z4m88M3f8aQEb1aBJ6XhxyH7r_BxkbABFEt1X2bxUQglgHBsXXXZUI2GHPJVJXgAxPMjSScC-sefTxeKtIxmE1QH6JHvI0w
2024-07-04 23:01:55 UTC	129	IN	Data Raw: 6d 66 4c 4e 61 7a 61 35 7a 4b 58 6a 48 4c 65 33 46 4a 74 68 37 72 4c 6a 63 4d 2d 4b 6e 7a 76 32 33 48 2d 6a 47 42 74 69 53 48 59 71 64 79 75 4d 38 35 43 35 51 47 30 37 35 6e 2d 39 78 63 7a 5f 58 5f 4f 58 4e 55 53 67 63 79 49 46 42 67 44 38 34 43 51 6c 67 51 37 2d 59 57 69 41 2d 63 76 65 6d 4a 49 67 75 65 39 63 77 37 51 4a 67 61 42 42 4e 2d 41 6a 61 51 6b 63 78 54 65 54 2d 6b 4d 0d 0a Data Ascii: mfLNaza5zKXjHLe3FJth7rLjcM-Knzv23H-jGBtiSHYqdyuM85C5QG075n-9xcz_X_OXNUSgcyIFBgD84CQlgQ7-YWiA-cvemJIgue9cw7QJgaBBN-AjaQkcxTeT-kM
2024-07-04 23:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	64215	34.203.90.74	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:55 UTC	676	OUT	POST /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 46 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 60521c272bf0240010135168 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:55 UTC	46	OUT	Data Raw: 70 73 70 3d 63 39 31 66 37 31 65 39 2d 64 37 33 62 2d 34 33 31 65 2d 39 30 36 33 2d 63 36 38 32 65 37 62 34 32 66 61 34 26 74 62 6c 61 3d Data Ascii: psp=c91f71e9-d73b-431e-9063-c682e7b42fa4&tbla=
2024-07-04 23:01:55 UTC	230	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:01:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-07-04 23:01:55 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	64216	18.66.218.121	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:56 UTC	455	OUT	GET /scripts/v2/pushnami-sw/60521c272bf0240010135168 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free2try.com/pushnami/service-worker.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:56 UTC	424	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 376 Connection: close Date: Thu, 04 Jul 2024 23:01:28 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 e55a04e69229dbc3be32ad97f72ae3e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P2 X-Amz-Cf-Id: ArD0v_nd5jGsAfWlh_vkj205PdHBap21F4VTfw_rs7871xg6d6YjYQ== Age: 28
2024-07-04 23:01:56 UTC	376	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 6e 43 6f 6e 66 69 67 3d 7b 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 2c 72 63 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 7d 2c 61 70 69 4b 65 79 3a 22 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 38 22 2c 74 72 61 63 6b 69 6e 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 72 63 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 61 70 69 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 77 65 62 73 69 74 65 49 64 3a 22 36 30 35 32 31 63 32 37 32 62 66 30 32 34 30 30 31 30 31 33 35 31 36 37 22 2c 72 74 Data Ascii: "use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"60521c272bf0240010135168",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"60521c272bf0240010135167",rt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	64217	18.205.31.41	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:56 UTC	347	OUT	GET /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:56 UTC	246	IN	HTTP/1.1 404 Not Found Date: Thu, 04 Jul 2024 23:01:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 70 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
2024-07-04 23:01:56 UTC	70	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 70 73 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	64218	172.217.23.110	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:56 UTC	489	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 4694856901747022332:8683533638847990255 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:56 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 34 36 39 34 38 35 36 39 30 31 37 34 37 30 32 32 33 33 32 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=4694856901747022332&sender=745476177629
2024-07-04 23:01:57 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 23:01:56 GMT Expires: Thu, 04 Jul 2024 23:01:56 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 23:01:57 UTC	36	IN	Data Raw: 31 65 0d 0a 45 72 72 6f 72 3d 50 48 4f 4e 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 45 52 52 4f 52 0d 0a Data Ascii: 1eError=PHONE_REGISTRATION_ERROR
2024-07-04 23:01:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	64219	172.217.23.110	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:56 UTC	490	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 267 Authorization: AidLogin 4694856901747022332:8683533638847990255 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:01:56 UTC	267	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 63 68 72 6f 6d 65 2e 77 69 6e 64 6f 77 73 26 58 2d 73 75 62 74 79 70 65 3d 77 70 3a 68 74 74 70 73 3a 2f 2f 66 72 65 65 32 74 72 79 2e 63 6f 6d 2f 25 32 33 41 44 42 44 30 37 33 31 2d 31 30 41 46 2d 34 43 41 35 2d 38 46 46 46 2d 32 31 35 46 46 31 32 33 37 2d 56 32 26 64 65 76 69 63 65 3d 34 36 39 34 38 35 36 39 30 31 37 34 37 30 32 32 33 33 32 26 73 63 6f 70 65 3d 47 43 4d 26 58 2d 73 63 6f 70 65 3d 47 43 4d 26 67 6d 73 76 3d 31 31 37 26 61 70 70 69 64 3d 63 34 78 6b 57 41 59 41 2d 59 41 26 73 65 6e 64 65 72 3d 42 4a 39 47 73 4e 55 31 5a 78 6d 46 54 57 74 73 37 49 62 76 4d 48 2d 62 68 4d 69 61 4d 6f 42 4b 6c 66 34 46 62 77 6f 43 36 7a 6f 47 67 6e 64 69 74 75 39 66 53 51 6a 75 37 4a 50 64 4b 68 79 70 43 6e 69 78 38 4d 2d 47 63 33 4c Data Ascii: app=com.chrome.windows&X-subtype=wp:https://free2try.com/%23ADBD0731-10AF-4CA5-8FFF-215FF1237-V2&device=4694856901747022332&scope=GCM&X-scope=GCM&gmsv=117&appid=c4xkWAYA-YA&sender=BJ9GsNU1ZxmFTWts7IbvMH-bhMiaMoBKlf4FbwoC6zoGgnditu9fSQju7JPdKhypCnix8M-Gc3L
2024-07-04 23:01:57 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 23:01:56 GMT Expires: Thu, 04 Jul 2024 23:01:56 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 23:01:57 UTC	36	IN	Data Raw: 31 65 0d 0a 45 72 72 6f 72 3d 50 48 4f 4e 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 45 52 52 4f 52 0d 0a Data Ascii: 1eError=PHONE_REGISTRATION_ERROR
2024-07-04 23:01:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	64221	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:01:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 79 33 31 68 4d 49 35 55 45 79 38 58 6c 69 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 36 65 37 63 34 30 32 64 35 38 31 61 32 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2y31hMI5UEy8Xli6.1Context: 696e7c402d581a21
2024-07-04 23:01:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 23:01:57 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 32 79 33 31 68 4d 49 35 55 45 79 38 58 6c 69 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 36 65 37 63 34 30 32 64 35 38 31 61 32 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 6b 55 56 64 72 73 65 4b 34 67 32 65 6c 43 73 4b 72 64 78 70 31 56 58 58 70 4a 64 72 56 4a 33 75 74 42 49 37 37 43 32 78 4a 63 6d 79 5a 6c 46 37 42 45 4b 4d 38 32 79 35 78 33 63 76 45 78 55 48 33 42 76 66 70 37 72 6b 54 44 36 4e 37 7a 36 4e 4a 49 2f 2f 6a 55 57 7a 6c 46 63 45 65 35 6c 66 65 4f 67 6b 6c 38 4c 2f 50 73 44 51 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 2y31hMI5UEy8Xli6.2Context: 696e7c402d581a21<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATkUVdrseK4g2elCsKrdxp1VXXpJdrVJ3utBI77C2xJcmyZlF7BEKM82y5x3cvExUH3Bvfp7rkTD6N7z6NJI//jUWzlFcEe5lfeOgkl8L/PsDQ
2024-07-04 23:01:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 79 33 31 68 4d 49 35 55 45 79 38 58 6c 69 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 36 65 37 63 34 30 32 64 35 38 31 61 32 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2y31hMI5UEy8Xli6.3Context: 696e7c402d581a21<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 23:01:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 23:01:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 6b 74 78 7a 46 66 5a 77 45 71 74 37 37 67 70 42 4d 61 64 51 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: uktxzFfZwEqt77gpBMadQQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	64225	172.217.23.110	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:19 UTC	489	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 4694856901747022332:8683533638847990255 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:19 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 34 36 39 34 38 35 36 39 30 31 37 34 37 30 32 32 33 33 32 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=4694856901747022332&sender=745476177629
2024-07-04 23:02:19 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 23:02:19 GMT Expires: Thu, 04 Jul 2024 23:02:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 23:02:19 UTC	152	IN	Data Raw: 39 32 0d 0a 74 6f 6b 65 6e 3d 41 50 41 39 31 62 47 51 6e 54 5f 70 30 6a 43 61 52 37 30 73 6a 34 32 79 46 38 78 59 73 35 67 47 48 64 35 36 39 53 4e 39 77 45 63 5f 70 33 61 52 41 5f 59 33 71 51 59 79 39 54 56 31 39 70 77 4a 32 6f 44 52 4c 79 34 73 54 5f 4f 78 34 75 39 30 57 62 6d 36 75 43 30 4e 77 52 70 39 74 43 73 5f 6e 6b 57 41 44 35 31 74 73 51 61 4e 74 55 50 33 42 4a 2d 2d 32 71 59 33 38 39 2d 4b 63 66 49 56 6f 4c 6e 5f 39 53 62 69 4e 75 45 53 0d 0a Data Ascii: 92token=APA91bGQnT_p0jCaR70sj42yF8xYs5gGHd569SN9wEc_p3aRA_Y3qQYy9TV19pwJ2oDRLy4sT_Ox4u90Wbm6uC0NwRp9tCs_nkWAD51tsQaNtUP3BJ--2qY389-KcfIVoLn_9SbiNuES
2024-07-04 23:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	64227	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 55 63 31 55 4e 6d 4e 61 45 32 57 6c 39 67 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 63 38 39 38 63 65 62 63 32 62 38 39 30 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bUc1UNmNaE2Wl9gH.1Context: 82c898cebc2b890a
2024-07-04 23:02:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 23:02:22 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 62 55 63 31 55 4e 6d 4e 61 45 32 57 6c 39 67 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 63 38 39 38 63 65 62 63 32 62 38 39 30 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 6b 55 56 64 72 73 65 4b 34 67 32 65 6c 43 73 4b 72 64 78 70 31 56 58 58 70 4a 64 72 56 4a 33 75 74 42 49 37 37 43 32 78 4a 63 6d 79 5a 6c 46 37 42 45 4b 4d 38 32 79 35 78 33 63 76 45 78 55 48 33 42 76 66 70 37 72 6b 54 44 36 4e 37 7a 36 4e 4a 49 2f 2f 6a 55 57 7a 6c 46 63 45 65 35 6c 66 65 4f 67 6b 6c 38 4c 2f 50 73 44 51 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: bUc1UNmNaE2Wl9gH.2Context: 82c898cebc2b890a<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATkUVdrseK4g2elCsKrdxp1VXXpJdrVJ3utBI77C2xJcmyZlF7BEKM82y5x3cvExUH3Bvfp7rkTD6N7z6NJI//jUWzlFcEe5lfeOgkl8L/PsDQ
2024-07-04 23:02:22 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 55 63 31 55 4e 6d 4e 61 45 32 57 6c 39 67 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 63 38 39 38 63 65 62 63 32 62 38 39 30 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bUc1UNmNaE2Wl9gH.3Context: 82c898cebc2b890a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 23:02:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 23:02:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 44 33 5a 39 67 37 59 7a 6b 32 36 2b 33 66 52 53 74 54 5a 54 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8D3Z9g7Yzk26+3fRStTZTA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	64228	172.217.23.110	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:22 UTC	490	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 267 Authorization: AidLogin 4694856901747022332:8683533638847990255 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:22 UTC	267	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 63 68 72 6f 6d 65 2e 77 69 6e 64 6f 77 73 26 58 2d 73 75 62 74 79 70 65 3d 77 70 3a 68 74 74 70 73 3a 2f 2f 66 72 65 65 32 74 72 79 2e 63 6f 6d 2f 25 32 33 41 44 42 44 30 37 33 31 2d 31 30 41 46 2d 34 43 41 35 2d 38 46 46 46 2d 32 31 35 46 46 31 32 33 37 2d 56 32 26 64 65 76 69 63 65 3d 34 36 39 34 38 35 36 39 30 31 37 34 37 30 32 32 33 33 32 26 73 63 6f 70 65 3d 47 43 4d 26 58 2d 73 63 6f 70 65 3d 47 43 4d 26 67 6d 73 76 3d 31 31 37 26 61 70 70 69 64 3d 63 34 78 6b 57 41 59 41 2d 59 41 26 73 65 6e 64 65 72 3d 42 4a 39 47 73 4e 55 31 5a 78 6d 46 54 57 74 73 37 49 62 76 4d 48 2d 62 68 4d 69 61 4d 6f 42 4b 6c 66 34 46 62 77 6f 43 36 7a 6f 47 67 6e 64 69 74 75 39 66 53 51 6a 75 37 4a 50 64 4b 68 79 70 43 6e 69 78 38 4d 2d 47 63 33 4c Data Ascii: app=com.chrome.windows&X-subtype=wp:https://free2try.com/%23ADBD0731-10AF-4CA5-8FFF-215FF1237-V2&device=4694856901747022332&scope=GCM&X-scope=GCM&gmsv=117&appid=c4xkWAYA-YA&sender=BJ9GsNU1ZxmFTWts7IbvMH-bhMiaMoBKlf4FbwoC6zoGgnditu9fSQju7JPdKhypCnix8M-Gc3L
2024-07-04 23:02:24 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 23:02:24 GMT Expires: Thu, 04 Jul 2024 23:02:24 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 23:02:24 UTC	164	IN	Data Raw: 39 65 0d 0a 74 6f 6b 65 6e 3d 63 34 78 6b 57 41 59 41 2d 59 41 3a 41 50 41 39 31 62 45 54 48 6a 33 34 4f 55 30 71 37 6e 63 77 6e 69 6c 46 67 44 37 44 36 58 59 77 36 41 64 55 5f 4c 63 38 69 4a 52 72 38 50 78 31 49 74 35 30 57 45 52 4c 44 36 75 35 6b 68 54 55 42 48 4d 79 4e 6b 6c 36 5a 58 73 35 75 56 61 67 42 71 54 44 69 30 41 66 65 39 67 76 58 47 50 64 58 66 6e 61 46 4a 68 46 6e 75 50 45 4f 4d 30 71 4f 32 67 5f 4e 31 36 48 5a 53 49 70 6b 57 4b 59 4d 39 35 43 4f 48 73 44 49 45 31 47 0d 0a Data Ascii: 9etoken=c4xkWAYA-YA:APA91bETHj34OU0q7ncwnilFgD7D6XYw6AdU_Lc8iJRr8Px1It50WERLD6u5khTUBHMyNkl6ZXs5uVagBqTDi0Afe9gvXGPdXfnaFJhFnuPEOM0qO2g_N16HZSIpkWKYM95COHsDIE1G
2024-07-04 23:02:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	64235	18.239.50.108	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:30 UTC	504	OUT	OPTIONS /api/push/subscribe HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://free2try.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:31 UTC	645	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close Date: Thu, 04 Jul 2024 23:02:31 GMT access-control-allow-origin: https://free2try.com access-control-allow-credentials: true access-control-expose-headers: content-type, content-length, etag access-control-max-age: 600 access-control-allow-headers: key access-control-allow-methods: POST cache-control: no-cache vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 b6e86319773f95421e5e42f048890d7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: cu3BTRszwfDG9ixCEp9id30C4FLVacOy3iAepBLKZ6du8L5_cPPYhg==
2024-07-04 23:02:31 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	64237	18.239.50.108	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:31 UTC	649	OUT	POST /api/push/subscribe HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 key: 60521c272bf0240010135168 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:31 UTC	815	OUT	Data Raw: 7b 22 73 75 62 22 3a 7b 22 65 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 66 63 6d 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 66 63 6d 2f 73 65 6e 64 2f 63 34 78 6b 57 41 59 41 2d 59 41 3a 41 50 41 39 31 62 45 54 48 6a 33 34 4f 55 30 71 37 6e 63 77 6e 69 6c 46 67 44 37 44 36 58 59 77 36 41 64 55 5f 4c 63 38 69 4a 52 72 38 50 78 31 49 74 35 30 57 45 52 4c 44 36 75 35 6b 68 54 55 42 48 4d 79 4e 6b 6c 36 5a 58 73 35 75 56 61 67 42 71 54 44 69 30 41 66 65 39 67 76 58 47 50 64 58 66 6e 61 46 4a 68 46 6e 75 50 45 4f 4d 30 71 4f 32 67 5f 4e 31 36 48 5a 53 49 70 6b 57 4b 59 4d 39 35 43 4f 48 73 44 49 45 31 47 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 6b 65 79 73 22 3a 7b 22 70 32 35 36 64 68 22 3a 22 42 4a 6f 63 6c Data Ascii: {"sub":{"endpoint":"https://fcm.googleapis.com/fcm/send/c4xkWAYA-YA:APA91bETHj34OU0q7ncwnilFgD7D6XYw6AdU_Lc8iJRr8Px1It50WERLD6u5khTUBHMyNkl6ZXs5uVagBqTDi0Afe9gvXGPdXfnaFJhFnuPEOM0qO2g_N16HZSIpkWKYM95COHsDIE1G","expirationTime":null,"keys":{"p256dh":"BJocl
2024-07-04 23:02:32 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 43 Connection: close Date: Thu, 04 Jul 2024 23:02:32 GMT access-control-allow-origin: https://free2try.com access-control-allow-credentials: true cache-control: no-cache vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 73ce513d12556804240bd1d312686daa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: --9eFkbBIN1-SSuAyezozb4t-h_mNTtnseSmHmLkr1UAWwXiXWNcZQ==
2024-07-04 23:02:32 UTC	43	IN	Data Raw: 7b 22 73 75 62 73 63 72 69 62 65 72 49 64 22 3a 22 36 36 38 37 32 61 30 38 61 36 36 38 63 61 30 30 31 31 32 62 32 36 65 38 22 7d Data Ascii: {"subscriberId":"66872a08a668ca00112b26e8"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	64238	18.239.50.73	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:33 UTC	358	OUT	GET /api/push/subscribe HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:33 UTC	395	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close Date: Thu, 04 Jul 2024 23:02:33 GMT cache-control: no-cache vary: accept-encoding X-Cache: Error from cloudfront Via: 1.1 3ab47e7bb911be04b665845f18319950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: fH3JBOpD2Gp6eDLJpmvkiQHNz2jEWv9ZYqzDa1sKEvU9Yq8dyNzIiA==
2024-07-04 23:02:33 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	64239	107.21.125.170	443	2432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:34 UTC	537	OUT	POST /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Content-Length: 137 accept: application/json, text/plain, / key: 60521c272bf0240010135168 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Origin: https://free2try.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:34 UTC	137	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 77 65 62 70 75 73 68 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 64 65 6c 69 76 65 72 65 64 22 2c 22 73 63 6f 70 65 22 3a 22 43 61 6d 70 61 69 67 6e 22 2c 22 73 63 6f 70 65 49 64 22 3a 22 36 30 35 61 31 62 32 64 64 66 38 36 32 39 30 33 37 65 63 30 65 35 38 34 5f 6a 48 49 34 78 6c 30 22 2c 22 73 22 3a 22 36 36 38 37 32 61 30 38 61 36 36 38 63 61 30 30 31 31 32 62 32 36 65 38 22 7d Data Ascii: {"event":"webpush-notification-delivered","scope":"Campaign","scopeId":"605a1b2ddf8629037ec0e584_jHI4xl0","s":"66872a08a668ca00112b26e8"}
2024-07-04 23:02:34 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 23:02:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-07-04 23:02:34 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	64241	18.239.50.108	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:35 UTC	484	OUT	GET /api/push/image/id/654d251715c286001361bac4 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:35 UTC	437	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 34433 Connection: close Date: Thu, 04 Jul 2024 23:02:35 GMT access-control-expose-headers: WWW-Authenticate,Server-Authorization Cache-Control: no-cache Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 704c8a207b209dd3861e2faa8d55cc08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: ytuA8yo--xWSkUlIE-5X_nymu3HXb24UCbn_OZ0r3IApKZ82UHa_vQ==
2024-07-04 23:02:35 UTC	7894	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 c8 08 03 00 00 00 f1 cb 47 d0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 ba 50 4c 54 45 31 34 33 2d 30 31 23 27 29 1f 24 26 58 59 56 34 37 37 76 78 73 38 3b 3a 6b 6d 6a 3c 3f 3e 3f 43 42 5e 61 5e 43 47 46 7a 7b 76 72 73 6f 1c 21 23 49 4b 48 29 2d 2e 26 2b 2c 51 53 50 4d 4f 4c 7e 80 7b 17 1b 1f 65 67 63 85 86 81 99 9a 95 02 0a 23 03 1a 42 16 4a 82 b0 7a 4d f1 f0 e9 dc de d9 04 03 0d c8 92 63 71 49 2e a4 a7 a5 26 5b 9b 8b 8d 8a 98 65 3e 05 2c 5a 08 39 6a 30 67 ac 3b 74 bd dc a8 75 ba bc ba b0 b2 ad c5 c6 c1 50 2d 16 fc fb f9 f1 c4 92 5c 38 21 cf d0 ca f9 de bc d5 c2 ac 63 a7 ee 44 82 cd 81 71 61 86 54 29 bc a9 92 a5 95 81 3d 1d 0f 6e 7f a0 ba f7 70 79 00 00 20 Data Ascii: PNGIHDRGpHYsPLTE143-01#')$&XYV477vxs8;:kmj<?>?CB^a^CGFz{vrso!#IKH)-.&+,QSPMOL~{egc#BJzMcqI.&[e>,Z9j0g;tuP-\8!cDqaT)=npy
2024-07-04 23:02:35 UTC	12095	IN	Data Raw: 96 27 a1 7e e8 95 f1 b7 b7 d7 08 09 e2 41 90 bc 47 48 de 3d 1c 3f 1e 90 0b 24 3f bf 84 09 43 f2 10 62 63 8c ba 1f 9c ec a0 95 a0 20 70 b8 03 4b 1a ac 51 21 ad 3a 5e 34 bc 21 42 92 d4 f4 bf 29 4b 7e ab 97 44 9c 14 80 40 23 0b 4d 89 24 fa 3c 4e 81 95 5c c5 4b f7 50 44 00 92 aa cf d2 12 32 47 f7 4d b9 af e2 1d ab bb a0 ce 82 2f 30 46 52 1e 93 98 af 86 be 8c 10 5e 4f 12 f0 d0 f5 b1 72 79 25 b0 10 17 31 72 19 84 59 09 0e 89 53 a1 ac 47 18 7f 08 12 c7 96 ab 47 27 09 b7 28 42 dc 76 8a d7 d7 d7 08 47 08 91 cf 18 21 21 69 21 1e 3f 0f 11 e2 61 82 9e 0b 17 4c 76 6d b3 7a 94 e1 2d 65 36 c3 48 64 85 29 2b 46 c4 38 a1 20 e0 7e a8 f6 ff 45 c8 a3 93 a7 2a 6d 53 51 a9 d8 0b dc 15 f0 38 91 93 74 a1 ab 6a 3d bf 78 fb 6d 93 5a 2d 00 a8 13 73 9f 96 85 34 69 84 b5 ba f7 e1 f2 Data Ascii: '~AGH=?$?Cbc pKQ!:^4!B)K~D@#M$<N\KPD2GM/0FR^Ory%1rYSGG'(BvG!!i!?aLvmz-e6Hd)+F8 ~E*mSQ8tj=xmZ-s4i
2024-07-04 23:02:35 UTC	14444	IN	Data Raw: 33 07 0c 08 25 5e 84 5f 32 f5 45 96 48 75 4a 1d 21 84 9e 23 ba 31 c4 2a 62 bc 9b 58 42 f6 92 36 71 68 d6 b7 13 87 39 9b a4 aa 1a ba 09 6b 69 ae ab 0b f6 92 72 dd ff 0e e7 9c 61 b5 7c 9f 1b d4 d4 3e 54 b7 86 9f c2 e2 76 70 bc 96 dd f0 95 70 3c 5a 43 ab 83 e3 b1 54 9e 35 fe 7a 87 18 32 fd 86 50 be 45 f3 40 11 e2 61 ed b7 4a be 9b fe d3 61 da 13 b9 fb 0f 8e 4a 5b 10 57 1e 9e 19 de f9 95 6f 5e b8 ab b5 a1 f3 c3 32 4a 36 e0 b1 bc b2 5f e6 f1 a5 a3 11 22 3b 2c 4c 07 f0 57 52 05 59 99 86 1b 73 e4 6e cd 75 85 2a 0b 6d 1b 71 aa 7f f5 79 cd 1e ac 56 a2 ae 74 78 05 70 74 19 e9 26 24 c4 0a 84 6c 5a 90 01 2f 5d ac 46 56 88 49 7a 51 73 8f e7 bf f1 00 fb 90 9b 40 f0 b5 fb ae 0f db 2c 9b 70 3e 31 61 fd 51 5b 84 5d b1 4b d9 5c 96 d2 3b 18 cd c9 9f e7 f5 d7 6f 0c ea cb fb Data Ascii: 3%^_2EHuJ!#1bXB6qh9kira\|>Tvpp<ZCT5z2PE@aJaJ[Wo^2J6_";,LWRYsnumqyVtxpt&$lZ/]FVIzQs@,p>1aQ[]K\;o

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	64240	18.239.50.108	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 23:02:35 UTC	610	OUT	GET /api/push/icon/ext?url=https%3A%2F%2Fapi.pushnami.com%2Fapi%2Fpush%2Ficon%2Fid%2F6570f8e91fd96a00136b0f37%23.png&fallback=%2Fapi%2Fpush%2Ficon%2F605a1b2ddf8629037ec0e584 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free2try.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 23:02:35 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3588 Connection: close Date: Thu, 04 Jul 2024 23:02:35 GMT access-control-expose-headers: WWW-Authenticate,Server-Authorization Cache-Control: no-cache Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 702b555619c53ec5f8f56dfeed61c334.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: MWNjGjMDHn0p-XUduG81TdFpQ8Dp3ds1cnTeAJ027TIOW2IWE51gxw==
2024-07-04 23:02:35 UTC	3588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 05 50 4c 54 45 47 70 4c 02 bf c7 01 bf c6 07 7e 83 15 57 5b 1b 35 37 01 a9 b0 23 5b 5e 02 c4 cc 0a 18 19 ca 88 7f 01 9d a4 01 b3 bb 02 8d 94 df 50 6b 98 70 6a 3d 5a 5e 07 75 7a 13 a0 a7 d2 48 5f b9 80 73 a1 3a 57 e6 3b 5b 8f 5b 58 04 50 54 0b 91 9a 67 2d 42 00 c6 ce ff 63 7b ff 3f 5c 00 d6 de ff a6 8c 55 4e 56 ff c0 a4 ff 00 58 40 38 3f 00 d5 dd 01 c9 d1 00 dc e4 01 cd d4 fe 61 78 f7 91 7f 04 d1 d9 ff ab 91 00 e3 eb 19 c1 cb ff c5 a8 f9 b9 a0 fa 9b 86 ea 12 5f ff 47 61 59 49 50 ff 3a 58 f2 a3 8c eb 7f 73 37 32 3b 2f ae be dc 99 88 42 32 39 09 b4 bc 4e 48 50 fd 76 7a 2a 7f 87 e6 ad 97 a7 Data Ascii: PNGIHDRpHYsPLTEGpL~W[57#[^Pkpj=Z^uzH_s:W;[[XPTg-Bc{?\UNVX@8?ax_GaYIP:Xs72;/B29NHPvz*

Target ID:	0
Start time:	19:01:08
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:01:12
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2180,i,4682610930534376281,12712548623362568672,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:01:13
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://singingfiles.com/show.php?l=0&u=2156442&id=64574"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://singingfiles.com/show.php?l=0&u=2156442&id=64574

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Windows Analysis Report
https://singingfiles.com/show.php?l=0&u=2156442&id=64574